$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9dc10f66-c1b1-3f8a-b811-8edf9706db54.roa File: 9dc10f66-c1b1-3f8a-b811-8edf9706db54.roa (raw, json) Hash identifier: yB3qTc0oAYIz36uRrTw5tRCNEHK0SIJQAsQmWuvtMR0= Subject key identifier: 2D:6C:DA:6E:AF:6D:73:E7:6E:10:B0:43:8C:41:0D:62:61:5D:4E:BA Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858498769CAA18148AD5250E35900 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9dc10f66-c1b1-3f8a-b811-8edf9706db54.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 397195 IP address blocks: 192.68.126.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:ca:a1:81:48:ad:52:50:e3:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=c5037b7a-ec78-472e-b4e4-23126b938aac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:b3:f2:9c:17:eb:4d:9a:58:2b:d2:7f:3e:d0: b5:6b:71:48:a3:de:34:86:f1:a5:a3:4b:d9:a5:d9: fa:2c:18:ab:80:e0:e2:e5:bb:6f:de:35:9a:06:0a: bc:bf:1c:4f:5c:ae:21:16:a9:c3:ef:9f:20:3c:17: 24:f8:1a:77:56:8b:17:2c:2a:2b:77:43:67:69:e9: 4c:9d:24:24:de:89:a4:bb:d5:ee:86:d2:84:ab:ed: 4d:5e:09:22:84:15:04:0c:58:81:cf:8b:1c:a0:a5: 6e:92:c8:82:24:eb:86:bf:24:72:e1:09:7a:91:0d: a7:3e:c5:78:83:11:5a:89:f7:de:f1:24:4a:24:4f: 79:6d:71:82:05:ad:e0:cd:76:5d:16:2a:5c:1d:21: 21:0c:50:70:dc:00:37:fc:78:3a:80:37:5c:d9:65: 4c:a0:32:10:5c:c9:15:8b:00:25:03:e2:e1:7e:5f: 70:eb:8a:b8:29:a4:40:ed:3f:ad:9c:cc:76:b9:e8: aa:32:f4:51:c8:a4:6b:29:a2:6c:32:cf:24:32:34: 87:42:d2:20:0f:5e:a8:43:58:9c:98:3b:40:b9:5f: cd:51:0f:90:6a:e6:19:66:86:48:2b:a1:b6:97:dc: d4:b1:d8:37:0b:f6:90:d7:62:9d:67:94:f0:63:37: de:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:6C:DA:6E:AF:6D:73:E7:6E:10:B0:43:8C:41:0D:62:61:5D:4E:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9dc10f66-c1b1-3f8a-b811-8edf9706db54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:02:78:8c:65:97:05:8b:94:05:e3:d1:99:47:a3:58:b9:61: 86:00:21:cd:b0:79:46:32:a1:85:7d:b7:ee:96:cb:b0:a9:c5: 32:f5:f9:ef:de:da:01:e7:af:11:eb:55:81:84:7a:23:bb:bb: b3:c4:cb:91:5d:79:54:a7:0a:96:7a:3e:c2:12:45:5f:3c:e9: 1f:37:52:07:62:ff:eb:12:c8:5e:1f:45:44:1b:e2:42:83:30: 33:cf:28:a7:8d:4f:af:c5:15:d1:ac:ea:55:85:05:3d:d9:45: b9:cd:8d:92:8c:07:29:5b:82:af:b9:f4:d2:3a:bd:8b:40:c1: 78:04:df:6e:2d:5f:7d:2f:b9:fe:c9:2d:bf:9e:e6:ec:20:92: d6:28:86:0b:41:94:76:cb:9f:26:ad:f0:3b:bf:b5:43:50:aa: cb:22:30:34:be:24:db:0d:cd:be:5d:c0:3e:09:d4:15:85:66: 17:e1:47:08:83:d1:cb:fc:73:51:02:9f:10:b5:5e:0e:20:74: 5b:a8:86:a2:2e:53:c8:17:fd:82:33:30:9e:0e:b3:cb:3c:cc: 3a:45:d8:b6:13:80:fa:06:0d:fa:43:7d:bf:49:78:9d:2e:98: f7:1d:2b:84:dc:fc:f5:2d:c4:da:45:4a:d6:85:92:e6:af:23: 98:23:93:c9 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmHacqhgUitUlDjWQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk YzUwMzdiN2EtZWM3OC00NzJlLWI0ZTQtMjMxMjZiOTM4YWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrPynBfrTZpYK9J/PtC1a3FIo940hvGlo0vZ pdn6LBirgODi5btv3jWaBgq8vxxPXK4hFqnD758gPBck+Bp3VosXLCord0NnaelM nSQk3omku9XuhtKEq+1NXgkihBUEDFiBz4scoKVuksiCJOuGvyRy4Ql6kQ2nPsV4 gxFaiffe8SRKJE95bXGCBa3gzXZdFipcHSEhDFBw3AA3/Hg6gDdc2WVMoDIQXMkV iwAlA+Lhfl9w64q4KaRA7T+tnMx2ueiqMvRRyKRrKaJsMs8kMjSHQtIgD16oQ1ic mDtAuV/NUQ+QauYZZoZIK6G2l9zUsdg3C/aQ12KdZ5TwYzfehQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFC1s2m6vbXPnbhCwQ4xBDWJhXU66MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOWRjMTBmNjYtYzFiMS0z ZjhhLWI4MTEtOGVkZjk3MDZkYjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBZAniMZZcFi5QF49GZR6NYuWGGACHNsHlGMqGFfbfulsuwqcUy9fnv 3toB568R61WBhHoju7uzxMuRXXlUpwqWej7CEkVfPOkfN1IHYv/rEsheH0VEG+JC gzAzzyinjU+vxRXRrOpVhQU92UW5zY2SjAcpW4KvufTSOr2LQMF4BN9uLV99L7n+ yS2/nubsIJLWKIYLQZR2y58mrfA7v7VDUKrLIjA0viTbDc2+XcA+CdQVhWYX4UcI g9HL/HNRAp8QtV4OIHRbqIaiLlPIF/2CMzCeDrPLPMw6Rdi2E4D6Bg36Q32/SXid Lpj3HSuE3Pz1LcTaRUrWhZLmryOYI5PJ -----END CERTIFICATE-----Generated at Sun May 11 06:24:52 2025 by rpki-client