$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a23ebd9e-1b42-3dd6-a273-372fe06acd46.roa File: a23ebd9e-1b42-3dd6-a273-372fe06acd46.roa (raw, json) Hash identifier: UdUQMUlyKE4g6h5Jfp+OZMd22HdjX2JTKLmk7eGY1VE= Subject key identifier: 1A:70:EA:70:14:60:30:73:89:D0:5A:75:5A:18:B3:7E:5D:BD:7C:83 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849AFDB805FD24AA7422347E6C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a23ebd9e-1b42-3dd6-a273-372fe06acd46.roa Signing time: Tue 29 Apr 2025 12:42:33 +0000 ROA not before: Tue 29 Apr 2025 12:42:33 +0000 ROA not after: Mon 28 Jul 2025 12:42:33 +0000 asID: 36620 IP address blocks: 192.68.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:af:db:80:5f:d2:4a:a7:42:23:47:e6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 29 12:42:33 2025 GMT Not After : Jul 28 12:42:33 2025 GMT Subject: CN=73643077-1b2e-4148-be3e-b5bf3f26df74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:65:aa:a2:83:85:33:b0:77:6c:02:5f:86:33: e3:10:d5:23:ee:4d:ee:4d:aa:3e:66:9d:b2:99:90: d5:3f:09:7e:1a:ac:f6:64:ea:99:10:7f:2d:23:65: ab:71:8a:66:04:69:3a:cf:32:2a:c0:8b:1d:ff:a7: 94:56:f1:d1:55:06:c0:7d:c4:94:1e:40:7a:99:aa: e4:84:65:c1:60:1b:c5:f4:73:db:24:88:62:ae:c4: 86:3f:cb:89:cb:d7:63:66:3a:c6:73:f7:9b:a7:d5: b2:67:45:3d:1a:e8:48:29:9c:da:50:23:27:ac:ac: 59:b2:26:8a:eb:6d:64:b4:bc:19:bf:fd:d0:7d:43: d1:3c:83:75:c6:ca:11:88:01:43:99:d5:92:68:a8: fc:68:37:87:3c:49:84:37:8f:a5:99:9e:5d:e7:5f: 1a:d6:b6:0d:7a:8b:b7:b2:3d:ee:3f:f2:4c:09:b4: 05:68:90:c0:e8:3d:b4:e6:14:5d:6b:16:8a:f2:dd: f7:1f:a4:1d:90:e6:93:38:68:19:c5:31:73:c2:4d: 6f:a3:d8:33:5c:23:a4:e6:98:b4:af:ad:98:79:9a: d4:5e:83:ce:0b:55:53:5c:09:e6:9a:4f:17:17:2d: 6b:87:65:7c:8e:21:c6:82:73:d9:51:9f:44:8f:6f: a9:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:70:EA:70:14:60:30:73:89:D0:5A:75:5A:18:B3:7E:5D:BD:7C:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a23ebd9e-1b42-3dd6-a273-372fe06acd46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:16:94:71:01:63:26:06:b9:54:5a:41:27:ed:09:c4:f9:d0: 9b:fd:3a:3b:c1:59:34:60:33:a2:ee:17:8b:9f:c5:d2:44:47: bd:bb:00:91:af:75:89:91:ce:ca:74:ab:56:5a:7b:57:2f:b1: d0:ac:6f:c0:ad:b9:d8:7a:a2:cd:3a:11:83:ed:57:df:5f:48: fb:18:76:7e:3f:56:91:6b:4a:4f:a2:68:d1:32:3a:eb:c1:e5: 5e:09:03:cd:49:b1:1c:17:02:73:36:ee:0c:4a:c8:df:13:f5: 4e:04:4f:3e:68:51:d1:e1:f0:37:2d:19:cd:37:0f:d3:ce:fe: 82:bf:08:90:df:01:ec:c3:c4:d2:94:05:eb:80:3f:d9:da:2a: df:a8:71:17:4c:2e:ce:5c:96:a8:7e:39:9c:38:79:e4:b2:6f: 7a:df:2e:e4:9e:7f:87:65:e7:7d:86:09:50:ee:cb:16:31:e8: db:7a:b0:3f:e8:19:f6:04:bf:67:b0:8a:9e:63:7b:c6:fc:d4: e9:b7:67:c8:64:45:d5:36:87:6f:52:32:22:96:a5:bd:5a:43: 2d:a3:55:80:e2:a4:c9:05:91:04:37:fb:46:07:50:34:d7:3a: 83:cc:24:95:86:1c:80:cd:aa:99:cb:13:b3:92:45:b9:7c:18: 8d:44:46:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmv24Bf0kqnQiNH5sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQyOTEyNDIzM1oXDTI1MDcyODEyNDIzM1owLzEtMCsGA1UEAxMk NzM2NDMwNzctMWIyZS00MTQ4LWJlM2UtYjViZjNmMjZkZjc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGWqooOFM7B3bAJfhjPjENUj7k3uTao+Zp2y mZDVPwl+Gqz2ZOqZEH8tI2WrcYpmBGk6zzIqwIsd/6eUVvHRVQbAfcSUHkB6mark hGXBYBvF9HPbJIhirsSGP8uJy9djZjrGc/ebp9WyZ0U9GuhIKZzaUCMnrKxZsiaK 621ktLwZv/3QfUPRPIN1xsoRiAFDmdWSaKj8aDeHPEmEN4+lmZ5d518a1rYNeou3 sj3uP/JMCbQFaJDA6D205hRdaxaK8t33H6QdkOaTOGgZxTFzwk1vo9gzXCOk5pi0 r62YeZrUXoPOC1VTXAnmmk8XFy1rh2V8jiHGgnPZUZ9Ej2+pnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBpw6nAUYDBzidBadVoYs35dvXyDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTIzZWJkOWUtMWI0Mi0z ZGQ2LWEyNzMtMzcyZmUwNmFjZDQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwER+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFcWlHEBYyYGuVRaQSftCcT50Jv9OjvBWTRgM6LuF4ufxdJER727AJGv dYmRzsp0q1Zae1cvsdCsb8Ctudh6os06EYPtV99fSPsYdn4/VpFrSk+iaNEyOuvB 5V4JA81JsRwXAnM27gxKyN8T9U4ETz5oUdHh8DctGc03D9PO/oK/CJDfAezDxNKU BeuAP9naKt+ocRdMLs5clqh+OZw4eeSyb3rfLuSef4dl532GCVDuyxYx6Nt6sD/o GfYEv2ewip5je8b81Om3Z8hkRdU2h29SMiKWpb1aQy2jVYDipMkFkQQ3+0YHUDTX OoPMJJWGHIDNqpnLE7OSRbl8GI1ERiM= -----END CERTIFICATE-----Generated at Sun May 11 06:23:55 2025 by rpki-client