$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a3bf1284-45f0-3ddd-9718-78807bd2c3f3.roa File: a3bf1284-45f0-3ddd-9718-78807bd2c3f3.roa (raw, json) Hash identifier: ED/iHzIY9Q4TOvzHUoaZYdX+2EHnttU0/dZSFcjj61Q= Subject key identifier: 16:66:C9:35:2C:0A:C2:65:CE:A5:88:DD:93:9A:BE:BD:C8:6F:12:16 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849AFDB813E1CD72DCED660B600 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a3bf1284-45f0-3ddd-9718-78807bd2c3f3.roa Signing time: Tue 29 Apr 2025 12:42:34 +0000 ROA not before: Tue 29 Apr 2025 12:42:34 +0000 ROA not after: Mon 28 Jul 2025 12:42:34 +0000 asID: 396542 IP address blocks: 192.68.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:af:db:81:3e:1c:d7:2d:ce:d6:60:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 29 12:42:34 2025 GMT Not After : Jul 28 12:42:34 2025 GMT Subject: CN=a93dd7ef-69a7-4ef4-a24c-a5bc64a7f2ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:dc:9f:68:6c:71:91:7e:b3:fa:67:c6:75:86: d1:e6:b2:6b:1d:46:e9:38:61:11:9b:b3:80:ec:86: 4f:1b:1f:ee:db:ef:66:e4:ed:1b:59:43:9f:b9:31: 48:8d:14:ce:7a:80:aa:fa:d1:1b:5f:f6:df:f9:2f: d7:37:73:54:91:ca:87:59:72:ce:e6:ce:0a:ee:05: 2b:54:66:01:67:26:e1:76:a1:80:d7:9b:5a:67:de: 4c:a1:f4:83:10:07:6f:8f:a1:0e:f8:8b:0f:a8:c6: 43:e2:7d:c7:9f:67:37:f0:c2:64:c5:83:4e:25:23: 21:34:c3:b3:18:04:e8:3a:7c:bc:1e:e5:1d:69:76: a3:66:9b:70:cb:47:3d:80:46:40:0f:92:19:b6:d9: be:d7:5f:69:c7:51:09:ee:0c:22:6e:91:01:dd:2d: bc:d3:05:b7:78:bb:53:2a:3e:98:73:0d:8e:15:15: b5:22:50:43:e2:87:b6:c9:a0:2c:56:09:57:b0:a1: ce:12:5c:29:45:c0:60:58:81:e1:d7:00:94:08:df: 5a:8d:99:a2:ca:12:80:02:33:b5:80:f2:f0:97:7a: 75:cf:bc:e6:64:ab:b5:54:b5:ec:a5:ff:d0:07:9e: 12:2f:1f:90:76:e1:68:69:42:7d:16:f4:5b:c1:e7: 69:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:66:C9:35:2C:0A:C2:65:CE:A5:88:DD:93:9A:BE:BD:C8:6F:12:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a3bf1284-45f0-3ddd-9718-78807bd2c3f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:4a:9e:3d:38:8b:4c:83:71:60:c7:9d:02:09:b2:d0:25:da: 7d:7c:dd:1e:7b:91:6b:c9:bf:3a:64:6a:8a:72:3d:21:9c:86: 71:d2:c4:e4:61:63:1f:8e:fe:ae:49:a6:d7:df:05:da:9c:c2: d7:5c:10:26:ee:df:0c:de:47:af:33:d1:5c:d5:67:c3:dd:b8: 9b:09:2e:15:ce:06:4f:6b:d7:47:a5:88:4c:5c:e8:24:32:6a: ee:d6:d6:56:3e:0e:66:d1:e3:5c:6c:d7:16:51:1f:92:42:5f: b4:25:93:36:bb:c0:23:87:d1:be:b1:e0:8a:1a:28:af:3d:46: b9:0d:03:45:ed:a7:f9:ef:95:71:be:77:1a:b9:fe:e3:04:45: d1:74:9e:45:a5:44:43:ed:af:9d:bc:ee:07:ed:56:7e:09:10: 42:84:78:d9:96:44:20:9f:dc:33:a5:e8:64:ff:f5:0b:b8:47: 27:a8:94:3c:04:9a:64:e1:b1:68:98:f0:f5:4c:34:73:09:58: 79:e3:02:41:e7:30:8d:21:d0:10:3c:0c:6c:ce:0e:b4:03:c7: ba:79:0c:42:31:ad:1c:a2:b5:64:9a:a7:ce:9c:a2:0c:86:8b: 6f:e9:32:6d:54:a2:49:8d:33:53:35:fd:f4:1e:90:91:e9:db: e5:43:97:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmv24E+HNctztZgtgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQyOTEyNDIzNFoXDTI1MDcyODEyNDIzNFowLzEtMCsGA1UEAxMk YTkzZGQ3ZWYtNjlhNy00ZWY0LWEyNGMtYTViYzY0YTdmMmJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdyfaGxxkX6z+mfGdYbR5rJrHUbpOGERm7OA 7IZPGx/u2+9m5O0bWUOfuTFIjRTOeoCq+tEbX/bf+S/XN3NUkcqHWXLO5s4K7gUr VGYBZybhdqGA15taZ95MofSDEAdvj6EO+IsPqMZD4n3Hn2c38MJkxYNOJSMhNMOz GAToOny8HuUdaXajZptwy0c9gEZAD5IZttm+119px1EJ7gwibpEB3S280wW3eLtT Kj6Ycw2OFRW1IlBD4oe2yaAsVglXsKHOElwpRcBgWIHh1wCUCN9ajZmiyhKAAjO1 gPLwl3p1z7zmZKu1VLXspf/QB54SLx+QduFoaUJ9FvRbwedpKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBZmyTUsCsJlzqWI3ZOavr3IbxIWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTNiZjEyODQtNDVmMC0z ZGRkLTk3MTgtNzg4MDdiZDJjM2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwER+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALlKnj04i0yDcWDHnQIJstAl2n183R57kWvJvzpkaopyPSGchnHSxORh Yx+O/q5JptffBdqcwtdcECbu3wzeR68z0VzVZ8PduJsJLhXOBk9r10eliExc6CQy au7W1lY+DmbR41xs1xZRH5JCX7Qlkza7wCOH0b6x4IoaKK89RrkNA0Xtp/nvlXG+ dxq5/uMERdF0nkWlREPtr5287gftVn4JEEKEeNmWRCCf3DOl6GT/9Qu4RyeolDwE mmThsWiY8PVMNHMJWHnjAkHnMI0h0BA8DGzODrQDx7p5DEIxrRyitWSap86cogyG i2/pMm1UokmNM1M1/fQekJHp2+VDl/o= -----END CERTIFICATE-----Generated at Sun May 11 09:23:23 2025 by rpki-client