$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a9688a6f-07f9-30ec-b082-a6508372a517.roa File: a9688a6f-07f9-30ec-b082-a6508372a517.roa (raw, json) Hash identifier: MdmqtI2MKeNyB6tW9wXLNgv3JOu4krPP54NBjo/GIVA= Subject key identifier: F4:3D:4E:DD:20:32:F0:E5:E1:32:0C:E8:31:E5:68:18:8E:02:5E:F5 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849AFDB7D67CBA773F2DFD7E740 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a9688a6f-07f9-30ec-b082-a6508372a517.roa Signing time: Tue 29 Apr 2025 12:42:32 +0000 ROA not before: Tue 29 Apr 2025 12:42:32 +0000 ROA not after: Mon 28 Jul 2025 12:42:32 +0000 asID: 396566 IP address blocks: 192.68.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:af:db:7d:67:cb:a7:73:f2:df:d7:e7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 29 12:42:32 2025 GMT Not After : Jul 28 12:42:32 2025 GMT Subject: CN=b20e9de9-9c1f-4d28-938f-60a1ae3fe9df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:90:1d:b6:70:7b:d1:2c:4b:14:df:7c:94:5c: 8f:f0:88:2b:03:70:c2:c3:20:52:b8:5b:a3:db:bb: 64:a4:36:3f:d0:cf:c4:b5:f3:47:9d:8c:9c:84:14: c9:b2:98:9c:cf:12:fe:46:9f:87:1f:99:1d:0d:12: 58:22:2f:f4:45:d8:b6:4a:28:d9:b2:52:06:9b:67: ac:f0:c6:0a:80:0e:c3:27:ad:29:09:dd:ba:a0:c3: f4:d7:f1:c3:e1:dd:a3:22:5c:8b:9d:f7:5d:66:9c: f3:8b:97:6b:08:6c:ae:c1:eb:2a:d6:a4:99:9b:8b: 27:bf:e8:9d:18:5c:e3:40:af:1c:57:11:51:60:d3: 01:14:f2:ef:31:8b:43:30:8c:48:f6:bf:3a:f6:40: b2:85:dc:a0:cb:3b:90:3e:67:ad:e6:69:00:9c:9c: 41:f4:69:1b:1d:1b:39:db:51:64:0f:c2:1e:56:c9: a1:35:2c:1a:d1:cc:a0:3a:04:80:27:69:1a:98:41: c7:d6:d1:9d:c7:16:09:45:92:99:a7:49:2b:14:c4: 7f:f4:b4:b0:3a:7d:19:a0:19:6b:7c:ed:42:28:a9: 4d:f7:ff:da:33:46:69:6e:be:a6:77:ab:ff:a3:29: 7c:f9:99:7c:a9:43:10:7e:f6:ec:a5:ef:f4:c1:b5: 57:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:3D:4E:DD:20:32:F0:E5:E1:32:0C:E8:31:E5:68:18:8E:02:5E:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a9688a6f-07f9-30ec-b082-a6508372a517.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:76:49:b0:83:8b:89:77:bf:03:11:e6:62:43:05:4b:f9:7d: bc:22:9e:d6:a5:bd:e4:c6:67:f8:84:bd:f6:d0:d0:4e:89:db: 71:81:7b:b5:47:32:98:9e:b3:0a:1b:2e:60:1f:26:97:fd:75: 91:5f:72:36:ac:f1:a5:38:d2:a0:d2:d4:d0:50:16:5f:16:11: 09:5c:c7:16:9d:83:47:7a:ca:36:ab:14:3b:91:9b:20:9a:63: e1:cb:07:5d:b6:f8:94:89:84:cb:fd:4f:82:06:4b:7c:b9:1f: d8:19:eb:b9:e8:03:0a:3c:0a:ff:69:63:40:4c:ce:02:9f:90: ec:18:0e:9f:51:b5:63:22:b0:7f:5c:54:a3:16:34:b5:83:3f: 51:a0:66:e3:28:19:97:12:d2:e6:18:36:22:47:72:be:8a:f3: 9a:f9:c1:dc:56:a7:1f:86:b2:f5:a6:09:0e:d9:16:80:ea:a3: 94:d6:6c:f2:a9:77:fd:28:9a:11:30:69:0e:5d:1e:0d:98:af: 58:42:77:f8:4d:a9:6c:bc:a8:bb:9d:bd:ed:cd:df:be:00:26: b4:38:7d:46:b2:16:4d:5d:41:e1:70:c9:45:63:c3:4d:85:be: 9f:02:5f:8c:26:d8:37:17:9a:1d:9f:cb:73:d2:31:8f:e2:ee: d6:e1:01:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmv231ny6dz8t/X50AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQyOTEyNDIzMloXDTI1MDcyODEyNDIzMlowLzEtMCsGA1UEAxMk YjIwZTlkZTktOWMxZi00ZDI4LTkzOGYtNjBhMWFlM2ZlOWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZAdtnB70SxLFN98lFyP8IgrA3DCwyBSuFuj 27tkpDY/0M/EtfNHnYychBTJspiczxL+Rp+HH5kdDRJYIi/0Rdi2SijZslIGm2es 8MYKgA7DJ60pCd26oMP01/HD4d2jIlyLnfddZpzzi5drCGyuwesq1qSZm4snv+id GFzjQK8cVxFRYNMBFPLvMYtDMIxI9r869kCyhdygyzuQPmet5mkAnJxB9GkbHRs5 21FkD8IeVsmhNSwa0cygOgSAJ2kamEHH1tGdxxYJRZKZp0krFMR/9LSwOn0ZoBlr fO1CKKlN9//aM0Zpbr6md6v/oyl8+Zl8qUMQfvbspe/0wbVXMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPQ9Tt0gMvDl4TIM6DHlaBiOAl71MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTk2ODhhNmYtMDdmOS0z MGVjLWIwODItYTY1MDgzNzJhNTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwER+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABB2SbCDi4l3vwMR5mJDBUv5fbwintalveTGZ/iEvfbQ0E6J23GBe7VH MpieswobLmAfJpf9dZFfcjas8aU40qDS1NBQFl8WEQlcxxadg0d6yjarFDuRmyCa Y+HLB122+JSJhMv9T4IGS3y5H9gZ67noAwo8Cv9pY0BMzgKfkOwYDp9RtWMisH9c VKMWNLWDP1GgZuMoGZcS0uYYNiJHcr6K85r5wdxWpx+GsvWmCQ7ZFoDqo5TWbPKp d/0omhEwaQ5dHg2Yr1hCd/hNqWy8qLudve3N374AJrQ4fUayFk1dQeFwyUVjw02F vp8CX4wm2DcXmh2fy3PSMY/i7tbhAck= -----END CERTIFICATE-----Generated at Sat May 10 23:56:31 2025 by rpki-client