$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ac40e6fb-5be7-3c6a-9cb6-26d2bf39173f.roa File: ac40e6fb-5be7-3c6a-9cb6-26d2bf39173f.roa (raw, json) Hash identifier: sAyo7dYbnuFd8cPXMwQ/elQxlPLWvnzsEtvFlINTIRM= Subject key identifier: 8B:A3:6E:D5:E6:7D:E5:98:F5:6D:11:18:29:47:88:62:62:84:C8:56 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849AFDB80B1277433FEA2D16280 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ac40e6fb-5be7-3c6a-9cb6-26d2bf39173f.roa Signing time: Tue 29 Apr 2025 12:42:33 +0000 ROA not before: Tue 29 Apr 2025 12:42:33 +0000 ROA not after: Mon 28 Jul 2025 12:42:33 +0000 asID: 22547 IP address blocks: 192.68.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:af:db:80:b1:27:74:33:fe:a2:d1:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 29 12:42:33 2025 GMT Not After : Jul 28 12:42:33 2025 GMT Subject: CN=8756cda4-6ee5-46a5-a5f8-cea920160496 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:93:57:a3:98:82:ac:83:7a:9f:0f:d4:6b:ee: 61:97:b2:11:d9:d7:42:15:86:1b:69:6e:e6:b3:23: f7:8b:71:1c:cd:0c:e1:ea:b9:e9:a4:00:fd:ec:dc: 3a:c2:6b:84:83:d6:4c:7a:2a:b9:fd:32:be:e7:b0: 26:6d:e0:8c:ed:e3:64:e7:b4:69:2c:a1:dc:b3:20: 49:0e:da:87:53:ba:18:f9:33:0c:68:77:4a:b1:c3: f3:88:0c:66:45:3a:e2:d3:60:16:0a:bd:80:62:15: 0f:62:e7:13:28:58:8c:09:06:4f:a5:00:85:5c:d5: 5b:59:e8:88:57:37:69:0f:5f:b0:6f:80:88:49:ac: 19:09:71:80:6d:e3:89:f2:38:be:db:ce:a0:16:ab: 2d:53:f9:74:47:9f:da:c8:fc:9d:37:86:a8:58:d2: 3e:d7:a4:8a:e9:ff:a5:98:8c:83:1d:c8:9b:f8:39: 30:ea:f8:5c:fe:05:a7:43:d1:97:ce:0b:dc:f8:a1: ee:90:02:aa:c8:a2:de:df:18:43:5e:8a:92:12:f9: 03:e0:6c:ce:4a:6c:21:06:1a:e5:86:5b:a1:04:c1: e8:0e:48:5c:59:f9:16:7f:d5:f6:27:7d:80:98:36: 77:4f:45:97:7d:0d:d2:f2:32:00:19:26:1a:a2:fd: 88:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:A3:6E:D5:E6:7D:E5:98:F5:6D:11:18:29:47:88:62:62:84:C8:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ac40e6fb-5be7-3c6a-9cb6-26d2bf39173f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:09:6e:34:23:e0:f3:1d:e1:71:ed:67:08:0d:b5:61:05:e7: 00:bb:9a:bc:15:7e:36:ac:89:2e:cd:e5:43:ee:09:e0:48:01: b9:a0:2e:2d:0d:f2:40:8b:51:8a:24:f2:cd:12:cd:05:f7:9d: bb:c8:5d:a3:3f:83:b2:a6:9e:a1:43:90:98:c3:f5:ae:a1:eb: 46:09:b1:fe:62:43:37:32:e9:59:2e:a4:03:80:5a:67:ed:b9: ca:4e:c0:63:41:76:26:29:7c:bd:91:20:48:4e:55:0a:ab:1e: 6d:e5:cb:86:02:1e:13:6a:dd:47:43:e4:d1:f2:db:ad:88:a2: f5:83:08:01:7d:02:be:9c:59:ab:0f:27:53:dd:21:7d:d1:0b: 73:40:50:64:50:54:45:b3:b4:e5:f8:ea:4f:ce:b4:5a:b5:24: 49:74:d8:8d:fe:d6:a7:f5:92:37:d5:0c:84:87:7b:22:d1:5d: c9:a9:0c:3e:1b:a3:94:2d:1d:b7:d5:ef:b6:4a:fa:1c:9c:3a: 08:0e:c4:a0:26:aa:88:35:2a:90:5d:c9:9b:f1:e6:7c:3f:4a: 2a:3c:04:02:dd:86:21:ab:38:1d:df:a6:d1:e7:f7:b8:02:ee: d1:1c:29:96:a6:b6:21:eb:44:75:31:91:e9:c4:1b:23:94:af: f1:be:ee:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmv24CxJ3Qz/qLRYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQyOTEyNDIzM1oXDTI1MDcyODEyNDIzM1owLzEtMCsGA1UEAxMk ODc1NmNkYTQtNmVlNS00NmE1LWE1ZjgtY2VhOTIwMTYwNDk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJNXo5iCrIN6nw/Ua+5hl7IR2ddCFYYbaW7m syP3i3EczQzh6rnppAD97Nw6wmuEg9ZMeiq5/TK+57AmbeCM7eNk57RpLKHcsyBJ DtqHU7oY+TMMaHdKscPziAxmRTri02AWCr2AYhUPYucTKFiMCQZPpQCFXNVbWeiI VzdpD1+wb4CISawZCXGAbeOJ8ji+286gFqstU/l0R5/ayPydN4aoWNI+16SK6f+l mIyDHcib+Dkw6vhc/gWnQ9GXzgvc+KHukAKqyKLe3xhDXoqSEvkD4GzOSmwhBhrl hluhBMHoDkhcWfkWf9X2J32AmDZ3T0WXfQ3S8jIAGSYaov2IAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIujbtXmfeWY9W0RGClHiGJihMhWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWM0MGU2ZmItNWJlNy0z YzZhLTljYjYtMjZkMmJmMzkxNzNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwER+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIgJbjQj4PMd4XHtZwgNtWEF5wC7mrwVfjasiS7N5UPuCeBIAbmgLi0N 8kCLUYok8s0SzQX3nbvIXaM/g7KmnqFDkJjD9a6h60YJsf5iQzcy6VkupAOAWmft ucpOwGNBdiYpfL2RIEhOVQqrHm3ly4YCHhNq3UdD5NHy262IovWDCAF9Ar6cWasP J1PdIX3RC3NAUGRQVEWztOX46k/OtFq1JEl02I3+1qf1kjfVDISHeyLRXcmpDD4b o5QtHbfV77ZK+hycOggOxKAmqog1KpBdyZvx5nw/Sio8BALdhiGrOB3fptHn97gC 7tEcKZamtiHrRHUxkenEGyOUr/G+7s0= -----END CERTIFICATE-----Generated at Sun May 11 02:19:13 2025 by rpki-client