$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae132594-c284-3c01-8a4e-02bf4418f95a.roa File: ae132594-c284-3c01-8a4e-02bf4418f95a.roa (raw, json) Hash identifier: 4Ne4g25qq4GeDvPS9T6gfoR/ec+ACkqCa7mdoZvQjbc= Subject key identifier: A0:E3:3A:BE:54:37:D2:6E:A6:D8:AE:1F:1C:3E:D7:35:90:47:61:D4 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849AFDB7C124AC6B4E0299BA780 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae132594-c284-3c01-8a4e-02bf4418f95a.roa Signing time: Tue 29 Apr 2025 12:42:31 +0000 ROA not before: Tue 29 Apr 2025 12:42:31 +0000 ROA not after: Mon 28 Jul 2025 12:42:31 +0000 asID: 36626 IP address blocks: 192.68.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:af:db:7c:12:4a:c6:b4:e0:29:9b:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 29 12:42:31 2025 GMT Not After : Jul 28 12:42:31 2025 GMT Subject: CN=8b0c1fd6-85f1-4072-b2ad-c259eb417894 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:39:e0:b7:3d:d3:2b:15:08:94:f6:96:20:28: 7b:ae:5d:7a:54:16:0e:ed:cb:ef:97:14:a0:97:7f: bb:8e:63:6d:02:10:3e:c2:36:e5:c2:dd:de:7d:42: 57:7d:2d:8e:e4:11:de:b7:e9:5d:b6:84:43:10:b2: e3:ee:fe:8a:90:81:f3:ba:a0:6a:d5:2c:76:58:97: fe:ba:e1:58:b4:af:d7:fe:a0:69:7a:d3:4d:54:54: e2:49:d7:ff:69:9d:17:4f:d0:52:90:80:f8:8d:70: 73:4b:5c:0f:99:1e:95:17:a8:c7:e1:14:c7:9e:bc: 30:6d:77:11:f6:b6:09:ef:ca:82:f5:9a:ef:37:53: d0:c8:1c:ce:c7:e4:0d:e9:59:4d:57:5b:f8:7f:bc: 68:80:f7:a9:91:65:ff:f3:7a:d3:37:35:98:60:e8: bf:e3:fa:09:91:ef:34:ba:46:02:e5:65:a1:61:61: b6:17:61:11:f2:82:ba:78:48:a0:2c:68:59:0c:aa: d0:3d:60:8e:c7:f3:66:9a:b7:46:d9:76:57:41:79: 29:cd:6d:69:8e:a7:7f:2f:11:5b:c5:a1:f1:2e:21: 06:0e:41:df:b3:43:1f:3d:77:77:8e:f1:e2:b4:cb: 66:76:25:9c:ee:99:f1:b8:73:12:dd:02:fa:ff:18: 63:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:E3:3A:BE:54:37:D2:6E:A6:D8:AE:1F:1C:3E:D7:35:90:47:61:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae132594-c284-3c01-8a4e-02bf4418f95a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:25:50:56:98:2c:08:8d:5a:22:2d:57:dc:b5:ce:8d:cd:bd: 92:be:fd:40:57:af:f5:85:cf:29:66:dd:74:ab:91:a7:51:e8: fe:9b:d7:5e:be:1a:6a:66:56:1c:7b:dc:ba:da:f4:f0:a4:95: 53:8c:78:a5:b5:51:e7:29:76:8a:0c:42:dc:a1:e0:e7:74:bf: 94:03:ac:e7:d6:be:df:c8:e0:77:58:ce:a3:21:48:70:98:b5: 0f:fd:e9:7f:b3:b6:26:e4:16:73:35:0c:ad:a6:6c:de:b9:60: e2:6f:15:4d:bf:62:34:f6:fd:69:14:49:86:53:78:61:90:50: 74:5e:da:45:bd:44:04:fa:83:f2:30:10:6a:a5:0b:56:94:3e: 7c:a1:b3:26:4c:4e:5f:4f:e0:30:22:c2:87:8b:28:40:d5:c2: 5a:7d:81:35:e4:29:a4:57:b3:04:17:0a:6a:1b:58:30:ec:c0: 3e:e1:42:98:b3:27:70:06:2a:43:6c:bd:86:03:4e:79:36:41: 86:87:06:2e:3e:49:54:42:cf:53:2d:36:99:f6:07:49:e2:01: ef:f0:3a:83:ee:a4:6b:f9:01:8f:f3:2f:d9:2c:7d:a4:8b:37: 80:f9:a5:81:1e:0d:be:35:b0:4e:91:35:e9:8f:e2:bb:b8:4e: 9a:c3:08:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmv23wSSsa04Cmbp4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQyOTEyNDIzMVoXDTI1MDcyODEyNDIzMVowLzEtMCsGA1UEAxMk OGIwYzFmZDYtODVmMS00MDcyLWIyYWQtYzI1OWViNDE3ODk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjngtz3TKxUIlPaWICh7rl16VBYO7cvvlxSg l3+7jmNtAhA+wjblwt3efUJXfS2O5BHet+ldtoRDELLj7v6KkIHzuqBq1Sx2WJf+ uuFYtK/X/qBpetNNVFTiSdf/aZ0XT9BSkID4jXBzS1wPmR6VF6jH4RTHnrwwbXcR 9rYJ78qC9ZrvN1PQyBzOx+QN6VlNV1v4f7xogPepkWX/83rTNzWYYOi/4/oJke80 ukYC5WWhYWG2F2ER8oK6eEigLGhZDKrQPWCOx/NmmrdG2XZXQXkpzW1pjqd/LxFb xaHxLiEGDkHfs0MfPXd3jvHitMtmdiWc7pnxuHMS3QL6/xhj8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKDjOr5UN9JuptiuHxw+1zWQR2HUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWUxMzI1OTQtYzI4NC0z YzAxLThhNGUtMDJiZjQ0MThmOTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwER+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJAlUFaYLAiNWiItV9y1zo3NvZK+/UBXr/WFzylm3XSrkadR6P6b116+ GmpmVhx73Lra9PCklVOMeKW1UecpdooMQtyh4Od0v5QDrOfWvt/I4HdYzqMhSHCY tQ/96X+ztibkFnM1DK2mbN65YOJvFU2/YjT2/WkUSYZTeGGQUHRe2kW9RAT6g/Iw EGqlC1aUPnyhsyZMTl9P4DAiwoeLKEDVwlp9gTXkKaRXswQXCmobWDDswD7hQpiz J3AGKkNsvYYDTnk2QYaHBi4+SVRCz1MtNpn2B0niAe/wOoPupGv5AY/zL9ksfaSL N4D5pYEeDb41sE6RNemP4ru4TprDCMY= -----END CERTIFICATE-----Generated at Sun May 11 06:15:11 2025 by rpki-client