$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b5f6b00e-fe89-3e04-928f-8593ef449d3f.roa File: b5f6b00e-fe89-3e04-928f-8593ef449d3f.roa (raw, json) Hash identifier: l5E7WCsJGHVSv8Evk8WN3hE2Xg8uOxfQL7GzovbDPKE= Subject key identifier: 84:F7:DA:07:60:50:ED:9E:45:AE:65:FB:3A:62:FB:D9:3B:2B:27:19 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849AFDB80909DF3D54785074E80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b5f6b00e-fe89-3e04-928f-8593ef449d3f.roa Signing time: Tue 29 Apr 2025 12:42:33 +0000 ROA not before: Tue 29 Apr 2025 12:42:33 +0000 ROA not after: Mon 28 Jul 2025 12:42:33 +0000 asID: 397195 IP address blocks: 192.68.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:af:db:80:90:9d:f3:d5:47:85:07:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 29 12:42:33 2025 GMT Not After : Jul 28 12:42:33 2025 GMT Subject: CN=530dc8e3-a1a7-4ec9-bdf9-5a19f7468984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:de:27:71:36:74:a8:ef:dc:14:65:4a:11:1a: 16:15:3d:b1:aa:2a:ce:15:04:62:d2:cb:c1:36:64: 1c:2e:f8:00:6e:11:f1:81:a4:8b:a2:56:9c:6d:0b: 14:b2:39:5e:a2:60:46:a7:28:dd:9d:77:58:ed:c9: 87:b4:d4:c2:8c:61:88:f1:fb:88:dd:13:1c:49:4e: ea:51:eb:07:44:70:02:65:ee:e6:ce:cb:a7:4c:e3: fb:16:9a:46:8a:db:72:4b:9a:02:3b:c0:f7:4d:69: 43:da:f1:bb:82:b1:80:c8:65:3f:5b:55:fa:37:32: 1a:f9:bc:52:48:4a:cb:40:30:5b:0d:c6:72:21:29: 89:2c:40:b9:e1:1d:e8:9f:80:f0:bc:48:71:2f:32: 93:5d:95:69:91:5f:b4:0f:d6:9f:a2:f3:77:03:31: af:33:6a:06:a5:96:58:b5:46:28:4e:10:74:b7:d9: 59:7b:97:ac:f1:53:27:e0:6e:e5:0a:66:d7:58:b7: 0c:c2:a1:9f:50:59:15:8d:be:fd:c7:c2:7f:ec:e8: 58:33:dc:5d:25:c8:9c:fc:5d:eb:08:1f:a4:e6:72: fb:bd:e4:11:47:0a:ac:bc:56:1e:56:21:93:76:da: 9f:f5:72:be:b7:6f:f7:30:e0:62:56:dd:7a:60:32: 7d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:F7:DA:07:60:50:ED:9E:45:AE:65:FB:3A:62:FB:D9:3B:2B:27:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b5f6b00e-fe89-3e04-928f-8593ef449d3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:16:71:a3:f0:7c:47:97:b9:ea:c8:92:f6:bb:a0:e9:08:c0: f4:0b:d2:24:37:26:2d:fe:ad:6b:f5:29:ce:88:f3:fa:3e:7c: 78:12:a7:35:70:a8:61:61:5c:94:1d:31:7c:82:e0:c3:f6:60: 4d:e1:1c:78:9a:72:61:e9:40:71:ab:b5:29:34:a5:4f:c7:db: 66:93:70:e2:2b:14:cf:2e:52:1e:35:cc:b0:b4:70:56:29:bc: b2:56:d1:fd:e2:0a:5a:60:c5:cd:d3:a4:09:bb:13:7b:95:00: 6c:48:cc:58:bb:b7:fe:de:6d:e3:2c:cd:db:da:01:76:d2:98: a8:55:df:10:48:d7:c7:71:43:8d:a9:46:17:be:06:94:2c:c6: bf:d7:bc:7d:17:9b:31:e4:11:b2:d1:ba:ce:40:77:00:53:98: dd:cb:6b:ec:cf:6e:6e:a9:e0:86:3d:47:3f:c2:c2:df:c5:21: 36:eb:9f:00:a9:86:fa:f9:5e:54:22:e1:36:d1:56:f7:33:59: 1f:75:38:ab:04:29:64:7f:45:95:64:2e:92:ab:a8:76:9d:5e: ef:91:a6:08:ee:e9:1f:56:bb:fa:fa:4b:db:8e:8c:d2:ad:47: 9d:c2:64:12:02:28:49:59:40:c6:74:51:d4:c5:13:86:93:61: ee:76:ad:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmv24CQnfPVR4UHToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQyOTEyNDIzM1oXDTI1MDcyODEyNDIzM1owLzEtMCsGA1UEAxMk NTMwZGM4ZTMtYTFhNy00ZWM5LWJkZjktNWExOWY3NDY4OTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmN4ncTZ0qO/cFGVKERoWFT2xqirOFQRi0svB NmQcLvgAbhHxgaSLolacbQsUsjleomBGpyjdnXdY7cmHtNTCjGGI8fuI3RMcSU7q UesHRHACZe7mzsunTOP7FppGittyS5oCO8D3TWlD2vG7grGAyGU/W1X6NzIa+bxS SErLQDBbDcZyISmJLEC54R3on4DwvEhxLzKTXZVpkV+0D9afovN3AzGvM2oGpZZY tUYoThB0t9lZe5es8VMn4G7lCmbXWLcMwqGfUFkVjb79x8J/7OhYM9xdJcic/F3r CB+k5nL7veQRRwqsvFYeViGTdtqf9XK+t2/3MOBiVt16YDJ9dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIT32gdgUO2eRa5l+zpi+9k7KycZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjVmNmIwMGUtZmU4OS0z ZTA0LTkyOGYtODU5M2VmNDQ5ZDNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwER+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHsWcaPwfEeXuerIkva7oOkIwPQL0iQ3Ji3+rWv1Kc6I8/o+fHgSpzVw qGFhXJQdMXyC4MP2YE3hHHiacmHpQHGrtSk0pU/H22aTcOIrFM8uUh41zLC0cFYp vLJW0f3iClpgxc3TpAm7E3uVAGxIzFi7t/7ebeMszdvaAXbSmKhV3xBI18dxQ42p Rhe+BpQsxr/XvH0XmzHkEbLRus5AdwBTmN3La+zPbm6p4IY9Rz/Cwt/FITbrnwCp hvr5XlQi4TbRVvczWR91OKsEKWR/RZVkLpKrqHadXu+Rpgju6R9Wu/r6S9uOjNKt R53CZBICKElZQMZ0UdTFE4aTYe52rZc= -----END CERTIFICATE-----Generated at Sun May 11 08:45:26 2025 by rpki-client