$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c2e3ef25-90fd-39ef-a743-9b44ea655c95.roa File: c2e3ef25-90fd-39ef-a743-9b44ea655c95.roa (raw, json) Hash identifier: W8o3dN1Cf1l2KEQ2E4V5+t9OlvIG1k8IDorlHS13qVk= Subject key identifier: 65:EA:33:AF:08:3D:16:4C:52:51:38:B2:76:FD:A2:37:D9:ED:42:DC Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858498769C646644D279795FC0E00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c2e3ef25-90fd-39ef-a743-9b44ea655c95.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 36618 IP address blocks: 192.68.126.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:c6:46:64:4d:27:97:95:fc:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=c8a1a47c-a6b8-407b-ac34-9c127326fd3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:2e:f2:04:a4:86:76:ff:65:fa:88:9b:2f:65: 4a:37:76:75:b9:0b:49:d0:d8:c5:cf:b0:33:66:a6: d9:e0:71:bc:57:71:39:cf:0d:a7:e6:8f:da:7e:45: 28:d6:16:d8:c1:ab:4b:eb:2f:8e:d5:ec:f6:d3:be: da:f7:a2:14:d4:e6:6d:3f:e2:d6:ab:ca:c9:58:16: 68:d1:ab:8e:fb:c8:9d:fa:00:8d:bc:1c:6a:68:7b: bb:ce:d9:09:2b:38:41:6e:0d:31:e6:1b:e0:da:51: 45:33:03:cc:36:8f:46:94:dd:06:73:6f:cb:9c:87: 8b:d2:36:18:33:aa:7f:71:67:a4:66:41:97:a7:66: e8:aa:37:e3:da:41:88:ac:2b:e5:18:9b:e6:a4:56: c6:9d:61:01:02:30:bb:30:ac:83:4d:ed:11:dd:ce: cc:7c:c1:91:31:0c:6f:96:92:11:54:14:17:12:d8: 9a:6c:62:e4:fb:89:24:1b:43:9f:77:8d:3d:6b:61: 43:f6:ba:fc:df:fc:f4:5b:65:91:c3:9c:e6:95:a5: 03:5e:48:da:8c:5e:4f:83:d2:35:9f:35:3d:95:d6: 7c:9f:71:6d:d6:3b:22:eb:97:83:5d:a2:d2:f6:0e: 9a:d2:89:12:f8:7f:b9:2f:77:ca:2c:6e:1d:61:c1: 5a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:EA:33:AF:08:3D:16:4C:52:51:38:B2:76:FD:A2:37:D9:ED:42:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c2e3ef25-90fd-39ef-a743-9b44ea655c95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:f6:72:ca:78:ab:47:d7:5a:c9:86:e2:1f:72:02:9e:3f:43: f2:6d:d3:08:3d:81:84:91:0c:b0:29:c4:2e:fc:28:e9:0f:e8: 95:11:e4:82:0b:b9:41:73:2d:e3:f2:50:db:85:1b:4c:e0:00: 53:84:21:e9:b6:7f:14:aa:77:8e:7d:0d:6c:6d:9f:ef:2a:d9: aa:f6:28:50:05:91:13:4b:ef:47:59:f3:58:44:58:3d:ea:d6: a3:ab:9b:53:30:86:0a:4d:ab:70:5d:4b:fe:f7:34:9b:6d:5e: 8d:40:39:18:1f:e5:bd:c6:a6:a5:fa:b4:f0:bb:c9:93:a7:db: ac:7b:24:b0:42:c3:b4:c0:38:d2:d2:ef:20:32:90:13:04:8d: 9f:a2:0f:de:74:a9:c5:da:a9:81:fc:65:ba:51:de:8c:34:4c: b3:8a:c1:df:d9:d4:d0:94:f6:20:77:b9:67:6e:a9:27:b8:4f: 08:ee:fe:b2:23:f5:e2:cd:97:2d:f1:25:f8:b1:27:52:52:3a: fd:9f:a1:d7:19:d7:ed:ee:3d:c8:8c:31:ca:7d:14:9f:b7:e3: f1:3c:4b:9d:a5:53:62:3a:49:74:66:be:66:fe:9c:f2:97:c9: 69:15:8c:19:c3:2b:05:a2:99:fb:81:9c:13:d1:a5:1a:85:7b: 85:8e:17:17 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmHacZGZE0nl5X8DgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk YzhhMWE0N2MtYTZiOC00MDdiLWFjMzQtOWMxMjczMjZmZDNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmi7yBKSGdv9l+oibL2VKN3Z1uQtJ0NjFz7Az ZqbZ4HG8V3E5zw2n5o/afkUo1hbYwatL6y+O1ez2077a96IU1OZtP+LWq8rJWBZo 0auO+8id+gCNvBxqaHu7ztkJKzhBbg0x5hvg2lFFMwPMNo9GlN0Gc2/LnIeL0jYY M6p/cWekZkGXp2boqjfj2kGIrCvlGJvmpFbGnWEBAjC7MKyDTe0R3c7MfMGRMQxv lpIRVBQXEtiabGLk+4kkG0Ofd409a2FD9rr83/z0W2WRw5zmlaUDXkjajF5Pg9I1 nzU9ldZ8n3Ft1jsi65eDXaLS9g6a0okS+H+5L3fKLG4dYcFaOwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGXqM68IPRZMUlE4snb9ojfZ7ULcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzJlM2VmMjUtOTBmZC0z OWVmLWE3NDMtOWI0NGVhNjU1Yzk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCI9nLKeKtH11rJhuIfcgKeP0PybdMIPYGEkQywKcQu/CjpD+iVEeSC C7lBcy3j8lDbhRtM4ABThCHptn8UqneOfQ1sbZ/vKtmq9ihQBZETS+9HWfNYRFg9 6tajq5tTMIYKTatwXUv+9zSbbV6NQDkYH+W9xqal+rTwu8mTp9useySwQsO0wDjS 0u8gMpATBI2fog/edKnF2qmB/GW6Ud6MNEyzisHf2dTQlPYgd7lnbqknuE8I7v6y I/XizZct8SX4sSdSUjr9n6HXGdft7j3IjDHKfRSft+PxPEudpVNiOkl0Zr5m/pzy l8lpFYwZwysFopn7gZwT0aUahXuFjhcX -----END CERTIFICATE-----Generated at Sun May 11 00:58:30 2025 by rpki-client