$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c347471b-cbec-358b-bcc0-91f5472d6d05.roa File: c347471b-cbec-358b-bcc0-91f5472d6d05.roa (raw, json) Hash identifier: cl95lqvChS82Ko/P3A8uoemnVq+3hydMNqMKDS1qxf0= Subject key identifier: 1F:C4:EF:C2:AE:E5:3F:6D:7B:D4:00:1F:58:B4:EE:83:1E:58:5F:35 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858498769C2D23B5A1CC21F294380 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c347471b-cbec-358b-bcc0-91f5472d6d05.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 396614 IP address blocks: 192.68.126.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:c2:d2:3b:5a:1c:c2:1f:29:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=f0c5c92d-ddfd-4f33-994d-4bc02545e942 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:18:3b:76:d6:d1:70:7c:c5:cf:c7:0a:d5:73: 1d:8f:4a:71:eb:d2:30:d8:b6:45:63:d1:97:ac:66: d8:d4:a4:3d:74:c0:22:1a:d7:e9:09:97:ba:46:b5: 59:79:32:b3:98:88:a0:88:42:c8:3f:a7:22:47:97: ad:14:87:a3:fe:6e:e2:72:7e:51:a5:6b:42:9f:dc: b3:94:e3:fc:f5:b2:60:52:49:0c:1c:fb:3b:87:73: 04:b1:bc:ba:8b:cd:bd:b7:bc:b3:ce:57:72:59:d2: e8:2b:71:94:2d:37:77:95:92:ad:39:56:6a:e5:e0: 42:45:4c:24:80:d7:0f:be:67:d0:07:0b:06:08:eb: 71:c3:7b:68:b8:a8:da:36:36:43:f5:35:16:84:1b: f9:b5:50:5b:0e:63:fb:77:49:41:70:ff:9a:3e:e2: 5a:88:66:65:0f:86:98:5b:6f:57:81:c1:48:02:65: 56:b3:c8:07:cb:22:46:e8:ad:05:35:8b:ac:12:46: 82:13:cf:27:4b:91:de:19:d4:cf:d3:87:da:99:b8: 57:ad:01:6d:49:25:ea:94:c7:aa:4c:92:63:c4:cb: 6a:e1:99:b0:46:03:c6:67:8d:d0:3a:ce:02:15:78: 44:20:16:ac:98:f7:83:bb:63:27:ca:71:68:ca:ad: 6b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:C4:EF:C2:AE:E5:3F:6D:7B:D4:00:1F:58:B4:EE:83:1E:58:5F:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c347471b-cbec-358b-bcc0-91f5472d6d05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:bc:5b:2d:f1:92:04:a3:3e:2d:0f:28:a5:ac:8d:72:a2:bc: 28:88:a2:4c:5b:a6:fe:89:27:84:dc:92:36:7f:71:35:f2:d1: 7a:56:74:c8:d4:1d:94:1c:79:30:bb:bc:ea:f4:14:c2:59:41: 0a:30:11:d7:2f:33:ca:bd:2a:25:de:1e:5f:ae:63:58:3d:08: 7c:82:8f:14:f7:9c:40:1b:1d:c0:f7:23:b9:45:60:e4:91:18: 3a:c8:bf:43:be:9e:b3:91:47:63:25:8c:4b:63:a4:4b:b6:91: 40:9d:b8:9b:e8:5b:a4:6a:11:be:7f:ed:cd:3e:d9:24:68:b4: 16:c8:fe:c7:d8:8f:72:fd:dc:0f:1d:bb:c6:77:ce:2b:be:6f: db:33:7e:9a:7e:a9:46:72:5f:ef:fa:4c:fd:98:bd:b3:bc:87: d2:85:d8:72:75:b0:05:b1:20:33:c0:71:e3:8a:d8:86:c4:6b: fa:9b:04:a6:f1:18:43:e2:6e:54:b1:92:93:a5:e5:6c:83:01: 98:c4:7d:73:ce:80:aa:1a:51:03:79:4c:6e:c7:b7:36:d7:f0: a7:a4:98:d3:de:65:62:24:5a:21:90:38:8a:f3:ed:3e:e0:b6: a5:05:c9:dc:01:02:8b:19:e3:51:99:e8:2a:96:d0:e7:48:61: 3a:bb:ca:0e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmHacLSO1ocwh8pQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk ZjBjNWM5MmQtZGRmZC00ZjMzLTk5NGQtNGJjMDI1NDVlOTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxg7dtbRcHzFz8cK1XMdj0px69Iw2LZFY9GX rGbY1KQ9dMAiGtfpCZe6RrVZeTKzmIigiELIP6ciR5etFIej/m7icn5RpWtCn9yz lOP89bJgUkkMHPs7h3MEsby6i829t7yzzldyWdLoK3GULTd3lZKtOVZq5eBCRUwk gNcPvmfQBwsGCOtxw3touKjaNjZD9TUWhBv5tVBbDmP7d0lBcP+aPuJaiGZlD4aY W29XgcFIAmVWs8gHyyJG6K0FNYusEkaCE88nS5HeGdTP04fambhXrQFtSSXqlMeq TJJjxMtq4ZmwRgPGZ43QOs4CFXhEIBasmPeDu2MnynFoyq1r2wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFB/E78Ku5T9te9QAH1i07oMeWF81MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzM0NzQ3MWItY2JlYy0z NThiLWJjYzAtOTFmNTQ3MmQ2ZDA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCivFst8ZIEoz4tDyilrI1yorwoiKJMW6b+iSeE3JI2f3E18tF6VnTI 1B2UHHkwu7zq9BTCWUEKMBHXLzPKvSol3h5frmNYPQh8go8U95xAGx3A9yO5RWDk kRg6yL9Dvp6zkUdjJYxLY6RLtpFAnbib6FukahG+f+3NPtkkaLQWyP7H2I9y/dwP HbvGd84rvm/bM36afqlGcl/v+kz9mL2zvIfShdhydbAFsSAzwHHjitiGxGv6mwSm 8RhD4m5UsZKTpeVsgwGYxH1zzoCqGlEDeUxux7c21/CnpJjT3mViJFohkDiK8+0+ 4LalBcncAQKLGeNRmegqltDnSGE6u8oO -----END CERTIFICATE-----Generated at Sat May 10 23:25:41 2025 by rpki-client