$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c438f60c-1965-3552-8e28-28a5bfa0d47d.roa File: c438f60c-1965-3552-8e28-28a5bfa0d47d.roa (raw, json) Hash identifier: fLTgrRQoWsAfQ59jNeiSOa1mxYTHNk95yRJ+UI/TisE= Subject key identifier: 32:98:D5:23:68:90:D1:3A:65:D8:0A:0E:60:1A:FC:82:61:E4:D3:84 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849AFDB7CFBEF58A98862CDA580 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c438f60c-1965-3552-8e28-28a5bfa0d47d.roa Signing time: Tue 29 Apr 2025 12:42:32 +0000 ROA not before: Tue 29 Apr 2025 12:42:32 +0000 ROA not after: Mon 28 Jul 2025 12:42:32 +0000 asID: 36617 IP address blocks: 192.68.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:af:db:7c:fb:ef:58:a9:88:62:cd:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 29 12:42:32 2025 GMT Not After : Jul 28 12:42:32 2025 GMT Subject: CN=1c67c716-5469-4c05-a60b-1790a2b69d66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:a4:14:cd:f7:df:cd:af:09:be:81:64:de:9a: 80:8f:39:6e:94:2b:77:a2:f6:7a:fc:88:b1:c0:66: f5:30:20:e5:f9:55:f1:60:f6:b2:6f:2f:26:e1:72: ab:9e:89:c8:6c:fd:71:ac:ca:d6:68:c6:6e:cd:2d: 90:ea:bb:ea:58:41:db:92:92:96:a4:14:2d:64:d4: c5:52:7e:5d:50:90:0a:4c:a7:5b:4d:d4:97:4c:ef: 2d:58:26:af:ad:e0:3a:94:7e:ca:b3:bd:d2:05:96: 89:00:a9:83:89:e9:9d:bc:66:46:66:6c:bf:f3:94: 42:2f:72:91:cd:bd:6c:b0:54:75:2a:68:05:2b:8f: ff:5d:8d:39:75:98:55:35:67:db:e2:d9:4d:dd:c1: e2:ac:75:c8:c8:ec:42:fb:c1:9e:9c:0f:98:aa:6b: a6:de:47:d0:7c:fa:7f:03:b4:d4:c3:de:33:32:97: ed:d1:1f:b3:d6:16:08:6e:73:6b:ff:f5:4c:42:0f: 42:24:8e:66:c7:23:9e:b4:04:cd:f2:19:73:63:9f: 2f:89:b9:64:85:64:0e:9a:72:c2:86:b3:18:33:d1: 59:99:3c:30:f8:d7:5a:b9:0c:20:46:23:36:5b:e3: df:37:b9:87:43:80:d4:35:b7:c5:87:50:27:47:a1: 1e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:98:D5:23:68:90:D1:3A:65:D8:0A:0E:60:1A:FC:82:61:E4:D3:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c438f60c-1965-3552-8e28-28a5bfa0d47d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:1e:93:e4:83:89:47:38:51:7d:f8:36:be:45:2b:11:44:74: b3:fc:ce:44:14:4f:dd:f5:d6:84:b6:87:f3:2c:68:c4:43:bc: a6:5b:28:18:be:51:af:2b:82:04:76:1b:af:78:9f:02:85:21: 77:30:b9:37:b0:aa:5b:60:bc:a1:08:51:cf:ba:71:23:07:d2: 7e:ab:b0:d1:c8:f7:7c:9a:2b:20:1d:4e:80:ee:79:45:77:e2: ba:e2:55:45:7f:54:07:ca:5b:55:fe:7e:59:4d:27:5b:36:5b: 9e:c8:a7:65:5f:0e:08:51:52:66:59:04:ec:7d:75:15:0d:d2: 0f:c6:95:93:e7:70:31:cc:36:c8:63:36:0d:55:56:05:b5:26: 65:9a:4c:28:a3:e4:95:30:da:5c:54:54:71:39:f1:2a:2f:2e: c3:29:89:ae:78:ad:b5:a6:b4:a7:12:b5:cc:ee:9d:00:90:2e: 0d:32:75:86:03:b5:e6:f4:18:84:96:54:46:39:41:b2:63:84: c7:71:04:dd:dd:8a:49:aa:c7:ed:2f:1d:92:7d:a4:21:51:80: 61:01:55:71:4b:93:0a:79:95:e3:5f:69:c4:f6:b6:e8:09:f2: df:15:9b:65:8f:d3:9f:3e:9f:d4:3a:7a:ed:cd:b1:8e:89:c5: e2:93:be:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmv23z771ipiGLNpYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQyOTEyNDIzMloXDTI1MDcyODEyNDIzMlowLzEtMCsGA1UEAxMk MWM2N2M3MTYtNTQ2OS00YzA1LWE2MGItMTc5MGEyYjY5ZDY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKQUzfffza8JvoFk3pqAjzlulCt3ovZ6/Iix wGb1MCDl+VXxYPayby8m4XKrnonIbP1xrMrWaMZuzS2Q6rvqWEHbkpKWpBQtZNTF Un5dUJAKTKdbTdSXTO8tWCavreA6lH7Ks73SBZaJAKmDiemdvGZGZmy/85RCL3KR zb1ssFR1KmgFK4//XY05dZhVNWfb4tlN3cHirHXIyOxC+8GenA+Yqmum3kfQfPp/ A7TUw94zMpft0R+z1hYIbnNr//VMQg9CJI5mxyOetATN8hlzY58viblkhWQOmnLC hrMYM9FZmTww+NdauQwgRiM2W+PfN7mHQ4DUNbfFh1AnR6EeLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDKY1SNokNE6ZdgKDmAa/IJh5NOEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzQzOGY2MGMtMTk2NS0z NTUyLThlMjgtMjhhNWJmYTBkNDdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwER+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALwek+SDiUc4UX34Nr5FKxFEdLP8zkQUT9311oS2h/MsaMRDvKZbKBi+ Ua8rggR2G694nwKFIXcwuTewqltgvKEIUc+6cSMH0n6rsNHI93yaKyAdToDueUV3 4rriVUV/VAfKW1X+fllNJ1s2W57Ip2VfDghRUmZZBOx9dRUN0g/GlZPncDHMNshj Ng1VVgW1JmWaTCij5JUw2lxUVHE58SovLsMpia54rbWmtKcStczunQCQLg0ydYYD teb0GISWVEY5QbJjhMdxBN3dikmqx+0vHZJ9pCFRgGEBVXFLkwp5leNfacT2tugJ 8t8Vm2WP058+n9Q6eu3NsY6JxeKTvvI= -----END CERTIFICATE-----Generated at Sun May 11 00:48:10 2025 by rpki-client