$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c85e773b-c9f0-33ca-8e8f-f2078f0ec437.roa File: c85e773b-c9f0-33ca-8e8f-f2078f0ec437.roa (raw, json) Hash identifier: nGk2W1IGvGdFeWy1Limj+6pTbBOHOoAbPQjvL0phYBo= Subject key identifier: EF:4C:C2:BB:78:BC:2C:DB:DB:73:CF:3D:8D:D4:A8:56:46:93:E3:67 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849AFDB7DB555FA807A5C344180 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c85e773b-c9f0-33ca-8e8f-f2078f0ec437.roa Signing time: Tue 29 Apr 2025 12:42:32 +0000 ROA not before: Tue 29 Apr 2025 12:42:32 +0000 ROA not after: Mon 28 Jul 2025 12:42:32 +0000 asID: 396592 IP address blocks: 192.68.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:af:db:7d:b5:55:fa:80:7a:5c:34:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 29 12:42:32 2025 GMT Not After : Jul 28 12:42:32 2025 GMT Subject: CN=b6414523-fdd1-4d5f-a040-aa06dbe17b36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:1e:40:f3:26:b8:46:a7:f4:5e:0a:2e:90:ed: 2b:b4:05:a1:59:42:44:54:24:46:72:86:0f:68:bc: c9:ce:f4:2d:0e:b6:1a:f1:cb:ae:ce:a3:7a:d9:2d: 2e:ba:30:3c:b1:a8:82:f0:82:24:d0:c9:b6:33:63: 8f:52:96:61:b9:d9:0d:ae:54:44:94:92:c2:52:a7: 26:b5:55:66:8f:ce:74:85:69:ce:d4:27:1e:cc:52: c2:6f:3c:8e:df:d0:92:e0:75:ab:03:54:fc:c5:27: 5f:0a:f5:e7:cd:69:48:26:0c:e5:ea:50:ee:ec:d3: d0:9e:78:47:58:e6:27:b4:0b:29:a6:7f:09:77:f1: 43:c8:57:10:af:cb:e8:9f:33:6a:ca:10:32:9b:5d: 2d:03:f1:c3:ef:1c:0a:d2:b3:56:33:cf:dc:69:92: d4:2d:fd:47:7a:99:44:f4:db:a6:a7:f6:14:84:74: 62:0b:f8:14:fa:22:8c:b7:ce:f6:20:75:b6:27:c0: 5a:ba:c1:17:32:8f:f5:37:4f:8d:5b:a4:45:ee:0a: c2:5f:d4:2e:c5:5d:d1:37:ea:8d:6b:c6:88:3a:d4: e2:50:c1:e9:df:a7:d2:ca:66:a1:1d:dc:56:2d:68: 55:1c:83:b5:3e:d0:cd:e0:8e:db:8d:c9:92:68:2e: fc:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:4C:C2:BB:78:BC:2C:DB:DB:73:CF:3D:8D:D4:A8:56:46:93:E3:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c85e773b-c9f0-33ca-8e8f-f2078f0ec437.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:16:54:b1:70:c3:dc:0d:91:0f:cb:d4:a2:ff:35:1f:2d:fe: cc:89:a5:a3:9c:23:52:53:56:1e:f6:fd:71:2c:70:42:05:3a: 0f:08:1f:63:8f:b9:4e:74:bd:a6:67:c3:f3:e2:7c:3f:8c:2b: f1:7c:3c:19:a5:0e:16:b3:a3:dd:d3:b8:22:1d:8a:cf:ef:71: e1:60:15:07:6a:af:ce:a5:f3:ad:13:4c:e1:85:7b:36:3f:b7: 64:28:3f:13:1e:a0:8f:85:f9:72:ce:ca:22:91:d4:bd:f2:62: 98:53:6a:d7:b1:42:09:ea:c4:ac:cc:e6:ec:13:f0:16:ee:3c: dd:59:8a:a7:7f:2a:f9:0b:44:7b:c3:f7:2d:ea:40:7a:70:39: d2:51:27:34:28:55:1b:65:ac:a8:36:2d:75:f2:86:21:16:7d: 23:7f:cf:e1:70:be:c5:e4:56:d0:be:8e:db:22:fc:63:fd:17: 03:91:78:a4:65:fe:df:a4:31:6a:e5:07:01:6a:4a:0a:75:ee: 60:25:51:7d:1e:c8:0f:c7:92:d6:20:47:97:03:01:24:ee:37: c6:8d:2b:b5:0d:a1:63:23:5e:17:3a:60:9e:bc:25:ae:4b:ab: 16:91:01:c5:38:8b:9d:3d:f3:eb:10:35:d6:35:b4:91:13:14: 98:10:a3:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmv2321VfqAelw0QYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQyOTEyNDIzMloXDTI1MDcyODEyNDIzMlowLzEtMCsGA1UEAxMk YjY0MTQ1MjMtZmRkMS00ZDVmLWEwNDAtYWEwNmRiZTE3YjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkx5A8ya4Rqf0XgoukO0rtAWhWUJEVCRGcoYP aLzJzvQtDrYa8cuuzqN62S0uujA8saiC8IIk0Mm2M2OPUpZhudkNrlRElJLCUqcm tVVmj850hWnO1CcezFLCbzyO39CS4HWrA1T8xSdfCvXnzWlIJgzl6lDu7NPQnnhH WOYntAsppn8Jd/FDyFcQr8vonzNqyhAym10tA/HD7xwK0rNWM8/caZLULf1HeplE 9Nump/YUhHRiC/gU+iKMt872IHW2J8BausEXMo/1N0+NW6RF7grCX9QuxV3RN+qN a8aIOtTiUMHp36fSymahHdxWLWhVHIO1PtDN4I7bjcmSaC78fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO9Mwrt4vCzb23PPPY3UqFZGk+NnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzg1ZTc3M2ItYzlmMC0z M2NhLThlOGYtZjIwNzhmMGVjNDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwER+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIYWVLFww9wNkQ/L1KL/NR8t/syJpaOcI1JTVh72/XEscEIFOg8IH2OP uU50vaZnw/PifD+MK/F8PBmlDhazo93TuCIdis/vceFgFQdqr86l860TTOGFezY/ t2QoPxMeoI+F+XLOyiKR1L3yYphTatexQgnqxKzM5uwT8BbuPN1Ziqd/KvkLRHvD 9y3qQHpwOdJRJzQoVRtlrKg2LXXyhiEWfSN/z+FwvsXkVtC+jtsi/GP9FwOReKRl /t+kMWrlBwFqSgp17mAlUX0eyA/HktYgR5cDASTuN8aNK7UNoWMjXhc6YJ68Ja5L qxaRAcU4i5098+sQNdY1tJETFJgQo5o= -----END CERTIFICATE-----Generated at Sat May 10 23:29:07 2025 by rpki-client