$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cc9c860a-2fad-33be-ab8f-7d288fe43f15.roa File: cc9c860a-2fad-33be-ab8f-7d288fe43f15.roa (raw, json) Hash identifier: Jd1IKzpAvNVOPJ+pucWokyP7VpCjAc0LUzgodJnftB8= Subject key identifier: 3F:BC:50:79:31:33:D9:06:99:4C:DA:3E:17:A2:09:32:39:70:7B:2A Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858498769CB7B6472D671CC2B4940 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cc9c860a-2fad-33be-ab8f-7d288fe43f15.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 396579 IP address blocks: 192.68.126.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:cb:7b:64:72:d6:71:cc:2b:49:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=aea92d2a-55e5-437e-a5a3-84ab064b9d4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:2b:c2:83:c0:65:bb:74:ab:d0:d2:04:03:6b: ae:75:40:10:d2:be:01:f1:5b:ff:0d:ae:72:07:30: a2:92:e5:4a:c0:2a:a6:62:76:8e:5a:40:8c:d1:08: ca:80:30:21:84:a2:01:17:5e:e0:fd:5e:66:f0:d1: 5f:f2:1e:1e:40:8e:e4:1d:d0:02:11:a0:79:88:c4: 11:0d:b0:ad:fd:0c:b6:bf:87:44:0d:ac:c9:03:76: 72:c0:36:c2:01:b5:b6:a3:8a:d3:ab:f5:14:7e:4a: 99:ec:d9:86:e8:fe:fc:66:f0:d3:bc:0e:84:6a:4f: 9d:8b:3b:3c:34:77:9b:7f:8e:b7:e7:46:70:54:de: 59:14:b6:83:e0:22:c7:f7:0c:57:e4:bc:8e:ea:8e: 26:27:b0:cd:9e:b7:9b:fe:d5:39:e0:35:b4:d7:5c: c2:e6:4c:81:eb:63:7b:48:65:af:ac:db:f0:5f:68: d7:b8:81:30:d1:47:55:07:dd:e5:84:53:87:15:1c: 80:07:f0:5f:79:67:f1:5e:99:68:48:13:d6:31:dc: 2f:0f:6f:f2:80:56:a5:3c:1a:14:15:5b:df:51:56: c6:b2:38:5f:be:36:cf:2e:68:05:8e:4b:77:51:fa: 7f:e7:10:27:25:6e:30:b0:02:ae:82:29:a9:70:d5: 70:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:BC:50:79:31:33:D9:06:99:4C:DA:3E:17:A2:09:32:39:70:7B:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cc9c860a-2fad-33be-ab8f-7d288fe43f15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:50:29:4c:a7:aa:b5:b3:f5:07:67:73:07:e0:74:f6:ba:83: 15:7f:61:c4:70:83:43:48:40:15:2c:07:65:d0:19:30:92:7c: f8:58:e2:82:53:20:b3:b4:cd:59:b8:b6:51:cd:6b:39:a4:51: 31:e2:3b:0a:6c:17:5a:ae:db:16:3b:5d:50:d8:be:42:12:7d: 24:41:b5:33:9e:2e:04:50:4d:1b:cf:1a:1e:af:7a:c4:78:bb: e2:75:f1:f4:00:c7:4e:5b:bb:84:45:e1:e0:b9:5e:26:8f:f1: 15:9c:72:a2:14:a6:15:1c:ae:53:88:0b:61:bc:cf:d1:c3:c2: 59:98:e8:21:7f:08:65:88:7b:f5:58:f0:a7:bd:43:01:85:ef: 72:a6:3e:82:47:92:43:dc:41:bd:b3:f4:9f:31:48:df:35:72: ba:2b:67:33:a8:ec:36:87:97:e3:88:e6:43:93:e5:e5:c7:41: 7d:9b:a2:38:d0:da:89:89:ca:65:08:ea:67:9d:39:59:20:82: 7b:d5:73:a9:83:77:30:66:85:05:76:22:20:93:37:c9:2f:8a: dd:9d:22:2d:96:2b:1d:f9:0c:bf:bb:d9:b3:ce:15:d9:b7:56: ad:64:8b:74:ad:fc:99:b0:c2:c0:53:f5:6f:92:3f:96:3d:19: 3c:8a:5e:12 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmHact7ZHLWccwrSUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk YWVhOTJkMmEtNTVlNS00MzdlLWE1YTMtODRhYjA2NGI5ZDRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgivCg8Blu3Sr0NIEA2uudUAQ0r4B8Vv/Da5y BzCikuVKwCqmYnaOWkCM0QjKgDAhhKIBF17g/V5m8NFf8h4eQI7kHdACEaB5iMQR DbCt/Qy2v4dEDazJA3ZywDbCAbW2o4rTq/UUfkqZ7NmG6P78ZvDTvA6Eak+dizs8 NHebf46350ZwVN5ZFLaD4CLH9wxX5LyO6o4mJ7DNnreb/tU54DW011zC5kyB62N7 SGWvrNvwX2jXuIEw0UdVB93lhFOHFRyAB/BfeWfxXploSBPWMdwvD2/ygFalPBoU FVvfUVbGsjhfvjbPLmgFjkt3Ufp/5xAnJW4wsAKugimpcNVw5QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFD+8UHkxM9kGmUzaPheiCTI5cHsqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2M5Yzg2MGEtMmZhZC0z M2JlLWFiOGYtN2QyODhmZTQzZjE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCCUClMp6q1s/UHZ3MH4HT2uoMVf2HEcINDSEAVLAdl0Bkwknz4WOKC UyCztM1ZuLZRzWs5pFEx4jsKbBdartsWO11Q2L5CEn0kQbUzni4EUE0bzxoer3rE eLvidfH0AMdOW7uEReHguV4mj/EVnHKiFKYVHK5TiAthvM/Rw8JZmOghfwhliHv1 WPCnvUMBhe9ypj6CR5JD3EG9s/SfMUjfNXK6K2czqOw2h5fjiOZDk+Xlx0F9m6I4 0NqJicplCOpnnTlZIIJ71XOpg3cwZoUFdiIgkzfJL4rdnSItlisd+Qy/u9mzzhXZ t1atZIt0rfyZsMLAU/Vvkj+WPRk8il4S -----END CERTIFICATE-----Generated at Sat May 10 23:26:55 2025 by rpki-client