$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d5b02db3-c2c1-3309-95ed-6ded1eb49942.roa File: d5b02db3-c2c1-3309-95ed-6ded1eb49942.roa (raw, json) Hash identifier: RCKxHYqUClMdmY/urPLiyRkiyFe5TFgeWJfayEZSxhI= Subject key identifier: 72:F2:D7:B0:2B:40:00:17:E2:3E:8C:36:D7:F5:D4:1F:2B:E1:31:63 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849AFDB82E2C2B056194439BC00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d5b02db3-c2c1-3309-95ed-6ded1eb49942.roa Signing time: Tue 29 Apr 2025 12:42:34 +0000 ROA not before: Tue 29 Apr 2025 12:42:34 +0000 ROA not after: Mon 28 Jul 2025 12:42:34 +0000 asID: 396572 IP address blocks: 192.68.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:af:db:82:e2:c2:b0:56:19:44:39:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 29 12:42:34 2025 GMT Not After : Jul 28 12:42:34 2025 GMT Subject: CN=3ffd59b6-afef-4850-989f-59d65041c621 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:bd:49:90:32:da:12:7b:c0:4c:84:41:43:57: 79:d7:63:00:2e:f9:1c:a3:68:14:ff:6c:d5:b7:f1: a1:4f:80:05:ec:b4:a7:cf:06:48:c9:70:70:0a:1a: 0e:61:82:14:38:b7:e9:d9:5e:0a:04:21:8f:1a:65: 30:e6:64:9f:d5:0b:01:4a:9d:fa:92:36:47:f0:a9: f2:1d:b1:95:14:0f:50:eb:fa:2d:e6:08:4d:42:f2: ea:4e:2d:57:a9:f3:a0:23:7e:9d:05:b2:9e:3b:76: 34:d4:c3:96:d5:a9:cc:69:33:3f:65:9e:be:d8:91: 19:2d:59:f7:93:bb:12:06:3c:44:60:71:0c:ca:6d: 65:b2:7d:f6:b4:2f:87:01:70:0c:33:a8:7b:07:2b: 4d:61:d8:ac:e1:58:dd:f5:11:73:e4:b7:08:6d:92: f3:e6:e3:3f:ca:d1:32:01:9f:e1:0d:e1:cb:5c:58: 17:bc:f7:45:6b:40:ee:cd:6f:26:86:65:67:52:79: 95:5f:f5:99:1d:81:4c:a6:74:5a:4f:9c:77:00:de: 73:6e:fd:bf:8e:49:39:22:df:6c:f5:33:3c:d8:0f: 26:ec:44:ed:0b:21:b3:33:ba:c0:02:ef:6d:73:bc: 33:8d:f8:c2:db:ec:90:e4:16:a3:6d:03:80:ae:37: 5e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:F2:D7:B0:2B:40:00:17:E2:3E:8C:36:D7:F5:D4:1F:2B:E1:31:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d5b02db3-c2c1-3309-95ed-6ded1eb49942.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:e3:06:51:e9:45:46:3b:0c:f6:27:84:7c:5a:86:20:43:26: 6a:e2:da:a4:30:db:63:a9:63:57:34:c1:6d:62:1b:2c:37:ac: fa:63:04:2d:b4:84:75:22:8f:8e:9c:b2:f8:64:7f:2e:f2:90: 22:1d:8d:67:92:47:06:35:b5:5d:4d:9c:90:66:f1:bd:a1:46: 84:15:75:f8:2f:94:aa:82:4e:d4:f6:f8:5e:e4:ee:b2:0e:58: 9e:69:17:53:c7:38:f1:0b:c3:63:a1:b5:79:c8:f3:a9:34:14: 44:da:0d:8b:c6:9b:0f:bf:c5:2a:00:ba:bc:df:c7:ec:f0:3c: 63:44:b2:f7:77:60:4c:da:86:55:8a:80:bb:b6:a3:8f:97:2a: 67:02:11:94:8b:72:e8:35:14:af:37:4b:ea:a9:42:e0:81:1e: 6b:7c:b1:f5:cd:11:33:6f:b2:86:f3:2b:a7:81:50:e8:95:09: 2f:2a:c4:d8:c4:ab:08:1b:b4:ea:5b:36:66:5e:42:fc:05:d4: 84:21:af:ad:3f:bd:f6:91:f4:6f:73:c3:9a:a8:07:e9:62:23: 54:d6:ca:84:59:b7:94:2d:8d:27:cb:ad:09:33:bc:0a:f3:42: 63:47:83:7e:59:9f:9e:43:71:c9:0e:c5:ae:b6:58:d7:43:24: 30:0b:2e:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmv24LiwrBWGUQ5vAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQyOTEyNDIzNFoXDTI1MDcyODEyNDIzNFowLzEtMCsGA1UEAxMk M2ZmZDU5YjYtYWZlZi00ODUwLTk4OWYtNTlkNjUwNDFjNjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwL1JkDLaEnvATIRBQ1d512MALvkco2gU/2zV t/GhT4AF7LSnzwZIyXBwChoOYYIUOLfp2V4KBCGPGmUw5mSf1QsBSp36kjZH8Kny HbGVFA9Q6/ot5ghNQvLqTi1XqfOgI36dBbKeO3Y01MOW1anMaTM/ZZ6+2JEZLVn3 k7sSBjxEYHEMym1lsn32tC+HAXAMM6h7BytNYdis4Vjd9RFz5LcIbZLz5uM/ytEy AZ/hDeHLXFgXvPdFa0DuzW8mhmVnUnmVX/WZHYFMpnRaT5x3AN5zbv2/jkk5It9s 9TM82A8m7ETtCyGzM7rAAu9tc7wzjfjC2+yQ5BajbQOArjdemwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHLy17ArQAAX4j6MNtf11B8r4TFjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDViMDJkYjMtYzJjMS0z MzA5LTk1ZWQtNmRlZDFlYjQ5OTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwER+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADPjBlHpRUY7DPYnhHxahiBDJmri2qQw22OpY1c0wW1iGyw3rPpjBC20 hHUij46csvhkfy7ykCIdjWeSRwY1tV1NnJBm8b2hRoQVdfgvlKqCTtT2+F7k7rIO WJ5pF1PHOPELw2OhtXnI86k0FETaDYvGmw+/xSoAurzfx+zwPGNEsvd3YEzahlWK gLu2o4+XKmcCEZSLcug1FK83S+qpQuCBHmt8sfXNETNvsobzK6eBUOiVCS8qxNjE qwgbtOpbNmZeQvwF1IQhr60/vfaR9G9zw5qoB+liI1TWyoRZt5QtjSfLrQkzvArz QmNHg35Zn55DcckOxa62WNdDJDALLng= -----END CERTIFICATE-----Generated at Sun May 11 12:24:52 2025 by rpki-client