$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dc8c7224-4a3a-3e19-af68-a38dab62cac5.roa File: dc8c7224-4a3a-3e19-af68-a38dab62cac5.roa (raw, json) Hash identifier: 45gwH0kgbGLJLlEw7+tWXTlnQ6zc607TbcaxlghYINg= Subject key identifier: CA:ED:9D:F5:07:AC:87:F6:B8:1E:C8:E1:15:9B:6D:80:09:B7:87:1F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849AFDB8302BF24D3B229D4A580 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dc8c7224-4a3a-3e19-af68-a38dab62cac5.roa Signing time: Tue 29 Apr 2025 12:42:34 +0000 ROA not before: Tue 29 Apr 2025 12:42:34 +0000 ROA not after: Mon 28 Jul 2025 12:42:34 +0000 asID: 396615 IP address blocks: 192.68.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:af:db:83:02:bf:24:d3:b2:29:d4:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 29 12:42:34 2025 GMT Not After : Jul 28 12:42:34 2025 GMT Subject: CN=bb7010b0-d28c-4741-a805-62bdb1e35137 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7f:a1:f3:2d:cd:ff:a4:7b:e7:c1:e5:d2:98: 6b:ff:6b:07:fa:32:be:a6:5c:f9:31:5e:b0:fb:5d: 2a:c5:91:f3:3c:e6:ac:81:03:2e:d6:b6:30:15:d3: e5:63:50:9b:ca:c2:03:65:58:5e:42:9c:0c:2c:de: 8b:49:4e:4d:77:bf:11:75:2a:15:ca:46:9c:a9:4c: ea:5c:4a:1c:cf:5c:db:ca:9d:7f:f4:d3:0c:6f:03: 83:7c:e1:ca:87:dc:88:73:a1:60:ab:02:a4:46:4f: 5c:0f:7c:ed:fd:cd:7e:a6:2c:e6:08:74:b5:43:11: fb:44:8d:59:5a:22:11:70:82:d2:40:30:d3:22:e0: 97:43:5e:6e:4c:5c:e5:66:00:d0:5b:03:cf:2d:16: 6c:af:4d:dc:cd:90:f0:74:9f:21:7f:5e:c9:0f:fd: e6:9f:cf:34:87:0e:05:9a:da:6c:9b:3e:e2:8b:ec: 9c:bf:3f:d3:2e:4f:11:9c:6b:27:a1:59:39:7a:b3: f4:e0:3f:a6:06:96:b7:7e:75:2c:4b:95:41:32:92: 0f:ea:ad:67:d3:c6:ce:bb:04:1f:ae:d4:73:2f:a9: b2:e9:95:4a:fc:e8:24:64:02:d9:a9:d4:c7:44:19: 0c:11:2a:47:24:02:ba:23:7f:2b:9f:dc:01:da:78: 7e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:ED:9D:F5:07:AC:87:F6:B8:1E:C8:E1:15:9B:6D:80:09:B7:87:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dc8c7224-4a3a-3e19-af68-a38dab62cac5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:2b:33:52:e5:e8:38:fb:00:a4:1d:7f:2d:1f:bc:af:7d:47: ae:b2:08:81:5f:e7:82:0e:39:c2:42:a8:6f:2c:d6:26:f4:f0: 5d:ac:c0:0e:1a:43:f9:82:29:9f:f7:53:15:bb:08:13:88:1f: c0:03:3b:62:a1:74:1e:f8:5d:68:82:81:b0:a8:6d:4b:e4:08: 68:10:93:06:10:f5:a7:8f:fc:dc:ca:19:60:f0:04:ad:1a:f0: 53:97:cf:52:78:c8:3b:c5:a0:60:ec:54:4e:ec:d6:e5:f6:9d: aa:24:4e:8b:8a:47:8a:11:a9:3a:b8:a2:59:fd:a3:09:82:65: 5d:1f:a5:01:46:57:8c:a2:e0:9d:0d:1f:fd:18:d7:1f:1c:09: 93:a1:43:f1:9d:f5:8d:a7:7f:42:65:ea:ed:96:06:92:4e:48: 81:5a:2d:48:62:e1:60:eb:62:94:9f:fa:b8:4c:c7:63:3b:e4: af:79:90:54:36:63:32:a6:d3:01:81:53:e5:90:78:16:de:68: b4:ef:57:af:eb:49:3b:03:ac:82:6a:0c:9f:5e:e6:7f:89:5e: b5:86:22:50:0d:44:e2:85:b5:81:b0:78:f3:f3:a7:94:19:22: 46:be:c3:b9:5e:a0:70:63:71:0e:5c:74:8a:3e:06:20:7b:7e: 1a:09:a2:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmv24MCvyTTsinUpYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQyOTEyNDIzNFoXDTI1MDcyODEyNDIzNFowLzEtMCsGA1UEAxMk YmI3MDEwYjAtZDI4Yy00NzQxLWE4MDUtNjJiZGIxZTM1MTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtX+h8y3N/6R758Hl0phr/2sH+jK+plz5MV6w +10qxZHzPOasgQMu1rYwFdPlY1CbysIDZVheQpwMLN6LSU5Nd78RdSoVykacqUzq XEocz1zbyp1/9NMMbwODfOHKh9yIc6FgqwKkRk9cD3zt/c1+pizmCHS1QxH7RI1Z WiIRcILSQDDTIuCXQ15uTFzlZgDQWwPPLRZsr03czZDwdJ8hf17JD/3mn880hw4F mtpsmz7ii+ycvz/TLk8RnGsnoVk5erP04D+mBpa3fnUsS5VBMpIP6q1n08bOuwQf rtRzL6my6ZVK/OgkZALZqdTHRBkMESpHJAK6I38rn9wB2nh+LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMrtnfUHrIf2uB7I4RWbbYAJt4cfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGM4YzcyMjQtNGEzYS0z ZTE5LWFmNjgtYTM4ZGFiNjJjYWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwER+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACsrM1Ll6Dj7AKQdfy0fvK99R66yCIFf54IOOcJCqG8s1ib08F2swA4a Q/mCKZ/3UxW7CBOIH8ADO2KhdB74XWiCgbCobUvkCGgQkwYQ9aeP/NzKGWDwBK0a 8FOXz1J4yDvFoGDsVE7s1uX2naokTouKR4oRqTq4oln9owmCZV0fpQFGV4yi4J0N H/0Y1x8cCZOhQ/Gd9Y2nf0Jl6u2WBpJOSIFaLUhi4WDrYpSf+rhMx2M75K95kFQ2 YzKm0wGBU+WQeBbeaLTvV6/rSTsDrIJqDJ9e5n+JXrWGIlANROKFtYGwePPzp5QZ Ika+w7leoHBjcQ5cdIo+BiB7fhoJohA= -----END CERTIFICATE-----Generated at Sat May 10 23:22:31 2025 by rpki-client