$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f63c419f-416c-3d2a-a678-76594a3beea2.roa File: f63c419f-416c-3d2a-a678-76594a3beea2.roa (raw, json) Hash identifier: ttLNcG3gjNC6A0TNn034afPUVTltTCU3ojT4YCHYJZ4= Subject key identifier: 78:06:B2:35:5C:54:94:3A:70:A6:5D:55:2F:B9:6D:58:AD:76:B7:81 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858498769C5DDBAAF58729129E0C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f63c419f-416c-3d2a-a678-76594a3beea2.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 396571 IP address blocks: 192.68.126.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:c5:dd:ba:af:58:72:91:29:e0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=bfca59de-11d5-4301-ac37-9ba03ed28977 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:cf:7c:c8:f3:dc:84:43:c1:6a:9d:41:bc:1c: 5e:01:e6:86:26:4e:5a:59:8b:ea:51:1a:6f:8a:9c: 26:d0:3f:18:1e:0b:fc:71:b7:a5:d5:55:44:98:28: ac:e9:26:be:cb:91:cb:30:c8:ee:b4:df:8c:d3:1f: 04:1f:0e:d6:33:3c:90:9c:12:4d:b2:74:aa:d5:4c: 30:8e:e4:ff:30:94:44:1c:d5:32:a7:4a:98:64:39: d2:13:42:5f:c7:1a:9a:56:89:66:65:22:79:9d:d7: 37:da:f1:2b:ae:65:47:c3:c7:8b:bf:3a:31:5a:c2: c1:67:6b:35:ed:65:19:16:0e:4c:3f:a8:15:bf:ae: 88:b2:4f:70:ad:9b:64:7d:f7:90:58:73:8a:8e:30: d4:a2:df:19:15:c1:dd:d4:e5:31:5b:85:d3:27:60: 68:85:45:af:da:98:c2:76:4e:d5:f7:d0:3e:b6:bc: 68:f7:c1:41:6a:87:70:68:ad:af:98:a6:37:09:68: 52:29:a6:51:b3:3f:b8:e2:2e:1e:a4:65:7e:fc:66: 6e:9c:3a:7f:e4:5f:a5:26:2a:fd:dc:f2:65:2a:ff: 0a:05:bb:de:86:6e:dc:0e:8e:3d:62:db:cc:e4:87: 02:12:93:88:f7:f0:ac:5b:30:f2:0f:9c:92:9c:f5: c7:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:06:B2:35:5C:54:94:3A:70:A6:5D:55:2F:B9:6D:58:AD:76:B7:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f63c419f-416c-3d2a-a678-76594a3beea2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:3f:17:f4:ac:61:f0:5e:09:9b:b0:52:26:58:81:99:7d:fd: ed:f1:29:d4:66:49:df:69:eb:99:31:13:12:87:7f:8f:f0:2e: e4:40:8a:35:63:ea:4d:14:55:db:5c:e3:a1:2b:2d:03:6c:f3: 58:f3:95:d8:17:e4:be:d5:8e:66:bd:da:48:c0:89:6d:3f:1a: 29:d3:60:3c:ca:29:1b:c0:d5:5a:15:b3:fb:ef:a8:db:31:b0: 14:7f:b7:eb:b3:36:ba:72:d3:3e:d4:1c:44:a6:cd:33:f4:9b: e0:68:ef:30:81:50:ea:97:27:7d:39:52:31:6d:ec:c5:33:46: 78:8f:e2:bb:b1:3c:2e:13:e4:ee:bc:1b:e6:3c:40:3a:e4:db: 9a:5e:76:0f:07:8b:b8:e5:40:7c:ce:4a:41:21:50:1f:66:cc: e6:5c:3d:79:f0:c0:09:37:7f:fd:02:a7:4c:7a:5d:92:9e:ad: 5d:b9:0c:76:c0:1e:be:33:b8:61:a3:46:0b:a3:1f:29:2c:d3: 17:a4:52:ee:4c:8c:7b:b7:da:54:1e:59:9c:7c:98:7a:ca:cd: a7:65:ce:37:01:da:13:cf:62:b9:9a:fb:27:49:b9:d7:72:cd: 3e:09:62:4a:c9:27:53:c2:c1:ec:f5:d9:c3:5b:8c:e4:06:b8: b0:c7:ea:3b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmHacXduq9YcpEp4MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk YmZjYTU5ZGUtMTFkNS00MzAxLWFjMzctOWJhMDNlZDI4OTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAws98yPPchEPBap1BvBxeAeaGJk5aWYvqURpv ipwm0D8YHgv8cbel1VVEmCis6Sa+y5HLMMjutN+M0x8EHw7WMzyQnBJNsnSq1Uww juT/MJREHNUyp0qYZDnSE0JfxxqaVolmZSJ5ndc32vErrmVHw8eLvzoxWsLBZ2s1 7WUZFg5MP6gVv66Isk9wrZtkffeQWHOKjjDUot8ZFcHd1OUxW4XTJ2BohUWv2pjC dk7V99A+trxo98FBaodwaK2vmKY3CWhSKaZRsz+44i4epGV+/GZunDp/5F+lJir9 3PJlKv8KBbvehm7cDo49YtvM5IcCEpOI9/CsWzDyD5ySnPXHxwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHgGsjVcVJQ6cKZdVS+5bVitdreBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjYzYzQxOWYtNDE2Yy0z ZDJhLWE2NzgtNzY1OTRhM2JlZWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCiPxf0rGHwXgmbsFImWIGZff3t8SnUZknfaeuZMRMSh3+P8C7kQIo1 Y+pNFFXbXOOhKy0DbPNY85XYF+S+1Y5mvdpIwIltPxop02A8yikbwNVaFbP776jb MbAUf7frsza6ctM+1BxEps0z9JvgaO8wgVDqlyd9OVIxbezFM0Z4j+K7sTwuE+Tu vBvmPEA65NuaXnYPB4u45UB8zkpBIVAfZszmXD158MAJN3/9AqdMel2Snq1duQx2 wB6+M7hho0YLox8pLNMXpFLuTIx7t9pUHlmcfJh6ys2nZc43AdoTz2K5mvsnSbnX cs0+CWJKySdTwsHs9dnDW4zkBriwx+o7 -----END CERTIFICATE-----Generated at Sun May 11 08:46:45 2025 by rpki-client