$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68f1635e-5871-4108-b726-e99a09258e31/1dc07208-ca23-362a-a20c-22d013df9b70.roa File: 1dc07208-ca23-362a-a20c-22d013df9b70.roa (raw, json) Hash identifier: Dry64xqfdLkSAZ2TTCt05CAQ1heuF6oZEX+HfPfw750= Subject key identifier: E2:75:B2:8B:40:8B:6F:17:37:C5:D8:5B:10:65:1E:82:06:87:CC:77 Certificate issuer: /CN=68f1635e-5871-4108-b726-e99a09258e31 Certificate serial: 010D0C9F43285849B8C33A5A390C90FCB17B2260 Authority key identifier: CD:C5:9F:2D:D8:29:37:AA:4F:82:8E:D4:10:7B:6E:FF:F4:CA:08:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68f1635e-5871-4108-b726-e99a09258e31.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68f1635e-5871-4108-b726-e99a09258e31/1dc07208-ca23-362a-a20c-22d013df9b70.roa Signing time: Fri 02 May 2025 17:15:55 +0000 ROA not before: Fri 02 May 2025 17:15:55 +0000 ROA not after: Thu 31 Jul 2025 17:15:55 +0000 asID: 33510 IP address blocks: 204.126.156.0/24 maxlen: 24 204.126.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68f1635e-5871-4108-b726-e99a09258e31/68f1635e-5871-4108-b726-e99a09258e31.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68f1635e-5871-4108-b726-e99a09258e31/68f1635e-5871-4108-b726-e99a09258e31.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68f1635e-5871-4108-b726-e99a09258e31.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b8:c3:3a:5a:39:0c:90:fc:b1:7b:22:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68f1635e-5871-4108-b726-e99a09258e31 Validity Not Before: May 2 17:15:55 2025 GMT Not After : Jul 31 17:15:55 2025 GMT Subject: CN=cc3c5158-4b79-4d59-9342-994f1eef51ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4c:ad:0d:e2:cd:7c:b7:fc:f2:74:c9:48:2f: 05:da:db:86:80:da:46:23:2c:16:c0:4d:bf:c3:53: a5:25:dc:22:e2:3f:14:94:85:db:96:c4:4a:92:e7: e7:ea:70:32:aa:29:e3:82:17:43:9c:f5:0f:31:f7: 0a:af:34:c7:49:b8:97:8c:b5:57:9a:8c:3a:4e:13: 9a:0e:6f:f4:f9:ed:01:a9:d0:d0:6f:6d:11:6c:91: 1f:3c:50:6b:4e:78:e4:26:df:1b:bb:cc:dc:a6:6d: a0:49:9b:a0:4e:45:df:f7:43:56:2e:c0:65:39:7a: 6d:4c:13:ed:1d:31:97:fc:b3:fd:dd:fd:4f:f1:03: a2:ca:db:f0:60:7b:8a:0c:7f:cb:c2:e2:31:35:68: b5:81:21:43:3f:68:86:30:7c:10:97:fb:98:05:36: 15:31:78:bc:af:b6:ef:35:30:f3:f2:12:6e:0c:38: a1:b1:ed:83:91:6c:c5:ab:a4:ad:e1:05:53:d7:12: 0a:60:5d:e5:e8:bd:9d:fc:30:f0:71:33:05:12:17: 8c:5f:64:1f:90:2a:af:12:04:99:e5:fe:96:fc:c2: eb:0c:81:81:f3:bf:b3:f5:37:b1:34:68:b1:be:c2: c2:15:49:3a:37:3a:af:01:6c:6a:63:e0:de:d5:0a: 7d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:75:B2:8B:40:8B:6F:17:37:C5:D8:5B:10:65:1E:82:06:87:CC:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68f1635e-5871-4108-b726-e99a09258e31/1dc07208-ca23-362a-a20c-22d013df9b70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68f1635e-5871-4108-b726-e99a09258e31/68f1635e-5871-4108-b726-e99a09258e31.crl X509v3 Authority Key Identifier: keyid:CD:C5:9F:2D:D8:29:37:AA:4F:82:8E:D4:10:7B:6E:FF:F4:CA:08:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68f1635e-5871-4108-b726-e99a09258e31.cer sbgp-ipAddrBlock: critical IPv4: 204.126.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:37:32:0a:ef:76:da:99:39:6d:72:e3:73:a9:1d:1b:22:f9: 3f:a2:91:c8:11:c8:3e:72:86:c8:b4:96:ed:86:ac:44:a5:18: f7:c3:da:74:2f:1e:db:2b:c0:1b:b5:22:b1:a8:b4:b7:85:77: 9a:4c:89:9a:5e:cf:24:8a:ec:ef:ff:05:94:1c:9f:f9:94:88: 29:bd:a0:b3:26:32:fe:b7:9b:e8:f3:0e:b9:e0:54:a0:f5:8a: 3b:fc:e5:b5:ff:da:e5:44:b2:85:42:0d:f5:60:76:1a:b8:56: 0a:99:8a:e3:e7:e4:1b:1a:26:a0:69:c8:2c:c7:8f:7b:dd:91: 6d:f0:3e:d8:8a:a7:a0:56:c6:76:23:95:70:cf:50:d7:92:f7: 99:e6:24:a5:23:5d:ee:f5:d6:a5:0b:f9:c4:ad:e2:36:67:25: 53:1a:76:10:76:3c:d5:8c:e5:d3:fc:69:53:e5:bc:4a:d8:c5: b5:6b:e1:69:dd:cc:dc:1f:08:4c:5c:77:f5:b3:43:10:ed:5f: ae:bd:d5:59:68:d0:3c:c4:ba:8d:ff:97:f8:3e:4f:92:83:67: cd:1a:7d:c7:bf:ef:39:c8:a8:67:5d:93:7a:55:11:2e:80:42: 94:5e:44:5c:26:9d:99:ec:3f:9d:ad:7f:2d:e4:f4:10:8f:63: 85:32:fe:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm4wzpaOQyQ/LF7ImAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhmMTYzNWUtNTg3MS00MTA4LWI3MjYtZTk5YTA5MjU4 ZTMxMB4XDTI1MDUwMjE3MTU1NVoXDTI1MDczMTE3MTU1NVowLzEtMCsGA1UEAxMk Y2MzYzUxNTgtNGI3OS00ZDU5LTkzNDItOTk0ZjFlZWY1MWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUytDeLNfLf88nTJSC8F2tuGgNpGIywWwE2/ w1OlJdwi4j8UlIXblsRKkufn6nAyqinjghdDnPUPMfcKrzTHSbiXjLVXmow6ThOa Dm/0+e0BqdDQb20RbJEfPFBrTnjkJt8bu8zcpm2gSZugTkXf90NWLsBlOXptTBPt HTGX/LP93f1P8QOiytvwYHuKDH/LwuIxNWi1gSFDP2iGMHwQl/uYBTYVMXi8r7bv NTDz8hJuDDihse2DkWzFq6St4QVT1xIKYF3l6L2d/DDwcTMFEheMX2QfkCqvEgSZ 5f6W/MLrDIGB87+z9TexNGixvsLCFUk6NzqvAWxqY+De1Qp9NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOJ1sotAi28XN8XYWxBlHoIGh8x3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy82OGYx NjM1ZS01ODcxLTQxMDgtYjcyNi1lOTlhMDkyNThlMzEvMWRjMDcyMDgtY2EyMy0z NjJhLWEyMGMtMjJkMDEzZGY5YjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNjhmMTYzNWUtNTg3MS00MTA4LWI3 MjYtZTk5YTA5MjU4ZTMxLzY4ZjE2MzVlLTU4NzEtNDEwOC1iNzI2LWU5OWEwOTI1 OGUzMS5jcmwwHwYDVR0jBBgwFoAUzcWfLdgpN6pPgo7UEHtu//TKCMwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy82OGYxNjM1ZS01ODcxLTQxMDgtYjcyNi1lOTlh MDkyNThlMzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzH6cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAk3MgrvdtqZOW1y43OpHRsi+T+ikcgRyD5yhsi0lu2GrESlGPfD2nQv HtsrwBu1IrGotLeFd5pMiZpezySK7O//BZQcn/mUiCm9oLMmMv63m+jzDrngVKD1 ijv85bX/2uVEsoVCDfVgdhq4VgqZiuPn5BsaJqBpyCzHj3vdkW3wPtiKp6BWxnYj lXDPUNeS95nmJKUjXe711qUL+cSt4jZnJVMadhB2PNWM5dP8aVPlvErYxbVr4Wnd zNwfCExcd/WzQxDtX6691Vlo0DzEuo3/l/g+T5KDZ80afce/7znIqGddk3pVES6A QpReRFwmnZnsP52tfy3k9BCPY4Uy/qY= -----END CERTIFICATE-----Generated at Tue May 13 06:40:50 2025 by rpki-client