$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/29c20774-0704-3daa-967f-59cba395221f.roa File: 29c20774-0704-3daa-967f-59cba395221f.roa (raw, json) Hash identifier: 3oCL2sIFO7h5erqRzF6iyb0uC+rEwwgOmHLqOXQ8j+U= Subject key identifier: 13:1D:39:DF:AC:64:C9:F9:A5:2F:8B:9C:7D:0E:7B:5B:F0:04:46:70 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A66C081CB90296F6CA622A400 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/29c20774-0704-3daa-967f-59cba395221f.roa Signing time: Fri 04 Jul 2025 01:00:49 +0000 ROA not before: Fri 04 Jul 2025 01:00:49 +0000 ROA not after: Thu 02 Oct 2025 01:00:49 +0000 asID: 36618 IP address blocks: 192.68.126.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:66:c0:81:cb:90:29:6f:6c:a6:22:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 4 01:00:49 2025 GMT Not After : Oct 2 01:00:49 2025 GMT Subject: CN=2d7a45f4-2f61-46a6-b611-690a710ef851 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ea:77:e7:4c:e2:f0:32:75:b2:e4:01:0b:2b: 39:01:18:4a:3a:ee:ee:86:b3:35:0b:4b:5f:51:ee: 83:1a:8d:25:33:64:f3:2b:5c:25:51:aa:62:be:d3: c7:97:b2:63:5f:1a:38:85:28:de:21:6d:b4:c9:3c: f8:c3:84:60:63:44:c6:6c:71:fc:3a:9e:5a:d4:97: 3a:fc:40:72:f0:44:20:8c:d0:06:f5:fb:6c:1b:a3: f7:29:3d:b9:2e:61:e5:54:aa:90:05:ca:ef:fe:61: ed:e8:e5:4d:c1:da:3e:35:f4:42:0b:e5:79:64:ab: 57:2d:e7:02:d0:b1:3f:c9:10:df:b2:8a:ae:3e:43: 7e:fe:70:d2:89:55:93:32:21:05:74:54:ce:75:2b: 74:64:7e:c3:dc:65:f4:da:44:a8:65:e4:84:85:56: de:7f:34:96:fa:8e:e7:68:0d:34:6c:e0:24:5e:23: 15:e0:8b:d0:9a:28:6a:70:f6:8f:49:2b:0f:01:cd: d9:88:d4:a7:ec:b8:68:84:6a:3b:cc:37:66:7c:b7: 30:44:a1:19:8a:bd:10:aa:11:ed:f1:03:15:b2:17: 56:fb:db:b3:11:9b:a8:08:4f:cb:64:90:c3:81:c8: fc:5f:5e:1d:e4:46:9a:07:37:b2:fe:25:ce:42:a0: bf:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:1D:39:DF:AC:64:C9:F9:A5:2F:8B:9C:7D:0E:7B:5B:F0:04:46:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/29c20774-0704-3daa-967f-59cba395221f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:29:73:87:c6:83:f7:9f:0c:5e:ea:77:5c:85:4f:e9:d3:ee: 30:74:51:3a:53:8e:80:3c:ea:8c:18:b5:85:f9:d6:9c:4a:5c: 71:a7:96:b1:e4:ef:fc:2e:f9:b7:5a:e7:01:85:1e:88:04:0b: 5a:f0:0d:f4:3b:53:7f:f2:aa:7c:1a:f3:fb:3a:3b:c6:92:b5: 70:de:df:d9:5c:71:d1:12:92:03:98:9a:ae:b2:18:bb:ce:6d: c2:61:fd:6d:d2:5d:df:95:59:ea:60:3f:65:14:87:5c:31:98: 73:67:61:f2:03:42:35:41:2b:f2:f7:d9:07:7c:71:95:14:08: 59:fe:e2:9a:6b:a5:5b:50:06:0f:f0:52:0d:e9:e0:7a:c5:19: 2b:d4:d6:86:8d:19:43:51:bc:c1:1c:f1:33:dd:5c:5a:fe:01: f5:15:ea:ba:b1:98:a5:f4:47:21:b5:83:53:21:c3:e9:a3:5e: 20:3a:73:04:ff:b6:d8:3f:ae:22:d7:97:3e:71:ae:ab:39:e2: e7:af:b3:b2:72:74:8a:38:48:8f:e9:cf:48:bb:d5:4c:d4:84: 99:f5:8f:4b:50:87:40:5b:67:19:f7:11:45:41:eb:1f:df:c4: a0:eb:63:75:71:f7:7d:a6:4d:5d:db:8b:e6:0d:92:d4:14:a4: c5:15:68:e2 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpmwIHLkClvbKYipAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcwNDAxMDA0OVoXDTI1MTAwMjAxMDA0OVowLzEtMCsGA1UEAxMk MmQ3YTQ1ZjQtMmY2MS00NmE2LWI2MTEtNjkwYTcxMGVmODUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+p350zi8DJ1suQBCys5ARhKOu7uhrM1C0tf Ue6DGo0lM2TzK1wlUapivtPHl7JjXxo4hSjeIW20yTz4w4RgY0TGbHH8Op5a1Jc6 /EBy8EQgjNAG9ftsG6P3KT25LmHlVKqQBcrv/mHt6OVNwdo+NfRCC+V5ZKtXLecC 0LE/yRDfsoquPkN+/nDSiVWTMiEFdFTOdSt0ZH7D3GX02kSoZeSEhVbefzSW+o7n aA00bOAkXiMV4IvQmihqcPaPSSsPAc3ZiNSn7LhohGo7zDdmfLcwRKEZir0QqhHt 8QMVshdW+9uzEZuoCE/LZJDDgcj8X14d5EaaBzey/iXOQqC/ZQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBMdOd+sZMn5pS+LnH0Oe1vwBEZwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjljMjA3NzQtMDcwNC0z ZGFhLTk2N2YtNTljYmEzOTUyMjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCOKXOHxoP3nwxe6ndchU/p0+4wdFE6U46APOqMGLWF+dacSlxxp5ax 5O/8Lvm3WucBhR6IBAta8A30O1N/8qp8GvP7OjvGkrVw3t/ZXHHREpIDmJqushi7 zm3CYf1t0l3flVnqYD9lFIdcMZhzZ2HyA0I1QSvy99kHfHGVFAhZ/uKaa6VbUAYP 8FIN6eB6xRkr1NaGjRlDUbzBHPEz3Vxa/gH1Feq6sZil9EchtYNTIcPpo14gOnME /7bYP64i15c+ca6rOeLnr7OycnSKOEiP6c9Iu9VM1ISZ9Y9LUIdAW2cZ9xFFQesf 38Sg62N1cfd9pk1d24vmDZLUFKTFFWji -----END CERTIFICATE-----Generated at Wed Jul 23 23:57:04 2025 by rpki-client