$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6cd71fd7-f9ce-371f-a1fb-5bfbfd26e896.roa File: 6cd71fd7-f9ce-371f-a1fb-5bfbfd26e896.roa (raw, json) Hash identifier: 9Sqs1fBuNODDlsDth2zBuREZBkQM0xc0EIiC4PqbePk= Subject key identifier: 58:61:6E:8F:94:56:C6:12:12:EF:45:30:34:34:EB:55:E7:55:D9:8B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A66C080C0D7670869CB02CB00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6cd71fd7-f9ce-371f-a1fb-5bfbfd26e896.roa Signing time: Fri 04 Jul 2025 01:00:49 +0000 ROA not before: Fri 04 Jul 2025 01:00:49 +0000 ROA not after: Thu 02 Oct 2025 01:00:49 +0000 asID: 397206 IP address blocks: 192.68.126.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:66:c0:80:c0:d7:67:08:69:cb:02:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 4 01:00:49 2025 GMT Not After : Oct 2 01:00:49 2025 GMT Subject: CN=2b40039c-81d0-4b2a-924e-c2b2a75ae6aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:3a:8d:38:d9:e1:21:40:9d:88:c0:53:43:69: be:e2:c8:c0:e2:8a:01:c2:ea:24:24:1a:9c:a6:ec: d1:f5:4a:ac:51:9e:5b:1d:e4:9f:e7:8c:bb:3c:d7: f7:72:1e:9c:9a:f9:fc:1e:5e:9e:bd:10:e1:6a:9a: 7d:35:e0:38:b0:28:ef:3c:fc:bb:fb:45:bc:66:f9: 31:8c:51:09:29:53:4e:34:85:15:e2:5c:29:12:99: 83:2d:19:70:89:f8:3f:36:f0:01:6b:50:ab:21:75: 07:cc:9b:8c:08:2e:6b:8a:a6:fe:0b:41:ff:6c:89: e4:d6:40:41:b6:8c:40:12:2c:3f:50:f5:bc:13:98: 9c:45:ca:16:c3:2c:02:d3:8c:30:db:4e:da:c5:3e: bb:62:51:91:0f:69:55:49:6c:f1:d8:dd:c3:69:04: f9:9a:50:7c:1f:2b:70:13:57:17:10:39:3c:2c:9f: 6c:0e:96:f5:c9:9a:4a:da:e5:b4:52:4e:fd:c7:5c: bd:62:99:08:d2:6b:47:c3:c4:f4:a8:f2:2e:14:43: 07:d8:8c:83:d3:ad:10:b4:72:4c:c5:57:62:18:f2: e6:a6:e6:b0:8c:4c:f4:7d:8f:3b:f5:04:f1:b4:50: e0:e9:9f:ca:57:b9:8e:8a:b7:ab:01:40:9d:b4:ea: 84:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:61:6E:8F:94:56:C6:12:12:EF:45:30:34:34:EB:55:E7:55:D9:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6cd71fd7-f9ce-371f-a1fb-5bfbfd26e896.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:4c:59:6a:8c:cb:37:0e:69:1b:0a:0b:c7:b1:a8:7f:8e:3e: e0:1b:8e:bb:02:7d:be:a1:d4:ae:55:87:ee:bf:37:02:6a:93: 9d:56:e2:53:93:74:0a:0b:b7:20:6f:d4:f2:25:58:0f:14:42: 21:45:ed:3a:25:5a:28:a8:40:00:b8:96:a7:e4:9b:da:d0:f0: a7:f5:be:1f:c3:43:ac:23:7e:96:db:b8:d4:5d:04:03:a2:82: 99:65:61:cf:93:af:3f:97:7d:2b:00:51:47:c4:20:eb:15:b1: 6e:9f:4e:d0:fd:34:af:98:06:27:5d:b8:b5:6c:37:4b:b3:af: c6:db:93:f2:46:b1:9b:67:7e:2b:7a:99:69:fc:7a:00:a3:3a: 72:9e:79:1d:22:98:00:10:71:cc:99:27:51:55:8c:be:80:7a: 75:b2:01:52:3e:4e:1b:19:14:34:49:4a:7e:dc:20:09:f1:bd: 39:a0:e5:6f:de:06:b1:1b:8d:1d:a0:b7:ff:d6:fa:c1:04:10: 15:72:86:40:d8:b9:5a:98:af:5d:db:c7:b3:3e:d3:21:15:b2: df:3e:f4:6d:41:6d:46:f5:41:94:63:8c:ef:f8:07:a9:ea:d2: a6:61:49:e9:fe:f4:82:8e:af:89:08:3f:8f:8a:86:40:0f:bf: 93:e7:6a:dc -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpmwIDA12cIacsCywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcwNDAxMDA0OVoXDTI1MTAwMjAxMDA0OVowLzEtMCsGA1UEAxMk MmI0MDAzOWMtODFkMC00YjJhLTkyNGUtYzJiMmE3NWFlNmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljqNONnhIUCdiMBTQ2m+4sjA4ooBwuokJBqc puzR9UqsUZ5bHeSf54y7PNf3ch6cmvn8Hl6evRDhapp9NeA4sCjvPPy7+0W8Zvkx jFEJKVNONIUV4lwpEpmDLRlwifg/NvABa1CrIXUHzJuMCC5riqb+C0H/bInk1kBB toxAEiw/UPW8E5icRcoWwywC04ww207axT67YlGRD2lVSWzx2N3DaQT5mlB8Hytw E1cXEDk8LJ9sDpb1yZpK2uW0Uk79x1y9YpkI0mtHw8T0qPIuFEMH2IyD060QtHJM xVdiGPLmpuawjEz0fY879QTxtFDg6Z/KV7mOirerAUCdtOqE1wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFhhbo+UVsYSEu9FMDQ061XnVdmLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNmNkNzFmZDctZjljZS0z NzFmLWExZmItNWJmYmZkMjZlODk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCaTFlqjMs3DmkbCgvHsah/jj7gG467An2+odSuVYfuvzcCapOdVuJT k3QKC7cgb9TyJVgPFEIhRe06JVooqEAAuJan5Jva0PCn9b4fw0OsI36W27jUXQQD ooKZZWHPk68/l30rAFFHxCDrFbFun07Q/TSvmAYnXbi1bDdLs6/G25PyRrGbZ34r eplp/HoAozpynnkdIpgAEHHMmSdRVYy+gHp1sgFSPk4bGRQ0SUp+3CAJ8b05oOVv 3gaxG40doLf/1vrBBBAVcoZA2LlamK9d28ezPtMhFbLfPvRtQW1G9UGUY4zv+Aep 6tKmYUnp/vSCjq+JCD+PioZAD7+T52rc -----END CERTIFICATE-----Generated at Wed Jul 23 17:09:53 2025 by rpki-client