$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6fb6fdda-b540-3b27-8aa8-29bcd9a51e7d.roa File: 6fb6fdda-b540-3b27-8aa8-29bcd9a51e7d.roa (raw, json) Hash identifier: NzKALARgWm7TSPfNMkYeyMjGc3Kti/ks1WRIna4rEhc= Subject key identifier: 45:97:63:2A:1B:D1:50:41:AC:BC:41:9A:57:84:4D:91:99:5A:05:56 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A66C08329BF8A076D3B900F00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6fb6fdda-b540-3b27-8aa8-29bcd9a51e7d.roa Signing time: Fri 04 Jul 2025 01:00:49 +0000 ROA not before: Fri 04 Jul 2025 01:00:49 +0000 ROA not after: Thu 02 Oct 2025 01:00:49 +0000 asID: 396575 IP address blocks: 192.68.126.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:66:c0:83:29:bf:8a:07:6d:3b:90:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 4 01:00:49 2025 GMT Not After : Oct 2 01:00:49 2025 GMT Subject: CN=9ddc87f1-c003-472a-b0b5-5789ab76c6e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8e:5b:6e:e6:3b:93:97:f7:74:0b:32:ff:0d: 28:62:d0:4d:66:cd:ef:08:f8:23:ed:b1:53:36:1a: 84:fb:b9:3b:8d:e1:68:67:ee:6e:32:71:40:26:97: c1:de:ca:50:2b:af:03:98:ea:23:7f:74:7a:ee:d6: 2e:c7:21:86:9e:4c:6a:aa:bc:d5:6b:57:fa:7e:b4: 17:92:cb:50:57:03:22:63:fe:66:13:3c:eb:2e:88: fa:bd:8a:33:85:03:03:4c:e8:80:05:88:a3:f0:68: b0:11:a9:d5:39:23:c4:52:1d:fc:e3:09:bc:f0:d5: b5:01:0c:27:e1:f9:e5:10:55:5c:8c:bc:78:4b:31: 1c:db:cd:f0:8f:32:0d:f2:7b:24:11:d9:d9:3a:b7: 32:d9:85:00:fb:f6:76:a4:dc:7b:2f:53:9f:ec:78: 08:ad:cb:07:ec:16:70:82:81:f2:b7:5c:7f:55:8a: 19:cf:12:d4:f1:7d:88:24:68:8b:38:c2:5c:f1:81: 86:fe:ff:95:a3:81:40:b4:99:c6:18:ed:5a:02:d6: df:4a:f4:09:0f:a7:a9:c5:d0:91:bf:9b:f5:2d:1d: 5d:79:31:36:47:40:34:8d:cc:c2:2d:e6:3b:1e:e8: ff:0b:b8:9d:b9:ea:99:2e:ae:71:4c:99:70:ae:a0: 8d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:97:63:2A:1B:D1:50:41:AC:BC:41:9A:57:84:4D:91:99:5A:05:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6fb6fdda-b540-3b27-8aa8-29bcd9a51e7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:47:f6:a2:3a:6d:bc:9a:5c:71:5e:04:b4:e8:1b:98:04:4b: ec:3a:92:a7:e6:d9:64:3b:6c:b2:1e:d6:e2:1e:0a:68:82:35: 50:74:fd:c6:61:26:6b:54:b4:d9:dc:9d:c8:40:ef:56:8f:74: 5b:e9:b3:7d:30:3e:44:b0:83:aa:73:22:c2:e8:4e:23:79:5c: a8:f2:14:cf:68:75:39:af:b9:65:b6:35:53:ca:f7:fa:19:8d: 1b:7d:a8:3b:02:7a:26:05:4a:29:80:9a:84:6d:41:d6:3f:c9: 0d:b8:32:25:35:5e:0f:92:03:78:2a:9e:d8:cb:75:19:fe:8f: 67:d1:00:09:cb:19:46:b5:23:c1:bd:74:37:69:79:8d:d8:da: 9b:9f:f6:2d:14:cc:f6:7c:5b:5d:c9:0c:9c:1e:e1:04:82:cf: 30:75:aa:6d:7c:ba:3a:1e:85:08:47:f5:74:ab:1d:2e:22:99: b5:c6:e1:cb:04:b8:1b:90:10:91:49:71:af:8e:44:a8:e8:54: d1:de:6a:f2:ab:11:27:f5:a3:82:06:ec:9f:91:df:39:d4:b3: 4e:d3:86:e6:d7:10:4e:33:fd:bc:ab:0b:4e:ed:c2:20:3a:43: 10:c3:39:3e:6e:19:25:33:3e:5c:d1:c3:bb:3e:4b:3b:a0:dd: a5:d1:35:72 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpmwIMpv4oHbTuQDwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcwNDAxMDA0OVoXDTI1MTAwMjAxMDA0OVowLzEtMCsGA1UEAxMk OWRkYzg3ZjEtYzAwMy00NzJhLWIwYjUtNTc4OWFiNzZjNmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtY5bbuY7k5f3dAsy/w0oYtBNZs3vCPgj7bFT NhqE+7k7jeFoZ+5uMnFAJpfB3spQK68DmOojf3R67tYuxyGGnkxqqrzVa1f6frQX kstQVwMiY/5mEzzrLoj6vYozhQMDTOiABYij8GiwEanVOSPEUh384wm88NW1AQwn 4fnlEFVcjLx4SzEc283wjzIN8nskEdnZOrcy2YUA+/Z2pNx7L1Of7HgIrcsH7BZw goHyt1x/VYoZzxLU8X2IJGiLOMJc8YGG/v+Vo4FAtJnGGO1aAtbfSvQJD6epxdCR v5v1LR1deTE2R0A0jczCLeY7Huj/C7idueqZLq5xTJlwrqCNRQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEWXYyob0VBBrLxBmleETZGZWgVWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNmZiNmZkZGEtYjU0MC0z YjI3LThhYTgtMjliY2Q5YTUxZTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAQR/aiOm28mlxxXgS06BuYBEvsOpKn5tlkO2yyHtbiHgpogjVQdP3G YSZrVLTZ3J3IQO9Wj3Rb6bN9MD5EsIOqcyLC6E4jeVyo8hTPaHU5r7lltjVTyvf6 GY0bfag7AnomBUopgJqEbUHWP8kNuDIlNV4PkgN4Kp7Yy3UZ/o9n0QAJyxlGtSPB vXQ3aXmN2Nqbn/YtFMz2fFtdyQycHuEEgs8wdaptfLo6HoUIR/V0qx0uIpm1xuHL BLgbkBCRSXGvjkSo6FTR3mryqxEn9aOCBuyfkd851LNO04bm1xBOM/28qwtO7cIg OkMQwzk+bhklMz5c0cO7Pks7oN2l0TVy -----END CERTIFICATE-----Generated at Wed Jul 23 17:11:35 2025 by rpki-client