$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86602a7a-684d-38a0-82cf-28a53840329e.roa File: 86602a7a-684d-38a0-82cf-28a53840329e.roa (raw, json) Hash identifier: yQ0TKneQKGMx0270dfFMe5acvRAtSkvqTawX0B/a4UY= Subject key identifier: 9D:5D:6E:37:26:1D:C0:45:80:D8:3F:E4:C8:81:6F:F3:5C:49:11:56 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A66C07EE3CF790ED005706A00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86602a7a-684d-38a0-82cf-28a53840329e.roa Signing time: Fri 04 Jul 2025 01:00:49 +0000 ROA not before: Fri 04 Jul 2025 01:00:49 +0000 ROA not after: Thu 02 Oct 2025 01:00:49 +0000 asID: 396595 IP address blocks: 192.68.126.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:66:c0:7e:e3:cf:79:0e:d0:05:70:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 4 01:00:49 2025 GMT Not After : Oct 2 01:00:49 2025 GMT Subject: CN=ef7dcdc1-58e6-41e1-a3f5-1452682d66a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:16:19:59:52:4b:d6:54:25:9e:35:a3:40:9d: 93:62:cf:eb:ea:6e:6c:c0:3e:ae:61:99:57:f4:0f: 68:b8:5d:3f:26:9f:75:27:25:13:9e:9e:a5:46:20: d2:3c:d5:d5:ea:5e:8e:15:62:86:f4:f8:fe:0b:93: a9:ba:3d:da:90:17:db:4a:50:75:3f:92:26:6d:ea: 2f:70:91:2b:a5:f5:1d:c8:37:81:17:a7:5c:1b:c9: 33:1c:6a:6b:54:fd:80:3a:19:9a:6c:a5:5f:cc:fa: 08:7b:f6:89:4b:20:30:b5:54:6c:a1:4e:0d:94:6e: c2:13:c5:2f:ee:93:8e:60:c6:be:fb:7f:7f:60:72: 82:75:82:e8:2f:95:9e:df:da:0a:4e:34:71:82:d7: 11:40:6a:eb:91:7a:32:8f:d3:d0:d5:55:bd:58:75: 66:ab:c1:af:b5:88:b3:3a:29:a2:26:26:4b:bc:00: 4c:58:20:70:47:3b:69:57:d0:f3:03:1f:63:2a:ba: ed:61:44:29:82:70:23:80:ec:46:08:f6:f5:59:e6: df:09:9b:3b:1a:93:5a:26:78:a6:27:c1:4c:c3:d2: 55:30:c2:fe:f8:fb:ad:27:18:04:04:d0:e0:c1:3a: 08:a2:29:8b:cc:a3:3c:ce:d2:5c:f8:21:3a:2e:bd: 5f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:5D:6E:37:26:1D:C0:45:80:D8:3F:E4:C8:81:6F:F3:5C:49:11:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86602a7a-684d-38a0-82cf-28a53840329e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:a6:e0:bc:9f:9a:9b:da:15:7b:9d:48:6e:73:2a:d5:da:62: 12:d2:ff:aa:6e:b7:4b:06:33:3b:0b:a2:95:a8:22:c3:b0:d5: ce:f5:71:1b:1d:20:72:cf:f7:af:29:b7:f9:d3:1c:f8:ac:6c: ec:02:84:53:bb:dc:82:86:dd:75:9c:b1:25:00:85:45:6a:f6: 6f:52:22:71:07:23:cb:80:69:04:b5:1f:00:6d:48:05:f5:b0: a0:17:b0:e7:08:cd:79:44:e4:02:d1:a5:6e:45:76:e0:e9:68: 3f:e0:ac:ce:a3:8a:aa:a2:cd:11:4f:33:48:25:15:ae:c5:58: cf:c8:68:3c:c3:05:8d:be:5f:4e:9d:30:cc:4a:c2:1c:b2:f8: c4:3f:18:ae:3e:ef:6c:25:31:79:ab:05:a4:74:e0:44:2d:4a: d3:7b:ea:73:7b:49:93:67:80:3d:8c:fa:8d:67:77:4e:e5:e9: cd:14:b3:bf:d8:5b:c9:7b:68:dd:af:92:46:c7:e2:06:b8:c7: a3:20:ed:ec:94:2d:de:13:f7:61:96:31:18:dd:3a:85:7c:e8: bb:af:4a:85:7f:6c:6a:2d:65:56:27:b9:4d:04:25:f0:68:f0: f8:80:2b:d7:7c:65:57:ac:0b:00:2e:11:a2:f3:9b:b0:38:a9: ce:2a:eb:da -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpmwH7jz3kO0AVwagAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcwNDAxMDA0OVoXDTI1MTAwMjAxMDA0OVowLzEtMCsGA1UEAxMk ZWY3ZGNkYzEtNThlNi00MWUxLWEzZjUtMTQ1MjY4MmQ2NmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRYZWVJL1lQlnjWjQJ2TYs/r6m5swD6uYZlX 9A9ouF0/Jp91JyUTnp6lRiDSPNXV6l6OFWKG9Pj+C5Opuj3akBfbSlB1P5Imbeov cJErpfUdyDeBF6dcG8kzHGprVP2AOhmabKVfzPoIe/aJSyAwtVRsoU4NlG7CE8Uv 7pOOYMa++39/YHKCdYLoL5We39oKTjRxgtcRQGrrkXoyj9PQ1VW9WHVmq8GvtYiz OimiJiZLvABMWCBwRztpV9DzAx9jKrrtYUQpgnAjgOxGCPb1WebfCZs7GpNaJnim J8FMw9JVMML++PutJxgEBNDgwToIoimLzKM8ztJc+CE6Lr1foQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJ1dbjcmHcBFgNg/5MiBb/NcSRFWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODY2MDJhN2EtNjg0ZC0z OGEwLTgyY2YtMjhhNTM4NDAzMjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAZpuC8n5qb2hV7nUhucyrV2mIS0v+qbrdLBjM7C6KVqCLDsNXO9XEb HSByz/evKbf50xz4rGzsAoRTu9yCht11nLElAIVFavZvUiJxByPLgGkEtR8AbUgF 9bCgF7DnCM15ROQC0aVuRXbg6Wg/4KzOo4qqos0RTzNIJRWuxVjPyGg8wwWNvl9O nTDMSsIcsvjEPxiuPu9sJTF5qwWkdOBELUrTe+pze0mTZ4A9jPqNZ3dO5enNFLO/ 2FvJe2jdr5JGx+IGuMejIO3slC3eE/dhljEY3TqFfOi7r0qFf2xqLWVWJ7lNBCXw aPD4gCvXfGVXrAsALhGi85uwOKnOKuva -----END CERTIFICATE-----Generated at Wed Jul 23 17:20:41 2025 by rpki-client