$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8ddad6be-d722-30fc-b465-d259a1d72813.roa File: 8ddad6be-d722-30fc-b465-d259a1d72813.roa (raw, json) Hash identifier: Q0DmFFL5QHmgQFEuqXR6W+4hjcAscQxTX8bHDuDS/Ao= Subject key identifier: F8:08:04:3D:7B:AD:24:0D:10:A9:D3:B2:4B:9F:78:4D:68:E1:98:55 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A66C0878938E293D0A6DA6F80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8ddad6be-d722-30fc-b465-d259a1d72813.roa Signing time: Fri 04 Jul 2025 01:00:49 +0000 ROA not before: Fri 04 Jul 2025 01:00:49 +0000 ROA not after: Thu 02 Oct 2025 01:00:49 +0000 asID: 396588 IP address blocks: 192.68.126.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:66:c0:87:89:38:e2:93:d0:a6:da:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 4 01:00:49 2025 GMT Not After : Oct 2 01:00:49 2025 GMT Subject: CN=03f8e25f-95fe-4109-ac35-c965ab13ef8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:67:8f:07:3c:36:27:6d:98:39:3e:b2:35:b1: f6:80:e6:15:43:f3:28:7d:fb:04:64:aa:93:b7:ec: bc:f5:96:f9:b0:9f:ea:0f:f5:b6:2d:2f:2a:e8:cb: 0e:98:dd:36:89:9c:9e:bd:4b:3c:61:02:76:e4:b8: 3e:fb:61:cf:e2:88:5d:aa:73:ff:84:ec:a4:5a:e3: b5:53:a2:57:f1:2e:30:f0:12:89:ab:89:1c:cf:79: 2f:50:94:57:3a:57:80:fa:1d:3c:d7:11:5b:83:96: ca:d7:8a:e1:ad:bf:91:b4:a9:75:46:69:59:76:c7: b3:33:ad:f4:98:1f:82:f4:63:01:1d:e1:0c:23:20: f4:66:c5:52:3c:c8:73:7e:7a:b9:16:cc:be:e1:e1: a3:f0:f0:6b:1e:71:83:71:cd:85:10:4d:26:20:3d: 7f:f5:f0:02:7a:cb:1b:40:7e:61:fc:18:8f:06:b5: cc:9c:00:d1:86:46:4f:27:8b:22:dd:0a:73:0e:a3: 6e:27:43:90:ab:56:f1:bc:e7:66:8b:4e:f2:94:2e: 0d:e5:c6:7c:23:26:f8:36:c5:f2:d7:c5:c3:ee:d5: 0d:cc:cf:d9:da:b7:7d:07:39:a3:b9:77:07:b8:1b: 4c:72:a2:c7:ed:c2:4c:c8:c5:12:63:da:4a:38:04: c1:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:08:04:3D:7B:AD:24:0D:10:A9:D3:B2:4B:9F:78:4D:68:E1:98:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8ddad6be-d722-30fc-b465-d259a1d72813.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:7c:b1:5c:b6:08:85:44:9c:9f:ca:1f:bc:1f:fc:05:54:4c: 66:79:db:98:03:bd:7d:9b:52:f4:cf:32:aa:fc:28:92:05:33: 48:e8:77:2b:a5:d6:13:62:74:91:45:28:8d:cd:ea:5a:f4:44: e2:b5:3c:8d:68:b0:f3:93:16:37:b9:87:53:79:ec:31:ca:2d: 1e:3e:72:2c:ef:b3:04:ef:bd:21:60:30:24:b6:48:89:40:20: cb:89:80:c8:c3:07:e7:0b:52:6e:39:b6:d0:a6:de:42:29:83: 22:17:78:f1:b7:10:94:b2:f1:c1:29:04:04:50:31:47:22:32: 59:f1:a0:f9:0d:1f:ca:bb:c0:cc:c9:0b:57:fd:14:f6:80:08: 48:c4:23:9d:c3:4f:ec:02:d8:a7:41:92:db:54:d6:61:d1:17: fe:9a:9f:a5:a0:89:a4:bc:b7:09:fc:d3:c6:b2:a6:97:6f:b4: d5:e4:c1:f0:9b:63:55:29:dd:5d:7d:31:2e:df:e5:fb:50:52: 81:50:19:36:3b:3b:6a:e2:a2:31:5c:6b:39:1a:b2:75:e0:c6: e9:a0:d8:21:50:78:23:e4:1e:5f:a1:1c:05:d7:63:2d:b4:25: 5d:e6:04:a9:35:6e:90:6b:11:8d:51:79:9d:8b:dc:b7:3d:6a: 10:b0:1a:53 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpmwIeJOOKT0Kbab4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcwNDAxMDA0OVoXDTI1MTAwMjAxMDA0OVowLzEtMCsGA1UEAxMk MDNmOGUyNWYtOTVmZS00MTA5LWFjMzUtYzk2NWFiMTNlZjhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWePBzw2J22YOT6yNbH2gOYVQ/MoffsEZKqT t+y89Zb5sJ/qD/W2LS8q6MsOmN02iZyevUs8YQJ25Lg++2HP4ohdqnP/hOykWuO1 U6JX8S4w8BKJq4kcz3kvUJRXOleA+h081xFbg5bK14rhrb+RtKl1RmlZdsezM630 mB+C9GMBHeEMIyD0ZsVSPMhzfnq5Fsy+4eGj8PBrHnGDcc2FEE0mID1/9fACessb QH5h/BiPBrXMnADRhkZPJ4si3QpzDqNuJ0OQq1bxvOdmi07ylC4N5cZ8Iyb4NsXy 18XD7tUNzM/Z2rd9BzmjuXcHuBtMcqLH7cJMyMUSY9pKOATBTwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPgIBD17rSQNEKnTskufeE1o4ZhVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOGRkYWQ2YmUtZDcyMi0z MGZjLWI0NjUtZDI1OWExZDcyODEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAGfLFctgiFRJyfyh+8H/wFVExmeduYA719m1L0zzKq/CiSBTNI6Hcr pdYTYnSRRSiNzepa9ETitTyNaLDzkxY3uYdTeewxyi0ePnIs77ME770hYDAktkiJ QCDLiYDIwwfnC1JuObbQpt5CKYMiF3jxtxCUsvHBKQQEUDFHIjJZ8aD5DR/Ku8DM yQtX/RT2gAhIxCOdw0/sAtinQZLbVNZh0Rf+mp+loImkvLcJ/NPGsqaXb7TV5MHw m2NVKd1dfTEu3+X7UFKBUBk2Oztq4qIxXGs5GrJ14MbpoNghUHgj5B5foRwF12Mt tCVd5gSpNW6QaxGNUXmdi9y3PWoQsBpT -----END CERTIFICATE-----Generated at Wed Jul 23 17:17:52 2025 by rpki-client