$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/af7a924e-68be-3727-b65c-881207198090.roa File: af7a924e-68be-3727-b65c-881207198090.roa (raw, json) Hash identifier: WDIx/Pm7byjOy2xIhcXaAWzSs+LdLZduAayhg08AN4g= Subject key identifier: F8:61:38:F2:DE:DA:95:C8:45:C6:5A:39:98:49:2A:A3:5D:B7:54:B1 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A66C0890DDFF25017D99D60C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/af7a924e-68be-3727-b65c-881207198090.roa Signing time: Fri 04 Jul 2025 01:00:49 +0000 ROA not before: Fri 04 Jul 2025 01:00:49 +0000 ROA not after: Thu 02 Oct 2025 01:00:49 +0000 asID: 396593 IP address blocks: 192.68.126.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:66:c0:89:0d:df:f2:50:17:d9:9d:60:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 4 01:00:49 2025 GMT Not After : Oct 2 01:00:49 2025 GMT Subject: CN=666bfad7-caad-43e6-bcf5-1426f5a7f761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:01:f4:d0:6c:5c:76:fa:af:a3:8c:f1:89:18: e3:78:1e:2d:b4:1b:05:c7:25:81:fa:48:a0:e1:b6: f7:44:22:02:f2:2a:fa:b0:58:b4:18:5c:ce:aa:7a: 3d:54:d0:11:a8:b0:8b:b0:97:7a:86:81:7b:cd:f0: da:40:eb:f0:26:4d:6b:45:22:d4:7b:58:de:78:18: 75:1b:a7:a8:89:61:03:61:d9:95:94:a5:13:28:61: 28:7e:2f:a6:b9:f2:83:00:e1:bc:76:dd:1f:44:a9: d8:62:f6:9d:f6:8c:ec:b1:d7:6d:81:ef:a2:c1:db: 9c:ad:14:ec:b8:a3:25:8a:ce:47:cf:5b:45:dd:d9: 31:51:e2:6f:a9:7f:7a:7b:7e:0e:d8:3b:d7:86:fb: 98:41:78:66:1b:c0:41:c0:ca:c3:7f:48:9f:9a:5d: 3b:ce:1b:59:55:b2:5d:e1:bb:f8:7f:76:59:5b:da: ed:33:d2:eb:f7:8c:45:b7:f5:7c:91:e9:74:7b:ac: 32:de:f1:09:dc:a8:ac:2b:bc:9d:55:8f:4f:84:96: 0c:81:6e:68:a2:ad:9c:c6:8a:aa:f1:db:b8:33:74: a2:a1:18:4a:c4:a7:c5:25:1c:51:16:23:bf:7a:e3: d7:fd:7c:c0:64:c7:8a:bc:d4:60:78:59:6f:34:32: 1a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:61:38:F2:DE:DA:95:C8:45:C6:5A:39:98:49:2A:A3:5D:B7:54:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/af7a924e-68be-3727-b65c-881207198090.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:43:0a:c7:5d:97:37:0a:9f:1b:c4:d1:e3:4e:c9:11:0f:77: b6:19:27:58:dd:84:67:cd:d1:54:8c:f2:54:b1:e8:0f:58:4e: 08:67:45:87:51:2e:1c:e4:70:4b:51:90:30:98:c6:13:a5:fb: dd:45:b6:ae:8d:36:b1:bd:a7:a5:8a:f5:de:2c:ab:e7:21:84: df:56:d4:e1:a3:29:62:aa:0e:c6:68:1c:a2:f4:e0:7f:c9:8d: 47:d3:f2:6f:60:4f:9b:96:47:cb:65:38:13:b2:d1:01:3d:6e: 81:3d:7a:88:92:5c:eb:c9:5c:8b:38:01:c2:f2:89:13:66:ab: 24:12:bc:7c:9e:d7:a3:8d:5b:3a:d4:41:f3:67:ae:b4:41:c8: c4:4e:1e:dc:28:5d:61:e3:8b:d7:96:cf:13:c7:f8:c2:0b:3a: 16:ad:84:c9:0c:b4:e5:7b:8d:d9:18:2d:6c:32:e1:5f:87:03: 54:58:93:a3:fd:69:64:e6:03:38:40:e2:20:2b:a4:60:ae:5f: ca:9c:3d:6c:89:4e:83:d0:91:7d:6e:a1:91:f1:8e:fa:8d:29: 39:ce:c6:67:bb:dc:22:25:1e:41:02:37:f1:5d:8e:43:d0:39: 5b:36:4b:ca:0c:ef:0a:24:65:bc:7b:c6:64:6f:f7:46:8b:77: 08:3e:cd:e0 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpmwIkN3/JQF9mdYMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcwNDAxMDA0OVoXDTI1MTAwMjAxMDA0OVowLzEtMCsGA1UEAxMk NjY2YmZhZDctY2FhZC00M2U2LWJjZjUtMTQyNmY1YTdmNzYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAH00Gxcdvqvo4zxiRjjeB4ttBsFxyWB+kig 4bb3RCIC8ir6sFi0GFzOqno9VNARqLCLsJd6hoF7zfDaQOvwJk1rRSLUe1jeeBh1 G6eoiWEDYdmVlKUTKGEofi+mufKDAOG8dt0fRKnYYvad9ozssddtge+iwducrRTs uKMlis5Hz1tF3dkxUeJvqX96e34O2DvXhvuYQXhmG8BBwMrDf0ifml07zhtZVbJd 4bv4f3ZZW9rtM9Lr94xFt/V8kel0e6wy3vEJ3KisK7ydVY9PhJYMgW5ooq2cxoqq 8du4M3SioRhKxKfFJRxRFiO/euPX/XzAZMeKvNRgeFlvNDIauQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPhhOPLe2pXIRcZaOZhJKqNdt1SxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWY3YTkyNGUtNjhiZS0z NzI3LWI2NWMtODgxMjA3MTk4MDkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA7QwrHXZc3Cp8bxNHjTskRD3e2GSdY3YRnzdFUjPJUsegPWE4IZ0WH US4c5HBLUZAwmMYTpfvdRbaujTaxvaelivXeLKvnIYTfVtThoyliqg7GaByi9OB/ yY1H0/JvYE+blkfLZTgTstEBPW6BPXqIklzryVyLOAHC8okTZqskErx8ntejjVs6 1EHzZ660QcjETh7cKF1h44vXls8Tx/jCCzoWrYTJDLTle43ZGC1sMuFfhwNUWJOj /Wlk5gM4QOIgK6Rgrl/KnD1siU6D0JF9bqGR8Y76jSk5zsZnu9wiJR5BAjfxXY5D 0DlbNkvKDO8KJGW8e8Zkb/dGi3cIPs3g -----END CERTIFICATE-----Generated at Wed Jul 23 17:18:10 2025 by rpki-client