$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b902a145-91ce-3127-b047-3b79b31c5679.roa File: b902a145-91ce-3127-b047-3b79b31c5679.roa (raw, json) Hash identifier: SnfvG/fTxo+stYZMZEJ++gybSqh6crcojYUZ16zGn4M= Subject key identifier: 1F:5B:ED:2A:96:6B:14:ED:72:95:7A:1A:F1:A8:CF:5E:06:00:63:88 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A66C0869770DE913E8B7C8500 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b902a145-91ce-3127-b047-3b79b31c5679.roa Signing time: Fri 04 Jul 2025 01:00:49 +0000 ROA not before: Fri 04 Jul 2025 01:00:49 +0000 ROA not after: Thu 02 Oct 2025 01:00:49 +0000 asID: 396586 IP address blocks: 192.68.126.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:66:c0:86:97:70:de:91:3e:8b:7c:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 4 01:00:49 2025 GMT Not After : Oct 2 01:00:49 2025 GMT Subject: CN=4330ea19-8965-44f2-84c5-d4ae0d15827e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:d1:21:85:a5:12:cf:9c:82:64:8c:66:d2:e1: bc:59:1d:21:62:56:9d:a5:f4:36:35:67:ef:5d:7f: a9:0f:8c:36:cf:24:fd:d9:82:56:f3:60:30:3d:5d: a1:2f:8c:b2:0d:2d:3d:96:aa:96:03:05:e4:5e:fd: 4f:4e:a9:39:4e:17:71:5b:d6:79:89:f2:6c:b8:4c: e6:c7:c6:64:0f:2a:dc:81:19:4b:5d:cd:09:66:44: b8:02:d5:d7:75:c8:38:1d:50:f9:9f:64:9b:85:b3: a5:8b:f9:ce:7d:04:59:a7:72:5e:27:33:53:0b:d5: 9b:df:e2:5e:79:46:5a:19:f7:2c:a5:ab:0f:5b:39: 10:59:98:7b:bf:54:61:de:da:84:d9:80:9e:b4:ca: bf:7a:08:44:f7:d4:a7:2e:a3:ed:70:b4:af:43:24: 01:6d:ff:4e:4c:64:24:b9:61:9f:18:0b:39:9f:12: ea:1f:7b:b6:da:42:62:34:02:92:16:60:ee:f0:15: 76:a8:7c:fd:e8:74:8d:f8:5c:57:ff:ee:79:3c:74: 7b:0c:f5:24:ac:78:e5:52:07:d6:b9:98:f4:b5:de: 28:95:35:2c:af:56:44:43:2f:70:98:8f:74:5d:39: 4d:85:ad:da:f7:2e:1b:a8:07:1b:5d:dc:0d:98:29: b1:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:5B:ED:2A:96:6B:14:ED:72:95:7A:1A:F1:A8:CF:5E:06:00:63:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b902a145-91ce-3127-b047-3b79b31c5679.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:e1:4a:6c:ac:ce:93:03:28:a0:bd:e5:93:5e:e1:5e:68:0c: 22:87:3b:5c:cf:c5:73:00:dc:2e:6f:5e:13:ac:4a:ac:82:55: e4:b0:74:df:b2:ca:98:65:b5:46:fd:82:53:ac:3a:3e:f6:52: 50:29:a1:ef:12:49:72:60:29:b8:73:32:0f:9a:24:d2:27:bb: 77:4e:29:6a:ed:54:80:11:78:2c:9f:1e:2c:8e:35:71:af:fa: 18:55:2a:4a:35:d2:71:46:2f:f9:55:17:93:b2:5a:ce:36:ee: e0:a2:d6:e6:10:e1:8d:b8:81:d1:58:0f:09:ea:24:50:a5:33: ed:8d:14:22:50:36:27:e2:76:91:19:a2:3c:a6:4a:8c:d8:b1: 83:43:27:67:67:e7:6a:67:f6:75:25:51:93:60:39:b3:ff:cd: 93:60:ef:20:3a:9a:d7:f8:97:15:b4:30:f4:8a:eb:95:e8:4b: 15:7b:e5:71:b6:ed:14:ba:db:5b:b2:a8:a4:31:fe:99:95:ee: 75:cf:57:45:5d:5e:0e:5a:a9:d1:49:c5:df:b0:41:52:c7:04: 1d:26:b3:28:f5:d2:d5:e6:69:c4:1b:8b:bc:9e:1f:f3:76:01: 41:8d:58:5b:09:e0:6d:d8:38:f2:56:9c:c5:42:26:11:b3:9a: d7:c6:fa:21 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpmwIaXcN6RPot8hQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcwNDAxMDA0OVoXDTI1MTAwMjAxMDA0OVowLzEtMCsGA1UEAxMk NDMzMGVhMTktODk2NS00NGYyLTg0YzUtZDRhZTBkMTU4MjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktEhhaUSz5yCZIxm0uG8WR0hYladpfQ2NWfv XX+pD4w2zyT92YJW82AwPV2hL4yyDS09lqqWAwXkXv1PTqk5ThdxW9Z5ifJsuEzm x8ZkDyrcgRlLXc0JZkS4AtXXdcg4HVD5n2SbhbOli/nOfQRZp3JeJzNTC9Wb3+Je eUZaGfcspasPWzkQWZh7v1Rh3tqE2YCetMq/eghE99SnLqPtcLSvQyQBbf9OTGQk uWGfGAs5nxLqH3u22kJiNAKSFmDu8BV2qHz96HSN+FxX/+55PHR7DPUkrHjlUgfW uZj0td4olTUsr1ZEQy9wmI90XTlNha3a9y4bqAcbXdwNmCmxawIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFB9b7SqWaxTtcpV6GvGoz14GAGOIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjkwMmExNDUtOTFjZS0z MTI3LWIwNDctM2I3OWIzMWM1Njc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBE4UpsrM6TAyigveWTXuFeaAwihztcz8VzANwub14TrEqsglXksHTf ssqYZbVG/YJTrDo+9lJQKaHvEklyYCm4czIPmiTSJ7t3Tilq7VSAEXgsnx4sjjVx r/oYVSpKNdJxRi/5VReTslrONu7gotbmEOGNuIHRWA8J6iRQpTPtjRQiUDYn4naR GaI8pkqM2LGDQydnZ+dqZ/Z1JVGTYDmz/82TYO8gOprX+JcVtDD0iuuV6EsVe+Vx tu0UuttbsqikMf6Zle51z1dFXV4OWqnRScXfsEFSxwQdJrMo9dLV5mnEG4u8nh/z dgFBjVhbCeBt2DjyVpzFQiYRs5rXxvoh -----END CERTIFICATE-----Generated at Wed Jul 23 17:16:32 2025 by rpki-client