$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cd1d5c25-1d63-3b8b-b443-366de68598ea.roa File: cd1d5c25-1d63-3b8b-b443-366de68598ea.roa (raw, json) Hash identifier: U8wmrNGNI7xOFmOy/HMAhd8uxGTKi2v3KLD915CjjyM= Subject key identifier: E7:94:B2:D7:48:2B:47:FA:50:D4:75:4C:20:9E:50:12:13:8A:26:DC Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A66C08493536C06FD83F14540 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cd1d5c25-1d63-3b8b-b443-366de68598ea.roa Signing time: Fri 04 Jul 2025 01:00:49 +0000 ROA not before: Fri 04 Jul 2025 01:00:49 +0000 ROA not after: Thu 02 Oct 2025 01:00:49 +0000 asID: 396576 IP address blocks: 192.68.126.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:66:c0:84:93:53:6c:06:fd:83:f1:45:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 4 01:00:49 2025 GMT Not After : Oct 2 01:00:49 2025 GMT Subject: CN=74ebf149-889a-4d8d-9ebc-8508947e7ea3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:0a:8e:9b:50:78:6e:80:30:bb:8a:e4:7d:e7: 80:b6:9f:2d:df:4b:06:e1:8d:db:f0:48:da:79:ea: f8:92:98:5d:36:b2:de:02:f9:63:da:30:c1:7c:4a: 4f:48:0a:3c:43:25:5e:96:9b:1c:e4:b5:d2:32:76: 45:5a:08:b3:62:0c:3e:83:3c:e4:7e:38:f5:d1:c3: 09:ea:1e:94:6c:7f:4c:36:d2:05:4c:51:7f:d6:32: 08:6e:96:65:ce:88:0a:07:75:f1:d5:cf:86:ff:51: 3f:07:74:3e:e7:02:4a:66:83:e2:b3:8e:0d:d0:bf: ce:6e:7e:3d:24:d8:99:b6:85:45:0a:f8:72:21:a1: 41:7a:4a:10:a1:bf:c7:c4:c8:dd:d5:5e:9e:31:27: b4:bd:3c:87:59:fe:8f:e0:51:a0:9b:c1:ef:7e:fc: 2e:fe:59:9c:b0:b4:2f:69:ba:5d:a2:f0:7a:61:42: 8f:93:c2:12:af:0b:8a:2b:ee:4d:66:a3:ef:b4:8e: cc:cc:ef:d3:97:48:27:c7:c7:a8:dc:9e:8a:7c:da: b0:31:56:17:91:b7:4e:28:5d:80:54:a8:c6:0c:a8: 5c:dc:7e:42:fd:f7:92:2d:2e:2c:19:21:bc:2c:16: 76:23:a0:07:62:76:0d:73:3a:8e:cc:57:09:73:4f: c0:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:94:B2:D7:48:2B:47:FA:50:D4:75:4C:20:9E:50:12:13:8A:26:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cd1d5c25-1d63-3b8b-b443-366de68598ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:6d:fb:b0:0f:08:ff:cd:57:7c:e7:e9:52:75:d6:0f:0a:c0: 7e:dc:e5:f8:6c:f0:29:81:10:83:ba:88:19:07:48:50:76:b8: 8e:38:22:34:b9:2e:9b:b2:7a:85:3b:bf:ed:6c:0e:fd:c2:04: 00:ad:4e:0c:7f:d9:a6:e8:9f:cd:6b:86:69:53:e4:54:52:1f: 70:2a:5d:89:d0:31:17:d2:09:03:8c:5f:1d:7e:18:1a:7b:f3: 84:84:04:d5:aa:6c:5d:a3:95:b5:82:9b:81:3a:0b:34:e1:d3: ca:39:a9:7b:aa:c0:c7:21:0e:86:22:80:e1:66:28:73:3f:a1: 38:d7:56:c1:48:b2:2b:5b:7e:bc:8b:6f:56:2f:f3:79:61:fe: 7b:7f:52:f9:a4:85:b9:a5:d8:12:e6:f9:84:ba:32:20:da:ae: 1b:00:32:b9:59:c5:77:90:cc:6a:f5:e2:3b:d8:2b:c4:c8:e6: 6c:e4:5f:0e:a2:e4:a5:a9:ce:ed:dd:51:69:4f:ee:99:3f:9a: 48:5d:bb:f8:fd:b1:3f:d1:8e:85:06:9c:2a:a2:bc:cf:96:ad: 3e:6f:e4:74:59:53:26:a2:75:3e:53:b0:09:e6:56:a0:f7:fc: fe:82:9c:48:53:f9:75:92:fd:eb:c3:80:b9:e3:dd:95:64:0e: 28:56:37:e9 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpmwISTU2wG/YPxRUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcwNDAxMDA0OVoXDTI1MTAwMjAxMDA0OVowLzEtMCsGA1UEAxMk NzRlYmYxNDktODg5YS00ZDhkLTllYmMtODUwODk0N2U3ZWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAqOm1B4boAwu4rkfeeAtp8t30sG4Y3b8Eja eer4kphdNrLeAvlj2jDBfEpPSAo8QyVelpsc5LXSMnZFWgizYgw+gzzkfjj10cMJ 6h6UbH9MNtIFTFF/1jIIbpZlzogKB3Xx1c+G/1E/B3Q+5wJKZoPis44N0L/Obn49 JNiZtoVFCvhyIaFBekoQob/HxMjd1V6eMSe0vTyHWf6P4FGgm8Hvfvwu/lmcsLQv abpdovB6YUKPk8ISrwuKK+5NZqPvtI7MzO/Tl0gnx8eo3J6KfNqwMVYXkbdOKF2A VKjGDKhc3H5C/feSLS4sGSG8LBZ2I6AHYnYNczqOzFcJc0/A8QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOeUstdIK0f6UNR1TCCeUBITiibcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2QxZDVjMjUtMWQ2My0z YjhiLWI0NDMtMzY2ZGU2ODU5OGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAebfuwDwj/zVd85+lSddYPCsB+3OX4bPApgRCDuogZB0hQdriOOCI0 uS6bsnqFO7/tbA79wgQArU4Mf9mm6J/Na4ZpU+RUUh9wKl2J0DEX0gkDjF8dfhga e/OEhATVqmxdo5W1gpuBOgs04dPKOal7qsDHIQ6GIoDhZihzP6E411bBSLIrW368 i29WL/N5Yf57f1L5pIW5pdgS5vmEujIg2q4bADK5WcV3kMxq9eI72CvEyOZs5F8O ouSlqc7t3VFpT+6ZP5pIXbv4/bE/0Y6FBpwqorzPlq0+b+R0WVMmonU+U7AJ5lag 9/z+gpxIU/l1kv3rw4C5492VZA4oVjfp -----END CERTIFICATE-----Generated at Wed Jul 23 17:20:18 2025 by rpki-client