$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2157cc7f-b3e9-3ba7-86fb-33bedd8ac72f.roa File: 2157cc7f-b3e9-3ba7-86fb-33bedd8ac72f.roa (raw, json) Hash identifier: RGvVyIHScbYUi1rOiP+75BYpvWYYMDHbBKp36WcklKE= Subject key identifier: ED:A8:52:9A:43:B6:FD:4B:23:AD:D4:83:65:DC:EE:97:3E:BB:33:61 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849F2E54FE644CD4878DEBA5F80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2157cc7f-b3e9-3ba7-86fb-33bedd8ac72f.roa Signing time: Fri 23 May 2025 13:01:03 +0000 ROA not before: Fri 23 May 2025 13:01:03 +0000 ROA not after: Thu 21 Aug 2025 13:01:03 +0000 asID: 7342 IP address blocks: 192.68.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f2:e5:4f:e6:44:cd:48:78:de:ba:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 23 13:01:03 2025 GMT Not After : Aug 21 13:01:03 2025 GMT Subject: CN=453ee2c3-42f9-4ccf-b1f5-0424bd057923 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:48:f1:ef:3a:71:71:2f:a9:22:4b:57:c1:1b: 04:d7:6b:8e:5a:9a:4f:33:4d:e3:bf:71:d5:bf:4e: 25:fb:92:e2:1c:be:46:47:9e:66:df:6b:f5:d3:f7: 2a:8c:e0:f6:4b:13:99:f4:33:e3:b4:34:ed:df:60: f6:66:1d:1e:e7:8d:0c:73:d8:3c:b4:fb:96:fa:99: 98:d5:ee:5a:5d:3a:bc:04:3d:95:06:2e:60:10:d2: e7:9d:a7:2e:1f:50:3c:d7:cf:4b:48:a3:2d:85:a0: a0:f6:1c:49:7c:78:e7:a6:21:92:51:42:ff:0b:30: d3:0b:00:9d:1d:d6:85:0c:a4:53:31:4f:75:2f:c3: b2:3a:08:38:b2:fe:b7:80:0e:ca:fe:35:75:b7:7e: 45:91:31:5e:75:87:42:7a:a6:44:6f:c2:21:80:07: bd:71:94:58:49:d5:05:1e:2c:bc:8a:92:31:55:c6: bd:4d:1c:2c:0d:6c:92:60:67:68:ff:4d:13:f5:32: 2b:fd:dd:77:fb:0d:d4:08:fd:e3:ef:c7:60:2c:31: 0c:34:03:e4:5a:e9:cf:1d:e1:39:8b:d6:bd:15:88: 8f:f7:a1:0f:d0:d1:bf:10:31:4b:1b:35:8c:a6:b8: ae:0c:05:fc:41:da:69:43:47:0a:6d:a0:04:b0:36: 71:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:A8:52:9A:43:B6:FD:4B:23:AD:D4:83:65:DC:EE:97:3E:BB:33:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2157cc7f-b3e9-3ba7-86fb-33bedd8ac72f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:84:9b:55:13:44:b0:03:31:47:ec:1b:02:a8:d3:c3:ee:f0: c1:89:ce:a1:cd:9c:01:d4:07:c4:c1:60:f0:a0:86:4d:63:2e: 38:17:e7:92:02:b1:61:85:32:fa:3e:ab:0f:91:05:51:07:cb: 08:4a:71:81:59:68:1f:af:36:9c:11:bc:27:c3:32:22:17:d9: a6:75:11:90:7b:e3:a5:ce:3c:c6:44:9a:53:9f:39:05:1a:29: 90:06:68:75:9b:3e:06:96:36:82:45:75:48:e4:bd:d1:8c:68: 28:cb:ab:8d:83:fd:5e:62:6f:03:ad:3b:7b:46:7e:76:c2:c5: 60:bb:c8:19:c4:38:be:d5:66:84:79:21:99:43:b4:9c:f8:29: 98:91:ed:f0:41:33:a3:47:7c:20:c8:6d:8c:82:c9:91:2a:ed: e4:cd:ba:ea:40:4a:cd:50:b4:9d:cd:57:f8:ed:33:89:27:2a: 6a:28:f0:79:39:51:3f:8f:b1:1b:f5:77:b0:eb:a2:cf:e7:6d: 87:d4:d7:22:a5:9b:74:36:bb:69:f6:29:83:b5:71:98:6c:4c: 46:bb:d5:7f:f2:93:cb:ef:41:bb:19:f1:8d:1f:a3:7a:1d:3f: e1:17:61:fa:2d:39:50:b6:03:8b:9a:63:8f:79:33:93:0e:94: c6:a9:73:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEny5U/mRM1IeN66X4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUyMzEzMDEwM1oXDTI1MDgyMTEzMDEwM1owLzEtMCsGA1UEAxMk NDUzZWUyYzMtNDJmOS00Y2NmLWIxZjUtMDQyNGJkMDU3OTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20jx7zpxcS+pIktXwRsE12uOWppPM03jv3HV v04l+5LiHL5GR55m32v10/cqjOD2SxOZ9DPjtDTt32D2Zh0e540Mc9g8tPuW+pmY 1e5aXTq8BD2VBi5gENLnnacuH1A8189LSKMthaCg9hxJfHjnpiGSUUL/CzDTCwCd HdaFDKRTMU91L8OyOgg4sv63gA7K/jV1t35FkTFedYdCeqZEb8IhgAe9cZRYSdUF Hiy8ipIxVca9TRwsDWySYGdo/00T9TIr/d13+w3UCP3j78dgLDEMNAPkWunPHeE5 i9a9FYiP96EP0NG/EDFLGzWMpriuDAX8QdppQ0cKbaAEsDZxLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO2oUppDtv1LI63Ug2Xc7pc+uzNhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjE1N2NjN2YtYjNlOS0z YmE3LTg2ZmItMzNiZWRkOGFjNzJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwESAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGeEm1UTRLADMUfsGwKo08Pu8MGJzqHNnAHUB8TBYPCghk1jLjgX55IC sWGFMvo+qw+RBVEHywhKcYFZaB+vNpwRvCfDMiIX2aZ1EZB746XOPMZEmlOfOQUa KZAGaHWbPgaWNoJFdUjkvdGMaCjLq42D/V5ibwOtO3tGfnbCxWC7yBnEOL7VZoR5 IZlDtJz4KZiR7fBBM6NHfCDIbYyCyZEq7eTNuupASs1QtJ3NV/jtM4knKmoo8Hk5 UT+PsRv1d7Dros/nbYfU1yKlm3Q2u2n2KYO1cZhsTEa71X/yk8vvQbsZ8Y0fo3od P+EXYfotOVC2A4uaY495M5MOlMapcw8= -----END CERTIFICATE-----Generated at Sat Jun 7 04:20:08 2025 by rpki-client