$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/357b506c-bd3e-3199-9608-eb9621697a3b.roa File: 357b506c-bd3e-3199-9608-eb9621697a3b.roa (raw, json) Hash identifier: CvFCvONf2Z73ZfngQuSLfdJRoZWlABX7j/Ci+LHfOag= Subject key identifier: 48:E0:BB:07:2F:4B:79:32:51:9B:B9:12:E6:F7:EF:87:EC:05:1D:66 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285848A830C215A7700A95B0857080 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/357b506c-bd3e-3199-9608-eb9621697a3b.roa Signing time: Sat 25 Jan 2025 02:00:39 +0000 ROA not before: Sat 25 Jan 2025 02:00:39 +0000 ROA not after: Fri 25 Apr 2025 01:00:39 +0000 asID: 396545 IP address blocks: 192.68.126.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a8:30:c2:15:a7:70:0a:95:b0:85:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jan 25 02:00:39 2025 GMT Not After : Apr 25 01:00:39 2025 GMT Subject: CN=52a1b80d-89ad-44c6-bf05-6c86ff1071c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:35:6d:04:d4:95:15:0b:b0:08:2d:72:4f:b2: 19:39:b7:30:d8:99:87:ae:36:2d:52:92:ec:6d:84: c3:89:13:43:dd:b0:d3:24:9e:a6:c3:15:12:5b:97: cf:7b:fa:fb:3b:f9:fd:f8:2e:1d:e8:a0:19:c6:83: da:0a:cd:12:66:f2:0e:b8:7e:62:59:84:01:ce:f5: c7:79:32:51:c5:55:94:e7:58:82:1b:c2:cf:6e:e1: 92:19:b9:f3:49:dd:2c:06:60:0a:df:f9:85:52:b7: 4d:15:7b:a9:e1:22:bd:85:1a:68:cc:6b:f4:b8:95: 32:21:3c:0e:50:93:d0:6d:77:93:1e:92:ad:ce:8f: 42:89:50:bf:d6:51:00:79:bc:5b:ad:53:23:a8:d9: 72:86:05:8d:bf:1d:91:cc:26:f0:22:f4:b8:19:6f: f2:71:a9:42:d7:0e:cf:5b:64:6e:20:3c:20:b2:6b: d3:e9:cb:d5:48:06:25:66:3c:28:15:c0:cd:32:cf: ef:a2:33:10:69:30:b1:b9:e6:3e:d3:22:de:23:74: e3:7b:0e:ae:b9:ff:ae:98:c7:94:e2:22:a0:e1:01: 8e:69:a3:2b:b3:26:6c:0b:33:d4:fc:3b:ca:97:c5: e9:33:b1:fb:9d:8a:1e:b7:39:e6:d7:8e:63:77:9c: 5c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:E0:BB:07:2F:4B:79:32:51:9B:B9:12:E6:F7:EF:87:EC:05:1D:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/357b506c-bd3e-3199-9608-eb9621697a3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:e9:af:2d:c9:05:4e:4d:23:3f:24:a6:1d:0a:68:ce:68:78: 4f:f1:b6:b0:f5:ef:8e:b7:b9:47:1a:6e:f1:98:17:9b:e1:8a: ac:ad:10:6c:6c:15:ae:61:c7:b6:4b:6c:ab:9f:f6:0c:42:51: e0:38:2a:18:38:99:ab:60:04:9f:a4:f0:05:ca:d4:37:b5:6b: 40:28:03:d5:2f:5d:d5:58:d3:aa:8b:c7:b4:5b:54:7e:2b:38: 06:0e:70:52:f8:92:a8:39:0f:48:51:bf:71:ca:58:2d:e7:e4: 4e:e9:72:99:27:ee:bf:b7:fd:c7:e0:8a:76:4b:56:cc:8d:a6: 28:5b:57:f6:8c:d0:52:63:19:d2:8c:c5:69:fa:36:67:cc:29: db:21:8f:fb:48:6d:7e:af:ee:6e:40:ac:7a:db:3d:55:e1:61: 9b:5d:e2:46:a4:63:05:80:f1:e4:5a:3c:a4:44:84:5e:14:b7: 37:50:37:ef:cc:31:e4:e1:ff:48:4b:88:5e:60:04:09:90:ac: c5:36:9d:a3:26:ad:26:f4:f5:dd:cf:34:58:c6:5c:34:b4:c1: f8:d3:60:ea:c5:c4:5e:bf:59:23:40:07:97:ee:2b:f5:4a:d6: 6b:8d:d1:a1:24:26:43:e7:6e:d8:92:4f:c2:4d:7c:c1:14:ba: 45:2d:44:cb -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEioMMIVp3AKlbCFcIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk NTJhMWI4MGQtODlhZC00NGM2LWJmMDUtNmM4NmZmMTA3MWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizVtBNSVFQuwCC1yT7IZObcw2JmHrjYtUpLs bYTDiRND3bDTJJ6mwxUSW5fPe/r7O/n9+C4d6KAZxoPaCs0SZvIOuH5iWYQBzvXH eTJRxVWU51iCG8LPbuGSGbnzSd0sBmAK3/mFUrdNFXup4SK9hRpozGv0uJUyITwO UJPQbXeTHpKtzo9CiVC/1lEAebxbrVMjqNlyhgWNvx2RzCbwIvS4GW/ycalC1w7P W2RuIDwgsmvT6cvVSAYlZjwoFcDNMs/vojMQaTCxueY+0yLeI3Tjew6uuf+umMeU 4iKg4QGOaaMrsyZsCzPU/DvKl8XpM7H7nYoetznm145jd5xcPQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEjguwcvS3kyUZu5Eub374fsBR1mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzU3YjUwNmMtYmQzZS0z MTk5LTk2MDgtZWI5NjIxNjk3YTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAU6a8tyQVOTSM/JKYdCmjOaHhP8baw9e+Ot7lHGm7xmBeb4YqsrRBs bBWuYce2S2yrn/YMQlHgOCoYOJmrYASfpPAFytQ3tWtAKAPVL13VWNOqi8e0W1R+ KzgGDnBS+JKoOQ9IUb9xylgt5+RO6XKZJ+6/t/3H4Ip2S1bMjaYoW1f2jNBSYxnS jMVp+jZnzCnbIY/7SG1+r+5uQKx62z1V4WGbXeJGpGMFgPHkWjykRIReFLc3UDfv zDHk4f9IS4heYAQJkKzFNp2jJq0m9PXdzzRYxlw0tMH402DqxcRev1kjQAeX7iv1 StZrjdGhJCZD527Ykk/CTXzBFLpFLUTL -----END CERTIFICATE-----Generated at Fri Apr 11 22:20:34 2025 by rpki-client