$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5d884fe2-6033-3876-a94c-533a438232ef.roa File: 5d884fe2-6033-3876-a94c-533a438232ef.roa (raw, json) Hash identifier: V1TpDIjjlx2WPA++NzOTtEi9tBUVs2+pn0TrMngXIes= Subject key identifier: CE:89:08:10:57:19:FB:2A:04:A7:CB:F7:84:AC:BA:84:3F:03:DA:A4 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285848A830C2470561AE414869E900 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5d884fe2-6033-3876-a94c-533a438232ef.roa Signing time: Sat 25 Jan 2025 02:00:39 +0000 ROA not before: Sat 25 Jan 2025 02:00:39 +0000 ROA not after: Fri 25 Apr 2025 01:00:39 +0000 asID: 396596 IP address blocks: 192.68.126.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a8:30:c2:47:05:61:ae:41:48:69:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jan 25 02:00:39 2025 GMT Not After : Apr 25 01:00:39 2025 GMT Subject: CN=381c8309-bd7d-4881-9efd-f3cee6ca579b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:15:ec:3d:13:72:ce:55:98:63:3c:b0:d5:7d: 99:bc:4a:0f:4c:56:4c:11:6b:f8:ec:0b:76:ed:db: 97:d4:68:3f:0f:29:b4:ee:85:af:1c:8b:5b:04:6f: cf:c4:17:f8:87:9d:df:83:f3:06:93:fa:3b:b2:37: a4:f4:c6:41:13:d1:1b:67:ce:39:4e:75:67:76:00: 6d:be:03:c8:3e:77:78:33:41:4e:14:e7:a0:49:b6: f1:6a:7d:6c:58:9f:9c:06:5f:95:61:6b:02:b5:d2: 31:c3:32:3f:60:4e:37:89:31:0a:be:83:2a:db:36: 47:ad:22:f2:7f:20:66:bf:6c:2a:90:9c:f6:3a:df: 36:d4:50:ab:e6:b3:1a:17:5b:63:75:04:35:2e:ec: 56:3e:8d:c4:e0:a3:e0:26:87:47:c2:8a:2e:37:ff: 56:0b:7d:eb:16:10:e9:d6:ad:80:03:31:99:58:58: 1d:de:b0:72:c8:65:fc:35:d1:4b:ab:e6:40:d7:24: 87:fb:e3:54:2c:f1:a5:1c:78:38:aa:09:6c:47:58: 09:90:da:56:05:5f:8b:84:88:9d:69:38:73:be:65: b9:b1:3d:bb:60:4d:e0:18:d9:fd:a8:1b:25:9a:a5: f9:ae:91:ed:30:cb:00:2e:bd:53:2a:25:f7:79:e2: 47:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:89:08:10:57:19:FB:2A:04:A7:CB:F7:84:AC:BA:84:3F:03:DA:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5d884fe2-6033-3876-a94c-533a438232ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:69:fc:df:9a:b1:e1:ca:46:79:0d:46:d6:05:b7:06:a3:8b: a6:97:37:36:e2:1e:47:91:22:1a:78:ec:19:6e:38:5b:c8:21: cc:e4:51:1f:f5:58:b0:b8:eb:31:5c:23:f0:b5:c5:0e:52:ff: 04:34:7c:ed:3f:07:51:ed:28:2b:01:3e:d4:db:ae:20:c5:53: ed:0e:15:9e:0e:c2:23:e1:da:b0:9f:7e:b6:ab:f7:a5:15:f0: 0c:57:b1:af:6f:00:dc:ed:4e:07:ab:b5:80:42:f8:52:06:55: fe:13:68:26:e3:9d:28:76:85:ce:a2:45:56:84:9b:ac:a8:fe: a3:23:85:c0:18:96:cc:28:e6:7b:3b:ae:f9:10:c9:18:3e:f3: b7:ea:e9:39:f0:8d:ca:e0:6e:a2:44:58:7f:c8:e4:61:79:79: 1e:a3:e5:6e:76:dc:5c:db:02:b1:2f:a1:3c:68:c8:24:d8:d1: cb:ba:d0:ac:f3:d6:9f:e4:b5:93:d0:c7:51:58:fe:c8:a6:3a: d7:50:eb:df:ca:23:a1:2f:5d:f6:2a:b2:96:74:97:f7:d7:63: fe:50:bc:f4:ec:50:db:54:d6:c3:15:84:76:5e:c5:3c:22:e8: 0d:ac:96:ca:dd:c0:39:83:ea:d4:3a:ef:c4:75:7c:1f:cc:4b: 5e:d0:6f:0a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEioMMJHBWGuQUhp6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk MzgxYzgzMDktYmQ3ZC00ODgxLTllZmQtZjNjZWU2Y2E1NzliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshXsPRNyzlWYYzyw1X2ZvEoPTFZMEWv47At2 7duX1Gg/Dym07oWvHItbBG/PxBf4h53fg/MGk/o7sjek9MZBE9EbZ845TnVndgBt vgPIPnd4M0FOFOegSbbxan1sWJ+cBl+VYWsCtdIxwzI/YE43iTEKvoMq2zZHrSLy fyBmv2wqkJz2Ot821FCr5rMaF1tjdQQ1LuxWPo3E4KPgJodHwoouN/9WC33rFhDp 1q2AAzGZWFgd3rByyGX8NdFLq+ZA1ySH++NULPGlHHg4qglsR1gJkNpWBV+LhIid aThzvmW5sT27YE3gGNn9qBslmqX5rpHtMMsALr1TKiX3eeJHkQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFM6JCBBXGfsqBKfL94SsuoQ/A9qkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNWQ4ODRmZTItNjAzMy0z ODc2LWE5NGMtNTMzYTQzODIzMmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAxafzfmrHhykZ5DUbWBbcGo4umlzc24h5HkSIaeOwZbjhbyCHM5FEf 9ViwuOsxXCPwtcUOUv8ENHztPwdR7SgrAT7U264gxVPtDhWeDsIj4dqwn362q/el FfAMV7GvbwDc7U4Hq7WAQvhSBlX+E2gm450odoXOokVWhJusqP6jI4XAGJbMKOZ7 O675EMkYPvO36uk58I3K4G6iRFh/yORheXkeo+Vudtxc2wKxL6E8aMgk2NHLutCs 89af5LWT0MdRWP7IpjrXUOvfyiOhL132KrKWdJf312P+ULz07FDbVNbDFYR2XsU8 IugNrJbK3cA5g+rUOu/EdXwfzEte0G8K -----END CERTIFICATE-----Generated at Fri Apr 11 23:08:39 2025 by rpki-client