$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/63e5ea18-3e6d-38b5-85ad-d53892d54f73.roa File: 63e5ea18-3e6d-38b5-85ad-d53892d54f73.roa (raw, json) Hash identifier: WsCiKYbbJfVr05NJq+esyp6jkr5rvdYl0IrQkhyjLiA= Subject key identifier: 21:AD:65:DB:46:5A:BE:7A:07:E9:73:18:C0:13:4F:95:0F:1A:27:34 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285848A830C488E44963816DD65E80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/63e5ea18-3e6d-38b5-85ad-d53892d54f73.roa Signing time: Sat 25 Jan 2025 02:00:39 +0000 ROA not before: Sat 25 Jan 2025 02:00:39 +0000 ROA not after: Fri 25 Apr 2025 01:00:39 +0000 asID: 397203 IP address blocks: 192.68.126.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a8:30:c4:88:e4:49:63:81:6d:d6:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jan 25 02:00:39 2025 GMT Not After : Apr 25 01:00:39 2025 GMT Subject: CN=fc4faf79-798e-4bc4-84e7-77f2b3c020e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:c3:f0:5d:a2:46:7c:28:8d:10:07:d1:a7:58: b9:f8:4f:e5:10:07:23:19:58:25:d7:db:ee:e5:de: 71:e9:65:b8:ac:3f:c2:1f:0c:00:8f:33:c8:0b:13: 70:36:46:77:ee:5d:a5:87:05:56:28:c5:35:69:c0: 07:e0:22:b9:c3:57:64:2c:a5:ba:13:78:88:1a:24: 7a:e0:30:1b:4d:7d:4c:70:32:d5:16:ca:60:a8:03: 30:e6:03:82:dd:49:1e:a9:43:5d:64:05:c8:07:85: 11:f4:6b:d4:0f:1a:7c:f2:17:05:ce:86:fd:1f:77: b4:0d:08:a0:96:04:e2:6e:46:ac:5d:46:4f:81:d0: 53:ae:97:26:14:26:20:b7:c5:67:40:e9:d9:80:1a: f9:50:83:c7:22:40:26:41:70:a0:d5:d7:73:a0:0c: 19:c5:70:37:65:57:2f:24:e2:36:a9:f3:b4:9d:fc: cd:fc:d4:f6:24:53:cd:af:58:d4:75:51:82:65:f2: b9:e8:2f:11:b3:a7:1e:b2:d9:a0:15:ad:dc:f9:18: df:54:a5:b4:fc:58:6c:57:16:c1:99:ab:c6:7d:4c: 15:14:b1:aa:79:f2:bb:aa:c0:56:d2:f9:15:83:63: b3:81:a2:d7:e5:a1:ed:b1:09:b7:3a:aa:79:64:7c: ae:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:AD:65:DB:46:5A:BE:7A:07:E9:73:18:C0:13:4F:95:0F:1A:27:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/63e5ea18-3e6d-38b5-85ad-d53892d54f73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:fa:e0:df:2c:7e:da:9a:a8:6d:2d:1a:54:36:02:ec:92:27: 31:b2:77:b8:8a:e4:41:ea:c8:e0:a8:09:a6:88:96:d4:98:77: 5b:8b:c7:93:19:3a:65:9f:a8:5f:42:87:9f:2c:93:55:1a:7c: 87:cc:2d:49:9f:21:36:8a:46:90:4a:bb:ec:54:89:0f:3c:40: 61:8d:85:f0:ea:a6:d0:78:15:e0:9b:bd:b7:da:86:d9:c2:51: 50:06:49:74:f9:0f:1c:73:98:ac:50:d7:65:11:5a:1c:8d:1d: 75:b7:68:b4:e9:2e:7e:3c:a9:4d:f6:7e:9b:14:2f:62:20:b3: 96:d6:4f:0f:ec:4b:8f:58:37:65:f2:df:6f:c1:50:a6:4f:08: c6:f5:c5:01:37:90:62:67:db:83:13:8b:66:4e:31:5c:92:29: 95:8e:cb:95:74:b1:59:4f:76:d8:07:73:76:a4:9a:ff:e2:13: 28:6c:1f:a3:e5:73:bb:b6:36:b5:f4:42:de:c0:94:82:28:c3: ad:31:eb:6d:f8:66:33:4c:12:43:cb:ff:6f:fe:c0:32:c6:fe: 69:b3:d1:de:05:35:2d:79:05:9f:cb:3c:67:ae:e1:1e:8c:84: 7e:6c:4c:7e:eb:90:2c:00:36:b9:38:62:f7:0a:4c:5f:bc:61: 4d:31:b0:c4 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEioMMSI5EljgW3WXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk ZmM0ZmFmNzktNzk4ZS00YmM0LTg0ZTctNzdmMmIzYzAyMGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgMPwXaJGfCiNEAfRp1i5+E/lEAcjGVgl19vu 5d5x6WW4rD/CHwwAjzPICxNwNkZ37l2lhwVWKMU1acAH4CK5w1dkLKW6E3iIGiR6 4DAbTX1McDLVFspgqAMw5gOC3UkeqUNdZAXIB4UR9GvUDxp88hcFzob9H3e0DQig lgTibkasXUZPgdBTrpcmFCYgt8VnQOnZgBr5UIPHIkAmQXCg1ddzoAwZxXA3ZVcv JOI2qfO0nfzN/NT2JFPNr1jUdVGCZfK56C8Rs6cestmgFa3c+RjfVKW0/FhsVxbB mavGfUwVFLGqefK7qsBW0vkVg2OzgaLX5aHtsQm3Oqp5ZHyuOwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCGtZdtGWr56B+lzGMATT5UPGic0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjNlNWVhMTgtM2U2ZC0z OGI1LTg1YWQtZDUzODkyZDU0ZjczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQC5+uDfLH7amqhtLRpUNgLskicxsne4iuRB6sjgqAmmiJbUmHdbi8eT GTpln6hfQoefLJNVGnyHzC1JnyE2ikaQSrvsVIkPPEBhjYXw6qbQeBXgm7232obZ wlFQBkl0+Q8cc5isUNdlEVocjR11t2i06S5+PKlN9n6bFC9iILOW1k8P7EuPWDdl 8t9vwVCmTwjG9cUBN5BiZ9uDE4tmTjFckimVjsuVdLFZT3bYB3N2pJr/4hMobB+j 5XO7tja19ELewJSCKMOtMett+GYzTBJDy/9v/sAyxv5ps9HeBTUteQWfyzxnruEe jIR+bEx+65AsADa5OGL3CkxfvGFNMbDE -----END CERTIFICATE-----Generated at Sat Apr 12 00:15:05 2025 by rpki-client