$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6ff2770c-368a-3f1a-ac90-79714d484412.roa File: 6ff2770c-368a-3f1a-ac90-79714d484412.roa (raw, json) Hash identifier: 4txDLoZXsAjgDjdvZocS+TwEO79GwiaAu7zLnW3D8NY= Subject key identifier: 59:02:62:DB:60:75:90:21:06:87:D6:0C:C3:4D:CA:BA:3A:95:79:F9 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285848A830C4FF073DE4CCDBEF65A8 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6ff2770c-368a-3f1a-ac90-79714d484412.roa Signing time: Sat 25 Jan 2025 02:00:39 +0000 ROA not before: Sat 25 Jan 2025 02:00:39 +0000 ROA not after: Fri 25 Apr 2025 01:00:39 +0000 asID: 36630 IP address blocks: 192.68.126.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a8:30:c4:ff:07:3d:e4:cc:db:ef:65:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jan 25 02:00:39 2025 GMT Not After : Apr 25 01:00:39 2025 GMT Subject: CN=6e9dba45-92e0-44b5-a979-d9d7d3033b3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:cd:3a:b9:27:26:c9:c7:1e:47:05:5a:cf:89: 44:55:07:43:d3:13:4f:6c:0d:ba:bb:dd:a0:6d:3e: 6e:ec:df:dd:f5:19:66:5d:74:c4:f5:3b:3c:59:2d: 2c:7e:fc:94:02:d0:8b:ba:14:84:6e:6c:5c:5c:48: 92:98:07:15:ec:50:24:31:55:a9:fe:12:42:69:96: d7:57:ad:4c:cd:a9:25:53:73:e9:ed:fb:01:52:75: bc:85:3e:62:ca:75:17:02:58:55:d3:d7:dd:8e:dd: e8:6d:1f:83:6b:12:66:4d:d4:31:a0:1d:eb:22:1c: e8:5b:07:78:de:95:c2:dd:87:59:5b:77:06:f9:9f: 77:be:28:05:d3:71:fb:e6:d9:96:83:af:ef:76:52: c1:8a:af:9e:53:cc:61:f9:4d:0a:01:9d:9d:d2:81: c7:7c:a3:df:ec:ea:57:33:f1:1d:b0:85:3a:d4:fe: 6e:d9:5c:f5:1d:0b:2e:b7:52:da:b2:5a:1f:3e:7e: ed:26:d0:db:9e:3d:43:8b:d2:4f:17:ce:69:40:a9: e5:d5:0a:a2:3a:e4:ed:61:59:d8:00:c3:6c:74:21: 5d:68:0b:34:a0:6a:9a:dc:e3:68:29:c2:0b:56:7f: 15:97:64:17:5a:32:c3:23:a3:10:b0:2a:03:19:a3: a3:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:02:62:DB:60:75:90:21:06:87:D6:0C:C3:4D:CA:BA:3A:95:79:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6ff2770c-368a-3f1a-ac90-79714d484412.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:16:0a:fe:dc:ea:f1:6b:07:d2:c7:b1:63:f6:48:33:05:ae: 84:a6:98:e2:8f:1d:c5:b9:01:40:52:2b:5f:f1:8d:85:61:79: 0d:19:01:2f:67:1a:85:b5:0e:e4:41:54:b9:6d:fb:c4:8d:f1: 1a:00:55:01:0f:2a:05:41:aa:0d:4d:9b:72:73:5d:15:f4:d4: 1e:ce:4f:fa:0d:cc:80:f6:dd:fe:97:b4:5b:5f:da:c6:48:37: fb:74:c9:af:69:c5:1a:84:cf:14:03:c2:08:c3:cc:ed:40:cf: 7c:21:88:15:ff:5f:c4:44:a1:47:2f:d5:72:11:69:2e:5e:7d: 77:5a:94:68:5c:36:01:60:e3:ef:da:aa:d5:23:df:3c:d5:d8: 1c:45:ee:fc:9f:51:3e:24:74:d2:85:ce:9e:c2:f4:c6:61:7d: 58:d0:04:8a:fd:c6:2f:6d:cd:3e:51:86:cf:a5:18:a6:13:4b: 76:be:fb:90:80:23:d5:8c:47:f3:79:d5:f8:07:a9:1d:ce:c0: b6:79:8e:0b:19:a1:6a:6d:8d:21:f6:3d:0c:e3:fe:9e:53:1a: a0:7e:30:27:38:70:bf:b5:4e:11:7c:cd:10:ea:5a:c5:2e:9d: ec:69:92:31:43:a2:95:0f:1a:71:26:f5:d9:65:5a:e9:20:13: e8:11:69:a0 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEioMMT/Bz3kzNvvZagwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk NmU5ZGJhNDUtOTJlMC00NGI1LWE5NzktZDlkN2QzMDMzYjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAts06uScmycceRwVaz4lEVQdD0xNPbA26u92g bT5u7N/d9RlmXXTE9Ts8WS0sfvyUAtCLuhSEbmxcXEiSmAcV7FAkMVWp/hJCaZbX V61MzaklU3Pp7fsBUnW8hT5iynUXAlhV09fdjt3obR+DaxJmTdQxoB3rIhzoWwd4 3pXC3YdZW3cG+Z93vigF03H75tmWg6/vdlLBiq+eU8xh+U0KAZ2d0oHHfKPf7OpX M/EdsIU61P5u2Vz1HQsut1LaslofPn7tJtDbnj1Di9JPF85pQKnl1QqiOuTtYVnY AMNsdCFdaAs0oGqa3ONoKcILVn8Vl2QXWjLDI6MQsCoDGaOjKwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFkCYttgdZAhBofWDMNNyro6lXn5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNmZmMjc3MGMtMzY4YS0z ZjFhLWFjOTAtNzk3MTRkNDg0NDEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAcFgr+3OrxawfSx7Fj9kgzBa6Eppjijx3FuQFAUitf8Y2FYXkNGQEv ZxqFtQ7kQVS5bfvEjfEaAFUBDyoFQaoNTZtyc10V9NQezk/6DcyA9t3+l7RbX9rG SDf7dMmvacUahM8UA8IIw8ztQM98IYgV/1/ERKFHL9VyEWkuXn13WpRoXDYBYOPv 2qrVI9881dgcRe78n1E+JHTShc6ewvTGYX1Y0ASK/cYvbc0+UYbPpRimE0t2vvuQ gCPVjEfzedX4B6kdzsC2eY4LGaFqbY0h9j0M4/6eUxqgfjAnOHC/tU4RfM0Q6lrF Lp3saZIxQ6KVDxpxJvXZZVrpIBPoEWmg -----END CERTIFICATE-----Generated at Fri Apr 11 23:23:30 2025 by rpki-client