$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86602a7a-684d-38a0-82cf-28a53840329e.roa File: 86602a7a-684d-38a0-82cf-28a53840329e.roa (raw, json) Hash identifier: PRMWCbI55JsAFx5QoCf8W8B7rNQcxG6Of7FnbJfc6ik= Subject key identifier: 4A:6A:36:80:B1:46:63:6F:4C:38:71:90:DA:A0:27:88:C0:94:7C:F0 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285848A830BA72DAF18C1520E2A280 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86602a7a-684d-38a0-82cf-28a53840329e.roa Signing time: Sat 25 Jan 2025 02:00:39 +0000 ROA not before: Sat 25 Jan 2025 02:00:39 +0000 ROA not after: Fri 25 Apr 2025 01:00:39 +0000 asID: 396595 IP address blocks: 192.68.126.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a8:30:ba:72:da:f1:8c:15:20:e2:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jan 25 02:00:39 2025 GMT Not After : Apr 25 01:00:39 2025 GMT Subject: CN=2b18e6ee-b5fe-4318-82e2-8ab8b12b5edf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:37:5e:3f:c7:b2:61:91:3f:07:a0:c0:5f:4a: cc:79:20:19:e2:51:72:75:57:fd:81:92:59:2d:7d: 07:9c:41:24:92:f9:a9:e6:18:6a:b2:07:7d:55:2f: 55:6a:20:10:9c:c1:fe:20:29:76:ed:59:bf:3b:fe: a4:02:ed:f7:4b:d3:d1:b7:ba:df:fc:86:a0:17:ec: 3b:df:f4:23:03:c2:be:30:05:5b:7b:ab:ef:5a:47: c5:e9:7d:f6:a8:70:ba:b3:e7:65:c1:3d:f6:e1:53: bb:95:48:f0:c2:d3:f4:00:1c:cd:17:da:0a:4f:44: a7:4b:7f:d6:56:00:78:aa:ed:71:92:c3:ed:fb:ba: 9f:70:42:b5:50:e3:8c:29:1c:ea:72:e0:bc:89:99: 53:bd:7b:c9:8d:c9:34:9c:09:e9:0d:42:de:3a:f5: 43:c8:3c:9e:2e:42:01:51:eb:0f:6f:a5:31:9c:d0: 8c:f5:85:f8:af:06:2b:0e:a1:77:4e:ab:50:35:4e: c7:48:47:47:83:f7:e4:f5:fe:27:50:72:10:b0:6e: a7:c8:95:d7:e4:39:67:8a:42:07:3e:08:f4:85:c0: a6:65:1b:0c:bb:cf:48:88:fd:2f:ea:4b:16:0b:c1: fe:ae:54:8c:92:dd:bd:6e:ae:b4:ac:de:b3:5f:97: 7f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:6A:36:80:B1:46:63:6F:4C:38:71:90:DA:A0:27:88:C0:94:7C:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86602a7a-684d-38a0-82cf-28a53840329e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:dc:4d:7f:da:37:bc:ec:60:51:e1:36:ed:43:aa:c0:89:2d: 0c:74:9c:dc:e0:a5:f5:82:7b:ff:1e:86:d0:91:fc:1c:02:6f: a5:1c:50:22:cf:e1:20:a4:d5:7b:fb:b6:66:57:5a:aa:26:c1: f6:87:eb:7b:fe:52:60:d1:0c:45:ce:d8:b0:8c:11:8f:74:47: d7:6d:6c:4b:8f:5a:d2:19:65:2b:cd:ea:ba:22:d9:42:28:39: cb:a0:2d:0b:12:c6:27:b1:79:cd:17:f9:cc:62:57:52:2b:ae: 56:e7:74:f6:a8:64:de:e9:2d:2d:4d:5d:ef:cd:98:62:96:84: c7:46:d6:c4:46:b6:24:3c:b3:dc:de:fe:0c:62:7d:c8:f6:ec: da:91:63:c7:6d:c8:7b:29:80:09:63:d8:b6:2c:6c:34:57:60: 32:82:f0:92:72:ba:08:43:ea:a0:f7:5e:cf:ee:08:d0:37:a4: ce:a5:59:61:b1:b1:3f:f3:40:95:47:46:44:b6:5a:ff:c3:19: 4b:19:21:b2:d9:5e:27:77:10:c3:be:69:90:58:a3:63:47:bb: 0e:be:85:8f:85:96:ee:5a:a4:5e:b5:24:29:6b:3a:2f:8c:8a: 85:b0:a5:16:3b:17:d4:af:ed:5b:46:a7:2d:f6:27:9a:01:2f: 48:a4:14:60 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEioMLpy2vGMFSDiooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk MmIxOGU2ZWUtYjVmZS00MzE4LTgyZTItOGFiOGIxMmI1ZWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzdeP8eyYZE/B6DAX0rMeSAZ4lFydVf9gZJZ LX0HnEEkkvmp5hhqsgd9VS9VaiAQnMH+ICl27Vm/O/6kAu33S9PRt7rf/IagF+w7 3/QjA8K+MAVbe6vvWkfF6X32qHC6s+dlwT324VO7lUjwwtP0ABzNF9oKT0SnS3/W VgB4qu1xksPt+7qfcEK1UOOMKRzqcuC8iZlTvXvJjck0nAnpDULeOvVDyDyeLkIB UesPb6UxnNCM9YX4rwYrDqF3TqtQNU7HSEdHg/fk9f4nUHIQsG6nyJXX5DlnikIH Pgj0hcCmZRsMu89IiP0v6ksWC8H+rlSMkt29bq60rN6zX5d/IwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEpqNoCxRmNvTDhxkNqgJ4jAlHzwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODY2MDJhN2EtNjg0ZC0z OGEwLTgyY2YtMjhhNTM4NDAzMjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAW3E1/2je87GBR4TbtQ6rAiS0MdJzc4KX1gnv/HobQkfwcAm+lHFAi z+EgpNV7+7ZmV1qqJsH2h+t7/lJg0QxFztiwjBGPdEfXbWxLj1rSGWUrzeq6ItlC KDnLoC0LEsYnsXnNF/nMYldSK65W53T2qGTe6S0tTV3vzZhiloTHRtbERrYkPLPc 3v4MYn3I9uzakWPHbch7KYAJY9i2LGw0V2AygvCScroIQ+qg917P7gjQN6TOpVlh sbE/80CVR0ZEtlr/wxlLGSGy2V4ndxDDvmmQWKNjR7sOvoWPhZbuWqRetSQpazov jIqFsKUWOxfUr+1bRqct9ieaAS9IpBRg -----END CERTIFICATE-----Generated at Fri Apr 11 22:58:19 2025 by rpki-client