$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8ddad6be-d722-30fc-b465-d259a1d72813.roa File: 8ddad6be-d722-30fc-b465-d259a1d72813.roa (raw, json) Hash identifier: DiHpYJHls0glCM+/ft8l48zuoZ0gsg2I2q+pQc+a5dk= Subject key identifier: 83:FB:5D:5F:C6:D2:36:56:76:77:A9:DA:9A:17:06:E2:4C:0D:37:70 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285848A830C1E3D00415D7CD9CC600 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8ddad6be-d722-30fc-b465-d259a1d72813.roa Signing time: Sat 25 Jan 2025 02:00:39 +0000 ROA not before: Sat 25 Jan 2025 02:00:39 +0000 ROA not after: Fri 25 Apr 2025 01:00:39 +0000 asID: 396588 IP address blocks: 192.68.126.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a8:30:c1:e3:d0:04:15:d7:cd:9c:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jan 25 02:00:39 2025 GMT Not After : Apr 25 01:00:39 2025 GMT Subject: CN=aa9d6cf9-57bc-46f5-a164-2713ec0c4b95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:68:f3:b8:df:90:83:25:83:9c:36:8c:bc:24: ea:4b:91:df:e8:d3:2a:4e:d1:8e:c1:ca:7d:23:d6: c8:53:4e:18:b8:2f:a0:b4:06:af:f6:f6:19:b6:56: 22:63:c9:37:c3:1f:ae:b7:53:f6:1f:1e:27:df:32: c4:70:d8:2a:03:00:b9:e6:34:ba:0d:2b:3f:69:52: 83:e5:a5:af:bb:c4:90:21:ba:55:60:1d:09:c8:04: 4c:89:16:85:47:f2:ca:c5:ad:77:ef:17:bf:8c:d2: e1:c2:ec:30:98:ee:e3:25:7d:96:9c:b8:62:8b:fe: 1e:7d:44:2b:08:9d:df:26:cc:7c:6d:38:cd:be:62: 4c:4d:4c:0c:ea:6a:9c:b5:59:85:96:4f:e1:97:82: 2d:0c:6e:6b:87:48:13:b0:25:b3:81:e7:4d:3c:46: a7:b3:cd:c0:73:75:8f:7d:ba:e8:de:c9:52:d0:53: 87:c3:69:6b:1e:73:69:98:e0:65:74:55:63:d6:66: 6a:ed:a2:af:50:70:68:1e:cd:58:14:dc:3c:83:67: 24:36:72:98:48:d8:21:ac:ad:68:47:d6:37:b7:18: 91:f7:73:6e:42:8f:c7:20:60:60:a4:dc:5d:52:97: a5:a6:07:49:d0:d0:d7:43:7b:9b:8d:f4:d5:b9:72: 2d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:FB:5D:5F:C6:D2:36:56:76:77:A9:DA:9A:17:06:E2:4C:0D:37:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8ddad6be-d722-30fc-b465-d259a1d72813.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:3d:65:8e:76:ad:30:a7:4c:49:b1:86:2a:fe:dd:1a:23:2e: 5a:9d:60:f1:0b:b0:f9:33:05:16:a3:ec:16:fa:d4:a2:e8:d8: d4:22:9c:cd:a4:b1:e9:48:7f:38:2e:ca:43:31:7b:24:61:fc: d6:bc:64:24:f7:1f:0d:2e:a5:91:7a:39:e0:cb:e7:ce:03:ae: 7c:10:c5:bb:48:4d:d4:00:15:4f:f7:3d:fc:70:30:0a:bf:15: 69:9f:fd:50:5c:30:f4:25:81:62:0c:56:d8:a0:21:30:33:49: 1b:92:f7:7b:f6:0a:03:70:96:4e:1a:7a:c0:55:4d:e9:20:fa: 08:4e:1c:37:31:a0:ff:81:03:5d:dc:16:e3:36:a9:0b:68:69: d7:97:9f:28:9f:24:4a:ed:bf:70:e0:fb:77:31:31:74:88:f2: 6a:b1:17:b0:73:0b:12:b0:fc:15:d9:2d:1f:79:bd:85:4a:c8: 78:78:c5:98:1c:f5:2c:ae:86:82:19:e2:45:c8:92:de:7d:81: 96:9c:f1:a0:e9:ed:f1:4a:cf:fc:a9:4b:69:88:62:4f:e9:72: 35:7b:c6:3e:9e:f3:e4:19:3d:a5:39:bf:81:19:26:33:4c:97: 33:aa:a9:5d:9e:8a:6a:26:2a:e2:eb:7b:ff:42:fe:29:5a:62: 58:4f:4a:bf -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEioMMHj0AQV182cxgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk YWE5ZDZjZjktNTdiYy00NmY1LWExNjQtMjcxM2VjMGM0Yjk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6WjzuN+QgyWDnDaMvCTqS5Hf6NMqTtGOwcp9 I9bIU04YuC+gtAav9vYZtlYiY8k3wx+ut1P2Hx4n3zLEcNgqAwC55jS6DSs/aVKD 5aWvu8SQIbpVYB0JyARMiRaFR/LKxa137xe/jNLhwuwwmO7jJX2WnLhii/4efUQr CJ3fJsx8bTjNvmJMTUwM6mqctVmFlk/hl4ItDG5rh0gTsCWzgedNPEans83Ac3WP fbro3slS0FOHw2lrHnNpmOBldFVj1mZq7aKvUHBoHs1YFNw8g2ckNnKYSNghrK1o R9Y3txiR93NuQo/HIGBgpNxdUpelpgdJ0NDXQ3ubjfTVuXIt/wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIP7XV/G0jZWdnep2poXBuJMDTdwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOGRkYWQ2YmUtZDcyMi0z MGZjLWI0NjUtZDI1OWExZDcyODEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQC1PWWOdq0wp0xJsYYq/t0aIy5anWDxC7D5MwUWo+wW+tSi6NjUIpzN pLHpSH84LspDMXskYfzWvGQk9x8NLqWRejngy+fOA658EMW7SE3UABVP9z38cDAK vxVpn/1QXDD0JYFiDFbYoCEwM0kbkvd79goDcJZOGnrAVU3pIPoIThw3MaD/gQNd 3BbjNqkLaGnXl58onyRK7b9w4Pt3MTF0iPJqsRewcwsSsPwV2S0feb2FSsh4eMWY HPUsroaCGeJFyJLefYGWnPGg6e3xSs/8qUtpiGJP6XI1e8Y+nvPkGT2lOb+BGSYz TJczqqldnopqJiri63v/Qv4pWmJYT0q/ -----END CERTIFICATE-----Generated at Fri Apr 11 22:47:42 2025 by rpki-client