$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9bbb4563-5195-3334-8b02-a5e5cfd4da4d.roa File: 9bbb4563-5195-3334-8b02-a5e5cfd4da4d.roa (raw, json) Hash identifier: MhpR4mcSBWtOdXXMHKRMs5J85gkoGv85ZpNd8Tl8hi0= Subject key identifier: BA:BC:48:B5:86:D3:94:2A:4D:5E:E6:36:24:59:44:E8:72:C4:C7:81 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285848A830C7C3934CB04C9A359B00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9bbb4563-5195-3334-8b02-a5e5cfd4da4d.roa Signing time: Sat 25 Jan 2025 02:00:39 +0000 ROA not before: Sat 25 Jan 2025 02:00:39 +0000 ROA not after: Fri 25 Apr 2025 01:00:39 +0000 asID: 396551 IP address blocks: 192.68.126.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a8:30:c7:c3:93:4c:b0:4c:9a:35:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jan 25 02:00:39 2025 GMT Not After : Apr 25 01:00:39 2025 GMT Subject: CN=a2048505-b8f2-4759-9c5b-3b6c3f28332c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:06:ee:25:b2:96:9e:8a:b3:75:bc:be:bc:3c: cb:2d:46:d7:1d:3b:0b:69:69:21:7c:c2:f5:4e:ce: 93:b7:65:35:c9:c8:3a:60:b5:33:53:50:aa:d6:ae: f0:24:73:97:16:29:89:52:fc:2c:72:a4:af:dd:ef: 70:3f:a2:da:e7:1f:25:c6:8c:e9:15:cc:a3:7d:3b: 4b:92:61:85:10:83:11:96:39:ce:61:16:6c:9a:0e: ea:69:3f:c1:98:04:38:63:79:ad:77:69:29:c3:43: 74:df:00:3f:a8:ba:6e:4c:d6:af:5d:14:d9:e2:26: 83:31:43:f9:11:4b:85:f1:90:84:64:67:cb:b3:41: 2a:a2:e3:32:46:98:44:d9:12:e1:90:ad:35:a0:1e: c5:79:de:46:ac:b0:9f:57:5b:00:a5:0d:ac:99:f2: 8b:a2:c7:be:e6:a0:8f:3f:e1:e2:fe:78:7a:27:cf: 91:53:52:f0:d5:8c:9c:23:7e:9b:f0:5c:78:26:c3: de:d4:a8:11:26:cd:67:38:44:cd:ed:7e:85:c2:ff: d8:4d:c2:0f:25:8b:87:44:f5:9f:f4:49:dd:d9:71: ba:d4:7a:29:0c:18:dd:da:61:4f:39:90:ae:fd:52: 57:b0:0b:02:cb:d9:0d:93:0f:a9:00:20:69:a9:15: 49:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:BC:48:B5:86:D3:94:2A:4D:5E:E6:36:24:59:44:E8:72:C4:C7:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9bbb4563-5195-3334-8b02-a5e5cfd4da4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:a0:25:a6:9d:48:ca:2a:d4:12:15:c3:f9:cb:94:b9:86:46: 81:7e:a1:e7:22:8a:fd:7b:b0:a9:4f:25:0a:ea:6d:57:9e:66: be:7f:76:af:81:a3:5d:07:91:b5:7f:5f:5e:41:e5:59:4e:e5: 68:1f:18:f9:31:30:9a:c6:83:b9:5c:9a:37:68:4a:ea:6d:b8: bb:6c:28:3d:6e:b7:fb:49:e2:73:bf:89:e7:74:55:0e:cc:5f: 54:5d:68:d3:ac:71:51:34:65:48:95:e5:24:5a:cf:5e:a4:8a: 46:ab:10:8e:f2:fa:01:0c:7f:61:d7:10:f3:8f:6e:ea:ee:3d: 5a:d5:48:51:e0:ae:d1:bf:f7:8b:83:01:2c:40:8b:79:28:0a: 42:d7:42:44:f3:a3:a7:74:3d:16:04:f5:3b:a7:85:37:76:cf: 72:0f:6e:82:b0:9e:9d:16:c9:97:3b:67:f5:52:e0:74:6f:e0: 04:30:f8:39:c1:63:49:92:a1:76:cf:9a:bc:38:7a:fb:87:83: c2:f4:5c:f7:b5:5d:ed:4a:58:ce:78:19:3e:15:f9:3c:58:4b: 21:c2:0b:11:50:9d:ee:52:08:55:8c:3e:12:2d:3c:18:90:55: 63:52:6b:e7:9d:c3:8d:2a:b8:7c:ee:2d:23:55:de:95:13:47: 78:dc:a1:33 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEioMMfDk0ywTJo1mwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk YTIwNDg1MDUtYjhmMi00NzU5LTljNWItM2I2YzNmMjgzMzJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAbuJbKWnoqzdby+vDzLLUbXHTsLaWkhfML1 Ts6Tt2U1ycg6YLUzU1Cq1q7wJHOXFimJUvwscqSv3e9wP6La5x8lxozpFcyjfTtL kmGFEIMRljnOYRZsmg7qaT/BmAQ4Y3mtd2kpw0N03wA/qLpuTNavXRTZ4iaDMUP5 EUuF8ZCEZGfLs0EqouMyRphE2RLhkK01oB7Fed5GrLCfV1sApQ2smfKLose+5qCP P+Hi/nh6J8+RU1Lw1YycI36b8Fx4JsPe1KgRJs1nOETN7X6Fwv/YTcIPJYuHRPWf 9End2XG61HopDBjd2mFPOZCu/VJXsAsCy9kNkw+pACBpqRVJCQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLq8SLWG05QqTV7mNiRZROhyxMeBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOWJiYjQ1NjMtNTE5NS0z MzM0LThiMDItYTVlNWNmZDRkYTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCMoCWmnUjKKtQSFcP5y5S5hkaBfqHnIor9e7CpTyUK6m1Xnma+f3av gaNdB5G1f19eQeVZTuVoHxj5MTCaxoO5XJo3aErqbbi7bCg9brf7SeJzv4nndFUO zF9UXWjTrHFRNGVIleUkWs9epIpGqxCO8voBDH9h1xDzj27q7j1a1UhR4K7Rv/eL gwEsQIt5KApC10JE86OndD0WBPU7p4U3ds9yD26CsJ6dFsmXO2f1UuB0b+AEMPg5 wWNJkqF2z5q8OHr7h4PC9Fz3tV3tSljOeBk+Ffk8WEshwgsRUJ3uUghVjD4SLTwY kFVjUmvnncONKrh87i0jVd6VE0d43KEz -----END CERTIFICATE-----Generated at Fri Apr 11 22:42:16 2025 by rpki-client