$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b2d095ee-23d7-30f6-9b3a-36b1d0a757d3.roa File: b2d095ee-23d7-30f6-9b3a-36b1d0a757d3.roa (raw, json) Hash identifier: U+JdrXeHAo4BSNQtudMoS4GVwPkDuJLYeJGJZtO1s2w= Subject key identifier: 60:05:DE:AC:70:37:72:E5:14:3F:A4:41:B7:20:77:F7:D7:DB:52:99 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285848A830BC0859022F0B06515700 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b2d095ee-23d7-30f6-9b3a-36b1d0a757d3.roa Signing time: Sat 25 Jan 2025 02:00:39 +0000 ROA not before: Sat 25 Jan 2025 02:00:39 +0000 ROA not after: Fri 25 Apr 2025 01:00:39 +0000 asID: 36629 IP address blocks: 192.68.126.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a8:30:bc:08:59:02:2f:0b:06:51:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jan 25 02:00:39 2025 GMT Not After : Apr 25 01:00:39 2025 GMT Subject: CN=6f72d33e-a18a-4252-9b00-88b9714bd817 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:e6:9d:34:bb:fc:c0:2b:c3:1d:ba:00:ba:31: bd:21:59:5e:91:0e:4f:32:dd:e8:ae:a6:34:76:32: 16:bb:8e:b7:6e:87:63:61:41:86:43:b0:ea:eb:f0: 9c:85:f9:f9:23:38:2c:b7:89:dc:85:47:f8:26:5d: 3b:36:bc:73:dc:ed:99:7a:e2:6c:92:c9:fc:6a:50: 39:d0:77:d5:c8:0f:37:b6:cb:3a:7e:25:aa:af:92: a3:f9:8e:14:c9:da:f2:60:16:31:ae:85:f7:3f:4d: 3e:65:43:58:54:de:8d:08:d1:74:28:98:b9:5e:52: 66:ad:62:61:04:35:17:5f:f4:5c:fc:40:49:ed:af: 6b:45:45:47:b3:3b:22:ba:c3:db:8f:1c:ba:20:65: 57:9a:f9:d1:a8:b1:47:a5:fc:5d:85:c6:a0:13:ca: 5f:68:7c:0e:a2:3e:a6:d8:60:eb:3b:56:c5:bd:25: 9c:87:d2:08:63:f6:47:a3:b4:ab:93:9b:78:c5:c7: 7f:64:c4:2c:94:35:f4:b5:6a:02:e3:da:c9:65:f4: 10:7b:ef:32:73:04:39:c1:0f:7e:4c:35:65:4e:a2: 26:c3:19:0d:54:65:21:cb:c9:61:a8:d1:90:31:ed: 6d:d2:12:25:69:c7:6f:ef:ed:d7:82:af:dc:a2:c8: 23:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:05:DE:AC:70:37:72:E5:14:3F:A4:41:B7:20:77:F7:D7:DB:52:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b2d095ee-23d7-30f6-9b3a-36b1d0a757d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:a4:45:cb:13:15:cb:7e:06:2a:87:c1:a7:80:65:f9:1f:d2: 7b:0f:5f:ad:24:ac:ba:a3:af:2e:6d:34:84:1d:bf:7c:ad:bb: 6f:fd:20:f0:85:2f:c0:74:27:5a:b2:d1:8a:bd:ee:d1:8e:da: f1:00:4a:8d:9e:cb:e5:1f:8a:ef:0d:61:81:79:09:7f:ba:16: ec:fa:34:43:4d:ba:38:6d:4f:dc:69:11:bb:2e:fc:d0:23:bd: 77:b3:63:5b:f5:42:cd:2d:cc:47:0f:26:01:b7:2c:47:2c:4c: 89:21:b3:c9:f7:86:85:55:ce:19:aa:ae:0e:bf:10:92:f6:0f: 23:bf:ca:67:2f:cf:5c:68:63:b4:b1:3a:32:e0:35:f8:40:46: c6:d4:d5:24:87:34:42:a1:f9:59:3e:21:8d:34:4e:70:3f:f8: de:ad:72:8e:60:5f:c9:22:5c:1c:0d:c1:dc:f0:b0:c8:14:5b: 50:f3:ed:a1:c7:34:43:56:9d:04:de:ab:98:b4:55:af:97:79: 83:63:80:eb:9d:06:50:3d:e6:70:9d:d5:60:58:6a:20:02:8c: f2:03:60:dd:f8:6e:60:12:41:58:b3:2b:91:5e:36:8a:1b:5a: 49:36:52:17:ce:22:66:79:b5:22:c3:ad:89:a2:83:9e:be:3f: 91:5e:cb:ba -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEioMLwIWQIvCwZRVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk NmY3MmQzM2UtYTE4YS00MjUyLTliMDAtODhiOTcxNGJkODE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOadNLv8wCvDHboAujG9IVlekQ5PMt3orqY0 djIWu463bodjYUGGQ7Dq6/Cchfn5Izgst4nchUf4Jl07Nrxz3O2ZeuJsksn8alA5 0HfVyA83tss6fiWqr5Kj+Y4UydryYBYxroX3P00+ZUNYVN6NCNF0KJi5XlJmrWJh BDUXX/Rc/EBJ7a9rRUVHszsiusPbjxy6IGVXmvnRqLFHpfxdhcagE8pfaHwOoj6m 2GDrO1bFvSWch9IIY/ZHo7Srk5t4xcd/ZMQslDX0tWoC49rJZfQQe+8ycwQ5wQ9+ TDVlTqImwxkNVGUhy8lhqNGQMe1t0hIlacdv7+3Xgq/cosgjVQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGAF3qxwN3LlFD+kQbcgd/fX21KZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjJkMDk1ZWUtMjNkNy0z MGY2LTliM2EtMzZiMWQwYTc1N2QzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCfpEXLExXLfgYqh8GngGX5H9J7D1+tJKy6o68ubTSEHb98rbtv/SDw hS/AdCdastGKve7RjtrxAEqNnsvlH4rvDWGBeQl/uhbs+jRDTbo4bU/caRG7LvzQ I713s2Nb9ULNLcxHDyYBtyxHLEyJIbPJ94aFVc4Zqq4OvxCS9g8jv8pnL89caGO0 sToy4DX4QEbG1NUkhzRCoflZPiGNNE5wP/jerXKOYF/JIlwcDcHc8LDIFFtQ8+2h xzRDVp0E3quYtFWvl3mDY4DrnQZQPeZwndVgWGogAozyA2Dd+G5gEkFYsyuRXjaK G1pJNlIXziJmebUiw62JooOevj+RXsu6 -----END CERTIFICATE-----Generated at Sat Apr 12 00:02:58 2025 by rpki-client