$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f648c9de-a67a-34f0-87a5-0bc0e4a81efb.roa File: f648c9de-a67a-34f0-87a5-0bc0e4a81efb.roa (raw, json) Hash identifier: qXbOjsI1mrsgs4eo/AE9WD5PQ7vjPEWQCxviXc7pg7o= Subject key identifier: EC:FA:F8:87:C9:6D:32:FE:FE:B9:A0:A6:13:EE:06:4A:7C:1B:96:7C Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285848A830C7B60733349561D14740 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f648c9de-a67a-34f0-87a5-0bc0e4a81efb.roa Signing time: Sat 25 Jan 2025 02:00:39 +0000 ROA not before: Sat 25 Jan 2025 02:00:39 +0000 ROA not after: Fri 25 Apr 2025 01:00:39 +0000 asID: 40717 IP address blocks: 192.68.126.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a8:30:c7:b6:07:33:34:95:61:d1:47:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jan 25 02:00:39 2025 GMT Not After : Apr 25 01:00:39 2025 GMT Subject: CN=c5657f27-2979-4d29-8acd-0bc4cec831a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:2e:a2:f7:00:8c:53:e3:b0:6a:03:39:60:23: 12:17:c7:ea:42:c5:c1:7f:86:72:17:f7:1b:83:1d: 50:77:8d:66:55:e5:9e:8a:59:52:94:5a:3d:c6:6c: de:12:9f:a2:d6:86:ed:07:1a:62:02:33:34:71:31: f0:e4:e3:7a:20:58:de:d9:62:71:eb:fa:eb:e5:88: a5:29:c5:85:f8:10:18:98:3d:79:e1:b7:82:e6:6e: 34:d8:fd:68:ac:08:a6:fa:68:85:46:af:25:27:cf: 86:82:62:f6:e3:08:1c:a6:96:0d:25:c5:c0:2e:e6: 90:54:4e:88:fe:d6:a0:97:89:6e:25:1f:2d:10:c2: 19:c7:18:70:14:d1:7f:bd:8e:be:ef:82:23:30:78: a1:1a:04:76:2e:7e:24:1f:b1:9e:47:65:d6:50:91: 23:d7:eb:c6:d3:9b:18:52:54:9e:47:89:94:01:52: a9:47:6b:8c:53:91:d5:62:c8:37:87:cb:0d:19:ab: f6:91:65:7a:4e:dc:aa:89:0d:53:b2:39:a1:16:cb: 6b:58:28:ff:ed:89:05:0a:81:b3:5c:38:67:bf:38: 21:83:55:bc:2a:14:81:aa:5e:9a:69:31:ed:34:e9: b6:c5:87:3e:da:ca:d3:b9:b9:a6:fd:f6:32:e3:04: 43:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:FA:F8:87:C9:6D:32:FE:FE:B9:A0:A6:13:EE:06:4A:7C:1B:96:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f648c9de-a67a-34f0-87a5-0bc0e4a81efb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:af:c9:33:5d:b4:f9:02:f1:e4:2c:80:ed:54:4e:2d:6e:8d: e4:f7:75:71:fd:42:06:30:53:de:25:6a:7f:54:e9:0b:25:c4: d1:99:f8:73:58:a4:e3:05:64:01:7a:08:d5:e6:50:7c:61:f1: 39:fe:3a:c7:41:30:c1:9e:58:b6:6c:3f:de:17:37:32:7f:7c: 52:e2:dd:a0:03:b1:f1:62:1b:22:34:f8:19:02:83:39:8f:6d: 38:dd:85:27:b5:12:07:72:b7:53:2e:b5:4d:86:21:a6:14:da: 39:27:a2:f0:68:91:45:16:07:18:77:4c:f6:e9:24:12:88:19: 5a:0a:bb:e3:fc:3d:09:8e:14:80:aa:1e:ba:90:ac:f9:85:e3: cf:e8:4e:94:ba:00:e6:2a:ab:df:ac:41:a3:fd:10:f3:23:51: 15:aa:09:c0:f0:19:50:20:0a:1e:f9:bc:f4:aa:10:a5:cb:94: 49:31:28:7f:ac:28:20:44:89:91:d0:13:53:3e:d4:2c:82:4a: 8c:0c:f5:f9:af:a1:31:8c:81:ed:bd:3c:1f:a7:71:32:73:b6: 0a:ae:20:11:90:e1:3a:53:63:1c:4b:56:a8:3c:00:79:56:85: 57:e0:d5:8a:91:31:b2:5d:a6:6b:b2:de:75:a2:4d:28:ad:bc: 37:de:04:56 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEioMMe2BzM0lWHRR0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk YzU2NTdmMjctMjk3OS00ZDI5LThhY2QtMGJjNGNlYzgzMWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgy6i9wCMU+OwagM5YCMSF8fqQsXBf4ZyF/cb gx1Qd41mVeWeillSlFo9xmzeEp+i1obtBxpiAjM0cTHw5ON6IFje2WJx6/rr5Yil KcWF+BAYmD154beC5m402P1orAim+miFRq8lJ8+GgmL24wgcppYNJcXALuaQVE6I /tagl4luJR8tEMIZxxhwFNF/vY6+74IjMHihGgR2Ln4kH7GeR2XWUJEj1+vG05sY UlSeR4mUAVKpR2uMU5HVYsg3h8sNGav2kWV6TtyqiQ1TsjmhFstrWCj/7YkFCoGz XDhnvzghg1W8KhSBql6aaTHtNOm2xYc+2srTubmm/fYy4wRD2wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOz6+IfJbTL+/rmgphPuBkp8G5Z8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjY0OGM5ZGUtYTY3YS0z NGYwLTg3YTUtMGJjMGU0YTgxZWZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCdr8kzXbT5AvHkLIDtVE4tbo3k93Vx/UIGMFPeJWp/VOkLJcTRmfhz WKTjBWQBegjV5lB8YfE5/jrHQTDBnli2bD/eFzcyf3xS4t2gA7HxYhsiNPgZAoM5 j2043YUntRIHcrdTLrVNhiGmFNo5J6LwaJFFFgcYd0z26SQSiBlaCrvj/D0JjhSA qh66kKz5hePP6E6UugDmKqvfrEGj/RDzI1EVqgnA8BlQIAoe+bz0qhCly5RJMSh/ rCggRImR0BNTPtQsgkqMDPX5r6ExjIHtvTwfp3Eyc7YKriARkOE6U2McS1aoPAB5 VoVX4NWKkTGyXaZrst51ok0orbw33gRW -----END CERTIFICATE-----Generated at Sat Apr 12 00:03:02 2025 by rpki-client