$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff3e442b-04b9-3412-bf05-be92fdb90424.roa File: ff3e442b-04b9-3412-bf05-be92fdb90424.roa (raw, json) Hash identifier: EY2AO4qsmaLLwmjASUJIjJKm1lc+j4f+FrXRYTuL0GQ= Subject key identifier: D2:E7:E2:08:C2:89:2B:37:39:36:2A:05:BC:64:19:B7:20:08:43:1A Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285848A830C0203E1358D299823380 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff3e442b-04b9-3412-bf05-be92fdb90424.roa Signing time: Sat 25 Jan 2025 02:00:39 +0000 ROA not before: Sat 25 Jan 2025 02:00:39 +0000 ROA not after: Fri 25 Apr 2025 01:00:39 +0000 asID: 40717 IP address blocks: 192.68.126.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a8:30:c0:20:3e:13:58:d2:99:82:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jan 25 02:00:39 2025 GMT Not After : Apr 25 01:00:39 2025 GMT Subject: CN=56e3d20a-a4ba-4e55-afb0-43a64101e9a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:73:fa:12:ae:f6:17:c1:4d:3d:b3:84:bd:6d: b6:bb:81:e3:d2:55:b7:91:f6:e6:42:74:e1:bf:1e: 70:f8:d1:7e:10:d3:e9:b4:3e:4e:6c:4f:60:fe:94: 9b:8a:41:20:3f:36:9e:23:a7:0f:02:a0:7b:f5:0c: 1a:e2:a8:44:5f:0e:47:27:90:0c:94:5c:6a:42:32: 34:2f:4f:89:cd:85:3f:d2:af:03:f7:ab:80:85:56: 84:3f:2f:7c:fb:23:50:05:dd:46:2c:77:3e:00:2b: 2e:08:1b:bf:3a:44:bd:1c:ac:05:e5:2b:8e:e9:49: 17:65:5a:69:36:40:c7:7c:88:be:4e:02:b5:80:d3: 67:53:25:f8:87:a3:6c:fd:93:20:98:71:1f:0d:06: 6f:61:53:4d:b9:f5:34:f4:fc:41:74:5e:5b:97:e0: 0d:9d:27:17:90:0d:07:bd:d7:ff:5b:c0:72:97:28: fc:1a:62:72:64:71:9c:82:5a:39:e4:fb:6b:33:bc: 0d:eb:7c:8a:3f:29:d1:d0:18:06:90:69:14:db:30: 46:95:b2:ac:64:c7:e4:99:2e:d1:78:1f:d5:b8:11: 8b:d3:4b:cd:db:dc:81:e2:4f:4d:a0:07:e5:dc:7b: d1:b9:5f:ff:f5:3d:30:59:57:c0:c9:ff:c5:f1:7b: 58:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:E7:E2:08:C2:89:2B:37:39:36:2A:05:BC:64:19:B7:20:08:43:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff3e442b-04b9-3412-bf05-be92fdb90424.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:67:d5:e9:8e:1f:31:98:92:f4:ae:39:86:5f:53:b4:7e:0e: 50:c7:4e:cb:bc:96:e4:41:bd:56:e3:bc:38:3a:d1:f3:ca:7a: a5:1e:44:29:d0:eb:3c:31:77:42:4d:44:fc:a3:f0:b6:69:13: 9d:db:88:d0:15:d7:0d:ff:46:b0:e6:69:28:58:ee:7d:07:17: 27:35:39:5b:04:7b:3e:b9:ec:d3:81:5a:05:7e:e9:fc:bf:84: cb:d5:37:29:48:e0:9b:a8:89:bd:35:9c:98:f8:45:5e:e8:ea: 38:60:36:3f:db:3f:be:a5:41:87:6d:da:31:16:13:f3:f4:80: 29:0b:b6:e1:62:93:d6:d5:60:3b:25:cf:b7:47:81:58:ca:6c: 94:07:44:5b:10:0f:28:19:d8:6f:f4:7a:cc:59:de:33:5f:d9: 9a:81:bb:b1:54:ed:9c:35:d8:56:f7:63:5c:2d:97:40:59:c6: fb:b2:32:3c:3d:a2:f1:94:8f:ac:bb:df:c3:d6:df:ba:f1:15: b8:da:e0:cb:52:3c:dc:12:0b:91:da:cf:f7:df:2f:33:7d:cc: b6:ce:a7:1f:0d:da:c8:ed:54:b1:91:5d:0a:c4:51:f9:34:60: 01:10:f5:af:b3:80:57:3f:5a:6a:eb:14:f4:4f:19:e9:26:f9: 7e:6a:ff:ac -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEioMMAgPhNY0pmCM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk NTZlM2QyMGEtYTRiYS00ZTU1LWFmYjAtNDNhNjQxMDFlOWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nP6Eq72F8FNPbOEvW22u4Hj0lW3kfbmQnTh vx5w+NF+ENPptD5ObE9g/pSbikEgPzaeI6cPAqB79Qwa4qhEXw5HJ5AMlFxqQjI0 L0+JzYU/0q8D96uAhVaEPy98+yNQBd1GLHc+ACsuCBu/OkS9HKwF5SuO6UkXZVpp NkDHfIi+TgK1gNNnUyX4h6Ns/ZMgmHEfDQZvYVNNufU09PxBdF5bl+ANnScXkA0H vdf/W8Bylyj8GmJyZHGcglo55PtrM7wN63yKPynR0BgGkGkU2zBGlbKsZMfkmS7R eB/VuBGL00vN29yB4k9NoAfl3HvRuV//9T0wWVfAyf/F8XtYmQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNLn4gjCiSs3OTYqBbxkGbcgCEMaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZmYzZTQ0MmItMDRiOS0z NDEyLWJmMDUtYmU5MmZkYjkwNDI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAeZ9Xpjh8xmJL0rjmGX1O0fg5Qx07LvJbkQb1W47w4OtHzynqlHkQp 0Os8MXdCTUT8o/C2aROd24jQFdcN/0aw5mkoWO59BxcnNTlbBHs+uezTgVoFfun8 v4TL1TcpSOCbqIm9NZyY+EVe6Oo4YDY/2z++pUGHbdoxFhPz9IApC7bhYpPW1WA7 Jc+3R4FYymyUB0RbEA8oGdhv9HrMWd4zX9magbuxVO2cNdhW92NcLZdAWcb7sjI8 PaLxlI+su9/D1t+68RW42uDLUjzcEguR2s/33y8zfcy2zqcfDdrI7VSxkV0KxFH5 NGABEPWvs4BXP1pq6xT0TxnpJvl+av+s -----END CERTIFICATE-----Generated at Sat Apr 12 00:00:31 2025 by rpki-client