$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481/6518400e-fd36-393e-bb41-073aaf9da36d.roa File: 6518400e-fd36-393e-bb41-073aaf9da36d.roa (raw, json) Hash identifier: hzSSZb9VzNL9VBt/Frj+4Ig+F3yc3SCZTHE88FPqQSc= Subject key identifier: BC:D0:D6:CB:5F:C3:CD:5B:E5:9B:4B:4D:8C:DC:2E:F1:FA:B6:71:04 Certificate issuer: /CN=1b3580ca-2fc3-48f5-bd65-dcc9f0b19481 Certificate serial: 010D0C9F43285848FD56CC05F45D8FDAA7625680 Authority key identifier: 76:1B:26:A3:E9:3D:A1:91:F5:E4:1E:1E:48:2D:F7:36:82:12:D1:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481/6518400e-fd36-393e-bb41-073aaf9da36d.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 6992 IP address blocks: 198.178.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:cc:05:f4:5d:8f:da:a7:62:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b3580ca-2fc3-48f5-bd65-dcc9f0b19481 Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=f25ef311-9b2a-42a1-aeef-5a343a17ac65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:91:9d:16:c7:eb:fe:d0:a4:1f:12:94:38:27: 14:cf:ff:ec:22:3d:d5:ff:b2:c3:1a:c2:12:30:4c: 54:91:c6:8f:bd:74:06:f0:3e:98:07:37:40:53:c2: 1b:cf:33:0e:3a:22:97:73:08:1b:03:c7:b5:5d:70: 3c:16:67:6d:b2:21:9c:2d:66:0b:06:fc:5a:b8:9f: 37:14:79:88:0a:ab:ef:8d:76:9d:40:7f:ba:a7:46: ed:47:4f:e8:d9:04:d8:e7:04:97:35:59:b7:61:c2: 13:c5:17:ae:c0:32:9c:e1:01:a3:8e:e7:7c:12:df: 88:36:eb:13:54:dd:44:7c:83:04:9c:4a:ff:5f:b4: ff:0e:a7:cc:a4:96:80:ca:8a:8f:10:73:45:7f:7c: 6e:57:82:6e:36:74:f9:db:9a:fd:6a:3b:b0:74:61: 06:41:81:a6:93:41:c8:eb:53:10:7d:ac:18:81:b6: a2:c7:12:10:5e:30:13:43:f4:38:35:8c:b0:3e:04: 18:5e:6b:2e:ec:8b:bb:60:9e:ce:e7:00:f8:38:6c: 7e:9c:d1:c3:68:d5:24:36:8d:4a:d3:da:2c:63:47: cf:ab:b2:b7:1e:84:e2:b4:89:08:62:21:54:da:d6: 41:7c:61:60:c1:74:82:cc:30:5a:55:be:76:87:30: d2:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:D0:D6:CB:5F:C3:CD:5B:E5:9B:4B:4D:8C:DC:2E:F1:FA:B6:71:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481/6518400e-fd36-393e-bb41-073aaf9da36d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481.crl X509v3 Authority Key Identifier: keyid:76:1B:26:A3:E9:3D:A1:91:F5:E4:1E:1E:48:2D:F7:36:82:12:D1:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481.cer sbgp-ipAddrBlock: critical IPv4: 198.178.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:7c:19:66:56:06:58:b0:d1:70:b1:2e:9a:d6:fe:6d:88:1f: 32:38:09:70:43:fe:61:69:db:8f:1d:3e:5b:3b:bd:87:0a:10: 7d:1b:80:19:ea:4e:22:35:78:bd:93:5d:97:1f:d8:a4:cc:80: 99:ea:b0:a7:64:73:79:f9:fa:8e:cd:5d:5b:4b:f3:ad:2c:15: ce:e4:f7:d7:6c:7d:fa:4c:f0:15:78:ee:a5:7d:54:00:3e:70: e8:7c:5e:7c:64:84:83:82:a9:45:0e:9d:32:87:d5:b0:08:b5: a5:8e:31:61:18:e0:86:31:bb:fd:8d:ce:6a:ac:f3:04:7e:ea: 16:57:35:50:51:ac:34:75:9c:52:fe:50:c0:d3:01:ad:3d:82: db:29:71:dd:af:91:b7:0a:c4:37:c8:b8:a1:e5:4e:56:d6:31: 83:08:4d:b4:eb:68:25:41:aa:02:9d:0c:3e:85:6f:97:d7:a3: f4:70:bf:30:d0:3a:f8:ae:fc:82:12:33:82:a9:7b:43:c4:ba: f8:15:86:a5:6b:09:02:ce:b0:8b:28:1e:c2:67:ad:eb:27:94: de:1d:e3:04:bc:b9:4c:ec:3b:d2:b5:9b:80:7d:4b:6c:ba:74: fd:03:d9:82:74:38:72:a8:12:76:43:52:c6:1f:7d:51:3d:b9: 2b:f5:b4:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9VswF9F2P2qdiVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWIzNTgwY2EtMmZjMy00OGY1LWJkNjUtZGNjOWYwYjE5 NDgxMB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk ZjI1ZWYzMTEtOWIyYS00MmExLWFlZWYtNWEzNDNhMTdhYzY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ZGdFsfr/tCkHxKUOCcUz//sIj3V/7LDGsIS MExUkcaPvXQG8D6YBzdAU8IbzzMOOiKXcwgbA8e1XXA8FmdtsiGcLWYLBvxauJ83 FHmICqvvjXadQH+6p0btR0/o2QTY5wSXNVm3YcITxReuwDKc4QGjjud8Et+INusT VN1EfIMEnEr/X7T/DqfMpJaAyoqPEHNFf3xuV4JuNnT525r9ajuwdGEGQYGmk0HI 61MQfawYgbaixxIQXjATQ/Q4NYywPgQYXmsu7Iu7YJ7O5wD4OGx+nNHDaNUkNo1K 09osY0fPq7K3HoTitIkIYiFU2tZBfGFgwXSCzDBaVb52hzDSQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLzQ1stfw81b5ZtLTYzcLvH6tnEEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xYjM1 ODBjYS0yZmMzLTQ4ZjUtYmQ2NS1kY2M5ZjBiMTk0ODEvNjUxODQwMGUtZmQzNi0z OTNlLWJiNDEtMDczYWFmOWRhMzZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMWIzNTgwY2EtMmZjMy00OGY1LWJk NjUtZGNjOWYwYjE5NDgxLzFiMzU4MGNhLTJmYzMtNDhmNS1iZDY1LWRjYzlmMGIx OTQ4MS5jcmwwHwYDVR0jBBgwFoAUdhsmo+k9oZH15B4eSC33NoIS0XYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xYjM1ODBjYS0yZmMzLTQ4ZjUtYmQ2NS1kY2M5 ZjBiMTk0ODEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxrKdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJ8GWZWBliw0XCxLprW/m2IHzI4CXBD/mFp248dPls7vYcKEH0bgBnq TiI1eL2TXZcf2KTMgJnqsKdkc3n5+o7NXVtL860sFc7k99dsffpM8BV47qV9VAA+ cOh8XnxkhIOCqUUOnTKH1bAItaWOMWEY4IYxu/2Nzmqs8wR+6hZXNVBRrDR1nFL+ UMDTAa09gtspcd2vkbcKxDfIuKHlTlbWMYMITbTraCVBqgKdDD6Fb5fXo/RwvzDQ Oviu/IISM4Kpe0PEuvgVhqVrCQLOsIsoHsJnresnlN4d4wS8uUzsO9K1m4B9S2y6 dP0D2YJ0OHKoEnZDUsYffVE9uSv1tGc= -----END CERTIFICATE-----Generated at Fri Mar 14 11:01:01 2025 by rpki-client