$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481/df5adfc5-c427-36a1-9353-c23d1976c935.roa File: df5adfc5-c427-36a1-9353-c23d1976c935.roa (raw, json) Hash identifier: ZnBvHtfpQ8jKASjeX86QAKQEjVZV2O1r+F3cifAf6vU= Subject key identifier: 91:1A:80:DC:CC:7C:28:7C:C7:DC:4F:38:74:C7:11:B5:D4:03:D0:38 Certificate issuer: /CN=1b3580ca-2fc3-48f5-bd65-dcc9f0b19481 Certificate serial: 010D0C9F432858481DFFDD230338FB1229AAE1D0 Authority key identifier: 76:1B:26:A3:E9:3D:A1:91:F5:E4:1E:1E:48:2D:F7:36:82:12:D1:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481/df5adfc5-c427-36a1-9353-c23d1976c935.roa Signing time: Fri 06 Dec 2024 14:00:51 +0000 ROA not before: Fri 06 Dec 2024 14:00:51 +0000 ROA not after: Thu 06 Mar 2025 14:00:51 +0000 asID: 10310 IP address blocks: 198.178.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:1d:ff:dd:23:03:38:fb:12:29:aa:e1:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b3580ca-2fc3-48f5-bd65-dcc9f0b19481 Validity Not Before: Dec 6 14:00:51 2024 GMT Not After : Mar 6 14:00:51 2025 GMT Subject: CN=35795173-e29a-40da-98e2-a16c43f2376f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:ec:3a:92:70:1e:58:8e:78:81:49:3f:ac:8a: cb:d8:49:76:97:69:de:23:c3:68:e4:01:e0:fa:3c: cf:01:c9:e8:96:d5:50:f2:a4:da:39:e0:5b:74:19: 8a:b2:ca:c9:c0:a2:39:88:d2:51:53:7c:b2:ee:41: 62:c0:02:e9:4c:f2:5c:41:f8:a9:23:6a:c0:d9:a8: 90:2e:f7:6f:e7:c5:f0:86:27:b6:19:d8:46:fb:e3: 9d:9e:6e:7e:82:0d:90:2f:1d:b0:d8:4c:b2:7f:e5: 0c:aa:37:59:c2:a6:db:c0:89:eb:f1:f1:cc:fb:f9: d7:3b:c0:ff:f7:d8:46:0f:4a:bb:f0:e2:21:3c:1b: bd:81:56:df:d1:a0:ec:38:06:50:82:ed:ec:be:d1: ef:16:16:f2:4b:7b:09:65:51:c6:9c:24:af:4e:c4: ab:46:e3:ae:0a:1e:01:22:03:a1:c2:66:ba:64:20: 64:58:6c:8a:9b:d2:f0:75:21:50:8f:8a:17:43:24: 4e:f3:ab:f3:45:7c:8f:e0:70:5e:52:5e:8a:8f:84: 30:c7:be:d9:9a:8b:a2:b3:f9:cd:50:3e:bd:8a:a6: 92:79:8f:35:d2:1e:fc:c9:31:79:da:4f:86:10:1e: 00:08:29:d1:eb:71:89:0d:a7:f4:94:17:5a:bf:c8: 74:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:1A:80:DC:CC:7C:28:7C:C7:DC:4F:38:74:C7:11:B5:D4:03:D0:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481/df5adfc5-c427-36a1-9353-c23d1976c935.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481.crl X509v3 Authority Key Identifier: keyid:76:1B:26:A3:E9:3D:A1:91:F5:E4:1E:1E:48:2D:F7:36:82:12:D1:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481.cer sbgp-ipAddrBlock: critical IPv4: 198.178.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:4d:55:87:cb:10:08:81:25:fa:ae:25:e6:80:d4:87:dd:b2: a8:0c:1c:be:16:20:7b:73:92:5a:88:90:33:0b:21:ac:2d:1a: d7:04:eb:b4:4d:d0:be:03:5e:44:2c:01:36:50:f5:95:af:63: 0f:49:31:a7:0f:e1:a1:a1:5c:88:55:d8:b0:a3:b1:91:24:58: b7:55:f9:b5:0c:bb:81:16:5d:ba:f2:9a:ec:a2:fb:61:05:20: a9:52:c4:cf:a6:01:e9:6d:74:6f:00:7a:5e:70:0e:be:27:93: fa:22:3a:80:98:af:53:65:ae:05:0f:0a:48:57:83:0d:b0:ed: fb:83:af:f8:b2:e4:a0:5e:d6:04:db:3e:56:db:2d:c3:d1:8a: 75:a8:a1:28:6e:fb:cc:0e:ff:eb:51:c0:11:30:dd:7a:dc:31: 40:fe:4a:9a:d5:6b:de:e9:78:f8:8d:44:ff:09:1a:20:42:85: 23:92:41:82:ae:72:7a:d8:b9:cf:0f:27:2d:aa:da:1d:52:5b: ea:f9:3f:23:1c:74:22:4c:ec:9f:f6:28:16:07:69:65:f2:1b: e9:c9:db:a7:d1:9d:0d:35:a5:5c:79:eb:c0:e7:2c:20:b1:66: dc:9c:bf:d9:93:97:79:9b:bc:c5:cc:8d:15:b0:a6:85:77:80: 9f:ca:25:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgd/90jAzj7Eimq4dAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWIzNTgwY2EtMmZjMy00OGY1LWJkNjUtZGNjOWYwYjE5 NDgxMB4XDTI0MTIwNjE0MDA1MVoXDTI1MDMwNjE0MDA1MVowLzEtMCsGA1UEAxMk MzU3OTUxNzMtZTI5YS00MGRhLTk4ZTItYTE2YzQzZjIzNzZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+w6knAeWI54gUk/rIrL2El2l2neI8No5AHg +jzPAcnoltVQ8qTaOeBbdBmKssrJwKI5iNJRU3yy7kFiwALpTPJcQfipI2rA2aiQ Lvdv58Xwhie2GdhG++Odnm5+gg2QLx2w2Eyyf+UMqjdZwqbbwInr8fHM+/nXO8D/ 99hGD0q78OIhPBu9gVbf0aDsOAZQgu3svtHvFhbyS3sJZVHGnCSvTsSrRuOuCh4B IgOhwma6ZCBkWGyKm9LwdSFQj4oXQyRO86vzRXyP4HBeUl6Kj4Qwx77Zmouis/nN UD69iqaSeY810h78yTF52k+GEB4ACCnR63GJDaf0lBdav8h0uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJEagNzMfCh8x9xPOHTHEbXUA9A4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xYjM1 ODBjYS0yZmMzLTQ4ZjUtYmQ2NS1kY2M5ZjBiMTk0ODEvZGY1YWRmYzUtYzQyNy0z NmExLTkzNTMtYzIzZDE5NzZjOTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMWIzNTgwY2EtMmZjMy00OGY1LWJk NjUtZGNjOWYwYjE5NDgxLzFiMzU4MGNhLTJmYzMtNDhmNS1iZDY1LWRjYzlmMGIx OTQ4MS5jcmwwHwYDVR0jBBgwFoAUdhsmo+k9oZH15B4eSC33NoIS0XYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xYjM1ODBjYS0yZmMzLTQ4ZjUtYmQ2NS1kY2M5 ZjBiMTk0ODEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxrKdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJZNVYfLEAiBJfquJeaA1IfdsqgMHL4WIHtzklqIkDMLIawtGtcE67RN 0L4DXkQsATZQ9ZWvYw9JMacP4aGhXIhV2LCjsZEkWLdV+bUMu4EWXbrymuyi+2EF IKlSxM+mAeltdG8Ael5wDr4nk/oiOoCYr1NlrgUPCkhXgw2w7fuDr/iy5KBe1gTb PlbbLcPRinWooShu+8wO/+tRwBEw3XrcMUD+SprVa97pePiNRP8JGiBChSOSQYKu cnrYuc8PJy2q2h1SW+r5PyMcdCJM7J/2KBYHaWXyG+nJ26fRnQ01pVx568DnLCCx Ztycv9mTl3mbvMXMjRWwpoV3gJ/KJYQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:43:53 2025 by rpki-client