$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/b388c415-7d7e-3eed-8eef-44a4d358c737.roa File: b388c415-7d7e-3eed-8eef-44a4d358c737.roa (raw, json) Hash identifier: Wv8QXhBM90iuwl3tpAXssTIORaU4KhmkzeXLC/V1UHM= Subject key identifier: 42:66:4B:07:B8:B9:CB:9F:56:6D:65:81:42:9F:5A:15:5B:07:74:EF Certificate issuer: /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1 Certificate serial: 010D0C9F432858490B4C19532B618826EE4F2080 Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/b388c415-7d7e-3eed-8eef-44a4d358c737.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 394177 IP address blocks: 158.62.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:19:53:2b:61:88:26:ee:4f:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1 Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=5fef0b27-7206-4b4a-8ca4-6093d88bc9b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:2d:45:fe:67:93:aa:a1:6b:b2:ca:4c:d7:1c: e3:3d:f1:f7:c5:0d:90:e8:3a:ba:c3:49:04:32:63: 3c:02:c8:38:67:34:90:b3:30:59:17:80:92:68:f7: 55:b4:b1:bb:a9:a1:8f:9d:00:2e:ef:00:52:03:f7: c6:62:ea:c8:08:ba:fd:a8:c5:13:df:09:f2:ee:19: d7:a8:8b:61:fc:70:0c:de:b2:e7:53:db:24:e7:51: 3f:53:91:7b:d5:46:a9:8c:90:68:0d:3b:dd:43:d3: 83:5a:bf:85:02:03:17:80:84:8a:60:bc:8d:55:fa: d0:19:89:66:18:2c:60:a4:91:c2:0b:39:e2:3a:3a: b6:0a:e6:fd:65:95:31:40:05:88:17:d0:40:f2:b2: a7:e6:01:20:42:1c:9e:57:4b:3c:3e:a4:39:d3:a1: ae:88:85:7f:e6:75:8c:e8:ec:0e:3b:d3:cc:54:67: f6:b7:b4:af:5a:95:80:b3:b5:99:fc:19:e1:25:7d: 13:ec:c8:cf:83:12:fc:f1:da:82:d2:28:f1:31:3d: 6e:67:80:0c:a6:86:c2:a8:b2:5e:a0:49:7c:36:c8: 7f:c4:9d:25:a4:78:4b:af:d1:ad:d8:7c:42:24:79: 70:80:2b:04:f0:4a:5f:2d:7e:52:f6:ef:fd:5d:de: 5f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:66:4B:07:B8:B9:CB:9F:56:6D:65:81:42:9F:5A:15:5B:07:74:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/b388c415-7d7e-3eed-8eef-44a4d358c737.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl X509v3 Authority Key Identifier: keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer sbgp-ipAddrBlock: critical IPv4: 158.62.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:04:97:c0:60:aa:1d:b1:a2:b6:5d:32:46:7a:c5:90:1c:e5: e8:f8:3b:1a:51:aa:ec:5b:67:3f:aa:ac:39:72:a9:14:0c:f7: c0:f3:81:a6:8d:8e:16:97:b5:32:fe:16:b4:02:77:07:81:21: 66:e9:ae:f5:df:e0:9e:f9:44:9a:a2:f4:27:76:3a:33:9b:3b: 9e:da:d9:a1:8e:45:91:ae:53:07:8f:b7:7c:5a:48:ba:ea:d4: d1:57:bf:92:a4:46:28:6d:df:5f:8f:d2:db:e0:3b:a0:0f:85: a4:ab:e5:eb:52:35:dc:8b:60:30:ea:aa:6b:2e:55:94:27:bc: 29:d5:6b:0f:93:c5:2c:80:0a:91:34:bd:19:a7:ac:92:96:61: 11:e5:5a:01:01:c3:b3:8e:8f:b6:6d:38:b0:a4:b5:01:e0:53: 2c:70:94:4a:d9:75:07:db:35:a2:25:04:57:24:7e:a2:c8:b8: cd:87:c6:ed:69:5a:f3:5f:f3:e2:c5:ce:40:46:a9:21:97:cb: 4c:5d:ef:4f:1a:eb:bc:91:8f:af:23:1d:c4:34:41:ab:70:97: 21:d2:51:db:ae:87:b9:5b:bc:38:85:6a:de:b5:cf:04:df:c1: 7e:68:ca:35:2f:30:6d:3d:4e:ab:c2:bc:c6:de:ae:cd:fb:ef: 0f:c7:4f:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTBlTK2GIJu5PIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjBlOTcyZTctYWUxZS00NDhjLThlNmMtOGY4MWY3M2I3 N2ExMB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk NWZlZjBiMjctNzIwNi00YjRhLThjYTQtNjA5M2Q4OGJjOWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhC1F/meTqqFrsspM1xzjPfH3xQ2Q6Dq6w0kE MmM8Asg4ZzSQszBZF4CSaPdVtLG7qaGPnQAu7wBSA/fGYurICLr9qMUT3wny7hnX qIth/HAM3rLnU9sk51E/U5F71UapjJBoDTvdQ9ODWr+FAgMXgISKYLyNVfrQGYlm GCxgpJHCCzniOjq2Cub9ZZUxQAWIF9BA8rKn5gEgQhyeV0s8PqQ506GuiIV/5nWM 6OwOO9PMVGf2t7SvWpWAs7WZ/BnhJX0T7MjPgxL88dqC0ijxMT1uZ4AMpobCqLJe oEl8Nsh/xJ0lpHhLr9Gt2HxCJHlwgCsE8EpfLX5S9u/9Xd5fjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJmSwe4ucufVm1lgUKfWhVbB3TvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5 NzJlNy1hZTFlLTQ0OGMtOGU2Yy04ZjgxZjczYjc3YTEvYjM4OGM0MTUtN2Q3ZS0z ZWVkLThlZWYtNDRhNGQzNThjNzM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjBlOTcyZTctYWUxZS00NDhjLThl NmMtOGY4MWY3M2I3N2ExLzIwZTk3MmU3LWFlMWUtNDQ4Yy04ZTZjLThmODFmNzNi NzdhMS5jcmwwHwYDVR0jBBgwFoAU9m6h5/hh+dd0ACy7mBw7ijSGX0cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5NzJlNy1hZTFlLTQ0OGMtOGU2Yy04Zjgx ZjczYjc3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnj7GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADwEl8Bgqh2xorZdMkZ6xZAc5ej4OxpRquxbZz+qrDlyqRQM98DzgaaN jhaXtTL+FrQCdweBIWbprvXf4J75RJqi9Cd2OjObO57a2aGORZGuUwePt3xaSLrq 1NFXv5KkRiht31+P0tvgO6APhaSr5etSNdyLYDDqqmsuVZQnvCnVaw+TxSyACpE0 vRmnrJKWYRHlWgEBw7OOj7ZtOLCktQHgUyxwlErZdQfbNaIlBFckfqLIuM2Hxu1p WvNf8+LFzkBGqSGXy0xd708a67yRj68jHcQ0QatwlyHSUduuh7lbvDiFat61zwTf wX5oyjUvMG09TqvCvMbers377w/HTyg= -----END CERTIFICATE-----Generated at Tue Apr 8 17:14:37 2025 by rpki-client