$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/121682d9-0042-3d35-9285-843fe168fa1e.roa File: 121682d9-0042-3d35-9285-843fe168fa1e.roa (raw, json) Hash identifier: gZNqONUDtapfihoFqZQjYs6iSrZcaDrLeAQl/aDqF3U= Subject key identifier: 3D:0C:66:3A:92:CF:84:BD:8B:DE:F4:22:74:84:60:38:71:D4:E2:66 Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b Certificate serial: 010D0C9F432858494E2EA918ECD64DB8CC1739C0 Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/121682d9-0042-3d35-9285-843fe168fa1e.roa Signing time: Tue 25 Mar 2025 13:00:51 +0000 ROA not before: Tue 25 Mar 2025 13:00:51 +0000 ROA not after: Mon 23 Jun 2025 13:00:51 +0000 asID: 46562 IP address blocks: 198.145.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4e:2e:a9:18:ec:d6:4d:b8:cc:17:39:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Validity Not Before: Mar 25 13:00:51 2025 GMT Not After : Jun 23 13:00:51 2025 GMT Subject: CN=1ab86a32-bd31-458c-863d-4300227b54ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:d2:f5:16:94:e4:87:8d:0d:88:5e:88:d8:08: f5:3e:80:4f:f7:b5:ce:cc:f0:5c:0e:dd:ef:83:2a: ff:90:79:97:1a:a0:1b:1b:d3:73:ab:23:d6:f9:43: 96:96:e5:25:73:e7:ff:71:f2:33:47:68:01:d0:d2: 61:4b:eb:9b:24:93:db:0b:72:c2:17:e1:0e:6e:35: a2:07:33:68:2f:bb:2d:78:40:22:6f:ed:28:1c:b1: e6:a8:96:f0:12:2b:c7:3d:50:bb:5e:04:68:9d:f9: 26:41:bc:f3:09:85:c9:4f:a5:7b:bf:b5:4c:dc:c9: d0:78:b9:46:34:77:ca:5d:d6:b7:3f:10:89:6e:76: e9:ce:62:12:07:50:36:9b:0f:9e:6c:ca:03:52:3c: de:86:d9:81:f2:cf:5b:89:91:8e:32:f8:64:8f:ba: 17:e3:3a:19:d1:72:24:c7:5d:09:3b:62:ab:fd:1c: 19:53:9d:57:a0:13:7a:2b:ef:dc:e0:21:60:53:3e: 82:32:a0:15:66:27:7d:ac:ba:35:a9:70:23:47:0e: 87:17:9a:57:e7:bd:6e:fa:af:cb:2c:f6:05:4c:8c: 8a:7d:aa:84:f6:25:a2:21:24:45:65:a6:50:11:ec: c6:48:7a:56:13:9b:63:2a:33:86:f7:54:bd:8c:17: d6:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:0C:66:3A:92:CF:84:BD:8B:DE:F4:22:74:84:60:38:71:D4:E2:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/121682d9-0042-3d35-9285-843fe168fa1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl X509v3 Authority Key Identifier: keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer sbgp-ipAddrBlock: critical IPv4: 198.145.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:87:d8:20:fc:40:b6:0a:94:be:64:d1:95:5e:50:f6:94:b2: ff:3a:04:c3:3c:c6:1f:d3:41:34:0b:56:89:d9:b7:dc:b4:75: a9:08:75:de:08:77:36:45:5d:94:75:77:bb:b1:54:38:84:dc: 61:24:7b:cd:6d:24:13:05:53:7c:50:9d:7c:be:66:4d:97:a1: bf:f7:66:f0:1f:60:53:43:63:14:79:f0:77:ad:d2:6d:e8:76: 45:4a:39:92:31:f3:f3:97:fa:82:0b:3d:d6:d7:ea:c3:eb:0d: f2:51:7d:cf:c9:28:29:67:fb:b3:30:fd:5f:ab:13:78:fe:23: 00:8a:a3:f8:7d:5e:41:8a:b6:b9:61:3e:29:d7:fa:25:3f:c0: a2:a7:0c:9a:88:83:9f:35:bd:73:87:94:2f:eb:32:39:d9:dd: 40:0d:1d:ed:a6:28:08:4c:c3:4b:29:9b:00:1e:a1:80:9b:e2: 0d:ea:ff:c5:e7:17:38:be:2e:a0:75:83:45:e5:46:80:ce:3e: 7c:4a:02:42:16:3c:86:10:19:6d:42:10:25:a0:46:d5:88:63: 90:b5:a3:c2:41:f4:31:e8:3b:d8:6f:ea:8d:49:f0:6e:40:d6: 21:08:1d:0a:42:15:84:2c:9e:4c:2c:ac:cd:20:e8:37:26:49: b8:f1:86:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElOLqkY7NZNuMwXOcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz NjFiMB4XDTI1MDMyNTEzMDA1MVoXDTI1MDYyMzEzMDA1MVowLzEtMCsGA1UEAxMk MWFiODZhMzItYmQzMS00NThjLTg2M2QtNDMwMDIyN2I1NGFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtL1FpTkh40NiF6I2Aj1PoBP97XOzPBcDt3v gyr/kHmXGqAbG9NzqyPW+UOWluUlc+f/cfIzR2gB0NJhS+ubJJPbC3LCF+EObjWi BzNoL7steEAib+0oHLHmqJbwEivHPVC7XgRonfkmQbzzCYXJT6V7v7VM3MnQeLlG NHfKXda3PxCJbnbpzmISB1A2mw+ebMoDUjzehtmB8s9biZGOMvhkj7oX4zoZ0XIk x10JO2Kr/RwZU51XoBN6K+/c4CFgUz6CMqAVZid9rLo1qXAjRw6HF5pX571u+q/L LPYFTIyKfaqE9iWiISRFZaZQEezGSHpWE5tjKjOG91S9jBfW8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD0MZjqSz4S9i970InSEYDhx1OJmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvMTIxNjgyZDktMDA0Mi0z ZDM1LTkyODUtODQzZmUxNjhmYTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2 ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxpHtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADSH2CD8QLYKlL5k0ZVeUPaUsv86BMM8xh/TQTQLVonZt9y0dakIdd4I dzZFXZR1d7uxVDiE3GEke81tJBMFU3xQnXy+Zk2Xob/3ZvAfYFNDYxR58Het0m3o dkVKOZIx8/OX+oILPdbX6sPrDfJRfc/JKCln+7Mw/V+rE3j+IwCKo/h9XkGKtrlh PinX+iU/wKKnDJqIg581vXOHlC/rMjnZ3UANHe2mKAhMw0spmwAeoYCb4g3q/8Xn Fzi+LqB1g0XlRoDOPnxKAkIWPIYQGW1CECWgRtWIY5C1o8JB9DHoO9hv6o1J8G5A 1iEIHQpCFYQsnkwsrM0g6DcmSbjxhvU= -----END CERTIFICATE-----Generated at Sat Apr 5 05:43:15 2025 by rpki-client