$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/2907bd3e-7be7-3179-abfd-3af4b6724521.roa File: 2907bd3e-7be7-3179-abfd-3af4b6724521.roa (raw, json) Hash identifier: 46vBiiQ0k8bs1RKG8dCSDc5/Ioh2F0ihLrPPIMeUJkk= Subject key identifier: 29:95:0F:FB:A6:60:FE:F7:C6:E6:14:6E:F6:7E:3A:5F:B4:90:CA:3D Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b Certificate serial: 010D0C9F43285849350EA7416C5270B3222B3400 Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/2907bd3e-7be7-3179-abfd-3af4b6724521.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 262287 IP address blocks: 198.145.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:a7:41:6c:52:70:b3:22:2b:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=a2aa80c1-6408-416d-bc00-622afa0d928d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:a5:e3:25:a7:0e:c8:49:ff:e7:55:45:a6:9b: 8d:0d:b3:09:8c:45:be:65:1a:a4:40:06:39:b6:77: 8c:40:ad:72:36:a6:c9:cc:36:03:e5:f2:51:f1:67: 89:d7:f6:e9:d3:5b:61:ac:f5:a4:df:8f:3f:d3:d0: 7a:0e:42:e2:fc:d2:d8:93:bf:c0:89:71:f8:af:b9: 6c:2f:28:4b:e1:d3:f3:28:1f:06:92:b2:e9:12:48: 04:0f:d5:1d:15:ed:68:f3:f8:a8:8b:f6:f4:8b:9a: 01:f9:48:d7:3f:7d:76:68:4b:ed:78:9a:83:d8:f9: 01:27:e0:77:e0:ab:2e:6d:a5:4b:e9:a5:04:57:96: b4:17:42:05:e6:59:fd:09:3c:fa:dc:65:cf:28:e8: 1c:32:5d:e8:bc:6c:b6:9d:a6:87:65:ff:9b:ad:8b: b0:48:51:1f:42:34:5b:1c:6c:e8:6a:85:2c:9b:cb: aa:68:1a:ec:fa:ff:bb:24:18:dc:f5:be:d8:6d:f9: ed:6c:94:25:99:f8:49:2d:05:3d:a7:14:ee:43:b9: 68:72:ef:38:13:2c:1b:99:ba:48:46:0e:92:dc:99: 3f:32:24:9a:c1:90:f7:b8:07:0b:c7:ad:a6:bb:fd: f4:c7:be:02:81:67:01:82:c3:0a:a4:dd:cb:52:7d: 85:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:95:0F:FB:A6:60:FE:F7:C6:E6:14:6E:F6:7E:3A:5F:B4:90:CA:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/2907bd3e-7be7-3179-abfd-3af4b6724521.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl X509v3 Authority Key Identifier: keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer sbgp-ipAddrBlock: critical IPv4: 198.145.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:a4:1b:7a:ca:42:3e:9d:6a:a0:7c:ed:cc:78:b3:d9:48:2f: e6:63:76:e6:55:0a:aa:60:76:fb:70:14:68:90:7c:b0:2c:c9: ca:97:8c:72:46:37:58:68:87:05:fc:de:fe:53:15:49:9a:09: 27:7b:f2:fa:27:c6:67:4c:9a:f3:18:69:9c:28:f4:b7:11:76: 31:02:20:56:ff:b7:af:3a:b3:87:66:49:7f:85:86:5b:12:6e: 0c:ac:47:9f:df:39:5a:84:2b:8f:03:c3:ce:b4:c5:cc:05:f7: 4c:89:5b:0d:58:c4:59:14:ab:d8:17:d3:61:64:a8:9a:24:87: 9f:ea:21:05:68:86:a0:1d:6a:37:a5:76:e2:03:0e:93:55:77: f8:d0:50:78:ad:ff:db:15:f8:c5:ae:5a:1b:4a:02:e5:21:df: d6:06:54:ee:57:c1:dd:8b:18:a1:0b:c6:43:f7:04:ab:b5:3f: de:f6:92:9d:47:20:a5:f8:b4:a1:73:c4:ff:f3:1b:e6:50:92: f4:1a:d8:02:00:97:50:bf:61:d2:01:dd:6c:8e:3d:ef:9c:0b: a6:88:bb:31:47:61:1b:0e:fa:79:76:5c:64:c6:6d:77:df:46: 6d:cc:f6:c8:f5:bf:14:90:b9:bb:95:8c:9f:bc:09:c9:ef:3c: db:bb:7f:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1DqdBbFJwsyIrNAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz NjFiMB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk YTJhYTgwYzEtNjQwOC00MTZkLWJjMDAtNjIyYWZhMGQ5MjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqXjJacOyEn/51VFppuNDbMJjEW+ZRqkQAY5 tneMQK1yNqbJzDYD5fJR8WeJ1/bp01thrPWk348/09B6DkLi/NLYk7/AiXH4r7ls LyhL4dPzKB8GkrLpEkgED9UdFe1o8/ioi/b0i5oB+UjXP312aEvteJqD2PkBJ+B3 4KsubaVL6aUEV5a0F0IF5ln9CTz63GXPKOgcMl3ovGy2naaHZf+brYuwSFEfQjRb HGzoaoUsm8uqaBrs+v+7JBjc9b7YbfntbJQlmfhJLQU9pxTuQ7locu84EywbmbpI Rg6S3Jk/MiSawZD3uAcLx62mu/30x74CgWcBgsMKpN3LUn2FjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCmVD/umYP73xuYUbvZ+Ol+0kMo9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvMjkwN2JkM2UtN2JlNy0z MTc5LWFiZmQtM2FmNGI2NzI0NTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2 ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxpFOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADSkG3rKQj6daqB87cx4s9lIL+ZjduZVCqpgdvtwFGiQfLAsycqXjHJG N1hohwX83v5TFUmaCSd78vonxmdMmvMYaZwo9LcRdjECIFb/t686s4dmSX+FhlsS bgysR5/fOVqEK48Dw860xcwF90yJWw1YxFkUq9gX02FkqJokh5/qIQVohqAdajel duIDDpNVd/jQUHit/9sV+MWuWhtKAuUh39YGVO5Xwd2LGKELxkP3BKu1P972kp1H IKX4tKFzxP/zG+ZQkvQa2AIAl1C/YdIB3WyOPe+cC6aIuzFHYRsO+nl2XGTGbXff Rm3M9sj1vxSQubuVjJ+8CcnvPNu7fy8= -----END CERTIFICATE-----Generated at Sat Apr 5 05:24:53 2025 by rpki-client