$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/2fb2f41b-197f-3998-95c5-b00e388ae797.roa File: 2fb2f41b-197f-3998-95c5-b00e388ae797.roa (raw, json) Hash identifier: vsGF4qiBKEra82r8Z/uT02PLYYd4HRz3gyJwO/EiJf0= Subject key identifier: 3B:7C:F2:64:18:6E:DE:69:80:A6:B4:4F:C7:0C:3D:05:34:27:9A:51 Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b Certificate serial: 010D0C9F4328584949FE8E98FFCD5391C9A79F00 Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/2fb2f41b-197f-3998-95c5-b00e388ae797.roa Signing time: Mon 24 Mar 2025 01:00:38 +0000 ROA not before: Mon 24 Mar 2025 01:00:38 +0000 ROA not after: Sun 22 Jun 2025 01:00:38 +0000 asID: 209181 IP address blocks: 198.145.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:49:fe:8e:98:ff:cd:53:91:c9:a7:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Validity Not Before: Mar 24 01:00:38 2025 GMT Not After : Jun 22 01:00:38 2025 GMT Subject: CN=417be985-9918-418f-a7b0-a4d7e73a3114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:c2:d2:c4:5d:7f:f3:a2:4b:cd:f6:9e:d0:56: 88:1e:c8:ec:69:6b:0e:4b:fd:18:e5:7a:f5:47:8f: 88:7e:d7:f2:9b:4d:b1:58:4d:19:2a:b9:2d:b6:85: a3:94:fa:a5:c6:dd:09:72:36:04:3e:f5:ff:2a:fd: 8e:b6:83:96:91:8a:57:b9:01:8b:25:16:98:fa:2e: 18:32:32:e5:70:d9:78:d0:7f:13:d0:16:f2:9b:66: 9c:ca:d1:fb:4d:87:b0:16:1e:09:b4:e3:1e:73:06: e1:52:da:f6:67:62:6d:9d:27:4d:c2:14:fb:e0:44: 50:61:c5:6f:06:64:46:c6:00:d1:ed:b8:aa:dc:27: fe:c1:2e:30:4d:03:31:66:b2:6a:b6:0d:e7:cb:81: 60:b9:d9:44:16:9b:bd:83:a3:b1:d2:f6:05:59:a4: e8:83:04:ce:d7:6f:20:5d:52:98:08:d7:97:a7:92: 59:18:20:86:76:5e:b2:f1:8a:7f:d7:b0:f6:d4:5c: 33:fc:67:b0:eb:ff:75:37:1b:ec:4e:c8:e2:6a:74: e0:06:81:77:5f:13:98:6e:b8:71:80:6f:8c:e7:c9: 9a:b5:d9:06:4e:23:df:cf:96:1c:4a:1f:ff:52:00: 1c:d6:f3:e9:a2:e4:c5:7d:4c:93:46:8f:9c:d0:94: 63:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:7C:F2:64:18:6E:DE:69:80:A6:B4:4F:C7:0C:3D:05:34:27:9A:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/2fb2f41b-197f-3998-95c5-b00e388ae797.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl X509v3 Authority Key Identifier: keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer sbgp-ipAddrBlock: critical IPv4: 198.145.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:b3:dc:25:ef:7e:45:33:58:9d:e6:68:46:58:75:7f:43:c2: 87:0c:6e:bb:d4:c8:77:cd:82:50:b5:33:5f:d7:4e:92:2d:55: 32:ea:0d:ed:82:6a:68:6f:5d:24:9f:81:ff:08:ee:45:63:47: 10:d4:d8:1d:c2:3e:b7:df:c2:5c:05:a2:ad:32:3e:69:e9:d4: 2e:6d:7e:fe:6c:46:be:79:b5:68:8e:07:5c:94:a5:68:a7:70: a6:63:bc:30:66:a0:88:df:e7:f4:6d:6d:09:59:7d:a2:13:87: f7:36:c9:10:fe:f4:f7:a3:6a:4b:f4:03:ab:4b:a8:69:64:19: 60:6a:c2:30:2f:88:d7:d8:51:9d:6e:c5:22:32:11:a1:22:be: 33:ef:2c:73:a3:bb:f8:23:52:1a:fe:9b:1a:53:43:d5:78:93: 8b:18:c2:bf:c3:28:42:ad:ab:db:48:b2:b9:6a:08:0c:a1:10: c5:d0:55:ad:18:6f:0b:6f:a7:10:ab:dc:e8:29:d6:cb:c9:77: 27:ae:9e:76:84:91:94:26:b9:43:b4:16:83:ab:94:30:6a:b2: 21:5b:40:05:cb:a3:9f:59:38:de:fc:26:1b:f4:f5:2c:01:a6: 57:db:9b:9a:04:48:c4:c2:72:f1:84:1d:4d:d5:d6:b9:66:93: 48:53:46:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElJ/o6Y/81TkcmnnwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz NjFiMB4XDTI1MDMyNDAxMDAzOFoXDTI1MDYyMjAxMDAzOFowLzEtMCsGA1UEAxMk NDE3YmU5ODUtOTkxOC00MThmLWE3YjAtYTRkN2U3M2EzMTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMLSxF1/86JLzfae0FaIHsjsaWsOS/0Y5Xr1 R4+Iftfym02xWE0ZKrkttoWjlPqlxt0JcjYEPvX/Kv2OtoOWkYpXuQGLJRaY+i4Y MjLlcNl40H8T0Bbym2acytH7TYewFh4JtOMecwbhUtr2Z2JtnSdNwhT74ERQYcVv BmRGxgDR7biq3Cf+wS4wTQMxZrJqtg3ny4FgudlEFpu9g6Ox0vYFWaTogwTO128g XVKYCNeXp5JZGCCGdl6y8Yp/17D21Fwz/Gew6/91NxvsTsjianTgBoF3XxOYbrhx gG+M58matdkGTiPfz5YcSh//UgAc1vPpouTFfUyTRo+c0JRj0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDt88mQYbt5pgKa0T8cMPQU0J5pRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvMmZiMmY0MWItMTk3Zi0z OTk4LTk1YzUtYjAwZTM4OGFlNzk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2 ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxpGfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGz3CXvfkUzWJ3maEZYdX9DwocMbrvUyHfNglC1M1/XTpItVTLqDe2C amhvXSSfgf8I7kVjRxDU2B3CPrffwlwFoq0yPmnp1C5tfv5sRr55tWiOB1yUpWin cKZjvDBmoIjf5/RtbQlZfaITh/c2yRD+9Pejakv0A6tLqGlkGWBqwjAviNfYUZ1u xSIyEaEivjPvLHOju/gjUhr+mxpTQ9V4k4sYwr/DKEKtq9tIsrlqCAyhEMXQVa0Y bwtvpxCr3Ogp1svJdyeunnaEkZQmuUO0FoOrlDBqsiFbQAXLo59ZON78Jhv09SwB plfbm5oESMTCcvGEHU3V1rlmk0hTRpI= -----END CERTIFICATE-----Generated at Sat Apr 5 05:30:03 2025 by rpki-client