$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/49ae9da2-bdcf-3ffc-9110-a7397bd0dc07.roa File: 49ae9da2-bdcf-3ffc-9110-a7397bd0dc07.roa (raw, json) Hash identifier: LOBubz2Mdq+toL/MgYGv/6wvtEpLQzaT4JdEbHfedEk= Subject key identifier: A1:D8:35:C6:2D:D1:D5:B9:86:7E:09:39:A7:76:4A:5D:E8:90:83:27 Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b Certificate serial: 010D0C9F432858489340A79796FE9A80158CD920 Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/49ae9da2-bdcf-3ffc-9110-a7397bd0dc07.roa Signing time: Fri 17 Jan 2025 14:00:53 +0000 ROA not before: Fri 17 Jan 2025 14:00:53 +0000 ROA not after: Thu 17 Apr 2025 13:00:53 +0000 asID: 9009 IP address blocks: 198.145.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:93:40:a7:97:96:fe:9a:80:15:8c:d9:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Validity Not Before: Jan 17 14:00:53 2025 GMT Not After : Apr 17 13:00:53 2025 GMT Subject: CN=1a8d6941-0b54-4e91-9fec-91f0c9b1f234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:26:09:87:a3:00:9b:e8:69:1b:97:72:71:be: 3c:a0:78:ac:4b:87:0b:21:3c:e2:b7:da:fc:12:59: ed:26:4a:bf:f4:5d:99:29:19:b3:72:dc:75:57:c6: ab:80:58:76:70:85:07:69:b8:b3:97:02:84:fb:22: 8e:26:31:0e:fe:4c:f1:0a:2a:a5:c1:34:93:89:34: 47:bc:8a:fa:a4:5a:f4:6e:ea:9c:0b:75:21:e5:4c: 5a:ac:2b:1b:9c:f8:b5:cb:fe:0e:56:fb:46:f3:93: 7c:88:bf:b9:55:1b:19:eb:8e:46:60:da:79:88:15: f5:ec:8d:2e:74:9d:a3:d8:4d:ec:7c:20:11:e0:53: c8:97:a7:c2:14:97:a6:88:80:c1:ce:8a:93:6d:3d: e4:bd:64:cf:7a:ee:57:3d:eb:a6:30:60:e5:da:cf: 57:f0:2c:1e:32:34:1a:07:ed:ed:04:44:ab:93:2a: 0c:cc:8d:bf:f1:16:97:71:e1:23:bd:39:b7:5b:78: 3c:07:a7:52:3b:f8:7b:b4:bb:1f:f5:c6:5d:6e:f3: 6a:df:e1:37:76:84:b1:86:ce:d6:dd:42:e5:5b:e1: 45:ef:fa:0d:a9:b4:16:9b:ef:bf:f0:6c:3c:ae:f7: 21:d6:01:64:9c:78:ad:b3:a7:4d:cf:cf:e2:28:d8: ef:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:D8:35:C6:2D:D1:D5:B9:86:7E:09:39:A7:76:4A:5D:E8:90:83:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/49ae9da2-bdcf-3ffc-9110-a7397bd0dc07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl X509v3 Authority Key Identifier: keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer sbgp-ipAddrBlock: critical IPv4: 198.145.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:1f:f5:f8:f6:84:95:00:da:e9:2f:53:12:73:08:8d:44:df: b7:d9:9a:0d:83:46:94:10:64:11:55:79:8a:04:1a:38:f3:ed: f9:d9:38:0c:fa:5d:3a:8c:b7:ae:a9:d2:46:a6:60:16:22:f9: 3a:fb:e4:9c:cf:35:ef:38:2c:92:8c:f9:8c:35:55:6b:69:b6: 34:f7:3b:51:12:29:de:4a:82:33:a9:e5:de:39:bb:e0:49:ac: 57:b9:5f:c7:61:7c:e3:bb:5c:7a:0a:20:94:20:8f:98:21:71: 43:58:dd:f7:7a:1a:53:e4:09:5c:12:5d:7a:6e:0a:98:12:3f: 52:ea:80:48:af:48:14:b0:82:ac:43:fa:8d:c5:f4:d0:8f:46: d5:fd:31:85:98:99:51:1e:42:ae:bd:6f:3b:3f:5b:26:55:ce: 32:b6:cb:87:ae:99:a3:9f:38:ad:74:cf:ac:34:6d:81:81:9f: 49:6d:fe:49:35:ef:2f:4b:8a:5a:c8:d8:46:bd:8d:45:e2:e6: 61:62:4f:41:08:e3:75:40:66:62:f9:aa:bd:77:0d:17:75:54: 6c:a0:1f:b4:d0:0d:82:1a:c8:34:f2:9a:f6:0c:ce:5e:80:78: c6:8b:8f:8e:6d:6e:2a:50:6b:45:bd:54:21:a6:c7:6e:cc:09: 79:4b:d8:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiTQKeXlv6agBWM2SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz NjFiMB4XDTI1MDExNzE0MDA1M1oXDTI1MDQxNzEzMDA1M1owLzEtMCsGA1UEAxMk MWE4ZDY5NDEtMGI1NC00ZTkxLTlmZWMtOTFmMGM5YjFmMjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyYJh6MAm+hpG5dycb48oHisS4cLITzit9r8 ElntJkq/9F2ZKRmzctx1V8argFh2cIUHabizlwKE+yKOJjEO/kzxCiqlwTSTiTRH vIr6pFr0buqcC3Uh5UxarCsbnPi1y/4OVvtG85N8iL+5VRsZ645GYNp5iBX17I0u dJ2j2E3sfCAR4FPIl6fCFJemiIDBzoqTbT3kvWTPeu5XPeumMGDl2s9X8CweMjQa B+3tBESrkyoMzI2/8RaXceEjvTm3W3g8B6dSO/h7tLsf9cZdbvNq3+E3doSxhs7W 3ULlW+FF7/oNqbQWm++/8Gw8rvch1gFknHits6dNz8/iKNjvswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKHYNcYt0dW5hn4JOad2Sl3okIMnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvNDlhZTlkYTItYmRjZi0z ZmZjLTkxMTAtYTczOTdiZDBkYzA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2 ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxpGUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGcf9fj2hJUA2ukvUxJzCI1E37fZmg2DRpQQZBFVeYoEGjjz7fnZOAz6 XTqMt66p0kamYBYi+Tr75JzPNe84LJKM+Yw1VWtptjT3O1ESKd5KgjOp5d45u+BJ rFe5X8dhfOO7XHoKIJQgj5ghcUNY3fd6GlPkCVwSXXpuCpgSP1LqgEivSBSwgqxD +o3F9NCPRtX9MYWYmVEeQq69bzs/WyZVzjK2y4eumaOfOK10z6w0bYGBn0lt/kk1 7y9LilrI2Ea9jUXi5mFiT0EI43VAZmL5qr13DRd1VGygH7TQDYIayDTymvYMzl6A eMaLj45tbipQa0W9VCGmx27MCXlL2GU= -----END CERTIFICATE-----Generated at Sat Apr 5 05:15:12 2025 by rpki-client