$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/71cba0de-faaa-37b6-b08a-c73d06646a41.roa File: 71cba0de-faaa-37b6-b08a-c73d06646a41.roa (raw, json) Hash identifier: REOKhbypr6g8SHbrMrOnos/9/MexH/hRenje+0rxMcw= Subject key identifier: 34:7E:52:99:CF:79:7C:CA:A3:F1:DA:30:2D:54:EE:C4:DA:72:88:8A Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b Certificate serial: 010D0C9F4328584944693274E956A543AE424C40 Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/71cba0de-faaa-37b6-b08a-c73d06646a41.roa Signing time: Sat 22 Mar 2025 01:00:40 +0000 ROA not before: Sat 22 Mar 2025 01:00:40 +0000 ROA not after: Fri 20 Jun 2025 01:00:40 +0000 asID: 9009 IP address blocks: 198.145.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:44:69:32:74:e9:56:a5:43:ae:42:4c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Validity Not Before: Mar 22 01:00:40 2025 GMT Not After : Jun 20 01:00:40 2025 GMT Subject: CN=242ec9d5-095e-4bbe-9524-948d3478b60a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ed:be:da:96:6c:86:77:28:de:6e:56:31:4b: 10:f8:2e:6f:2a:8f:69:f8:5b:bb:1e:31:2f:95:84: a5:0d:8a:35:ed:b9:8a:b8:f2:df:62:bf:c5:33:23: 1e:27:19:37:e0:29:62:73:89:8a:4e:34:2b:19:3a: 3f:dd:1b:a6:b0:c9:73:c7:00:64:93:d8:51:a1:de: db:37:b9:bc:67:27:a7:4e:17:ae:02:a4:b3:51:db: 70:f9:c6:cb:f6:b6:64:28:6e:95:20:9c:40:2c:94: 47:dc:6f:f1:2a:af:b3:e7:ed:c9:30:23:d3:26:91: d9:04:af:41:37:83:3f:13:91:b7:36:88:3d:93:45: ea:b0:88:fe:88:ce:0a:33:b7:0e:9a:80:22:4d:47: 2e:f8:b9:dd:56:4f:a4:35:7c:0c:ea:06:69:6e:8c: d5:db:37:59:78:e4:a4:10:f2:8e:79:ad:92:e3:4c: 9c:23:49:01:7e:74:09:05:2c:3a:3e:02:24:7d:b2: 91:50:44:5d:07:68:5c:78:7d:3c:92:48:59:02:ac: 83:d6:bf:a2:64:05:cd:b0:a3:af:8e:86:ff:52:ff: 7b:44:a9:cb:a9:d6:90:1d:f5:74:e8:db:71:da:b6: 98:f6:11:56:1f:69:a1:54:e4:a0:1a:56:e2:c4:52: 73:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:7E:52:99:CF:79:7C:CA:A3:F1:DA:30:2D:54:EE:C4:DA:72:88:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/71cba0de-faaa-37b6-b08a-c73d06646a41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl X509v3 Authority Key Identifier: keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer sbgp-ipAddrBlock: critical IPv4: 198.145.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:23:4f:d3:9d:bd:f3:f4:29:a9:5e:36:c4:6b:9d:17:a8:f5: 35:a4:5f:3d:da:cd:d0:04:40:f0:52:04:f8:e2:a3:28:6d:bb: 24:da:33:6e:f3:16:ef:a0:ea:35:6f:cb:13:3a:fa:54:80:39: a6:72:91:ff:6c:01:77:f4:e3:f4:c1:c7:fa:19:94:e9:21:1b: 69:37:7e:4b:42:61:3f:e9:ec:4d:9f:95:f5:76:7b:19:cf:9b: a0:f9:9c:cf:51:19:d8:e4:58:67:20:98:ec:47:b5:20:99:dc: 05:81:f5:01:0c:0e:86:d0:a5:47:45:87:47:e7:08:64:16:10: b0:7f:59:2f:c0:00:a7:6e:b6:2d:b6:2b:b1:ed:8d:0b:79:48: 77:ba:36:7c:ba:b2:26:fd:74:e1:86:94:88:ac:e4:b5:15:03: 8e:35:f5:d6:fb:98:bb:ab:6b:e4:74:c9:51:bd:e8:51:cc:ac: 8b:51:ca:a9:d3:2e:96:ac:38:61:78:41:72:94:33:1f:be:6d: f1:88:6d:4f:44:58:99:7d:bd:f6:d2:ce:63:a3:25:45:02:96: 32:47:20:4b:b8:c6:be:2d:c0:58:0f:61:95:cd:80:a8:78:e7: ab:1e:e4:bb:75:82:b8:bf:69:11:26:fb:66:3c:60:3a:0d:06: ca:7c:ed:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElEaTJ06ValQ65CTEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz NjFiMB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk MjQyZWM5ZDUtMDk1ZS00YmJlLTk1MjQtOTQ4ZDM0NzhiNjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAze2+2pZshnco3m5WMUsQ+C5vKo9p+Fu7HjEv lYSlDYo17bmKuPLfYr/FMyMeJxk34Clic4mKTjQrGTo/3RumsMlzxwBkk9hRod7b N7m8ZyenTheuAqSzUdtw+cbL9rZkKG6VIJxALJRH3G/xKq+z5+3JMCPTJpHZBK9B N4M/E5G3Nog9k0XqsIj+iM4KM7cOmoAiTUcu+LndVk+kNXwM6gZpbozV2zdZeOSk EPKOea2S40ycI0kBfnQJBSw6PgIkfbKRUERdB2hceH08kkhZAqyD1r+iZAXNsKOv job/Uv97RKnLqdaQHfV06Ntx2raY9hFWH2mhVOSgGlbixFJz9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDR+UpnPeXzKo/HaMC1U7sTacoiKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvNzFjYmEwZGUtZmFhYS0z N2I2LWIwOGEtYzczZDA2NjQ2YTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2 ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxpGcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKkjT9OdvfP0KaleNsRrnReo9TWkXz3azdAEQPBSBPjioyhtuyTaM27z Fu+g6jVvyxM6+lSAOaZykf9sAXf04/TBx/oZlOkhG2k3fktCYT/p7E2flfV2exnP m6D5nM9RGdjkWGcgmOxHtSCZ3AWB9QEMDobQpUdFh0fnCGQWELB/WS/AAKduti22 K7HtjQt5SHe6Nny6sib9dOGGlIis5LUVA4419db7mLura+R0yVG96FHMrItRyqnT LpasOGF4QXKUMx++bfGIbU9EWJl9vfbSzmOjJUUCljJHIEu4xr4twFgPYZXNgKh4 56se5Lt1gri/aREm+2Y8YDoNBsp87Yw= -----END CERTIFICATE-----Generated at Sat Apr 5 05:29:58 2025 by rpki-client