$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/7ac98ce8-7e32-3df0-a790-4b4691072d96.roa File: 7ac98ce8-7e32-3df0-a790-4b4691072d96.roa (raw, json) Hash identifier: j7DfFsy3SHQp4hkgkEX4zkzoYhHiGbW2lDlpP8EVJoo= Subject key identifier: 5B:D6:42:E6:D5:74:FA:C8:FE:DB:87:DD:48:EC:1A:1C:B1:30:F6:29 Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b Certificate serial: 010D0C9F4328584944694BADE45320DE374E9D80 Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/7ac98ce8-7e32-3df0-a790-4b4691072d96.roa Signing time: Sat 22 Mar 2025 01:00:40 +0000 ROA not before: Sat 22 Mar 2025 01:00:40 +0000 ROA not after: Fri 20 Jun 2025 01:00:40 +0000 asID: 7018 IP address blocks: 198.145.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:44:69:4b:ad:e4:53:20:de:37:4e:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Validity Not Before: Mar 22 01:00:40 2025 GMT Not After : Jun 20 01:00:40 2025 GMT Subject: CN=857f2f2e-5ff3-4da5-9f14-52a5698b655e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:e4:f1:b8:a1:df:58:0b:c0:6f:63:3b:e7:2e: 64:79:a7:b3:73:15:9d:ab:1a:24:64:46:28:ce:46: f0:1c:dd:8f:c9:a4:93:69:28:5f:07:54:c1:3d:a5: 7e:ba:8f:cd:c4:b0:89:1e:43:45:39:4f:a4:b5:ad: e3:c8:72:7a:fa:f0:88:c0:7c:f9:f3:3b:42:fa:57: b4:b4:76:ee:00:98:2b:1d:97:48:5b:bf:b8:1d:1d: a4:41:9e:80:a5:a1:5e:df:a2:08:c1:bf:bf:19:7b: 02:45:8e:5e:ab:d2:6b:4b:d2:d8:8c:d7:18:b5:ab: 48:bd:44:e7:8a:d2:cf:04:03:b1:00:16:3e:63:2b: 6b:56:19:bb:58:b1:eb:32:d2:79:f3:2d:c0:5e:38: c9:29:24:05:56:08:9f:13:6c:9d:40:37:6d:f9:8b: 09:35:3b:10:8d:96:36:09:d1:23:ce:ab:62:37:c3: 93:e0:06:c0:77:7a:ea:13:9e:b2:97:50:07:7f:a5: 29:7e:4f:83:db:55:a7:9e:3f:88:93:9b:27:7c:c1: e9:e3:f3:92:3b:23:84:02:15:14:4a:b3:ec:53:46: 15:57:45:37:1e:d1:93:23:71:08:ee:86:fa:4e:cc: 44:b7:d6:ac:1c:87:d3:58:99:96:81:82:de:dc:80: 23:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:D6:42:E6:D5:74:FA:C8:FE:DB:87:DD:48:EC:1A:1C:B1:30:F6:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/7ac98ce8-7e32-3df0-a790-4b4691072d96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl X509v3 Authority Key Identifier: keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer sbgp-ipAddrBlock: critical IPv4: 198.145.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:3e:04:72:ea:68:e3:24:8b:8f:7c:2c:97:f6:cd:ba:b6:57: 7a:2c:56:38:6e:16:44:07:e0:88:21:e6:74:fc:f4:f4:51:36: f8:ce:fb:21:47:6d:72:32:d0:f9:69:ec:42:82:6b:d1:bd:f2: 95:f7:75:b8:11:f9:a7:e4:6a:f5:ec:3d:69:e7:12:4f:d4:77: c9:5a:ba:79:0d:4c:9b:95:2a:97:1f:7b:c8:67:e6:b7:9d:3e: 49:76:ed:86:4c:cb:05:d0:0a:f8:59:4f:2e:1c:63:b0:25:72: 06:3d:c4:08:08:43:ea:d9:1a:17:01:29:8f:b2:c6:2b:8e:cb: 7c:51:c2:01:c9:4b:b6:14:6f:4d:44:92:36:c7:24:78:6a:a0: e0:a9:58:e0:97:60:b0:87:09:15:df:52:49:7f:c4:32:cb:07: 75:c7:f4:78:14:aa:5b:42:be:48:2e:4e:a5:ae:cf:4b:4a:92: f2:ee:3b:f5:03:47:fd:ee:56:b0:50:40:29:2d:30:04:95:3e: 60:6b:90:25:ad:73:f3:b4:bf:2e:83:29:d8:e1:39:09:a8:b7: fd:3c:0d:ec:24:f3:53:12:4a:52:b5:22:84:17:5c:30:c4:8f: 2e:77:d9:26:25:55:51:9b:14:f7:10:a9:d8:56:ec:a0:02:cf: 21:56:38:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElEaUut5FMg3jdOnYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz NjFiMB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk ODU3ZjJmMmUtNWZmMy00ZGE1LTlmMTQtNTJhNTY5OGI2NTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAieTxuKHfWAvAb2M75y5keaezcxWdqxokZEYo zkbwHN2PyaSTaShfB1TBPaV+uo/NxLCJHkNFOU+kta3jyHJ6+vCIwHz58ztC+le0 tHbuAJgrHZdIW7+4HR2kQZ6ApaFe36IIwb+/GXsCRY5eq9JrS9LYjNcYtatIvUTn itLPBAOxABY+YytrVhm7WLHrMtJ58y3AXjjJKSQFVgifE2ydQDdt+YsJNTsQjZY2 CdEjzqtiN8OT4AbAd3rqE56yl1AHf6Upfk+D21Wnnj+Ik5snfMHp4/OSOyOEAhUU SrPsU0YVV0U3HtGTI3EI7ob6TsxEt9asHIfTWJmWgYLe3IAjJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFvWQubVdPrI/tuH3UjsGhyxMPYpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvN2FjOThjZTgtN2UzMi0z ZGYwLWE3OTAtNGI0NjkxMDcyZDk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2 ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxpGMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJE+BHLqaOMki498LJf2zbq2V3osVjhuFkQH4Igh5nT89PRRNvjO+yFH bXIy0Plp7EKCa9G98pX3dbgR+afkavXsPWnnEk/Ud8launkNTJuVKpcfe8hn5red Pkl27YZMywXQCvhZTy4cY7AlcgY9xAgIQ+rZGhcBKY+yxiuOy3xRwgHJS7YUb01E kjbHJHhqoOCpWOCXYLCHCRXfUkl/xDLLB3XH9HgUqltCvkguTqWuz0tKkvLuO/UD R/3uVrBQQCktMASVPmBrkCWtc/O0vy6DKdjhOQmot/08Dewk81MSSlK1IoQXXDDE jy532SYlVVGbFPcQqdhW7KACzyFWOHw= -----END CERTIFICATE-----Generated at Fri Apr 4 21:49:34 2025 by rpki-client