$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/89501355-1746-356d-84dd-4806907af971.roa File: 89501355-1746-356d-84dd-4806907af971.roa (raw, json) Hash identifier: kWmM5ryZaQ6pw5y9oCKAy8Dgdl+l96jrhbtXisa8ISw= Subject key identifier: D0:C7:21:43:65:6C:9D:C2:02:66:6F:65:66:9C:E7:02:3C:B2:89:18 Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b Certificate serial: 010D0C9F43285848BE862C0CE9E891C7E8B2EA00 Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/89501355-1746-356d-84dd-4806907af971.roa Signing time: Sun 02 Feb 2025 02:00:39 +0000 ROA not before: Sun 02 Feb 2025 02:00:39 +0000 ROA not after: Sat 03 May 2025 01:00:39 +0000 asID: 9009 IP address blocks: 198.145.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:be:86:2c:0c:e9:e8:91:c7:e8:b2:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Validity Not Before: Feb 2 02:00:39 2025 GMT Not After : May 3 01:00:39 2025 GMT Subject: CN=a679d8d7-4423-4668-8f74-98f8edd67834 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:14:21:59:23:d1:7e:75:dd:61:cb:0d:da:02: d1:c3:da:ca:59:b5:b2:74:15:f4:8d:79:47:f6:c9: 29:23:2e:fa:fd:6d:40:6b:2e:3f:44:43:4e:ad:4f: 26:dd:48:a9:4d:4c:f5:6b:23:da:f4:41:c1:50:bd: 84:9e:ad:72:ef:6e:87:55:97:36:3c:a1:7d:85:cf: c9:30:29:00:27:f8:e0:da:01:a8:35:6a:43:de:6e: c8:69:29:23:91:a1:6f:56:65:14:ad:b7:d2:ad:a9: da:ad:79:ca:d8:1c:18:29:79:a8:1b:e9:ec:3a:c4: ce:1e:62:ca:2e:22:89:29:03:09:25:10:e4:f8:fb: d7:f1:ac:f6:9a:c1:10:d2:5e:0f:db:ef:c9:29:dc: 4a:c5:8f:9c:b4:48:c5:93:c3:4c:0d:32:f8:b0:e0: 2d:22:65:ec:b5:93:21:17:0a:46:5a:d6:86:e5:cb: df:bc:aa:4e:ca:47:1b:b5:ae:ac:e7:5c:cd:79:5b: 26:15:e5:4c:01:84:b6:ad:44:8b:e9:42:7f:d6:ec: 96:04:ac:0f:75:91:8c:d3:3e:00:65:2b:c4:0b:d0: 8a:56:01:d3:1c:b2:6a:60:0c:a6:a7:dd:d2:ec:14: c3:2c:da:f7:e2:ef:bc:4a:af:df:1a:49:91:71:07: 1e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:C7:21:43:65:6C:9D:C2:02:66:6F:65:66:9C:E7:02:3C:B2:89:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/89501355-1746-356d-84dd-4806907af971.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl X509v3 Authority Key Identifier: keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer sbgp-ipAddrBlock: critical IPv4: 198.145.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:98:97:27:74:7a:46:4c:56:92:af:e8:2d:30:54:fe:5e:98: 9a:29:0c:32:fe:7c:db:75:5a:c5:d7:b0:c5:f8:20:7b:73:0c: 0a:b2:1f:02:54:d8:88:ff:68:99:07:06:01:d5:e0:70:b0:65: 91:20:db:6f:50:d3:ad:71:cf:3d:40:d6:d9:79:8a:fd:5d:ae: be:ae:71:ca:c1:51:e1:59:df:0c:24:b4:af:28:29:b0:0e:ec: 70:28:fd:59:8e:0a:e5:ea:57:fa:7f:e5:59:25:c7:bf:39:4d: 7c:cd:b0:eb:5a:6a:7a:2e:21:79:51:22:2e:da:31:90:a0:33: e7:2b:a8:23:d8:1d:4d:50:d3:0c:5b:3d:e6:be:f2:88:8b:bd: 43:1a:e4:d1:45:ba:7b:57:99:5d:f0:a9:c2:9d:18:af:d9:18: 39:2a:57:76:d9:9b:2b:11:bf:e8:6c:ea:73:0e:4f:e7:61:d0: c1:fb:18:f2:42:74:2b:be:e6:fc:79:ac:e5:b7:4b:d8:29:ed: c6:86:aa:fd:eb:47:fb:a9:b8:de:17:73:b4:c2:ee:47:a8:48: 6e:b7:80:cc:21:80:33:32:b6:96:9f:e4:1e:71:15:7c:80:94: 18:6d:6a:d6:c5:ba:82:61:43:e7:33:23:12:9b:bb:fa:c4:df: b3:17:89:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi+hiwM6eiRx+iy6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz NjFiMB4XDTI1MDIwMjAyMDAzOVoXDTI1MDUwMzAxMDAzOVowLzEtMCsGA1UEAxMk YTY3OWQ4ZDctNDQyMy00NjY4LThmNzQtOThmOGVkZDY3ODM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxQhWSPRfnXdYcsN2gLRw9rKWbWydBX0jXlH 9skpIy76/W1Aay4/RENOrU8m3UipTUz1ayPa9EHBUL2Enq1y726HVZc2PKF9hc/J MCkAJ/jg2gGoNWpD3m7IaSkjkaFvVmUUrbfSranarXnK2BwYKXmoG+nsOsTOHmLK LiKJKQMJJRDk+PvX8az2msEQ0l4P2+/JKdxKxY+ctEjFk8NMDTL4sOAtImXstZMh FwpGWtaG5cvfvKpOykcbta6s51zNeVsmFeVMAYS2rUSL6UJ/1uyWBKwPdZGM0z4A ZSvEC9CKVgHTHLJqYAymp93S7BTDLNr34u+8Sq/fGkmRcQceCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNDHIUNlbJ3CAmZvZWac5wI8sokYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvODk1MDEzNTUtMTc0Ni0z NTZkLTg0ZGQtNDgwNjkwN2FmOTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2 ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxpFCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIiYlyd0ekZMVpKv6C0wVP5emJopDDL+fNt1WsXXsMX4IHtzDAqyHwJU 2Ij/aJkHBgHV4HCwZZEg229Q061xzz1A1tl5iv1drr6uccrBUeFZ3wwktK8oKbAO 7HAo/VmOCuXqV/p/5Vklx785TXzNsOtaanouIXlRIi7aMZCgM+crqCPYHU1Q0wxb Pea+8oiLvUMa5NFFuntXmV3wqcKdGK/ZGDkqV3bZmysRv+hs6nMOT+dh0MH7GPJC dCu+5vx5rOW3S9gp7caGqv3rR/upuN4Xc7TC7keoSG63gMwhgDMytpaf5B5xFXyA lBhtatbFuoJhQ+czIxKbu/rE37MXiWo= -----END CERTIFICATE-----Generated at Sat Apr 5 05:52:14 2025 by rpki-client