$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/958bfc7c-2636-382b-b67f-ff905538c406.roa File: 958bfc7c-2636-382b-b67f-ff905538c406.roa (raw, json) Hash identifier: oooNosud18p1bSzF2/YfVrcOJzlJ0RaA1LNisKhxaAg= Subject key identifier: 01:EE:C2:3D:8C:4D:CC:31:63:50:BD:C2:63:BA:F4:F9:B2:99:B1:55 Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b Certificate serial: 010D0C9F432858489075F4249B4D045164A58B40 Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/958bfc7c-2636-382b-b67f-ff905538c406.roa Signing time: Thu 16 Jan 2025 14:00:50 +0000 ROA not before: Thu 16 Jan 2025 14:00:50 +0000 ROA not after: Wed 16 Apr 2025 13:00:50 +0000 asID: 9009 IP address blocks: 198.145.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:90:75:f4:24:9b:4d:04:51:64:a5:8b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Validity Not Before: Jan 16 14:00:50 2025 GMT Not After : Apr 16 13:00:50 2025 GMT Subject: CN=8070be17-800f-4435-8bdc-1d02392a8014 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:7b:75:98:9d:e2:60:bc:24:ad:a0:7a:1e:4b: a6:d1:cf:6a:b5:93:51:2d:3c:0d:e6:87:8e:e2:ac: 5a:32:66:96:38:7b:64:78:dd:1a:89:be:8d:14:df: 16:fe:ff:e7:db:f8:c7:51:2a:41:a1:22:06:19:e7: 53:29:62:f5:df:5f:1a:45:40:a9:97:11:cb:b2:c0: b5:6b:53:ea:51:6e:f3:7e:40:a6:cc:f4:9e:b3:d8: a3:40:df:aa:04:63:06:a2:43:14:c0:cb:a5:c4:d5: f6:a8:c1:ac:a3:b5:c4:a1:5a:77:89:68:0c:5a:73: c6:3b:5b:3f:d8:fa:a5:43:e9:26:0d:ca:9c:0e:49: 8b:27:d4:fb:56:74:32:ba:92:4e:da:5b:54:c4:60: 3a:e6:54:5c:0b:77:f4:77:63:d0:bf:12:9f:6e:70: e2:07:17:07:7a:5e:be:44:4d:36:f4:52:67:a5:71: 4f:ec:99:67:7e:a0:02:91:36:f0:da:ef:16:6e:4e: 14:d9:ee:4f:3d:e3:c3:45:43:42:49:12:f2:03:19: 8c:a4:86:9b:e3:86:be:ab:7b:56:af:b5:cd:61:1f: 33:66:dc:a7:f2:59:13:ab:ee:d7:06:25:2b:81:f1: 9f:8a:26:4a:ea:1c:b7:2c:ca:53:08:ba:27:10:ab: 4e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:EE:C2:3D:8C:4D:CC:31:63:50:BD:C2:63:BA:F4:F9:B2:99:B1:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/958bfc7c-2636-382b-b67f-ff905538c406.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl X509v3 Authority Key Identifier: keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer sbgp-ipAddrBlock: critical IPv4: 198.145.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:29:2a:39:8a:f0:04:66:33:e1:f8:ef:fd:a0:ed:01:c1:9a: 43:56:25:d3:97:91:1c:6f:d6:54:1d:78:85:52:2b:b1:0a:a4: 6a:e2:da:04:c7:bf:86:42:61:fb:4b:87:34:4b:bc:bd:98:0f: 58:23:4b:36:97:80:9c:c2:d3:e8:1a:55:0c:cd:99:cb:86:f0: 6e:6e:3a:e3:7d:f0:eb:8b:15:6c:61:1b:44:9e:d1:69:0b:2f: 75:74:3d:3c:fc:16:4f:87:5c:b0:31:82:5a:b8:f7:ae:c9:05: 09:68:a7:fb:f9:fb:12:62:cb:7f:9e:8f:58:de:1c:a9:49:78: aa:81:ea:78:6f:b3:fb:20:14:50:9c:2d:da:80:35:71:4b:e9: ac:e5:6e:f7:0b:48:69:60:62:ce:9e:c8:d3:c9:44:f1:c2:a3: ee:d3:96:44:97:6b:d5:37:7c:e9:4b:6a:20:9a:b3:db:7d:22: 7f:36:ba:73:b6:e8:2f:55:77:e3:4a:23:90:e8:50:c4:59:03: 9c:f4:b3:1b:6b:69:f5:83:79:51:30:cb:cd:46:1d:34:fb:bc: d2:3f:fd:73:e8:34:85:b6:9d:57:48:56:c6:29:20:3f:9c:1b: d9:06:f4:42:28:83:65:1c:16:78:ef:6b:4c:1f:6e:72:7c:84: 70:e9:8c:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiQdfQkm00EUWSli0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz NjFiMB4XDTI1MDExNjE0MDA1MFoXDTI1MDQxNjEzMDA1MFowLzEtMCsGA1UEAxMk ODA3MGJlMTctODAwZi00NDM1LThiZGMtMWQwMjM5MmE4MDE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHt1mJ3iYLwkraB6Hkum0c9qtZNRLTwN5oeO 4qxaMmaWOHtkeN0aib6NFN8W/v/n2/jHUSpBoSIGGedTKWL1318aRUCplxHLssC1 a1PqUW7zfkCmzPSes9ijQN+qBGMGokMUwMulxNX2qMGso7XEoVp3iWgMWnPGO1s/ 2PqlQ+kmDcqcDkmLJ9T7VnQyupJO2ltUxGA65lRcC3f0d2PQvxKfbnDiBxcHel6+ RE029FJnpXFP7JlnfqACkTbw2u8Wbk4U2e5PPePDRUNCSRLyAxmMpIab44a+q3tW r7XNYR8zZtyn8lkTq+7XBiUrgfGfiiZK6hy3LMpTCLonEKtOMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAHuwj2MTcwxY1C9wmO69PmymbFVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvOTU4YmZjN2MtMjYzNi0z ODJiLWI2N2YtZmY5MDU1MzhjNDA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2 ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxpHmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEgpKjmK8ARmM+H47/2g7QHBmkNWJdOXkRxv1lQdeIVSK7EKpGri2gTH v4ZCYftLhzRLvL2YD1gjSzaXgJzC0+gaVQzNmcuG8G5uOuN98OuLFWxhG0Se0WkL L3V0PTz8Fk+HXLAxglq4967JBQlop/v5+xJiy3+ej1jeHKlJeKqB6nhvs/sgFFCc LdqANXFL6azlbvcLSGlgYs6eyNPJRPHCo+7TlkSXa9U3fOlLaiCas9t9In82unO2 6C9Vd+NKI5DoUMRZA5z0sxtrafWDeVEwy81GHTT7vNI//XPoNIW2nVdIVsYpID+c G9kG9EIog2UcFnjva0wfbnJ8hHDpjIE= -----END CERTIFICATE-----Generated at Sat Apr 5 05:24:53 2025 by rpki-client