$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/df4d6f54-7715-3e9a-8c6c-bc5220d3b3da.roa File: df4d6f54-7715-3e9a-8c6c-bc5220d3b3da.roa (raw, json) Hash identifier: ksJqWCF4zu7Mzpy8BjeTlcckPZTjvzKBXxLGnsz6PLM= Subject key identifier: E2:9E:C7:10:0E:C5:FE:ED:68:CB:D0:C3:F6:60:AF:C1:FE:5E:86:7E Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b Certificate serial: 010D0C9F432858489340AC6F62F5F16AB6BD6280 Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/df4d6f54-7715-3e9a-8c6c-bc5220d3b3da.roa Signing time: Fri 17 Jan 2025 14:00:53 +0000 ROA not before: Fri 17 Jan 2025 14:00:53 +0000 ROA not after: Thu 17 Apr 2025 13:00:53 +0000 asID: 13213 IP address blocks: 198.145.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:93:40:ac:6f:62:f5:f1:6a:b6:bd:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Validity Not Before: Jan 17 14:00:53 2025 GMT Not After : Apr 17 13:00:53 2025 GMT Subject: CN=889e8fc6-e81b-4916-abc6-1941fe751a9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:44:87:78:22:2c:d1:52:67:b7:fd:3b:17:59: b0:65:d7:80:bd:b7:72:23:d1:6d:2c:1e:50:0e:64: 49:86:f9:76:96:43:d1:7f:22:2b:cf:c5:88:a9:34: 89:18:12:81:54:f7:84:d3:f3:d6:58:a4:54:df:d4: 67:64:d6:65:eb:da:45:d0:60:4b:bf:0d:04:eb:67: 0c:5c:b7:62:70:8a:d5:3e:28:db:d1:15:16:82:07: 0c:da:54:d1:12:85:1d:da:c6:a2:70:51:c9:27:9c: 8f:c8:8f:f5:04:4d:96:c1:58:ff:b7:8a:58:fb:74: 9b:2b:54:57:fe:41:a7:ec:5f:e0:97:b4:88:2e:22: b9:fa:b0:b7:24:38:95:ac:5f:ce:63:ff:0b:52:39: 5c:6d:6f:68:7a:db:ab:a1:02:3f:63:b3:b3:b8:95: 41:e1:54:1f:61:18:df:60:3a:8d:16:96:5f:ab:08: 55:a2:67:55:92:b6:00:06:3d:84:69:c1:39:e4:79: e4:3d:98:9d:a6:c3:46:45:3c:a5:3d:4d:ba:cc:7d: 09:94:77:d8:d9:cd:22:fd:a9:26:5a:a3:ee:96:d7: c9:58:0f:b8:29:32:44:61:2b:e9:66:64:42:86:82: 9c:30:72:8e:f3:5c:46:b1:75:32:d7:0c:3b:a0:99: 09:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:9E:C7:10:0E:C5:FE:ED:68:CB:D0:C3:F6:60:AF:C1:FE:5E:86:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/df4d6f54-7715-3e9a-8c6c-bc5220d3b3da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl X509v3 Authority Key Identifier: keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer sbgp-ipAddrBlock: critical IPv4: 198.145.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:e8:ba:78:02:86:bb:4d:cb:1c:e4:f5:31:38:83:e8:e2:f7: 98:82:bf:d6:bd:50:25:24:27:c1:28:ab:97:de:5a:95:b9:84: d5:8b:a4:b9:88:83:fe:b6:d1:ed:c3:fd:0f:97:79:44:22:61: 40:d9:c3:a2:ab:e6:7d:43:41:1d:41:81:e4:f5:0b:d2:a3:68: 6b:d1:0e:b1:8f:64:ac:cf:e3:bc:22:66:76:ca:4b:4e:76:ec: 06:c2:8b:fd:02:c7:2e:89:39:ae:67:2d:73:58:43:84:2b:29: 0e:10:76:6a:55:22:f8:67:1b:d4:6e:06:4e:d7:26:5c:32:2e: 22:78:73:77:16:82:ea:6d:80:19:20:ba:fe:1b:40:e0:5d:d3: e6:24:a0:bb:ef:40:26:60:a8:8c:38:a0:02:71:6b:99:07:f3: 03:6b:b6:b8:c4:1f:eb:3c:d8:22:c6:7c:ed:7e:34:3a:b2:b7: b0:b2:d5:2b:b5:e9:62:38:ab:59:b6:1c:6e:d2:6b:23:92:95: e8:ba:30:3c:19:5c:4c:50:a4:57:33:c6:a6:1d:b4:04:5d:ac: 7f:ee:5b:58:6f:72:45:46:d0:a7:9a:8a:86:3b:b7:da:9f:0d: 52:3b:48:f5:9d:dd:6a:45:2a:e0:cd:6c:75:9e:6b:fd:52:6f: 92:24:a4:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiTQKxvYvXxara9YoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz NjFiMB4XDTI1MDExNzE0MDA1M1oXDTI1MDQxNzEzMDA1M1owLzEtMCsGA1UEAxMk ODg5ZThmYzYtZTgxYi00OTE2LWFiYzYtMTk0MWZlNzUxYTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUSHeCIs0VJnt/07F1mwZdeAvbdyI9FtLB5Q DmRJhvl2lkPRfyIrz8WIqTSJGBKBVPeE0/PWWKRU39RnZNZl69pF0GBLvw0E62cM XLdicIrVPijb0RUWggcM2lTREoUd2saicFHJJ5yPyI/1BE2WwVj/t4pY+3SbK1RX /kGn7F/gl7SILiK5+rC3JDiVrF/OY/8LUjlcbW9oeturoQI/Y7OzuJVB4VQfYRjf YDqNFpZfqwhVomdVkrYABj2EacE55HnkPZidpsNGRTylPU26zH0JlHfY2c0i/akm WqPultfJWA+4KTJEYSvpZmRChoKcMHKO81xGsXUy1ww7oJkJEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOKexxAOxf7taMvQw/Zgr8H+XoZ+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvZGY0ZDZmNTQtNzcxNS0z ZTlhLThjNmMtYmM1MjIwZDNiM2RhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2 ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxpHrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIvoungChrtNyxzk9TE4g+ji95iCv9a9UCUkJ8Eoq5feWpW5hNWLpLmI g/620e3D/Q+XeUQiYUDZw6Kr5n1DQR1BgeT1C9KjaGvRDrGPZKzP47wiZnbKS052 7AbCi/0Cxy6JOa5nLXNYQ4QrKQ4QdmpVIvhnG9RuBk7XJlwyLiJ4c3cWguptgBkg uv4bQOBd0+YkoLvvQCZgqIw4oAJxa5kH8wNrtrjEH+s82CLGfO1+NDqyt7Cy1Su1 6WI4q1m2HG7SayOSlei6MDwZXExQpFczxqYdtARdrH/uW1hvckVG0KeaioY7t9qf DVI7SPWd3WpFKuDNbHWea/1Sb5IkpNI= -----END CERTIFICATE-----Generated at Sat Apr 5 04:39:15 2025 by rpki-client