$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/85e2c460-9b4b-457b-bb2c-a2b00f7a0dd0/d15da3a2-08ce-3992-8b01-fd2369adaa65.roa File: d15da3a2-08ce-3992-8b01-fd2369adaa65.roa (raw, json) Hash identifier: pRHeCAOax+5nbZP7mpg/8PfYc0b175DaYohTt59a8HQ= Subject key identifier: 70:BF:8A:FA:8E:0C:E0:D4:BD:A0:98:C8:24:C5:FB:D7:E6:1D:04:D4 Certificate issuer: /CN=85e2c460-9b4b-457b-bb2c-a2b00f7a0dd0 Certificate serial: 010D0C9F43285848CB16564C95CAF2AD1B6A4280 Authority key identifier: 60:5F:56:E1:A0:0D:78:93:15:89:04:48:61:73:EB:08:F7:02:3E:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/85e2c460-9b4b-457b-bb2c-a2b00f7a0dd0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/85e2c460-9b4b-457b-bb2c-a2b00f7a0dd0/d15da3a2-08ce-3992-8b01-fd2369adaa65.roa Signing time: Thu 06 Feb 2025 14:00:52 +0000 ROA not before: Thu 06 Feb 2025 14:00:52 +0000 ROA not after: Wed 07 May 2025 13:00:52 +0000 asID: 62752 IP address blocks: 198.51.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/85e2c460-9b4b-457b-bb2c-a2b00f7a0dd0/85e2c460-9b4b-457b-bb2c-a2b00f7a0dd0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/85e2c460-9b4b-457b-bb2c-a2b00f7a0dd0/85e2c460-9b4b-457b-bb2c-a2b00f7a0dd0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/85e2c460-9b4b-457b-bb2c-a2b00f7a0dd0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cb:16:56:4c:95:ca:f2:ad:1b:6a:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e2c460-9b4b-457b-bb2c-a2b00f7a0dd0 Validity Not Before: Feb 6 14:00:52 2025 GMT Not After : May 7 13:00:52 2025 GMT Subject: CN=6c8ac704-65f5-4da9-af29-e5acae63625c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:12:b4:34:d8:6d:c9:68:b7:9d:39:ac:3c:52: 6c:2f:c5:6c:9b:af:30:11:cf:1e:8d:fe:97:79:8d: 3c:02:7d:e1:3f:31:8f:b0:88:35:7d:94:50:8b:ef: 47:e5:1d:1d:bb:bc:9d:54:78:1f:1d:b9:fb:dd:af: 1e:4c:e5:11:64:da:0d:95:6f:d9:b6:76:f6:c0:76: d1:fa:90:03:00:d4:7c:3c:af:c9:a7:9a:5a:52:9e: 21:c8:54:a8:79:26:cc:6e:79:e9:32:c5:f9:27:fe: 5f:24:b9:6d:11:e9:e5:fb:69:c7:d3:89:ec:09:76: 88:59:e4:be:99:ea:14:0e:60:37:70:05:30:eb:90: 72:80:9c:55:29:ca:1c:94:26:34:ff:d5:29:72:a8: c6:67:61:08:ee:c9:32:55:80:59:be:ca:23:a3:03: dc:17:f9:43:0d:24:41:ac:b4:b9:57:84:78:50:49: e9:e9:0e:c0:0b:b2:b0:21:26:93:4d:c4:6b:b0:55: 5f:fc:4d:f6:f5:e7:0f:4b:fd:a5:ea:e1:8a:00:4e: 20:6a:f4:c1:9d:ce:ab:f6:22:77:81:62:25:a4:02: 2d:77:e2:0d:f9:f5:e6:d8:d4:1e:40:65:f6:ee:39: ca:aa:3c:0a:cb:0a:18:52:72:fa:ac:99:f9:1c:08: bc:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:BF:8A:FA:8E:0C:E0:D4:BD:A0:98:C8:24:C5:FB:D7:E6:1D:04:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/85e2c460-9b4b-457b-bb2c-a2b00f7a0dd0/d15da3a2-08ce-3992-8b01-fd2369adaa65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/85e2c460-9b4b-457b-bb2c-a2b00f7a0dd0/85e2c460-9b4b-457b-bb2c-a2b00f7a0dd0.crl X509v3 Authority Key Identifier: keyid:60:5F:56:E1:A0:0D:78:93:15:89:04:48:61:73:EB:08:F7:02:3E:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/85e2c460-9b4b-457b-bb2c-a2b00f7a0dd0.cer sbgp-ipAddrBlock: critical IPv4: 198.51.75.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:0a:48:20:ce:1a:37:e7:1b:32:1c:42:f9:69:72:31:32:10: d1:6e:f7:9f:2f:1e:af:8b:24:02:c6:19:4c:55:09:e4:2f:32: d8:1d:31:c0:0f:6d:08:4e:e8:a3:df:cc:d9:2b:0f:ca:39:ba: 19:68:9e:22:df:63:40:d5:69:a6:d6:65:20:48:f1:f2:f1:b6: 74:16:63:1b:42:ad:41:d7:d9:c9:73:f2:c7:c1:b3:73:a1:2d: 91:6c:10:f3:02:07:94:f8:6c:47:23:08:0e:49:0e:14:04:db: 78:35:74:f3:17:36:6e:82:d5:9a:14:3c:e6:fa:4f:4b:ff:f1: 73:3c:a4:3b:76:59:65:e4:25:18:6f:30:a6:20:39:28:43:5b: 4f:82:a4:14:e0:f0:7f:f3:25:59:5a:2a:07:66:15:35:e1:64: 87:4f:8f:0b:96:dc:36:c3:2e:5a:53:b1:24:c2:25:a4:5e:92: 0c:0e:dc:06:e2:01:7e:ab:33:e6:3d:93:bb:12:fb:2b:4c:5b: 64:5f:47:11:92:91:9a:ed:84:ca:03:ae:4a:dd:4c:3b:b0:12: f0:a7:fb:7b:73:1e:6d:16:02:a5:ca:fe:4c:e9:56:10:75:43: 44:cd:68:87:e0:0d:c2:15:09:d5:83:7e:47:06:9c:c5:6d:cc: b1:36:e3:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjLFlZMlcryrRtqQoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMmM0NjAtOWI0Yi00NTdiLWJiMmMtYTJiMDBmN2Ew ZGQwMB4XDTI1MDIwNjE0MDA1MloXDTI1MDUwNzEzMDA1MlowLzEtMCsGA1UEAxMk NmM4YWM3MDQtNjVmNS00ZGE5LWFmMjktZTVhY2FlNjM2MjVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihK0NNhtyWi3nTmsPFJsL8Vsm68wEc8ejf6X eY08An3hPzGPsIg1fZRQi+9H5R0du7ydVHgfHbn73a8eTOURZNoNlW/Ztnb2wHbR +pADANR8PK/Jp5paUp4hyFSoeSbMbnnpMsX5J/5fJLltEenl+2nH04nsCXaIWeS+ meoUDmA3cAUw65BygJxVKcoclCY0/9UpcqjGZ2EI7skyVYBZvsojowPcF/lDDSRB rLS5V4R4UEnp6Q7AC7KwISaTTcRrsFVf/E329ecPS/2l6uGKAE4gavTBnc6r9iJ3 gWIlpAItd+IN+fXm2NQeQGX27jnKqjwKywoYUnL6rJn5HAi8YQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHC/ivqODODUvaCYyCTF+9fmHQTUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84NWUy YzQ2MC05YjRiLTQ1N2ItYmIyYy1hMmIwMGY3YTBkZDAvZDE1ZGEzYTItMDhjZS0z OTkyLThiMDEtZmQyMzY5YWRhYTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODVlMmM0NjAtOWI0Yi00NTdiLWJi MmMtYTJiMDBmN2EwZGQwLzg1ZTJjNDYwLTliNGItNDU3Yi1iYjJjLWEyYjAwZjdh MGRkMC5jcmwwHwYDVR0jBBgwFoAUYF9W4aANeJMViQRIYXPrCPcCPokwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84NWUyYzQ2MC05YjRiLTQ1N2ItYmIyYy1hMmIw MGY3YTBkZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxjNLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKwKSCDOGjfnGzIcQvlpcjEyENFu958vHq+LJALGGUxVCeQvMtgdMcAP bQhO6KPfzNkrD8o5uhloniLfY0DVaabWZSBI8fLxtnQWYxtCrUHX2clz8sfBs3Oh LZFsEPMCB5T4bEcjCA5JDhQE23g1dPMXNm6C1ZoUPOb6T0v/8XM8pDt2WWXkJRhv MKYgOShDW0+CpBTg8H/zJVlaKgdmFTXhZIdPjwuW3DbDLlpTsSTCJaRekgwO3Abi AX6rM+Y9k7sS+ytMW2RfRxGSkZrthMoDrkrdTDuwEvCn+3tzHm0WAqXK/kzpVhB1 Q0TNaIfgDcIVCdWDfkcGnMVtzLE248o= -----END CERTIFICATE-----Generated at Sat Apr 12 12:26:44 2025 by rpki-client