$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/03e3c0fd-a9a3-3336-8a9f-1f93b9bf2300.roa File: 03e3c0fd-a9a3-3336-8a9f-1f93b9bf2300.roa (raw, json) Hash identifier: jDUtyppo8uAmMxUseiAEbrtX1oufKaYkmkUlRBK6vKY= Subject key identifier: D1:8A:B3:4C:72:8A:55:97:FF:66:8C:DD:64:86:B3:47:B4:05:D0:05 Certificate issuer: /CN=38c5255f-5193-4ef7-92e9-db326ee1d690 Certificate serial: 010D0C9F43285848828096F0C0AEF2FFF6D2B0E0 Authority key identifier: E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/03e3c0fd-a9a3-3336-8a9f-1f93b9bf2300.roa Signing time: Sat 11 Jan 2025 14:00:52 +0000 ROA not before: Sat 11 Jan 2025 14:00:52 +0000 ROA not after: Fri 11 Apr 2025 13:00:52 +0000 asID: 6498 IP address blocks: 75.78.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:82:80:96:f0:c0:ae:f2:ff:f6:d2:b0:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38c5255f-5193-4ef7-92e9-db326ee1d690 Validity Not Before: Jan 11 14:00:52 2025 GMT Not After : Apr 11 13:00:52 2025 GMT Subject: CN=8dcc16cb-9b1c-49cf-a311-2be93266ccc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:74:77:cd:86:80:c3:8b:27:50:92:19:c9:64: 0b:5b:74:52:fd:05:ce:1c:1d:19:7e:c8:05:e6:fa: df:e0:47:6e:02:76:45:40:81:41:3a:21:4d:e6:f4: 14:bf:87:41:80:ba:8a:79:c9:2c:67:42:ce:d5:87: d1:86:1d:5d:4f:3d:36:d9:b4:cd:e5:32:a0:f4:d0: 5e:13:42:29:a5:b4:94:68:b9:b4:88:ba:eb:68:6b: b0:12:f3:b0:0d:26:49:80:2c:25:09:f9:c7:ff:76: f0:0d:3e:e9:6c:e5:b4:79:61:b0:a6:2f:64:fa:69: 8e:cc:cc:ba:58:13:cd:1a:ed:2b:2e:34:d0:42:e7: 59:2f:da:9e:b0:3e:98:76:2b:c8:e5:c9:8c:1d:89: b5:c8:cb:86:b8:a9:41:af:be:14:2b:b5:59:14:20: 2a:3a:cb:58:b3:16:56:e5:d3:9e:d9:e7:59:d1:20: bf:0e:ac:e6:3e:3b:e5:b1:af:fd:8d:f9:60:3d:be: 44:3d:d9:e3:36:fb:f1:af:70:b9:a4:52:f1:b2:0d: 67:f3:15:80:2c:80:45:56:d1:75:2d:09:a4:9b:ee: 0f:d3:91:6b:20:90:fe:ac:64:ae:9e:9b:cd:75:8f: e3:a0:fb:2c:92:f7:c5:ad:a0:70:cb:a0:a6:c8:a3: 90:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:8A:B3:4C:72:8A:55:97:FF:66:8C:DD:64:86:B3:47:B4:05:D0:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/03e3c0fd-a9a3-3336-8a9f-1f93b9bf2300.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl X509v3 Authority Key Identifier: keyid:E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer sbgp-ipAddrBlock: critical IPv4: 75.78.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:4a:db:cb:64:50:e2:8e:8e:5d:e8:54:49:6c:0f:e4:58:19: 85:6c:fb:1a:20:5b:8b:d6:5f:9a:d3:5c:7f:4c:b4:8a:b1:ac: 9f:67:82:d8:dc:df:2a:e1:36:9e:70:58:88:cc:61:13:19:f4: de:e1:6f:6b:0a:e5:6d:b6:4d:13:6b:5e:2f:61:91:c2:a5:3a: 08:9d:24:93:a0:60:d2:85:38:cc:74:ac:bd:74:0d:ef:74:39: 14:ee:72:da:cd:4e:28:66:1f:43:d5:a3:35:13:46:90:4d:49: 13:c2:22:8c:fc:ee:04:c1:b1:1b:77:cf:94:81:ba:f2:da:4b: 59:ab:99:36:1f:75:b0:b7:3d:31:39:65:24:70:d2:df:65:c7: 59:fa:05:fa:00:01:0b:1e:db:2b:de:47:c9:10:44:d5:8f:60: 0f:e9:d9:15:70:e9:04:a2:d7:cb:79:df:e9:94:df:32:f7:a1: 5b:90:01:93:80:bb:d8:e8:db:37:a7:24:f6:4a:29:1c:9d:5e: 65:8e:58:3b:02:00:60:04:13:c7:23:27:bd:7f:03:bc:38:35: 4c:3f:c3:54:70:ea:94:11:d6:65:60:2d:05:0a:5e:a4:2f:a9: c3:6a:8d:e1:8e:ab:29:73:c1:fa:34:e5:9d:36:6a:cf:bd:e9: 6d:d0:fd:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiCgJbwwK7y//bSsOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhjNTI1NWYtNTE5My00ZWY3LTkyZTktZGIzMjZlZTFk NjkwMB4XDTI1MDExMTE0MDA1MloXDTI1MDQxMTEzMDA1MlowLzEtMCsGA1UEAxMk OGRjYzE2Y2ItOWIxYy00OWNmLWEzMTEtMmJlOTMyNjZjY2MyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3R3zYaAw4snUJIZyWQLW3RS/QXOHB0ZfsgF 5vrf4EduAnZFQIFBOiFN5vQUv4dBgLqKecksZ0LO1YfRhh1dTz022bTN5TKg9NBe E0IppbSUaLm0iLrraGuwEvOwDSZJgCwlCfnH/3bwDT7pbOW0eWGwpi9k+mmOzMy6 WBPNGu0rLjTQQudZL9qesD6YdivI5cmMHYm1yMuGuKlBr74UK7VZFCAqOstYsxZW 5dOe2edZ0SC/DqzmPjvlsa/9jflgPb5EPdnjNvvxr3C5pFLxsg1n8xWALIBFVtF1 LQmkm+4P05FrIJD+rGSunpvNdY/joPsskvfFraBwy6CmyKOQ1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNGKs0xyilWX/2aM3WSGs0e0BdAFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zOGM1 MjU1Zi01MTkzLTRlZjctOTJlOS1kYjMyNmVlMWQ2OTAvMDNlM2MwZmQtYTlhMy0z MzM2LThhOWYtMWY5M2I5YmYyMzAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzhjNTI1NWYtNTE5My00ZWY3LTky ZTktZGIzMjZlZTFkNjkwLzM4YzUyNTVmLTUxOTMtNGVmNy05MmU5LWRiMzI2ZWUx ZDY5MC5jcmwwHwYDVR0jBBgwFoAU6OtRdt4L2VYIX2NOD0gHny6QnZUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zOGM1MjU1Zi01MTkzLTRlZjctOTJlOS1kYjMy NmVlMWQ2OTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS05tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKFK28tkUOKOjl3oVElsD+RYGYVs+xogW4vWX5rTXH9MtIqxrJ9ngtjc 3yrhNp5wWIjMYRMZ9N7hb2sK5W22TRNrXi9hkcKlOgidJJOgYNKFOMx0rL10De90 ORTuctrNTihmH0PVozUTRpBNSRPCIoz87gTBsRt3z5SBuvLaS1mrmTYfdbC3PTE5 ZSRw0t9lx1n6BfoAAQse2yveR8kQRNWPYA/p2RVw6QSi18t53+mU3zL3oVuQAZOA u9jo2zenJPZKKRydXmWOWDsCAGAEE8cjJ71/A7w4NUw/w1Rw6pQR1mVgLQUKXqQv qcNqjeGOqylzwfo05Z02as+96W3Q/QQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:23:59 2025 by rpki-client