$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/2cb8bb7e-1747-390b-b8f6-4d783573785c.roa File: 2cb8bb7e-1747-390b-b8f6-4d783573785c.roa (raw, json) Hash identifier: 6qf24LaJtKPP+7Snx72sWhV1LkbpDCuKyOSYvrgxXuQ= Subject key identifier: 75:68:D9:20:EE:CA:FF:B4:BD:8A:6E:4F:FF:BC:CF:F7:6A:8D:28:9E Certificate issuer: /CN=38c5255f-5193-4ef7-92e9-db326ee1d690 Certificate serial: 010D0C9F43285848828097362F88E006F5A17400 Authority key identifier: E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/2cb8bb7e-1747-390b-b8f6-4d783573785c.roa Signing time: Sat 11 Jan 2025 14:00:52 +0000 ROA not before: Sat 11 Jan 2025 14:00:52 +0000 ROA not after: Fri 11 Apr 2025 13:00:52 +0000 asID: 6498 IP address blocks: 75.78.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:82:80:97:36:2f:88:e0:06:f5:a1:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38c5255f-5193-4ef7-92e9-db326ee1d690 Validity Not Before: Jan 11 14:00:52 2025 GMT Not After : Apr 11 13:00:52 2025 GMT Subject: CN=0f3f9dce-2457-45e2-a5f5-007cce443da2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:b1:3e:20:2f:47:6e:19:5f:5d:49:fa:06:dd: 0a:3f:e9:73:80:90:1b:09:13:f2:3e:02:14:6b:89: 5f:5a:eb:e1:78:3e:42:df:89:f4:1c:04:27:e1:7d: 43:36:71:4f:b7:05:39:ce:fc:1b:63:f5:85:66:f1: 33:b3:c2:21:77:a3:1a:bf:c1:9f:15:2e:da:10:40: dd:d2:e8:52:bc:1a:c4:4e:2d:bb:05:94:a6:40:ae: c9:28:61:a5:84:b4:0c:77:e4:bd:ae:22:36:51:32: 3c:12:97:92:c0:59:40:4e:10:d0:fe:7e:e4:04:21: 0e:44:f8:13:33:a8:9a:1e:fe:39:c0:4c:54:01:b1: 4d:29:11:76:b1:c9:2e:97:19:3e:01:33:63:af:94: 00:bc:cb:09:ec:15:15:5d:67:18:b0:4f:d2:70:86: 4b:3e:e5:8d:18:b2:99:6c:75:84:4b:29:23:b9:7f: e9:00:a6:be:f0:4f:30:81:26:0f:2b:15:9e:2b:86: 19:7a:f7:20:5b:ca:17:fe:34:a0:54:ae:c2:49:61: 49:b7:55:8d:d2:d4:8b:79:90:46:21:01:2d:12:c6: 8e:cc:49:41:43:aa:7f:1d:5e:60:74:4d:c7:4c:a8: 0a:3d:0c:ae:28:2a:5f:89:4c:aa:50:e8:6d:05:1c: 15:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:68:D9:20:EE:CA:FF:B4:BD:8A:6E:4F:FF:BC:CF:F7:6A:8D:28:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/2cb8bb7e-1747-390b-b8f6-4d783573785c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl X509v3 Authority Key Identifier: keyid:E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer sbgp-ipAddrBlock: critical IPv4: 75.78.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:79:9b:a8:6a:4f:01:13:02:3a:bb:d2:f9:1f:71:08:7d:83: 5d:1b:c4:c0:c5:9e:bb:c7:95:68:07:eb:59:df:c3:0d:91:80: 7f:ee:0c:6c:ea:fd:ca:dd:67:cc:f5:2e:12:d3:d1:6e:c9:33: b9:f3:95:24:2f:7c:ad:28:95:47:a8:44:98:66:71:24:32:fd: 4a:8d:28:c2:04:18:47:2f:ad:1b:45:9c:3e:cc:da:8f:29:86: 7c:cf:16:33:56:12:82:99:03:8c:00:b1:14:07:e1:cf:9e:6e: 02:db:e3:d8:af:f2:05:44:a4:a8:7a:ee:cd:c8:dc:b3:f7:0a: aa:18:df:e8:04:6e:8d:d8:aa:de:a5:a4:b7:5e:48:74:aa:d9: c9:3b:6e:ac:6b:50:dd:85:0e:b4:e0:54:3b:27:67:61:6e:fc: 11:38:81:11:15:52:14:fe:9f:54:83:d9:60:9a:d7:26:7e:53: 7b:65:9a:39:c9:47:c2:9a:8d:dc:51:21:61:d7:af:07:b9:45: be:b5:cf:90:f3:12:34:d4:19:dd:eb:db:51:f5:f8:59:9f:8f: 82:4b:5c:ab:0d:55:8f:24:c8:b4:ff:ae:84:ec:0e:c6:e5:33: c3:12:16:2b:4b:c6:07:c9:7a:6c:8d:e2:04:94:57:99:46:d5: 48:ce:5e:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiCgJc2L4jgBvWhdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhjNTI1NWYtNTE5My00ZWY3LTkyZTktZGIzMjZlZTFk NjkwMB4XDTI1MDExMTE0MDA1MloXDTI1MDQxMTEzMDA1MlowLzEtMCsGA1UEAxMk MGYzZjlkY2UtMjQ1Ny00NWUyLWE1ZjUtMDA3Y2NlNDQzZGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7E+IC9HbhlfXUn6Bt0KP+lzgJAbCRPyPgIU a4lfWuvheD5C34n0HAQn4X1DNnFPtwU5zvwbY/WFZvEzs8Ihd6Mav8GfFS7aEEDd 0uhSvBrETi27BZSmQK7JKGGlhLQMd+S9riI2UTI8EpeSwFlAThDQ/n7kBCEORPgT M6iaHv45wExUAbFNKRF2sckulxk+ATNjr5QAvMsJ7BUVXWcYsE/ScIZLPuWNGLKZ bHWESykjuX/pAKa+8E8wgSYPKxWeK4YZevcgW8oX/jSgVK7CSWFJt1WN0tSLeZBG IQEtEsaOzElBQ6p/HV5gdE3HTKgKPQyuKCpfiUyqUOhtBRwVxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHVo2SDuyv+0vYpuT/+8z/dqjSieMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zOGM1 MjU1Zi01MTkzLTRlZjctOTJlOS1kYjMyNmVlMWQ2OTAvMmNiOGJiN2UtMTc0Ny0z OTBiLWI4ZjYtNGQ3ODM1NzM3ODVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzhjNTI1NWYtNTE5My00ZWY3LTky ZTktZGIzMjZlZTFkNjkwLzM4YzUyNTVmLTUxOTMtNGVmNy05MmU5LWRiMzI2ZWUx ZDY5MC5jcmwwHwYDVR0jBBgwFoAU6OtRdt4L2VYIX2NOD0gHny6QnZUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zOGM1MjU1Zi01MTkzLTRlZjctOTJlOS1kYjMy NmVlMWQ2OTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS07gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG95m6hqTwETAjq70vkfcQh9g10bxMDFnrvHlWgH61nfww2RgH/uDGzq /crdZ8z1LhLT0W7JM7nzlSQvfK0olUeoRJhmcSQy/UqNKMIEGEcvrRtFnD7M2o8p hnzPFjNWEoKZA4wAsRQH4c+ebgLb49iv8gVEpKh67s3I3LP3CqoY3+gEbo3Yqt6l pLdeSHSq2ck7bqxrUN2FDrTgVDsnZ2Fu/BE4gREVUhT+n1SD2WCa1yZ+U3tlmjnJ R8KajdxRIWHXrwe5Rb61z5DzEjTUGd3r21H1+Fmfj4JLXKsNVY8kyLT/roTsDsbl M8MSFitLxgfJemyN4gSUV5lG1UjOXmM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:41:51 2025 by rpki-client