$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/33b7ca7d-abb9-39b1-a944-19374ba77af4.roa File: 33b7ca7d-abb9-39b1-a944-19374ba77af4.roa (raw, json) Hash identifier: MVEhAxWXNB1jmxw4OsTp8hENcG4AzlJJDEKVKJsq7bg= Subject key identifier: FC:53:E6:7C:22:1C:27:42:8B:16:EF:7E:F2:57:7C:7A:59:67:83:82 Certificate issuer: /CN=38c5255f-5193-4ef7-92e9-db326ee1d690 Certificate serial: 010D0C9F4328584882809821FBF8679B124B8000 Authority key identifier: E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/33b7ca7d-abb9-39b1-a944-19374ba77af4.roa Signing time: Sat 11 Jan 2025 14:00:52 +0000 ROA not before: Sat 11 Jan 2025 14:00:52 +0000 ROA not after: Fri 11 Apr 2025 13:00:52 +0000 asID: 6498 IP address blocks: 75.78.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:82:80:98:21:fb:f8:67:9b:12:4b:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38c5255f-5193-4ef7-92e9-db326ee1d690 Validity Not Before: Jan 11 14:00:52 2025 GMT Not After : Apr 11 13:00:52 2025 GMT Subject: CN=1a59aff9-c058-481e-9f82-a438420a53d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:81:c1:85:0b:04:10:79:9b:8b:9b:69:f6:eb: 2a:c7:79:f8:6b:72:98:d8:b6:30:38:07:50:6c:3a: d5:50:db:06:d8:36:93:ef:66:56:80:8e:f9:95:46: e4:48:bf:bf:82:c8:49:db:9e:d6:07:bd:f4:04:3e: a1:f6:36:b5:ed:37:ef:39:fe:25:4b:ef:bc:06:45: a0:ec:6b:8e:ea:3b:ab:57:f2:69:02:7a:63:1e:f9: ca:29:b2:fc:ee:4d:ce:3d:e1:84:3b:f4:7d:1a:54: 3f:00:87:b2:73:ab:25:f4:60:5c:ba:a2:db:69:66: 3a:9a:2b:10:a9:ef:b2:d7:ae:6e:6e:72:88:7d:78: 1b:c7:5f:75:ab:2b:80:32:c1:aa:7a:43:17:b5:69: ce:f2:37:dd:fb:ac:e9:c0:d6:75:f4:a5:f9:53:96: a1:db:7c:cb:c8:08:7a:d8:63:b8:4e:f4:2c:13:b8: 30:c7:ce:b5:41:12:46:81:95:5a:14:05:35:0b:fb: 5f:03:01:4b:42:01:b8:85:23:44:56:3b:01:12:20: 79:20:ae:f0:b4:0d:de:13:49:65:31:ef:2f:02:db: 77:e2:5e:ea:ef:a2:26:bb:3c:32:89:51:76:b6:96: ea:c6:17:d4:03:74:f2:36:cd:80:7e:05:50:f7:8e: 0b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:53:E6:7C:22:1C:27:42:8B:16:EF:7E:F2:57:7C:7A:59:67:83:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/33b7ca7d-abb9-39b1-a944-19374ba77af4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl X509v3 Authority Key Identifier: keyid:E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer sbgp-ipAddrBlock: critical IPv4: 75.78.110.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:6a:08:f9:38:d7:ca:67:20:04:32:07:3f:83:b3:6a:a7:eb: 2b:11:80:f5:3f:13:e3:56:7e:b8:43:6e:25:9c:b8:57:a8:3a: 90:fd:8b:1b:56:da:e9:db:14:57:41:f9:6a:ed:4d:a4:09:da: 97:d1:00:d6:36:9b:21:49:0a:06:ac:14:03:16:75:49:7b:51: 55:33:d3:e8:9f:0d:ad:6f:0f:b0:7a:b6:01:f3:73:e5:fb:41: 0e:5d:78:29:a1:e0:62:13:d2:70:c4:b9:2a:23:0e:d6:1c:f2: 04:84:ef:63:c3:4b:1f:32:00:21:2a:bc:ba:82:7f:79:86:62: a2:84:ed:fc:ff:b2:fe:13:d5:34:d7:d2:c5:0e:d0:04:12:9d: a8:0d:b3:4e:b1:f1:50:4d:1a:06:fe:97:13:09:de:c4:23:c9: 98:23:d1:34:57:0f:b9:64:88:7b:4f:1b:0e:4f:55:d7:41:3d: 34:d2:64:21:57:0e:8f:64:ba:3b:3b:a2:75:13:eb:04:17:13: 72:1b:45:4a:d0:0f:2a:61:bd:f3:5e:0d:0b:fe:4b:0e:3c:76: 67:9c:a1:f1:f6:69:0a:dd:85:97:b9:cb:24:67:7c:97:92:54: 2d:1c:4e:d4:bb:f2:5f:b6:1a:7e:91:8c:50:31:d2:6e:6d:35: 03:4c:29:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiCgJgh+/hnmxJLgAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhjNTI1NWYtNTE5My00ZWY3LTkyZTktZGIzMjZlZTFk NjkwMB4XDTI1MDExMTE0MDA1MloXDTI1MDQxMTEzMDA1MlowLzEtMCsGA1UEAxMk MWE1OWFmZjktYzA1OC00ODFlLTlmODItYTQzODQyMGE1M2Q5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoHBhQsEEHmbi5tp9usqx3n4a3KY2LYwOAdQ bDrVUNsG2DaT72ZWgI75lUbkSL+/gshJ257WB730BD6h9ja17TfvOf4lS++8BkWg 7GuO6jurV/JpAnpjHvnKKbL87k3OPeGEO/R9GlQ/AIeyc6sl9GBcuqLbaWY6misQ qe+y165ubnKIfXgbx191qyuAMsGqekMXtWnO8jfd+6zpwNZ19KX5U5ah23zLyAh6 2GO4TvQsE7gwx861QRJGgZVaFAU1C/tfAwFLQgG4hSNEVjsBEiB5IK7wtA3eE0ll Me8vAtt34l7q76ImuzwyiVF2tpbqxhfUA3TyNs2AfgVQ944LwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPxT5nwiHCdCixbvfvJXfHpZZ4OCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zOGM1 MjU1Zi01MTkzLTRlZjctOTJlOS1kYjMyNmVlMWQ2OTAvMzNiN2NhN2QtYWJiOS0z OWIxLWE5NDQtMTkzNzRiYTc3YWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzhjNTI1NWYtNTE5My00ZWY3LTky ZTktZGIzMjZlZTFkNjkwLzM4YzUyNTVmLTUxOTMtNGVmNy05MmU5LWRiMzI2ZWUx ZDY5MC5jcmwwHwYDVR0jBBgwFoAU6OtRdt4L2VYIX2NOD0gHny6QnZUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zOGM1MjU1Zi01MTkzLTRlZjctOTJlOS1kYjMy NmVlMWQ2OTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS05uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ5qCPk418pnIAQyBz+Ds2qn6ysRgPU/E+NWfrhDbiWcuFeoOpD9ixtW 2unbFFdB+WrtTaQJ2pfRANY2myFJCgasFAMWdUl7UVUz0+ifDa1vD7B6tgHzc+X7 QQ5deCmh4GIT0nDEuSojDtYc8gSE72PDSx8yACEqvLqCf3mGYqKE7fz/sv4T1TTX 0sUO0AQSnagNs06x8VBNGgb+lxMJ3sQjyZgj0TRXD7lkiHtPGw5PVddBPTTSZCFX Do9kujs7onUT6wQXE3IbRUrQDyphvfNeDQv+Sw48dmecofH2aQrdhZe5yyRnfJeS VC0cTtS78l+2Gn6RjFAx0m5tNQNMKdg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:17:34 2025 by rpki-client