$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/67cc4bd0-2e69-3428-9f96-17d8dd8a5da3.roa File: 67cc4bd0-2e69-3428-9f96-17d8dd8a5da3.roa (raw, json) Hash identifier: eCgGvBERF6LukbQJj+J8fzaX9JGlNt2Vh1iRoK1W3W4= Subject key identifier: 0F:7B:86:74:FE:08:28:57:04:F0:83:17:BA:83:11:39:31:77:C1:77 Certificate issuer: /CN=38c5255f-5193-4ef7-92e9-db326ee1d690 Certificate serial: 010D0C9F43285848828097218A1419670D245840 Authority key identifier: E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/67cc4bd0-2e69-3428-9f96-17d8dd8a5da3.roa Signing time: Sat 11 Jan 2025 14:00:52 +0000 ROA not before: Sat 11 Jan 2025 14:00:52 +0000 ROA not after: Fri 11 Apr 2025 13:00:52 +0000 asID: 6498 IP address blocks: 75.78.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:82:80:97:21:8a:14:19:67:0d:24:58:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38c5255f-5193-4ef7-92e9-db326ee1d690 Validity Not Before: Jan 11 14:00:52 2025 GMT Not After : Apr 11 13:00:52 2025 GMT Subject: CN=c63d5309-ad68-4a5a-adc8-517b48f8a4a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:93:4b:7a:cc:9e:f3:da:83:ff:ca:b7:ef:0a: ae:50:04:9d:73:86:b7:9c:f5:b7:83:72:32:b8:41: d6:c6:65:4e:93:d4:49:a2:f1:b8:f7:50:2c:1b:bf: c1:b4:9d:c4:a6:d9:6e:de:3e:ac:b5:b4:bf:69:54: cc:f8:a3:4a:15:5a:58:e7:04:87:1e:92:40:ce:6e: 6d:62:14:8e:53:2b:ba:3d:36:09:4c:22:d4:ee:18: 95:eb:62:bd:62:5d:83:67:f9:e4:13:00:23:a8:30: 4b:6f:9b:b3:58:b2:25:ca:af:e6:01:86:c8:e0:ba: f0:28:2e:3e:e8:08:64:07:6b:87:24:20:67:58:27: 1a:30:24:bb:2e:5d:d1:f1:28:16:99:f3:ae:d7:5a: 6b:e8:a9:b7:25:5a:6a:81:2f:3c:68:79:fa:bd:da: 69:d8:75:2b:0a:54:98:41:dd:06:20:36:85:df:be: 8d:b3:25:98:e1:ef:a5:4e:3a:5e:06:d8:69:b1:b1: 69:2b:c5:9e:75:5d:a5:5f:7a:47:dd:17:a5:20:d0: cd:49:dc:d8:7b:1d:2a:e2:ea:97:d6:c7:7d:29:68: 95:29:58:cf:63:06:85:4b:17:b4:c0:d9:aa:4b:2b: 92:9c:3a:e2:70:bd:45:7c:d6:9a:fc:66:ff:8f:54: d1:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:7B:86:74:FE:08:28:57:04:F0:83:17:BA:83:11:39:31:77:C1:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/67cc4bd0-2e69-3428-9f96-17d8dd8a5da3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl X509v3 Authority Key Identifier: keyid:E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer sbgp-ipAddrBlock: critical IPv4: 75.78.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:ee:b5:07:b6:07:18:48:54:52:40:2e:2f:b8:2f:e5:21:3f: fe:ec:6f:bb:d8:e6:68:4d:f8:46:c0:93:b2:00:0c:95:da:3e: f4:fa:83:80:64:ca:46:e9:cb:90:01:e8:2c:92:60:04:ac:65: 17:4b:82:ff:92:68:16:5b:54:c2:6e:af:64:d9:df:b5:cd:48: f5:1a:e1:cf:d3:50:77:d2:5a:ec:31:bf:3d:8d:f0:53:41:9b: 1b:54:e5:7e:b1:82:4b:d3:ee:b7:71:38:8f:38:e1:58:4f:02: 16:d0:5a:58:d2:df:c4:c7:15:fa:26:9d:3a:ed:a4:b0:94:da: e9:55:4b:90:f7:d3:25:c0:af:a6:e2:c9:3f:80:99:a3:39:47: a4:4a:72:d3:a6:b5:84:75:8f:06:51:e1:1d:23:a9:a6:27:3d: 98:90:1f:9a:f1:5c:da:14:4c:09:94:de:28:17:59:16:3c:83: 03:8b:59:68:68:09:c3:74:11:29:da:2e:ca:d3:18:34:57:27: b5:03:40:f0:27:d9:6b:b5:c1:f7:20:77:b8:5f:fc:5a:aa:0e: 74:f3:95:a0:a0:49:c1:e5:42:61:c8:97:e3:49:29:67:90:32: 37:a7:87:05:58:ea:d7:74:8f:6e:8e:70:5d:64:07:19:0d:80: 9d:35:04:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiCgJchihQZZw0kWEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhjNTI1NWYtNTE5My00ZWY3LTkyZTktZGIzMjZlZTFk NjkwMB4XDTI1MDExMTE0MDA1MloXDTI1MDQxMTEzMDA1MlowLzEtMCsGA1UEAxMk YzYzZDUzMDktYWQ2OC00YTVhLWFkYzgtNTE3YjQ4ZjhhNGEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5NLesye89qD/8q37wquUASdc4a3nPW3g3Iy uEHWxmVOk9RJovG491AsG7/BtJ3Eptlu3j6stbS/aVTM+KNKFVpY5wSHHpJAzm5t YhSOUyu6PTYJTCLU7hiV62K9Yl2DZ/nkEwAjqDBLb5uzWLIlyq/mAYbI4LrwKC4+ 6AhkB2uHJCBnWCcaMCS7Ll3R8SgWmfOu11pr6Km3JVpqgS88aHn6vdpp2HUrClSY Qd0GIDaF376NsyWY4e+lTjpeBthpsbFpK8WedV2lX3pH3RelINDNSdzYex0q4uqX 1sd9KWiVKVjPYwaFSxe0wNmqSyuSnDricL1FfNaa/Gb/j1TRiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA97hnT+CChXBPCDF7qDETkxd8F3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zOGM1 MjU1Zi01MTkzLTRlZjctOTJlOS1kYjMyNmVlMWQ2OTAvNjdjYzRiZDAtMmU2OS0z NDI4LTlmOTYtMTdkOGRkOGE1ZGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzhjNTI1NWYtNTE5My00ZWY3LTky ZTktZGIzMjZlZTFkNjkwLzM4YzUyNTVmLTUxOTMtNGVmNy05MmU5LWRiMzI2ZWUx ZDY5MC5jcmwwHwYDVR0jBBgwFoAU6OtRdt4L2VYIX2NOD0gHny6QnZUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zOGM1MjU1Zi01MTkzLTRlZjctOTJlOS1kYjMy NmVlMWQ2OTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS07QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACHutQe2BxhIVFJALi+4L+UhP/7sb7vY5mhN+EbAk7IADJXaPvT6g4Bk ykbpy5AB6CySYASsZRdLgv+SaBZbVMJur2TZ37XNSPUa4c/TUHfSWuwxvz2N8FNB mxtU5X6xgkvT7rdxOI844VhPAhbQWljS38THFfomnTrtpLCU2ulVS5D30yXAr6bi yT+AmaM5R6RKctOmtYR1jwZR4R0jqaYnPZiQH5rxXNoUTAmU3igXWRY8gwOLWWho CcN0ESnaLsrTGDRXJ7UDQPAn2Wu1wfcgd7hf/FqqDnTzlaCgScHlQmHIl+NJKWeQ MjenhwVY6td0j26OcF1kBxkNgJ01BKs= -----END CERTIFICATE-----Generated at Fri Mar 14 08:39:23 2025 by rpki-client