$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/dee7e624-d51f-3ae3-a3f9-2a8354988969.roa File: dee7e624-d51f-3ae3-a3f9-2a8354988969.roa (raw, json) Hash identifier: +HfpHttggbPezBNXw8qNN7HJhfxGI/+jYJ5x3Wx8Lgk= Subject key identifier: C8:57:42:D1:9F:8C:1F:8B:FC:EE:A6:6B:E5:31:6B:24:44:BB:FA:EC Certificate issuer: /CN=38c5255f-5193-4ef7-92e9-db326ee1d690 Certificate serial: 010D0C9F432858492E13B98E33F9EADC642D6E48 Authority key identifier: E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/dee7e624-d51f-3ae3-a3f9-2a8354988969.roa Signing time: Fri 14 Mar 2025 01:00:39 +0000 ROA not before: Fri 14 Mar 2025 01:00:39 +0000 ROA not after: Thu 12 Jun 2025 01:00:39 +0000 asID: 3549 IP address blocks: 75.78.212.0/22 maxlen: 24 75.78.216.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2e:13:b9:8e:33:f9:ea:dc:64:2d:6e:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38c5255f-5193-4ef7-92e9-db326ee1d690 Validity Not Before: Mar 14 01:00:39 2025 GMT Not After : Jun 12 01:00:39 2025 GMT Subject: CN=1efdcf8e-c5ea-4b3d-bbee-7b16a302e653 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0e:48:54:b9:e5:74:b6:50:61:85:28:3a:f2: a6:c1:9b:c5:ca:41:6a:fc:f4:83:9b:ae:15:6a:4d: 30:11:13:69:eb:79:d0:f5:68:e9:10:94:ce:2e:57: e7:98:b3:95:08:7b:8f:26:07:73:e2:b7:2c:78:63: da:c6:0d:90:1c:9a:9f:48:59:e6:5e:3d:92:66:8f: cc:35:ef:9d:f0:b9:73:04:ef:da:56:37:13:ee:70: 37:e8:68:d6:51:d3:4b:ac:b4:25:2c:45:28:50:73: e5:35:34:72:44:5b:41:26:f2:e2:99:ef:40:9c:5e: 87:6f:4d:4f:0c:6d:e4:5d:3a:e2:79:ef:bc:4b:86: 25:cc:1c:5e:d8:70:d9:02:36:05:01:ed:0b:a3:ba: 8f:15:6e:ef:cb:a0:e0:c9:4c:b9:76:25:81:62:47: 73:bc:9a:69:e8:e7:46:4b:38:6d:ed:c8:27:ef:08: dc:26:eb:86:8b:bd:44:95:b7:77:34:f3:0a:a0:89: e5:4a:51:3a:1b:9b:ad:5a:b2:c3:35:ef:0d:f5:19: aa:d5:b7:f4:2b:4f:a7:eb:b8:5e:a2:ce:fa:19:77: 06:65:9a:4c:56:81:76:27:1f:2b:72:f8:9c:3a:da: d5:73:2e:7b:a6:72:df:a7:a7:f8:b0:2b:76:35:5c: 35:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:57:42:D1:9F:8C:1F:8B:FC:EE:A6:6B:E5:31:6B:24:44:BB:FA:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/dee7e624-d51f-3ae3-a3f9-2a8354988969.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl X509v3 Authority Key Identifier: keyid:E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer sbgp-ipAddrBlock: critical IPv4: 75.78.212.0-75.78.223.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:cd:17:3b:4a:64:e9:cf:95:27:0f:e7:f6:d0:e4:42:83:50: ce:5a:c9:cf:b5:d1:53:c4:ca:b8:81:ba:85:1d:dd:f6:9c:19: e5:70:5b:f2:ab:b6:bc:05:58:4d:09:24:ba:dd:07:18:db:9a: fe:a4:96:3e:57:2a:67:54:ba:f9:0a:58:05:42:21:77:b0:f0: 7e:d8:87:0e:62:ef:07:bf:2f:b7:e3:60:df:47:f6:97:dc:e1: 0a:18:6a:c4:d6:78:c5:5b:8c:d6:98:e7:ad:35:b8:97:a4:6c: 96:70:48:d3:bf:3d:85:ac:a6:24:28:b5:28:b0:09:5e:95:21: 91:35:1c:ec:ff:80:99:23:22:27:c4:04:6f:5b:76:61:c8:37: bb:cf:d2:96:de:e7:f2:28:ce:c6:f1:af:9e:bc:bd:ae:db:4e: ce:1c:38:c2:34:7b:2e:cc:5a:c5:04:bf:f4:f2:ce:81:6d:df: 15:48:34:50:0e:b2:64:9d:0d:88:49:66:87:55:97:b6:e0:cf: 3f:b5:3b:ff:cb:d2:0d:bb:34:7f:39:b9:e2:73:90:5d:99:36: 9b:8e:47:4c:f9:91:c0:d1:4b:67:0d:e9:3b:32:27:35:07:fd: 22:11:ae:93:0c:33:fd:d7:11:aa:2a:d6:16:8d:07:78:32:79: bd:46:3c:df -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEkuE7mOM/nq3GQtbkgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhjNTI1NWYtNTE5My00ZWY3LTkyZTktZGIzMjZlZTFk NjkwMB4XDTI1MDMxNDAxMDAzOVoXDTI1MDYxMjAxMDAzOVowLzEtMCsGA1UEAxMk MWVmZGNmOGUtYzVlYS00YjNkLWJiZWUtN2IxNmEzMDJlNjUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqA5IVLnldLZQYYUoOvKmwZvFykFq/PSDm64V ak0wERNp63nQ9WjpEJTOLlfnmLOVCHuPJgdz4rcseGPaxg2QHJqfSFnmXj2SZo/M Ne+d8LlzBO/aVjcT7nA36GjWUdNLrLQlLEUoUHPlNTRyRFtBJvLime9AnF6Hb01P DG3kXTriee+8S4YlzBxe2HDZAjYFAe0Lo7qPFW7vy6DgyUy5diWBYkdzvJpp6OdG Szht7cgn7wjcJuuGi71Elbd3NPMKoInlSlE6G5utWrLDNe8N9Rmq1bf0K0+n67he os76GXcGZZpMVoF2Jx8rcvicOtrVcy57pnLfp6f4sCt2NVw1IwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFMhXQtGfjB+L/O6ma+UxayREu/rsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zOGM1 MjU1Zi01MTkzLTRlZjctOTJlOS1kYjMyNmVlMWQ2OTAvZGVlN2U2MjQtZDUxZi0z YWUzLWEzZjktMmE4MzU0OTg4OTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzhjNTI1NWYtNTE5My00ZWY3LTky ZTktZGIzMjZlZTFkNjkwLzM4YzUyNTVmLTUxOTMtNGVmNy05MmU5LWRiMzI2ZWUx ZDY5MC5jcmwwHwYDVR0jBBgwFoAU6OtRdt4L2VYIX2NOD0gHny6QnZUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zOGM1MjU1Zi01MTkzLTRlZjctOTJlOS1kYjMy NmVlMWQ2OTAuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAJLTtQD BAVLTsAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAUc0XO0pk6c+VJw/n9tDkQoNQzlrJz7XRU8TKuIG6hR3d 9pwZ5XBb8qu2vAVYTQkkut0HGNua/qSWPlcqZ1S6+QpYBUIhd7DwftiHDmLvB78v t+Ng30f2l9zhChhqxNZ4xVuM1pjnrTW4l6RslnBI0789haymJCi1KLAJXpUhkTUc 7P+AmSMiJ8QEb1t2Ycg3u8/Slt7n8ijOxvGvnry9rttOzhw4wjR7LsxaxQS/9PLO gW3fFUg0UA6yZJ0NiElmh1WXtuDPP7U7/8vSDbs0fzm54nOQXZk2m45HTPmRwNFL Zw3pOzInNQf9IhGukwwz/dcRqirWFo0HeDJ5vUY83w== -----END CERTIFICATE-----Generated at Fri Mar 14 10:33:22 2025 by rpki-client