$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481/6518400e-fd36-393e-bb41-073aaf9da36d.roa File: 6518400e-fd36-393e-bb41-073aaf9da36d.roa (raw, json) Hash identifier: BEgzB3brdcqWA98qtSQtv8H9aG+ScTt1tVn1SWCp2ws= Subject key identifier: B2:70:C1:D9:62:F6:17:C0:A5:5E:D1:41:C8:6C:91:6C:AC:56:2D:64 Certificate issuer: /CN=1b3580ca-2fc3-48f5-bd65-dcc9f0b19481 Certificate serial: 010D0C9F43285849DC8FD09FD99DF8C0D2762340 Authority key identifier: 76:1B:26:A3:E9:3D:A1:91:F5:E4:1E:1E:48:2D:F7:36:82:12:D1:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481/6518400e-fd36-393e-bb41-073aaf9da36d.roa Signing time: Thu 15 May 2025 13:01:00 +0000 ROA not before: Thu 15 May 2025 13:01:00 +0000 ROA not after: Wed 13 Aug 2025 13:01:00 +0000 asID: 6992 IP address blocks: 198.178.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dc:8f:d0:9f:d9:9d:f8:c0:d2:76:23:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b3580ca-2fc3-48f5-bd65-dcc9f0b19481 Validity Not Before: May 15 13:01:00 2025 GMT Not After : Aug 13 13:01:00 2025 GMT Subject: CN=6e2f2464-20f1-4c48-aa6d-fd150dda413c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ff:ea:a3:56:8c:f5:7f:a7:c0:4d:58:06:6d: f5:91:8d:62:3b:0c:c0:19:29:7a:88:8b:4c:e8:46: a1:23:07:47:df:95:de:cc:73:95:23:3c:f3:40:5a: d0:6b:80:f5:0d:51:03:32:f3:39:3c:5d:cf:8b:0b: c5:82:14:24:e2:da:b8:d2:8d:a0:9d:27:2d:11:60: ac:b6:5f:93:8b:19:a9:61:91:15:3b:f1:11:2b:e1: 87:aa:30:a4:dc:02:28:9f:4d:ca:b0:5d:32:13:db: 51:c2:75:da:b0:5e:13:67:89:3a:be:dc:e2:c4:19: d5:13:22:cd:93:1c:19:43:ed:22:03:00:ba:70:41: d9:bf:21:10:b5:4b:8a:e6:95:6b:58:3d:c3:fa:0c: 71:1b:ac:80:ff:fe:6c:a4:e9:91:b4:70:12:2d:8b: b2:c7:51:3a:1c:66:4c:9b:c8:80:ad:bb:8b:8e:f0: 97:65:83:a0:35:ce:f1:c2:8f:3c:3c:ed:a2:af:c8: 56:26:23:7b:e3:45:eb:33:f2:33:fd:e9:03:ba:40: 4a:2c:a8:eb:e7:1c:92:09:d4:e2:3c:92:a1:77:64: fc:b9:bc:03:42:65:33:1d:96:22:22:71:83:24:19: 54:d0:e8:42:f7:75:0b:8b:ec:4b:83:6d:95:14:02: d2:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:70:C1:D9:62:F6:17:C0:A5:5E:D1:41:C8:6C:91:6C:AC:56:2D:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481/6518400e-fd36-393e-bb41-073aaf9da36d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481.crl X509v3 Authority Key Identifier: keyid:76:1B:26:A3:E9:3D:A1:91:F5:E4:1E:1E:48:2D:F7:36:82:12:D1:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481.cer sbgp-ipAddrBlock: critical IPv4: 198.178.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:7e:ce:c8:dd:46:69:57:c1:ac:39:25:f2:32:28:eb:28:e5: 34:fc:d8:dc:db:11:c5:fa:84:c9:ce:dd:fb:0a:5a:46:9e:f8: 8d:26:20:12:e5:d2:51:01:4c:d3:96:83:7f:d7:e2:e5:45:59: e4:c0:e1:b4:e6:4d:18:df:f8:5c:48:14:a4:6b:ab:e9:87:30: 33:f9:be:dd:1f:f2:d9:65:95:3b:58:15:43:ab:08:1e:d9:ed: b5:c5:7f:55:15:98:8c:1b:b8:73:36:73:66:30:64:04:4c:ac: 04:3c:3d:eb:3c:27:ee:22:48:c3:e3:73:ce:ca:0e:b5:13:4f: 4c:17:d9:02:4f:6e:8f:e6:a8:58:6f:21:99:e7:33:fb:ff:c4: 0a:6f:f2:0d:0c:89:38:b3:6f:d6:ae:6e:f8:51:61:b7:b0:4d: c7:c9:9a:22:29:d6:12:2e:f2:f4:54:9c:bb:f5:88:4a:f6:c0: 55:36:3b:fb:87:9e:21:4a:a0:c8:29:d6:2a:33:2a:6c:cb:55: 79:6d:ee:40:0d:4f:00:d2:91:2e:cc:e9:a6:95:e0:b4:73:0d: 0d:2f:34:35:96:5d:9b:52:37:b6:6c:a3:9d:85:8b:26:fb:43: f6:95:f1:85:da:84:d7:e8:8d:a5:5c:68:6b:c9:a4:cd:c3:cb: 67:70:7f:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEncj9Cf2Z34wNJ2I0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWIzNTgwY2EtMmZjMy00OGY1LWJkNjUtZGNjOWYwYjE5 NDgxMB4XDTI1MDUxNTEzMDEwMFoXDTI1MDgxMzEzMDEwMFowLzEtMCsGA1UEAxMk NmUyZjI0NjQtMjBmMS00YzQ4LWFhNmQtZmQxNTBkZGE0MTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0P/qo1aM9X+nwE1YBm31kY1iOwzAGSl6iItM 6EahIwdH35XezHOVIzzzQFrQa4D1DVEDMvM5PF3PiwvFghQk4tq40o2gnSctEWCs tl+TixmpYZEVO/ERK+GHqjCk3AIon03KsF0yE9tRwnXasF4TZ4k6vtzixBnVEyLN kxwZQ+0iAwC6cEHZvyEQtUuK5pVrWD3D+gxxG6yA//5spOmRtHASLYuyx1E6HGZM m8iArbuLjvCXZYOgNc7xwo88PO2ir8hWJiN740XrM/Iz/ekDukBKLKjr5xySCdTi PJKhd2T8ubwDQmUzHZYiInGDJBlU0OhC93ULi+xLg22VFALS1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLJwwdli9hfApV7RQchskWysVi1kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xYjM1 ODBjYS0yZmMzLTQ4ZjUtYmQ2NS1kY2M5ZjBiMTk0ODEvNjUxODQwMGUtZmQzNi0z OTNlLWJiNDEtMDczYWFmOWRhMzZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMWIzNTgwY2EtMmZjMy00OGY1LWJk NjUtZGNjOWYwYjE5NDgxLzFiMzU4MGNhLTJmYzMtNDhmNS1iZDY1LWRjYzlmMGIx OTQ4MS5jcmwwHwYDVR0jBBgwFoAUdhsmo+k9oZH15B4eSC33NoIS0XYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xYjM1ODBjYS0yZmMzLTQ4ZjUtYmQ2NS1kY2M5 ZjBiMTk0ODEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxrKdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADV+zsjdRmlXwaw5JfIyKOso5TT82NzbEcX6hMnO3fsKWkae+I0mIBLl 0lEBTNOWg3/X4uVFWeTA4bTmTRjf+FxIFKRrq+mHMDP5vt0f8tlllTtYFUOrCB7Z 7bXFf1UVmIwbuHM2c2YwZARMrAQ8Pes8J+4iSMPjc87KDrUTT0wX2QJPbo/mqFhv IZnnM/v/xApv8g0MiTizb9aubvhRYbewTcfJmiIp1hIu8vRUnLv1iEr2wFU2O/uH niFKoMgp1iozKmzLVXlt7kANTwDSkS7M6aaV4LRzDQ0vNDWWXZtSN7Zso52Fiyb7 Q/aV8YXahNfojaVcaGvJpM3Dy2dwf7w= -----END CERTIFICATE-----Generated at Mon Jun 16 10:35:55 2025 by rpki-client