$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/1e90e47c-ca19-3ae4-bcd7-d53fe171f2a2.roa File: 1e90e47c-ca19-3ae4-bcd7-d53fe171f2a2.roa (raw, json) Hash identifier: S+/4id7sO6I9K2kgMgnWgWSaFeAx66MhtN3o6FGXeu8= Subject key identifier: CB:09:3A:85:26:E1:03:AB:F4:DA:02:1A:7F:E3:10:5D:44:59:05:AF Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b Certificate serial: 010D0C9F432858496CE45614BFFC7E0A08D33A00 Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/1e90e47c-ca19-3ae4-bcd7-d53fe171f2a2.roa Signing time: Sat 05 Apr 2025 13:01:01 +0000 ROA not before: Sat 05 Apr 2025 13:01:01 +0000 ROA not after: Fri 04 Jul 2025 13:01:01 +0000 asID: 27602 IP address blocks: 198.145.72.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6c:e4:56:14:bf:fc:7e:0a:08:d3:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Validity Not Before: Apr 5 13:01:01 2025 GMT Not After : Jul 4 13:01:01 2025 GMT Subject: CN=4b8aaa5c-6be7-43a1-93af-61d2cd8d4e46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:3a:3a:04:55:ed:cf:f3:af:b2:0c:7d:f8:53: b9:52:38:ac:7d:56:e0:01:6b:11:69:d2:c4:82:af: c9:5a:a0:97:60:f7:5f:71:ec:f0:f3:af:04:f7:94: b4:8c:8b:26:67:f3:1c:63:bc:49:b8:af:e5:f6:ee: 93:41:dd:d8:67:06:3a:75:4b:f1:d8:20:ef:f3:6f: 0a:1f:f3:99:b9:34:49:92:fd:d0:e6:94:35:e9:95: b8:ec:64:a3:f0:3e:d0:20:ec:9e:ae:06:22:c3:c3: ff:40:73:9a:99:5e:45:04:9e:31:c5:6d:1f:6d:da: 58:66:ee:08:cc:b6:20:a1:a6:af:10:f9:7b:5e:b5: 70:0e:1b:ab:1e:f5:b6:6c:16:19:d8:5c:ab:96:4c: 67:99:a6:55:aa:a7:60:1c:79:2d:25:46:98:bb:78: 8f:90:04:e1:75:14:1d:d1:8e:b8:a0:59:93:0a:b1: eb:c9:71:18:d5:8e:f1:c0:90:ae:7f:aa:67:38:c2: 28:77:54:19:8a:5f:d3:22:34:b1:a3:c0:65:09:28: 15:5d:61:d5:25:91:27:18:43:7e:77:3f:1d:63:1b: ec:33:54:a4:e8:17:31:59:df:7c:9c:44:b2:4f:95: 5e:06:14:f4:1c:22:a7:44:a4:5a:d6:8b:78:9b:f4: 93:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:09:3A:85:26:E1:03:AB:F4:DA:02:1A:7F:E3:10:5D:44:59:05:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/1e90e47c-ca19-3ae4-bcd7-d53fe171f2a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl X509v3 Authority Key Identifier: keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer sbgp-ipAddrBlock: critical IPv4: 198.145.72.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:b9:c5:fd:db:94:4b:c0:cd:82:32:54:90:73:31:b5:01:c6: a8:6a:d8:a3:30:fa:8d:1a:77:d3:6a:5f:2c:94:e7:82:40:96: fe:e2:c9:df:64:e1:de:8a:b4:58:e2:fe:24:9e:47:81:a4:3a: 1c:d1:7d:2b:b5:c2:55:2e:fb:c0:f2:9e:30:56:96:8d:ee:c8: 90:49:dd:04:0e:2b:13:12:ad:87:c9:98:d6:3f:8e:1d:e1:54: 6f:3d:e6:ea:be:52:fc:b0:96:4d:a4:32:56:15:ce:4a:11:16: ac:1e:48:28:6a:50:47:7d:ca:cc:7b:10:34:ce:2a:d1:65:04: 23:31:ef:3e:0d:7b:b5:d1:ac:c4:ea:93:99:d2:95:64:74:8f: 44:d0:92:70:0d:0a:20:8c:db:6c:ba:e0:be:e4:1e:a8:d1:b7: 66:bd:37:31:ae:c5:9f:3f:f7:59:3d:0c:cd:ee:ee:f7:c0:98: 8c:01:cf:ec:ac:7e:cc:f9:88:64:a6:d2:cf:73:1c:75:ab:82: ff:ea:83:f8:c9:f2:22:de:a7:57:c8:6e:be:fd:d5:d8:97:73: 64:78:97:52:d7:bc:56:09:4f:41:c2:02:bf:8d:83:1d:36:14: 32:22:29:ad:8a:f3:e6:91:e7:0f:c6:b3:d7:bb:d3:96:84:c7: 0c:aa:9a:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEls5FYUv/x+CgjTOgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz NjFiMB4XDTI1MDQwNTEzMDEwMVoXDTI1MDcwNDEzMDEwMVowLzEtMCsGA1UEAxMk NGI4YWFhNWMtNmJlNy00M2ExLTkzYWYtNjFkMmNkOGQ0ZTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTo6BFXtz/Ovsgx9+FO5UjisfVbgAWsRadLE gq/JWqCXYPdfcezw868E95S0jIsmZ/McY7xJuK/l9u6TQd3YZwY6dUvx2CDv828K H/OZuTRJkv3Q5pQ16ZW47GSj8D7QIOyergYiw8P/QHOamV5FBJ4xxW0fbdpYZu4I zLYgoaavEPl7XrVwDhurHvW2bBYZ2FyrlkxnmaZVqqdgHHktJUaYu3iPkAThdRQd 0Y64oFmTCrHryXEY1Y7xwJCuf6pnOMIod1QZil/TIjSxo8BlCSgVXWHVJZEnGEN+ dz8dYxvsM1Sk6BcxWd98nESyT5VeBhT0HCKnRKRa1ot4m/STyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMsJOoUm4QOr9NoCGn/jEF1EWQWvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvMWU5MGU0N2MtY2ExOS0z YWU0LWJjZDctZDUzZmUxNzFmMmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2 ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxpFIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEa5xf3blEvAzYIyVJBzMbUBxqhq2KMw+o0ad9NqXyyU54JAlv7iyd9k 4d6KtFji/iSeR4GkOhzRfSu1wlUu+8DynjBWlo3uyJBJ3QQOKxMSrYfJmNY/jh3h VG895uq+Uvywlk2kMlYVzkoRFqweSChqUEd9ysx7EDTOKtFlBCMx7z4Ne7XRrMTq k5nSlWR0j0TQknANCiCM22y64L7kHqjRt2a9NzGuxZ8/91k9DM3u7vfAmIwBz+ys fsz5iGSm0s9zHHWrgv/qg/jJ8iLep1fIbr791diXc2R4l1LXvFYJT0HCAr+Ngx02 FDIiKa2K8+aR5w/Gs9e705aExwyqmus= -----END CERTIFICATE-----Generated at Tue Apr 29 09:20:46 2025 by rpki-client