$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/2d5f0848-825c-31ef-8675-f8f26b20e4fd.roa File: 2d5f0848-825c-31ef-8675-f8f26b20e4fd.roa (raw, json) Hash identifier: l1+r6l7Q6CRz7mUArkU9I/yPlu1qlG7qSBqZ7JOHOtQ= Subject key identifier: 48:2F:BB:91:AB:C2:14:C6:71:F2:86:32:8D:52:87:65:3A:3B:3C:37 Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b Certificate serial: 010D0C9F432858499DBF2C3EB0A9D41B928F8400 Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/2d5f0848-825c-31ef-8675-f8f26b20e4fd.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 262287 IP address blocks: 198.145.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:2c:3e:b0:a9:d4:1b:92:8f:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=85e049a0-d712-4598-b31a-f5b5cfaf81ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8e:6d:94:62:e9:f6:4a:59:ed:7d:39:27:22: 14:3f:09:e7:b1:cc:9f:23:84:11:c5:9c:39:f9:b2: 99:63:c1:d9:f3:3c:65:81:e7:a7:34:6c:9b:c3:32: fc:de:f5:ce:b2:81:2a:30:a9:1b:87:01:d9:e5:02: 30:f1:0a:81:14:21:81:43:2c:b4:16:1c:2e:81:31: d7:b3:8c:de:f1:28:4a:d6:45:8e:c0:3b:ce:0b:b3: 54:1b:57:5f:fc:b2:5d:88:71:e2:85:f4:b5:57:6f: f3:32:70:b1:05:ea:96:5e:dc:8f:5e:e3:d4:e7:dd: 33:89:3b:5d:21:f4:0c:26:4a:af:2f:28:ff:08:dd: 29:52:90:55:be:4f:48:79:7e:29:7f:39:fa:75:0d: c7:c6:c1:75:86:3b:69:1a:fb:4b:a4:29:00:ad:09: ce:8f:2d:60:49:74:be:36:03:65:19:3c:ac:24:1c: cb:56:2a:b0:fd:02:da:3a:f2:76:04:61:f7:9e:73: 55:09:7e:64:29:4d:49:a1:48:67:38:10:a8:a1:6d: ff:df:2d:e5:c8:94:2d:a5:4e:78:79:0f:f9:4a:3b: 2c:7e:92:3a:1d:62:dd:6e:29:5f:eb:da:d2:1d:b2: a9:9b:c8:67:be:df:47:08:fa:47:06:17:ef:39:fa: 7e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:2F:BB:91:AB:C2:14:C6:71:F2:86:32:8D:52:87:65:3A:3B:3C:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/2d5f0848-825c-31ef-8675-f8f26b20e4fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl X509v3 Authority Key Identifier: keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer sbgp-ipAddrBlock: critical IPv4: 198.145.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d7:61:61:4d:3c:76:3d:6f:2a:a5:0d:1b:fc:39:ae:b8:bc:86: b3:df:20:5b:34:5e:f0:e3:3a:ef:49:64:15:2a:6a:79:24:3c: 91:ce:d7:0b:7c:ad:a1:a4:f2:4a:84:40:90:d2:ba:4b:d7:c1: ee:73:27:3c:84:a4:c8:f9:eb:87:84:04:4e:07:8a:86:d5:63: 5f:a8:fe:42:00:ff:5e:41:d6:28:24:ac:a2:ed:8f:66:01:6c: 8f:92:69:a2:c4:31:83:f3:d6:91:2a:de:6a:50:5a:b4:1b:7f: c0:7d:0c:6d:4c:44:57:20:e4:de:8c:3e:cc:fa:a1:84:7c:c1: 33:b4:6e:b8:b7:08:47:d9:f9:a5:dd:1c:44:d2:98:82:a7:88: 82:f4:76:d4:c8:56:2e:a4:84:84:0a:93:dc:8e:18:7b:ba:c1: 58:a8:e0:9f:ef:96:d3:26:66:eb:5e:88:89:e9:75:56:e4:59: 1f:51:01:1d:21:71:ac:f8:90:c2:f6:75:b3:a0:25:23:b6:62: 6d:2f:7a:9f:d5:e0:65:7c:29:4b:9f:17:40:fb:e8:f9:e5:e9: 0d:5f:a0:d7:9b:37:b9:33:f9:46:75:e9:f5:70:0f:88:4c:cc: 47:f9:5d:9d:82:89:6c:24:4c:ef:ec:34:9b:89:ed:4e:b2:81: f5:7f:20:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdvyw+sKnUG5KPhAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz NjFiMB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk ODVlMDQ5YTAtZDcxMi00NTk4LWIzMWEtZjViNWNmYWY4MWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAto5tlGLp9kpZ7X05JyIUPwnnscyfI4QRxZw5 +bKZY8HZ8zxlgeenNGybwzL83vXOsoEqMKkbhwHZ5QIw8QqBFCGBQyy0FhwugTHX s4ze8ShK1kWOwDvOC7NUG1df/LJdiHHihfS1V2/zMnCxBeqWXtyPXuPU590ziTtd IfQMJkqvLyj/CN0pUpBVvk9IeX4pfzn6dQ3HxsF1hjtpGvtLpCkArQnOjy1gSXS+ NgNlGTysJBzLViqw/QLaOvJ2BGH3nnNVCX5kKU1JoUhnOBCooW3/3y3lyJQtpU54 eQ/5SjssfpI6HWLdbilf69rSHbKpm8hnvt9HCPpHBhfvOfp+HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEgvu5GrwhTGcfKGMo1Sh2U6Ozw3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvMmQ1ZjA4NDgtODI1Yy0z MWVmLTg2NzUtZjhmMjZiMjBlNGZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2 ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxpHqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANdhYU08dj1vKqUNG/w5rri8hrPfIFs0XvDjOu9JZBUqankkPJHO1wt8 raGk8kqEQJDSukvXwe5zJzyEpMj564eEBE4HiobVY1+o/kIA/15B1igkrKLtj2YB bI+SaaLEMYPz1pEq3mpQWrQbf8B9DG1MRFcg5N6MPsz6oYR8wTO0bri3CEfZ+aXd HETSmIKniIL0dtTIVi6khIQKk9yOGHu6wVio4J/vltMmZuteiInpdVbkWR9RAR0h caz4kML2dbOgJSO2Ym0vep/V4GV8KUufF0D76Pnl6Q1foNebN7kz+UZ16fVwD4hM zEf5XZ2CiWwkTO/sNJuJ7U6ygfV/IAw= -----END CERTIFICATE-----Generated at Sun Apr 27 10:45:41 2025 by rpki-client