$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/49ae9da2-bdcf-3ffc-9110-a7397bd0dc07.roa File: 49ae9da2-bdcf-3ffc-9110-a7397bd0dc07.roa (raw, json) Hash identifier: oNvvqFzDKDqjdCJxRZnJN7dE/pjwlNLNtUPsFEFGJck= Subject key identifier: EA:E2:47:28:90:88:B3:48:C1:DF:14:C3:3E:80:3C:CE:A9:39:FD:B7 Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b Certificate serial: 010D0C9F432858497279ADB73EF334326F66A000 Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/49ae9da2-bdcf-3ffc-9110-a7397bd0dc07.roa Signing time: Mon 07 Apr 2025 13:00:59 +0000 ROA not before: Mon 07 Apr 2025 13:00:59 +0000 ROA not after: Sun 06 Jul 2025 13:00:59 +0000 asID: 9009 IP address blocks: 198.145.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:72:79:ad:b7:3e:f3:34:32:6f:66:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Validity Not Before: Apr 7 13:00:59 2025 GMT Not After : Jul 6 13:00:59 2025 GMT Subject: CN=4fd768c2-3b35-4ec6-af5f-fd9ca0158325 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:21:34:af:00:55:89:02:45:14:28:9f:a8:e6: ed:ab:82:82:c5:74:f0:09:aa:f0:28:4a:ab:3c:86: 7e:d6:be:a2:8a:a4:e7:01:39:af:21:ad:49:76:9c: ae:1c:53:ea:5c:93:47:7a:39:c5:7b:64:39:24:ae: 5e:d6:0f:81:f8:17:73:46:be:75:f1:3f:7e:d3:20: 77:76:40:b2:b5:ec:ca:ea:5c:c8:10:8a:e4:f7:44: 8f:bd:d7:b5:11:b3:c1:da:1c:37:01:70:98:ce:06: 77:a0:6a:f8:69:82:18:ae:ab:93:ed:1d:1d:62:0f: 8d:69:c5:ff:85:cd:72:da:79:d9:14:34:39:70:05: 36:28:44:b6:b5:ff:b0:16:bd:55:27:9e:11:e8:79: e2:d1:ef:2d:62:65:96:68:58:e1:02:1d:6c:c8:a8: 61:29:60:c4:9f:2d:1f:97:5f:bb:64:a5:19:e6:de: 3e:a6:3f:64:0d:dd:87:22:4e:7c:3b:33:cc:22:12: d2:c6:08:6b:52:4a:2b:51:52:42:d5:2d:54:53:1e: 2f:6a:d0:4a:cc:30:4b:dd:12:91:f9:29:f5:d3:11: 91:3f:bf:88:d5:3b:8e:a7:bf:52:c3:df:2a:98:54: 87:0b:a6:23:ea:19:24:e8:1c:25:4a:cc:12:19:17: 82:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:E2:47:28:90:88:B3:48:C1:DF:14:C3:3E:80:3C:CE:A9:39:FD:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/49ae9da2-bdcf-3ffc-9110-a7397bd0dc07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl X509v3 Authority Key Identifier: keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer sbgp-ipAddrBlock: critical IPv4: 198.145.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:ca:9b:03:e7:68:6c:09:14:35:93:46:f7:d8:a5:50:67:05: eb:28:8c:6b:0c:36:2b:b3:3b:9a:ce:39:06:bc:dd:5c:3a:c5: db:7c:61:c1:60:f7:d7:e7:49:f2:3b:78:27:11:8d:10:37:5b: 4b:91:0b:da:8c:8a:5a:3a:76:6b:f1:5f:03:9c:b3:de:dc:e5: 09:ef:a8:f8:65:24:ce:fb:99:ad:d1:7d:29:80:39:a8:18:f3: 70:79:46:77:5b:9b:a4:39:da:d3:e5:ab:2d:cd:4a:87:e2:42: 81:62:85:87:1f:b8:45:f0:80:40:03:7a:55:32:04:49:11:d3: 0d:f6:33:45:8c:c9:af:fa:d5:b1:b7:06:96:47:1f:79:18:b6: c0:e4:30:79:75:5b:2a:63:ab:b5:af:27:83:38:9a:01:4e:64: f9:a2:0a:28:99:b7:bd:b9:14:48:58:42:cf:cc:95:c7:a8:dd: 1f:a8:e3:f9:48:5b:94:c8:92:1d:da:75:35:02:f2:e4:0e:0d: b8:b3:58:2d:c3:05:7d:ea:96:ef:4e:ef:5d:c9:4c:1a:e1:e7: 9b:c8:d2:9b:74:59:db:96:d7:39:aa:22:bd:e5:c4:64:40:69: 75:db:59:f1:ff:6c:59:e1:07:7a:29:29:56:b7:dc:ea:15:18: ab:76:b2:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElyea23PvM0Mm9moAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz NjFiMB4XDTI1MDQwNzEzMDA1OVoXDTI1MDcwNjEzMDA1OVowLzEtMCsGA1UEAxMk NGZkNzY4YzItM2IzNS00ZWM2LWFmNWYtZmQ5Y2EwMTU4MzI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCE0rwBViQJFFCifqObtq4KCxXTwCarwKEqr PIZ+1r6iiqTnATmvIa1JdpyuHFPqXJNHejnFe2Q5JK5e1g+B+BdzRr518T9+0yB3 dkCytezK6lzIEIrk90SPvde1EbPB2hw3AXCYzgZ3oGr4aYIYrquT7R0dYg+NacX/ hc1y2nnZFDQ5cAU2KES2tf+wFr1VJ54R6Hni0e8tYmWWaFjhAh1syKhhKWDEny0f l1+7ZKUZ5t4+pj9kDd2HIk58OzPMIhLSxghrUkorUVJC1S1UUx4vatBKzDBL3RKR +Sn10xGRP7+I1TuOp79Sw98qmFSHC6Yj6hkk6BwlSswSGReCtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOriRyiQiLNIwd8Uwz6APM6pOf23MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvNDlhZTlkYTItYmRjZi0z ZmZjLTkxMTAtYTczOTdiZDBkYzA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2 ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxpGUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABDKmwPnaGwJFDWTRvfYpVBnBesojGsMNiuzO5rOOQa83Vw6xdt8YcFg 99fnSfI7eCcRjRA3W0uRC9qMilo6dmvxXwOcs97c5QnvqPhlJM77ma3RfSmAOagY 83B5Rndbm6Q52tPlqy3NSofiQoFihYcfuEXwgEADelUyBEkR0w32M0WMya/61bG3 BpZHH3kYtsDkMHl1Wypjq7WvJ4M4mgFOZPmiCiiZt725FEhYQs/Mlceo3R+o4/lI W5TIkh3adTUC8uQODbizWC3DBX3qlu9O713JTBrh55vI0pt0WduW1zmqIr3lxGRA aXXbWfH/bFnhB3opKVa33OoVGKt2smA= -----END CERTIFICATE-----Generated at Sat Apr 26 17:42:57 2025 by rpki-client