$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/562ca4bb-e9f3-3bae-b2f8-807e63ef4ea3.roa File: 562ca4bb-e9f3-3bae-b2f8-807e63ef4ea3.roa (raw, json) Hash identifier: lCg7EuR7yilZrz+fGCkHWl4jt5SVx2GEusqxjFRcAuA= Subject key identifier: 46:1F:44:39:4E:36:96:E2:E0:96:77:4E:D0:7D:00:80:9C:4F:6E:4F Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b Certificate serial: 010D0C9F432858490E16CB27FDC27B6B14866500 Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/562ca4bb-e9f3-3bae-b2f8-807e63ef4ea3.roa Signing time: Sun 02 Mar 2025 14:00:52 +0000 ROA not before: Sun 02 Mar 2025 14:00:52 +0000 ROA not after: Sat 31 May 2025 13:00:52 +0000 asID: 20303 IP address blocks: 198.145.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0e:16:cb:27:fd:c2:7b:6b:14:86:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Validity Not Before: Mar 2 14:00:52 2025 GMT Not After : May 31 13:00:52 2025 GMT Subject: CN=bffb2a32-f514-4f0e-9104-3fe1a05f4620 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:77:9d:ed:e3:a3:fc:38:03:24:70:40:2d:2b: e9:6c:40:46:f4:13:10:d5:20:5d:ad:89:d6:d5:8a: d3:dd:75:1f:76:53:1a:88:e1:b7:e3:50:95:03:3c: ff:fa:4a:1c:f4:83:a4:d8:8a:14:4e:98:f2:16:80: 02:c8:23:f8:25:29:b4:c2:34:b8:f0:4b:d3:05:be: 45:7f:ee:be:42:df:b4:67:e9:20:8f:ca:f5:c3:91: 0c:01:0f:61:96:ae:cd:ba:5f:3f:2f:ae:ef:7b:52: 31:42:ff:d8:7e:fa:14:6d:fe:d4:1c:9f:7d:f8:73: 13:b7:0c:8b:ed:14:11:a4:78:db:1f:c2:11:ff:12: 72:cc:8c:f0:ce:a7:72:d1:20:cc:d4:8a:af:ce:d0: 2d:d5:20:a6:2c:7f:29:ef:9b:0e:f5:40:e0:a7:a3: bc:6f:86:3d:29:d9:c3:d8:70:a3:cb:86:21:79:69: e3:38:94:8d:83:e8:53:dc:4e:db:4c:96:9c:49:f7: f9:52:09:22:cc:24:6a:4d:08:35:98:84:ab:05:a1: 2b:ae:2e:02:e2:dd:31:fd:e0:30:88:cc:f9:08:ab: 86:96:5e:b5:45:20:01:1c:cd:3a:17:0e:a7:1a:21: 79:08:72:8b:34:82:ed:b1:e4:c3:e1:2d:50:5c:85: bb:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:1F:44:39:4E:36:96:E2:E0:96:77:4E:D0:7D:00:80:9C:4F:6E:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/562ca4bb-e9f3-3bae-b2f8-807e63ef4ea3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl X509v3 Authority Key Identifier: keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer sbgp-ipAddrBlock: critical IPv4: 198.145.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:10:7e:4a:81:16:09:db:01:f1:0c:51:66:4e:7c:b6:db:72: 97:2e:ae:c3:ea:02:aa:f8:b5:ff:65:5a:ab:21:5e:8b:a1:d9: bb:af:a2:b9:86:e2:3a:b1:d7:c2:8e:f1:2a:15:18:42:3b:b5: 00:55:25:60:33:33:a6:5d:62:5e:e9:8c:d2:88:98:c6:6c:75: 06:26:36:47:d9:89:cc:57:db:fb:22:53:ae:1a:00:93:b6:24: 48:2d:1e:86:e7:69:1b:7f:1a:f8:12:70:0a:d5:4b:08:b4:47: 2b:bf:30:cb:1d:39:65:ec:f8:a6:d2:34:1a:0b:e9:a2:59:d3: 12:8b:24:74:f6:ce:d5:ff:0b:83:dc:69:00:69:9f:e8:0f:d0: 0a:89:41:b3:3b:12:1d:ec:0c:65:99:2e:98:f9:dc:82:e4:98: 68:0a:2e:0d:cc:27:0a:96:6d:5a:9d:0f:fd:0e:37:59:d4:6f: 0f:d0:b8:a4:d5:9a:9a:48:a5:76:40:99:59:38:23:c3:4d:01: 46:99:91:a4:5f:0a:3b:d1:ee:ef:7c:51:f5:55:5d:ef:7e:41: 67:a7:7d:af:81:3e:47:65:79:0c:e2:3b:34:a9:0c:5f:43:f6: 9e:eb:b2:ef:1a:51:07:4e:d5:85:44:42:79:92:da:cf:2c:c7: 84:eb:4b:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkOFssn/cJ7axSGZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz NjFiMB4XDTI1MDMwMjE0MDA1MloXDTI1MDUzMTEzMDA1MlowLzEtMCsGA1UEAxMk YmZmYjJhMzItZjUxNC00ZjBlLTkxMDQtM2ZlMWEwNWY0NjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXed7eOj/DgDJHBALSvpbEBG9BMQ1SBdrYnW 1YrT3XUfdlMaiOG341CVAzz/+koc9IOk2IoUTpjyFoACyCP4JSm0wjS48EvTBb5F f+6+Qt+0Z+kgj8r1w5EMAQ9hlq7Nul8/L67ve1IxQv/YfvoUbf7UHJ99+HMTtwyL 7RQRpHjbH8IR/xJyzIzwzqdy0SDM1IqvztAt1SCmLH8p75sO9UDgp6O8b4Y9KdnD 2HCjy4YheWnjOJSNg+hT3E7bTJacSff5UgkizCRqTQg1mISrBaErri4C4t0x/eAw iMz5CKuGll61RSABHM06Fw6nGiF5CHKLNILtseTD4S1QXIW7/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEYfRDlONpbi4JZ3TtB9AICcT25PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvNTYyY2E0YmItZTlmMy0z YmFlLWIyZjgtODA3ZTYzZWY0ZWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2 ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxpGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHsQfkqBFgnbAfEMUWZOfLbbcpcursPqAqr4tf9lWqshXouh2buvormG 4jqx18KO8SoVGEI7tQBVJWAzM6ZdYl7pjNKImMZsdQYmNkfZicxX2/siU64aAJO2 JEgtHobnaRt/GvgScArVSwi0Ryu/MMsdOWXs+KbSNBoL6aJZ0xKLJHT2ztX/C4Pc aQBpn+gP0AqJQbM7Eh3sDGWZLpj53ILkmGgKLg3MJwqWbVqdD/0ON1nUbw/QuKTV mppIpXZAmVk4I8NNAUaZkaRfCjvR7u98UfVVXe9+QWenfa+BPkdleQziOzSpDF9D 9p7rsu8aUQdO1YVEQnmS2s8sx4TrS6Q= -----END CERTIFICATE-----Generated at Mon Apr 28 11:53:24 2025 by rpki-client