$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/5ac654f2-bd2e-3ec0-afa8-6924dc4d7203.roa File: 5ac654f2-bd2e-3ec0-afa8-6924dc4d7203.roa (raw, json) Hash identifier: dU1tqaYQTEhxuQDHrawYOIvEKitjE5vwVQPHJBTkJk8= Subject key identifier: DA:F9:1E:24:FC:F5:E8:2D:30:1B:9E:DA:06:96:74:BA:9C:70:A3:39 Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b Certificate serial: 010D0C9F43285848EC96AD524F5B14729F638600 Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/5ac654f2-bd2e-3ec0-afa8-6924dc4d7203.roa Signing time: Tue 18 Feb 2025 14:00:52 +0000 ROA not before: Tue 18 Feb 2025 14:00:52 +0000 ROA not after: Mon 19 May 2025 13:00:52 +0000 asID: 7018 IP address blocks: 198.145.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ec:96:ad:52:4f:5b:14:72:9f:63:86:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Validity Not Before: Feb 18 14:00:52 2025 GMT Not After : May 19 13:00:52 2025 GMT Subject: CN=651ed9ad-acef-49a9-bde2-8610215807b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a5:87:33:aa:d8:0c:56:f2:e6:8a:fd:63:60: a9:19:e4:38:73:f6:c2:e6:f6:46:3d:ea:d7:09:74: b1:40:10:f0:2a:ea:0f:59:e6:69:29:c3:fd:3b:f1: 77:14:d5:2a:04:ca:1e:50:d5:9f:b7:4f:47:aa:af: fb:14:38:46:97:3b:b0:aa:e6:67:17:43:1d:79:da: ba:8f:5f:e4:07:65:e8:a9:2f:47:ee:8b:7b:1b:6d: e1:be:4e:b1:a9:78:69:bf:3a:c3:4e:61:a9:8a:6b: 00:ab:d5:81:1f:04:c5:fa:b4:4c:91:a0:c5:73:b9: eb:fa:d5:a5:6f:42:85:75:19:49:ea:47:34:29:19: 10:6f:1d:1e:9e:51:7e:97:cd:db:87:cb:d0:ee:0a: 2d:f7:b1:b5:ab:b1:e2:3a:71:e4:52:98:fc:96:45: 9d:70:95:38:44:ed:3a:1b:d2:7d:33:75:44:9f:ee: 2c:18:e2:88:24:ca:8a:61:da:66:79:bd:e5:df:63: 0d:fd:00:81:ac:58:7c:f5:1e:70:d3:6c:96:ed:1b: e5:71:38:9d:33:46:59:56:8c:ef:e9:05:d3:0e:c5: 24:d2:a4:8f:b6:44:42:b6:0f:30:40:dd:53:2c:83: 0a:0f:2e:b2:bd:a3:ec:fd:11:f9:f1:e9:8c:79:a8: d0:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:F9:1E:24:FC:F5:E8:2D:30:1B:9E:DA:06:96:74:BA:9C:70:A3:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/5ac654f2-bd2e-3ec0-afa8-6924dc4d7203.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl X509v3 Authority Key Identifier: keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer sbgp-ipAddrBlock: critical IPv4: 198.145.74.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:27:e9:14:70:b4:41:0d:45:d3:09:1f:2e:a1:47:95:d4:78: 04:eb:94:99:14:ff:39:42:f7:8b:5a:b4:1d:57:b3:51:ab:16: d1:3f:ae:c1:ae:6e:b9:d4:49:5c:a7:3e:98:3b:9a:74:c5:e4: fd:db:fe:36:0e:dc:97:e6:92:a7:55:6f:f8:33:46:d4:53:42: 30:a6:1d:12:31:d0:9c:1d:8e:5e:a7:3a:89:d4:54:d6:ca:6a: 3c:9a:61:5b:61:a6:c0:fa:10:cd:cb:9a:6b:7e:e7:b9:fd:12: ce:36:73:e2:7c:ae:03:ea:c1:5c:c4:ee:b5:14:75:c3:7a:82: 3d:8d:76:2e:68:9a:21:4d:71:ef:09:91:e7:a3:9d:77:c2:c2: b8:4b:02:5b:21:36:5e:ca:ed:24:fd:5b:da:0f:5f:48:7f:8b: ce:a9:7b:97:58:08:a1:10:92:ad:ae:fc:50:42:bb:17:3f:f8: b8:46:75:20:89:4d:87:67:66:90:dd:fa:c0:89:c6:4f:15:15: d1:6d:e3:48:10:2b:88:bb:a1:da:db:2c:dd:02:15:49:d2:e8: 7a:3d:cd:de:29:c0:90:5d:0d:96:db:16:55:c9:d3:7f:11:b3: cf:83:81:9b:6a:a6:f1:70:fd:b3:47:f4:ad:17:f3:cc:3c:48: a6:d7:d8:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjslq1ST1sUcp9jhgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz NjFiMB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk NjUxZWQ5YWQtYWNlZi00OWE5LWJkZTItODYxMDIxNTgwN2IxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKWHM6rYDFby5or9Y2CpGeQ4c/bC5vZGPerX CXSxQBDwKuoPWeZpKcP9O/F3FNUqBMoeUNWft09Hqq/7FDhGlzuwquZnF0Mdedq6 j1/kB2XoqS9H7ot7G23hvk6xqXhpvzrDTmGpimsAq9WBHwTF+rRMkaDFc7nr+tWl b0KFdRlJ6kc0KRkQbx0enlF+l83bh8vQ7got97G1q7HiOnHkUpj8lkWdcJU4RO06 G9J9M3VEn+4sGOKIJMqKYdpmeb3l32MN/QCBrFh89R5w02yW7RvlcTidM0ZZVozv 6QXTDsUk0qSPtkRCtg8wQN1TLIMKDy6yvaPs/RH58emMeajQcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNr5HiT89egtMBue2gaWdLqccKM5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvNWFjNjU0ZjItYmQyZS0z ZWMwLWFmYTgtNjkyNGRjNGQ3MjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2 ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxpFKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKIn6RRwtEENRdMJHy6hR5XUeATrlJkU/zlC94tatB1Xs1GrFtE/rsGu brnUSVynPpg7mnTF5P3b/jYO3JfmkqdVb/gzRtRTQjCmHRIx0Jwdjl6nOonUVNbK ajyaYVthpsD6EM3Lmmt+57n9Es42c+J8rgPqwVzE7rUUdcN6gj2Ndi5omiFNce8J keejnXfCwrhLAlshNl7K7ST9W9oPX0h/i86pe5dYCKEQkq2u/FBCuxc/+LhGdSCJ TYdnZpDd+sCJxk8VFdFt40gQK4i7odrbLN0CFUnS6Ho9zd4pwJBdDZbbFlXJ038R s8+DgZtqpvFw/bNH9K0X88w8SKbX2KM= -----END CERTIFICATE-----Generated at Sat Apr 26 16:35:22 2025 by rpki-client