$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/cf33a276-5802-3ecd-a59a-911aab6182e6.roa File: cf33a276-5802-3ecd-a59a-911aab6182e6.roa (raw, json) Hash identifier: YS23GEDd2M88cP1SGewGdJhdSLnkpYsHMjKI0FkHsRA= Subject key identifier: 53:A1:08:6E:CD:27:04:2B:2E:4C:E1:6A:AB:71:FA:29:F7:1A:C5:41 Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b Certificate serial: 010D0C9F43285849A61F3EA49861C04B2BDB4880 Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/cf33a276-5802-3ecd-a59a-911aab6182e6.roa Signing time: Sat 26 Apr 2025 01:00:47 +0000 ROA not before: Sat 26 Apr 2025 01:00:47 +0000 ROA not after: Fri 25 Jul 2025 01:00:47 +0000 asID: 9009 IP address blocks: 198.145.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a6:1f:3e:a4:98:61:c0:4b:2b:db:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Validity Not Before: Apr 26 01:00:47 2025 GMT Not After : Jul 25 01:00:47 2025 GMT Subject: CN=8d24ad09-55ea-4a53-97bc-3f73ca22cdc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:35:fc:7b:65:7c:09:36:85:c7:8a:9f:5b:49: 41:67:c6:f7:15:ea:29:52:84:e1:5f:1f:34:52:e5: 0e:b8:c9:6a:c7:4c:2a:c3:70:e3:85:38:9f:73:3f: 2f:61:d2:df:65:ce:5f:de:5a:c1:a2:1d:e4:50:23: d3:82:0a:d6:9e:1f:0a:ed:ad:17:f1:65:06:c3:47: 8b:16:ff:d2:57:80:36:b6:00:a6:35:51:1c:95:5f: d9:bc:e9:2d:a9:53:8e:7f:54:9e:46:8d:ec:0c:cd: 15:3e:4b:4b:a2:7f:7f:2f:a8:12:58:92:74:2d:a0: 70:6e:e0:4a:09:e7:52:da:d1:2a:d9:41:12:bc:ca: 3e:57:a4:59:d3:44:71:73:3f:49:8c:4f:ac:d1:b0: 27:14:b1:70:6d:f8:6d:88:af:7b:c0:17:e9:e8:73: f1:85:b7:50:5e:cc:a7:f0:0a:a5:f3:68:11:11:ae: 81:81:e9:3b:1f:ea:8b:a7:ff:58:25:4e:07:80:f3: 8d:3f:8b:c4:b8:fa:a6:9d:2d:d3:4d:53:0e:35:3d: 65:d6:8f:2f:04:c0:4d:b8:ab:ff:c3:a8:67:26:0d: 6f:16:90:2a:e7:b7:39:bf:24:8e:7f:41:0c:35:20: aa:59:26:c5:53:f3:5b:83:24:bb:e8:3c:4c:97:83: bc:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:A1:08:6E:CD:27:04:2B:2E:4C:E1:6A:AB:71:FA:29:F7:1A:C5:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/cf33a276-5802-3ecd-a59a-911aab6182e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl X509v3 Authority Key Identifier: keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer sbgp-ipAddrBlock: critical IPv4: 198.145.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:10:a5:b6:5b:48:d6:bb:9d:99:12:ca:90:b4:1e:8c:11:81: f8:ca:f8:37:ad:89:37:72:bb:94:b1:b8:0b:d4:0d:86:e4:b5: 14:4a:e1:b2:cc:6d:87:b3:2e:49:3c:74:5c:51:43:3e:b9:5e: 7c:95:61:68:34:b8:41:76:b8:02:cf:aa:bd:68:6d:cd:f2:0a: 70:da:01:fd:83:e8:92:9d:af:3a:77:1f:05:8b:7d:f4:c0:3a: ca:ff:ec:14:89:49:da:fc:d5:c2:58:10:82:92:04:d4:d0:d0: 17:8f:82:73:fa:08:a3:82:f4:24:c5:0d:b8:2a:14:ef:1b:20: b2:0f:a5:f5:e8:96:16:a9:43:5d:06:5a:25:96:d0:67:8c:02: 90:38:03:32:65:d7:b5:a5:40:a7:43:36:37:f4:3c:b1:92:3c: 99:05:9e:de:74:c5:ae:f3:97:1d:38:bb:c0:94:25:80:81:9b: 54:58:b2:05:c1:76:6f:37:25:35:6c:df:87:59:d6:26:85:4f: e8:13:7e:cf:b1:50:93:ee:0f:ac:a7:6a:dc:1d:46:78:97:a9: 83:46:b5:16:70:45:fe:23:7f:02:4d:e6:88:54:a1:07:d2:d6: fd:90:69:1f:f8:f5:bc:f7:07:1e:64:42:5a:14:c0:cc:e5:5b: d0:30:d2:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmmHz6kmGHASyvbSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz NjFiMB4XDTI1MDQyNjAxMDA0N1oXDTI1MDcyNTAxMDA0N1owLzEtMCsGA1UEAxMk OGQyNGFkMDktNTVlYS00YTUzLTk3YmMtM2Y3M2NhMjJjZGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzX8e2V8CTaFx4qfW0lBZ8b3FeopUoThXx80 UuUOuMlqx0wqw3DjhTifcz8vYdLfZc5f3lrBoh3kUCPTggrWnh8K7a0X8WUGw0eL Fv/SV4A2tgCmNVEclV/ZvOktqVOOf1SeRo3sDM0VPktLon9/L6gSWJJ0LaBwbuBK CedS2tEq2UESvMo+V6RZ00Rxcz9JjE+s0bAnFLFwbfhtiK97wBfp6HPxhbdQXsyn 8Aql82gREa6Bgek7H+qLp/9YJU4HgPONP4vEuPqmnS3TTVMONT1l1o8vBMBNuKv/ w6hnJg1vFpAq57c5vySOf0EMNSCqWSbFU/NbgyS76DxMl4O8PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFOhCG7NJwQrLkzhaqtx+in3GsVBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvY2YzM2EyNzYtNTgwMi0z ZWNkLWE1OWEtOTExYWFiNjE4MmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2 ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxpGYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACgQpbZbSNa7nZkSypC0HowRgfjK+DetiTdyu5SxuAvUDYbktRRK4bLM bYezLkk8dFxRQz65XnyVYWg0uEF2uALPqr1obc3yCnDaAf2D6JKdrzp3HwWLffTA Osr/7BSJSdr81cJYEIKSBNTQ0BePgnP6CKOC9CTFDbgqFO8bILIPpfXolhapQ10G WiWW0GeMApA4AzJl17WlQKdDNjf0PLGSPJkFnt50xa7zlx04u8CUJYCBm1RYsgXB dm83JTVs34dZ1iaFT+gTfs+xUJPuD6ynatwdRniXqYNGtRZwRf4jfwJN5ohUoQfS 1v2QaR/49bz3Bx5kQloUwMzlW9Aw0iI= -----END CERTIFICATE-----Generated at Sat Apr 26 16:15:06 2025 by rpki-client