$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/89aa5d99-a10e-3961-a429-da0c9e3a590c.roa File: 89aa5d99-a10e-3961-a429-da0c9e3a590c.roa (raw, json) Hash identifier: L48ShCDfkkfqX22Ek5mi0H6TxFAfRfFF6Ie0mlZh5gE= Subject key identifier: 30:8B:7E:12:D9:C2:AF:4E:20:EE:EA:DD:2D:43:F5:3D:99:81:24:B3 Certificate issuer: /CN=38c5255f-5193-4ef7-92e9-db326ee1d690 Certificate serial: 010D0C9F4328584961B99CA8DD4F92E2864ED200 Authority key identifier: E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/89aa5d99-a10e-3961-a429-da0c9e3a590c.roa Signing time: Tue 01 Apr 2025 13:01:00 +0000 ROA not before: Tue 01 Apr 2025 13:01:00 +0000 ROA not after: Mon 30 Jun 2025 13:01:00 +0000 asID: 6498 IP address blocks: 75.78.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:61:b9:9c:a8:dd:4f:92:e2:86:4e:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38c5255f-5193-4ef7-92e9-db326ee1d690 Validity Not Before: Apr 1 13:01:00 2025 GMT Not After : Jun 30 13:01:00 2025 GMT Subject: CN=12c19a94-13c1-4678-a239-c8b6018f9c0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:e0:02:e2:5b:a3:97:78:31:ec:62:b6:73:7f: c3:3c:51:21:a7:79:1c:6b:99:53:27:23:ba:ef:cb: 2a:58:b9:b1:5c:e0:6d:af:ff:60:4c:8b:87:39:f5: 81:69:74:dc:62:c3:92:f7:b9:ed:4b:d2:fc:86:c8: d6:f2:c1:6a:73:2d:0a:0f:19:6d:71:29:9f:2e:09: 73:0a:98:e7:74:3a:a3:40:e3:f9:d8:2e:f6:ed:8b: 18:14:6c:54:55:8f:59:31:52:54:cb:c5:24:5f:0b: 00:25:36:c9:11:c1:9b:15:fa:cb:25:60:3f:9a:05: f4:c4:77:71:d0:75:df:96:d9:d9:62:d1:69:30:34: ee:9b:65:5e:2e:d1:5d:1a:bb:d2:fe:c7:9f:66:8a: 4d:f7:5f:38:f8:79:46:3c:41:64:19:88:c6:22:85: d4:23:1b:21:b0:54:43:bd:03:d9:d3:d7:69:07:52: cf:92:40:75:66:a5:c9:7d:7f:55:14:f1:69:8a:d3: 1a:47:c0:7c:af:b7:e6:da:4a:f4:24:ec:cb:88:82: 6b:c7:d4:73:7d:f0:1c:9e:1d:23:94:e6:8c:94:64: 96:6c:2a:ba:8f:e6:1b:74:4f:5f:86:4f:a7:b6:f4: f3:8a:a2:bd:73:54:45:47:a6:a7:94:fe:51:21:ea: 95:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:8B:7E:12:D9:C2:AF:4E:20:EE:EA:DD:2D:43:F5:3D:99:81:24:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/89aa5d99-a10e-3961-a429-da0c9e3a590c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl X509v3 Authority Key Identifier: keyid:E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer sbgp-ipAddrBlock: critical IPv4: 75.78.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:3d:32:3a:b9:6e:da:19:a2:fb:a1:78:dd:d7:ad:7a:b3:10: 3d:05:0b:47:63:9f:1c:79:f7:47:73:3f:05:56:4a:b9:77:87: bf:5f:3c:c4:d6:df:05:79:34:e1:af:fe:58:ca:0b:4f:32:29: 72:2f:f6:c9:3d:00:e7:ca:86:8e:9e:77:53:82:13:cc:dc:e2: a9:8e:98:67:a8:9d:96:c3:e2:b2:85:e3:bf:be:0d:bb:96:4e: f2:4d:f1:c3:33:4c:26:9d:c3:3c:02:e1:c0:c4:20:47:9b:20: d5:ac:7e:8e:59:ff:36:c5:c3:55:f1:04:6c:5a:a3:e9:f4:f3: b6:a6:9c:48:67:05:f9:a6:4c:14:37:08:dc:ab:3a:8c:49:ac: 5d:6a:58:e1:63:78:43:af:85:f1:d4:a3:ee:16:09:21:1d:cf: dd:ab:47:1a:c1:03:50:8f:05:39:7f:83:02:8e:d5:21:f2:01: 96:6f:c0:ea:11:71:f3:1b:bb:88:c3:93:81:c8:3a:95:ac:01: ea:a3:04:d9:36:1f:1a:d2:c9:e0:f0:74:b3:c5:16:43:5b:2a: ef:17:80:17:67:72:d3:ec:10:96:e8:7e:ee:00:79:7e:61:68: 8c:f5:ba:9b:fd:5a:b2:10:e7:8d:1a:ba:09:34:c1:65:7f:6f: af:4b:8c:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElhuZyo3U+S4oZO0gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhjNTI1NWYtNTE5My00ZWY3LTkyZTktZGIzMjZlZTFk NjkwMB4XDTI1MDQwMTEzMDEwMFoXDTI1MDYzMDEzMDEwMFowLzEtMCsGA1UEAxMk MTJjMTlhOTQtMTNjMS00Njc4LWEyMzktYzhiNjAxOGY5YzBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+AC4lujl3gx7GK2c3/DPFEhp3kca5lTJyO6 78sqWLmxXOBtr/9gTIuHOfWBaXTcYsOS97ntS9L8hsjW8sFqcy0KDxltcSmfLglz CpjndDqjQOP52C727YsYFGxUVY9ZMVJUy8UkXwsAJTbJEcGbFfrLJWA/mgX0xHdx 0HXfltnZYtFpMDTum2VeLtFdGrvS/sefZopN9184+HlGPEFkGYjGIoXUIxshsFRD vQPZ09dpB1LPkkB1ZqXJfX9VFPFpitMaR8B8r7fm2kr0JOzLiIJrx9RzffAcnh0j lOaMlGSWbCq6j+YbdE9fhk+ntvTziqK9c1RFR6anlP5RIeqVpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDCLfhLZwq9OIO7q3S1D9T2ZgSSzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zOGM1 MjU1Zi01MTkzLTRlZjctOTJlOS1kYjMyNmVlMWQ2OTAvODlhYTVkOTktYTEwZS0z OTYxLWE0MjktZGEwYzllM2E1OTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzhjNTI1NWYtNTE5My00ZWY3LTky ZTktZGIzMjZlZTFkNjkwLzM4YzUyNTVmLTUxOTMtNGVmNy05MmU5LWRiMzI2ZWUx ZDY5MC5jcmwwHwYDVR0jBBgwFoAU6OtRdt4L2VYIX2NOD0gHny6QnZUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zOGM1MjU1Zi01MTkzLTRlZjctOTJlOS1kYjMy NmVlMWQ2OTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS05qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAo9Mjq5btoZovuheN3XrXqzED0FC0djnxx590dzPwVWSrl3h79fPMTW 3wV5NOGv/ljKC08yKXIv9sk9AOfKho6ed1OCE8zc4qmOmGeonZbD4rKF47++DbuW TvJN8cMzTCadwzwC4cDEIEebINWsfo5Z/zbFw1XxBGxao+n087amnEhnBfmmTBQ3 CNyrOoxJrF1qWOFjeEOvhfHUo+4WCSEdz92rRxrBA1CPBTl/gwKO1SHyAZZvwOoR cfMbu4jDk4HIOpWsAeqjBNk2HxrSyeDwdLPFFkNbKu8XgBdnctPsEJbofu4AeX5h aIz1upv9WrIQ540augk0wWV/b69LjAk= -----END CERTIFICATE-----Generated at Mon May 5 17:39:55 2025 by rpki-client