$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/9cb296f6-8738-328d-ba98-9c8fe51019f2.roa File: 9cb296f6-8738-328d-ba98-9c8fe51019f2.roa (raw, json) Hash identifier: 2soZ3gJ7fxXP3qUNPc1ytGeg0rPkBKSSKh7Vl4rf2+Y= Subject key identifier: D6:43:53:C5:8C:0F:77:2D:E6:3F:3A:98:79:6E:82:14:9B:6C:5D:23 Certificate issuer: /CN=38c5255f-5193-4ef7-92e9-db326ee1d690 Certificate serial: 010D0C9F4328584961B99D3DF49009DE000B17C0 Authority key identifier: E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/9cb296f6-8738-328d-ba98-9c8fe51019f2.roa Signing time: Tue 01 Apr 2025 13:01:00 +0000 ROA not before: Tue 01 Apr 2025 13:01:00 +0000 ROA not after: Mon 30 Jun 2025 13:01:00 +0000 asID: 6498 IP address blocks: 75.78.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:61:b9:9d:3d:f4:90:09:de:00:0b:17:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38c5255f-5193-4ef7-92e9-db326ee1d690 Validity Not Before: Apr 1 13:01:00 2025 GMT Not After : Jun 30 13:01:00 2025 GMT Subject: CN=cd6b6e32-c6cc-4ba9-8378-809bfb86a4ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:7a:b0:25:76:c4:67:96:a0:d6:8a:5c:3f:c1: 91:e7:b2:08:d8:99:10:f5:55:80:3f:7b:53:51:8b: ed:82:84:bd:3e:75:aa:33:f2:16:7c:be:5b:52:05: e2:a5:f6:73:18:a0:96:14:3c:dc:a7:b2:67:56:a4: 15:0e:13:66:17:8a:0c:76:e4:d1:2b:c4:6d:cc:4f: b2:24:4b:6a:0c:97:16:96:23:98:e4:c0:fa:8f:b3: a9:14:d2:ec:41:ac:3c:2d:67:2f:60:d8:68:de:d7: db:f3:19:c6:b5:a0:6b:ac:cc:ae:e8:44:d2:1b:80: aa:f5:18:a9:c8:c2:48:1c:ed:33:b7:8e:db:f4:28: 5b:64:40:09:f9:c1:ed:3f:35:e2:f2:72:17:8c:bf: 9b:78:52:d2:c3:cc:04:c4:95:d5:05:00:be:24:69: ea:d3:3d:d7:76:77:ad:ea:0b:52:2f:5b:62:f2:58: 65:15:a2:91:4f:0a:9f:5e:15:ea:77:39:b5:a0:c3: 3b:bd:04:ec:4f:46:19:59:ae:ae:7f:71:b1:a5:3c: 76:86:6b:4f:c5:f6:5f:6b:77:99:60:48:79:f3:3a: 75:aa:fb:9b:3b:d5:92:be:81:08:d1:ad:08:2b:d1: ec:4c:02:e9:ba:0e:57:05:a4:72:c8:8c:fb:7b:9d: 32:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:43:53:C5:8C:0F:77:2D:E6:3F:3A:98:79:6E:82:14:9B:6C:5D:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/9cb296f6-8738-328d-ba98-9c8fe51019f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl X509v3 Authority Key Identifier: keyid:E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer sbgp-ipAddrBlock: critical IPv4: 75.78.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:ef:9c:6b:70:a2:eb:59:37:b2:fe:5e:f5:d4:40:b8:d1:32: d8:ec:1b:e4:72:b7:79:35:7d:f6:64:05:d8:86:eb:de:7f:b9: 21:7e:a5:ca:cb:7f:c8:b2:31:20:8e:05:20:a0:db:0f:27:4b: b1:93:9f:8d:db:f4:9c:d0:69:53:30:ba:4b:7f:25:9b:60:3a: 05:0e:2b:27:25:92:20:49:d2:48:ef:9a:5a:4c:06:0f:7a:8b: 48:3a:af:2d:76:e4:ab:cc:40:66:42:08:0d:78:38:3b:de:0a: 7a:17:b0:a4:e4:ac:77:b8:bf:16:93:d8:bd:49:41:98:26:70: 20:2b:2b:83:5c:de:0a:50:b6:08:24:40:e2:48:86:4c:6b:4f: 57:b2:99:6e:b6:1c:56:87:c6:ff:50:a8:96:57:b1:3f:cd:36: 34:b3:26:65:77:a5:1b:76:b5:d6:5c:6f:e1:8a:3f:58:b2:2d: 9b:db:d6:e4:91:5b:f7:fa:19:c7:18:8f:e7:b9:36:87:76:69: e5:8f:8e:ca:83:06:74:81:4e:37:19:df:06:a4:1a:f4:57:46: 55:29:16:c8:38:8d:50:1e:ac:b5:b1:c0:e4:40:ca:a1:b1:b3: d8:a0:df:3e:4b:b1:73:8b:e3:c7:af:40:33:71:de:6d:66:92: e1:73:3f:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElhuZ099JAJ3gALF8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhjNTI1NWYtNTE5My00ZWY3LTkyZTktZGIzMjZlZTFk NjkwMB4XDTI1MDQwMTEzMDEwMFoXDTI1MDYzMDEzMDEwMFowLzEtMCsGA1UEAxMk Y2Q2YjZlMzItYzZjYy00YmE5LTgzNzgtODA5YmZiODZhNGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3qwJXbEZ5ag1opcP8GR57II2JkQ9VWAP3tT UYvtgoS9PnWqM/IWfL5bUgXipfZzGKCWFDzcp7JnVqQVDhNmF4oMduTRK8RtzE+y JEtqDJcWliOY5MD6j7OpFNLsQaw8LWcvYNho3tfb8xnGtaBrrMyu6ETSG4Cq9Rip yMJIHO0zt47b9ChbZEAJ+cHtPzXi8nIXjL+beFLSw8wExJXVBQC+JGnq0z3Xdnet 6gtSL1ti8lhlFaKRTwqfXhXqdzm1oMM7vQTsT0YZWa6uf3GxpTx2hmtPxfZfa3eZ YEh58zp1qvubO9WSvoEI0a0IK9HsTALpug5XBaRyyIz7e50yQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNZDU8WMD3ct5j86mHlughSbbF0jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zOGM1 MjU1Zi01MTkzLTRlZjctOTJlOS1kYjMyNmVlMWQ2OTAvOWNiMjk2ZjYtODczOC0z MjhkLWJhOTgtOWM4ZmU1MTAxOWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzhjNTI1NWYtNTE5My00ZWY3LTky ZTktZGIzMjZlZTFkNjkwLzM4YzUyNTVmLTUxOTMtNGVmNy05MmU5LWRiMzI2ZWUx ZDY5MC5jcmwwHwYDVR0jBBgwFoAU6OtRdt4L2VYIX2NOD0gHny6QnZUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zOGM1MjU1Zi01MTkzLTRlZjctOTJlOS1kYjMy NmVlMWQ2OTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS06rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAHvnGtwoutZN7L+XvXUQLjRMtjsG+Ryt3k1ffZkBdiG695/uSF+pcrL f8iyMSCOBSCg2w8nS7GTn43b9JzQaVMwukt/JZtgOgUOKyclkiBJ0kjvmlpMBg96 i0g6ry125KvMQGZCCA14ODveCnoXsKTkrHe4vxaT2L1JQZgmcCArK4Nc3gpQtggk QOJIhkxrT1eymW62HFaHxv9QqJZXsT/NNjSzJmV3pRt2tdZcb+GKP1iyLZvb1uSR W/f6GccYj+e5Nod2aeWPjsqDBnSBTjcZ3wakGvRXRlUpFsg4jVAerLWxwORAyqGx s9ig3z5LsXOL48evQDNx3m1mkuFzP/M= -----END CERTIFICATE-----Generated at Mon May 5 18:38:43 2025 by rpki-client