$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/018032e3-1027-3ff3-9566-9c8c0a9ec330.roa File: 018032e3-1027-3ff3-9566-9c8c0a9ec330.roa (raw, json) Hash identifier: ns3ay12RshVgC0mo+aR1saWHdQH1nlpIwFWI0XUW3NM= Subject key identifier: 10:02:C4:58:4A:A3:77:B0:DF:02:FF:BA:B7:F1:2E:0F:DD:A9:C7:46 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285848AAFB635DF6A3FA556A0E3980 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/018032e3-1027-3ff3-9566-9c8c0a9ec330.roa Signing time: Sun 26 Jan 2025 02:00:38 +0000 ROA not before: Sun 26 Jan 2025 02:00:38 +0000 ROA not after: Sat 26 Apr 2025 01:00:38 +0000 asID: 3356 IP address blocks: 204.105.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:aa:fb:63:5d:f6:a3:fa:55:6a:0e:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jan 26 02:00:38 2025 GMT Not After : Apr 26 01:00:38 2025 GMT Subject: CN=1acfce1b-5052-4760-9c49-87dd6af5949e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:a7:43:f1:d2:af:6d:ad:28:f3:ec:c7:81:81: 4f:09:74:1a:3c:ce:f4:6d:77:43:94:05:4e:bf:83: ac:5d:a5:3d:11:37:bf:1d:a3:7b:7d:42:32:f5:15: fa:22:f8:e9:65:41:95:73:12:29:c6:10:08:52:12: 50:10:aa:c0:57:b0:c9:08:19:ec:37:fb:60:62:bc: 4f:76:f1:23:4c:41:87:8b:7a:9f:e5:46:57:d8:ec: 9d:89:10:3b:86:da:b4:c0:b9:7d:0d:41:a4:27:46: 77:8b:28:8f:29:3f:90:a6:37:36:28:f7:08:bb:06: ba:97:2a:97:25:f4:6e:94:f1:12:29:f2:ea:6d:d2: 7b:b7:3b:b1:26:e8:2b:e0:81:2a:62:9e:15:c7:11: 2b:dc:4f:9f:d7:a6:db:c8:d7:de:e0:0b:32:13:3c: d8:c7:15:7c:63:30:2b:04:84:6f:6c:be:bb:77:1c: a9:82:1e:7e:39:14:2d:55:b0:51:a6:d0:d6:35:0d: d7:3e:5f:cb:93:36:3d:69:28:18:d9:21:b5:ba:99: f2:01:bb:67:cb:71:aa:64:64:88:15:e8:e8:7c:c8: a1:2b:3b:40:d3:35:be:a5:7c:a0:2d:fe:46:9b:5b: 5b:96:f9:fb:78:82:6f:1c:9e:89:da:0b:71:0f:33: e9:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:02:C4:58:4A:A3:77:B0:DF:02:FF:BA:B7:F1:2E:0F:DD:A9:C7:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/018032e3-1027-3ff3-9566-9c8c0a9ec330.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 204.105.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:0c:38:2f:b3:44:df:5c:6c:3b:8a:2f:3b:03:f4:b0:10:c6: bf:44:4e:5b:c4:74:1b:a3:b8:18:f0:69:15:9f:27:19:be:a2: 3a:e3:2f:0c:93:8f:81:ab:8f:fb:66:6a:ad:48:26:22:79:91: 4b:90:2b:25:11:1f:23:1a:52:4f:f3:b8:46:f2:da:ef:5f:39: 5e:72:27:46:c7:00:2a:3a:17:7d:1b:49:ae:8a:89:9a:c7:9e: e0:db:22:88:4b:0a:30:4c:75:8a:c1:28:10:94:a1:34:f4:98: f8:73:9e:83:c1:f1:7c:88:9c:93:9a:eb:47:e9:2b:f4:74:cf: 17:41:b0:94:4e:40:0b:c4:37:e0:5e:3f:09:d6:4e:16:5a:e1: c9:40:62:a5:34:fa:43:af:ed:0a:63:54:ca:8e:b2:ec:d1:fd: d4:f0:98:07:4e:91:c6:4d:83:ab:a7:ac:2f:05:ca:30:38:c8: 9c:db:65:71:32:c1:c0:63:67:de:cf:33:99:a8:00:f6:59:7c: c5:6b:b5:03:c4:8b:bc:03:4a:58:7f:ca:7f:75:81:e8:1f:6d: 42:7c:42:8d:bc:33:1b:a1:7a:ba:2b:7a:09:b8:a3:b3:59:c5: 98:80:f5:b2:8a:81:f6:92:98:de:6e:d4:af:03:07:3c:fd:08: 01:15:ae:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiq+2Nd9qP6VWoOOYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDEyNjAyMDAzOFoXDTI1MDQyNjAxMDAzOFowLzEtMCsGA1UEAxMk MWFjZmNlMWItNTA1Mi00NzYwLTljNDktODdkZDZhZjU5NDllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqdD8dKvba0o8+zHgYFPCXQaPM70bXdDlAVO v4OsXaU9ETe/HaN7fUIy9RX6IvjpZUGVcxIpxhAIUhJQEKrAV7DJCBnsN/tgYrxP dvEjTEGHi3qf5UZX2OydiRA7htq0wLl9DUGkJ0Z3iyiPKT+Qpjc2KPcIuwa6lyqX JfRulPESKfLqbdJ7tzuxJugr4IEqYp4VxxEr3E+f16bbyNfe4AsyEzzYxxV8YzAr BIRvbL67dxypgh5+ORQtVbBRptDWNQ3XPl/LkzY9aSgY2SG1upnyAbtny3GqZGSI FejofMihKztA0zW+pXygLf5Gm1tblvn7eIJvHJ6J2gtxDzPpKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBACxFhKo3ew3wL/urfxLg/dqcdGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMDE4MDMyZTMtMTAyNy0z ZmYzLTk1NjYtOWM4YzBhOWVjMzMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGkRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFEMOC+zRN9cbDuKLzsD9LAQxr9ETlvEdBujuBjwaRWfJxm+ojrjLwyT j4Grj/tmaq1IJiJ5kUuQKyURHyMaUk/zuEby2u9fOV5yJ0bHACo6F30bSa6KiZrH nuDbIohLCjBMdYrBKBCUoTT0mPhznoPB8XyInJOa60fpK/R0zxdBsJROQAvEN+Be PwnWThZa4clAYqU0+kOv7QpjVMqOsuzR/dTwmAdOkcZNg6unrC8FyjA4yJzbZXEy wcBjZ97PM5moAPZZfMVrtQPEi7wDSlh/yn91gegfbUJ8Qo28Mxuheroregm4o7NZ xZiA9bKKgfaSmN5u1K8DBzz9CAEVrgk= -----END CERTIFICATE-----Generated at Fri Mar 14 10:57:19 2025 by rpki-client