$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0bf462af-9a76-3762-a297-14cc5e7b1f19.roa File: 0bf462af-9a76-3762-a297-14cc5e7b1f19.roa (raw, json) Hash identifier: /nHm9mdMJHKeLiBsjWLgnLc+aBbqVOPJq5maZ9zk5fI= Subject key identifier: 7E:9A:FD:8E:EA:A1:BA:DA:E7:A1:1C:5E:EC:31:EE:A6:CA:A4:4B:71 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285848BA563E23F9753D920E01562E Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0bf462af-9a76-3762-a297-14cc5e7b1f19.roa Signing time: Fri 31 Jan 2025 14:00:51 +0000 ROA not before: Fri 31 Jan 2025 14:00:51 +0000 ROA not after: Thu 01 May 2025 13:00:51 +0000 asID: 203 IP address blocks: 192.57.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ba:56:3e:23:f9:75:3d:92:0e:01:56:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jan 31 14:00:51 2025 GMT Not After : May 1 13:00:51 2025 GMT Subject: CN=9c7795d8-bca2-49c5-9ceb-19cd316000f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:cc:0b:5e:2f:72:f6:7b:5f:9e:fc:b7:62:75: 3d:a6:ac:d1:23:f9:66:51:34:ab:af:3f:88:81:48: 7a:c9:72:4f:89:b8:c4:67:9f:e0:d1:d6:8e:ce:18: 0e:c3:00:36:d0:b7:ca:ee:b7:88:11:a0:be:ca:a7: 74:cd:9a:fc:1c:05:c3:aa:90:94:4d:63:87:3f:f2: 6a:ac:34:85:14:a2:24:18:0f:57:04:2b:73:5a:99: 4e:6e:96:7d:46:31:c3:b2:c7:9c:44:2d:44:fe:44: 75:db:49:da:0f:00:1c:dc:f8:89:6d:44:71:d8:11: 44:9c:2d:51:b6:fe:3f:63:88:84:be:d6:0e:26:71: 63:f4:f3:6e:34:05:cd:1f:11:55:27:58:1f:3a:0e: 6f:b7:51:73:4e:2b:df:6a:e6:c6:62:39:38:c5:c3: 58:33:ec:90:71:ab:e3:fc:ee:46:00:21:de:c7:08: 71:ef:6f:22:da:1b:15:6c:3c:e2:35:76:bf:d8:f8: 9f:8f:c5:11:9f:aa:5a:dd:79:5a:10:46:a7:bf:cb: c6:4c:2b:10:06:ce:64:06:cb:a1:9c:b4:8e:79:3b: 31:f8:20:a6:70:45:cf:f5:f7:7a:d0:38:53:86:1d: 47:a9:14:84:b1:09:22:b9:c0:46:3e:bd:8d:4f:fe: 46:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:9A:FD:8E:EA:A1:BA:DA:E7:A1:1C:5E:EC:31:EE:A6:CA:A4:4B:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0bf462af-9a76-3762-a297-14cc5e7b1f19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.57.118.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:d6:34:10:e3:e4:70:4e:07:e2:ad:11:46:6f:c9:e5:5f:00: 1a:d4:f4:a8:cc:59:47:b8:74:66:29:1c:76:38:1d:6f:48:bf: f4:ed:58:ce:eb:86:f6:ba:21:b1:9c:30:61:1e:23:72:9e:21: 77:d5:0b:47:e9:0f:60:46:fe:ee:be:f0:88:06:dd:85:23:75: 6a:67:83:e4:22:df:d0:fc:7c:e3:6e:cd:fc:c0:a3:42:80:25: 84:49:89:ea:04:7a:8c:17:5f:ee:17:a5:8b:11:7b:22:da:c3: cc:14:23:9a:2c:a4:3c:f8:f1:f5:91:75:b9:18:52:a0:1e:6d: f7:e9:b6:01:c8:03:ff:88:bc:00:40:80:1f:b2:b6:b6:23:a8: bf:25:3c:f5:97:24:38:c7:4f:9b:95:b1:49:98:85:33:25:56: 5b:24:8b:53:f5:90:a6:d1:d9:63:41:cb:dd:10:bb:38:a8:38: 85:4d:26:c4:40:e2:1b:9c:0f:d8:b7:8c:d0:6e:f9:b7:ee:ac: f7:dd:ac:c2:fb:4d:7e:4a:83:ce:5a:d0:b6:6a:8f:5a:49:03: 16:31:f2:bd:ab:b1:d5:74:bc:3f:be:f6:cb:8b:dc:ee:18:33: 2c:2a:66:79:a2:d4:bd:10:ed:2a:dc:bb:b9:66:17:b2:e4:10: 52:0d:3d:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi6Vj4j+XU9kg4BVi4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDEzMTE0MDA1MVoXDTI1MDUwMTEzMDA1MVowLzEtMCsGA1UEAxMk OWM3Nzk1ZDgtYmNhMi00OWM1LTljZWItMTljZDMxNjAwMGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMwLXi9y9ntfnvy3YnU9pqzRI/lmUTSrrz+I gUh6yXJPibjEZ5/g0daOzhgOwwA20LfK7reIEaC+yqd0zZr8HAXDqpCUTWOHP/Jq rDSFFKIkGA9XBCtzWplObpZ9RjHDssecRC1E/kR120naDwAc3PiJbURx2BFEnC1R tv4/Y4iEvtYOJnFj9PNuNAXNHxFVJ1gfOg5vt1FzTivfaubGYjk4xcNYM+yQcavj /O5GACHexwhx728i2hsVbDziNXa/2Pifj8URn6pa3XlaEEanv8vGTCsQBs5kBsuh nLSOeTsx+CCmcEXP9fd60DhThh1HqRSEsQkiucBGPr2NT/5G1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH6a/Y7qobra56EcXuwx7qbKpEtxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMGJmNDYyYWYtOWE3Ni0z NzYyLWEyOTctMTRjYzVlN2IxZjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDl2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFPWNBDj5HBOB+KtEUZvyeVfABrU9KjMWUe4dGYpHHY4HW9Iv/TtWM7r hva6IbGcMGEeI3KeIXfVC0fpD2BG/u6+8IgG3YUjdWpng+Qi39D8fONuzfzAo0KA JYRJieoEeowXX+4XpYsReyLaw8wUI5ospDz48fWRdbkYUqAebffptgHIA/+IvABA gB+ytrYjqL8lPPWXJDjHT5uVsUmYhTMlVlski1P1kKbR2WNBy90QuzioOIVNJsRA 4hucD9i3jNBu+bfurPfdrML7TX5Kg85a0LZqj1pJAxYx8r2rsdV0vD++9suL3O4Y MywqZnmi1L0Q7Srcu7lmF7LkEFINPdo= -----END CERTIFICATE-----Generated at Sun Apr 6 20:49:17 2025 by rpki-client