$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/12f14dc0-c83e-343f-8121-e48e3e9626df.roa File: 12f14dc0-c83e-343f-8121-e48e3e9626df.roa (raw, json) Hash identifier: CRwKusN/7/0kXJdiDn0DKDIafVNYv/IWZ8jzIA2ERZg= Subject key identifier: A5:6B:61:FB:53:7F:E3:0D:06:B7:6E:FE:A5:28:32:8C:5F:D6:E9:5B Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285848AAFB684B72C943AC6EE81180 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/12f14dc0-c83e-343f-8121-e48e3e9626df.roa Signing time: Sun 26 Jan 2025 02:00:38 +0000 ROA not before: Sun 26 Jan 2025 02:00:38 +0000 ROA not after: Sat 26 Apr 2025 01:00:38 +0000 asID: 3360 IP address blocks: 205.141.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:aa:fb:68:4b:72:c9:43:ac:6e:e8:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jan 26 02:00:38 2025 GMT Not After : Apr 26 01:00:38 2025 GMT Subject: CN=b54230a0-49a1-4ede-8931-9f103f9661c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:9c:02:84:12:38:c0:58:f1:21:8b:57:0f:2f: a1:e8:f2:05:f1:3c:65:08:52:9c:80:d8:91:2f:52: 94:08:ab:97:98:46:c6:d4:14:84:c7:85:56:df:30: 31:a4:73:ea:fd:95:ef:66:3c:af:64:80:7a:30:af: 7d:49:d2:31:ee:3f:d8:5a:45:64:aa:bc:50:7d:21: fe:2f:5e:b5:ca:9c:69:dc:fd:7a:4a:a1:43:95:fb: 72:48:af:43:f7:3c:9c:d9:f8:ce:73:39:c4:35:2b: 47:02:7e:20:06:d8:22:07:c3:e8:04:f8:25:c1:f9: 70:d2:f3:f8:c2:79:69:08:c1:fe:1f:77:5d:ee:f4: 2e:4b:bc:4c:81:7d:49:8e:66:0b:94:ab:18:ea:30: 22:f6:19:c7:44:3d:65:50:e5:ca:d2:f4:ef:20:de: fc:7e:a0:98:be:ef:c1:ed:ea:f3:99:09:f7:f0:b5: 1e:f2:24:8e:bd:88:03:83:59:07:bc:33:14:87:b7: 41:65:03:41:8e:1d:4f:ac:de:bb:8f:1a:e0:cc:ea: d0:4c:e5:48:28:52:4a:e3:f3:b6:32:24:83:4d:f5: 88:d4:a7:e7:0d:4c:8a:49:e2:f9:d5:a0:b5:96:7c: d1:3e:b4:ce:14:b0:d8:12:e7:d6:41:53:1f:fb:5a: f8:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:6B:61:FB:53:7F:E3:0D:06:B7:6E:FE:A5:28:32:8C:5F:D6:E9:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/12f14dc0-c83e-343f-8121-e48e3e9626df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 205.141.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:b6:bc:55:a4:88:e0:53:fb:d5:63:f0:4b:d4:2c:2f:45:5e: 7b:05:84:25:7f:8b:4a:ee:50:bb:dd:38:cb:77:60:38:9c:dc: 4f:f6:0a:35:5e:0e:9d:53:63:9c:4e:76:f8:e2:0e:02:d8:d6: 50:09:28:59:9a:20:80:d0:ae:61:98:5f:c3:a5:82:9c:52:85: ab:44:62:ec:03:4b:c5:79:64:b6:e9:3b:00:83:8c:e5:5b:87: 7f:0c:5b:b1:00:6c:bc:80:2c:23:7c:17:88:80:38:c4:49:c8: d9:3e:07:17:ce:b3:94:a7:b3:93:7e:18:8d:8d:e8:58:f1:0d: a4:a0:7b:18:93:cd:5b:ee:2d:12:01:3c:c6:ea:f8:18:a0:10: 52:99:5e:82:5d:ea:a8:9e:3d:82:ca:59:63:ce:a2:f4:f2:6e: ae:44:79:78:3e:24:bd:0b:3f:48:86:4c:0c:0a:1b:d9:dc:7a: 1a:7e:e8:e5:e8:f6:ae:26:20:5f:e0:d6:26:8f:3c:00:1f:24: d7:15:a2:8c:e8:1b:d3:09:c1:5e:0e:fe:02:37:74:01:94:a2: 16:08:21:00:6c:4c:7a:99:5c:e7:86:ab:d7:bc:9b:6b:45:a1: 1b:66:4a:fd:e2:a7:92:9e:03:57:50:41:d3:10:65:b9:5f:fc: f7:69:ef:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiq+2hLcslDrG7oEYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDEyNjAyMDAzOFoXDTI1MDQyNjAxMDAzOFowLzEtMCsGA1UEAxMk YjU0MjMwYTAtNDlhMS00ZWRlLTg5MzEtOWYxMDNmOTY2MWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpwChBI4wFjxIYtXDy+h6PIF8TxlCFKcgNiR L1KUCKuXmEbG1BSEx4VW3zAxpHPq/ZXvZjyvZIB6MK99SdIx7j/YWkVkqrxQfSH+ L161ypxp3P16SqFDlftySK9D9zyc2fjOcznENStHAn4gBtgiB8PoBPglwflw0vP4 wnlpCMH+H3dd7vQuS7xMgX1JjmYLlKsY6jAi9hnHRD1lUOXK0vTvIN78fqCYvu/B 7erzmQn38LUe8iSOvYgDg1kHvDMUh7dBZQNBjh1PrN67jxrgzOrQTOVIKFJK4/O2 MiSDTfWI1KfnDUyKSeL51aC1lnzRPrTOFLDYEufWQVMf+1r4uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKVrYftTf+MNBrdu/qUoMoxf1ulbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMTJmMTRkYzAtYzgzZS0z NDNmLTgxMjEtZTQ4ZTNlOTYyNmRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzY3KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIC2vFWkiOBT+9Vj8EvULC9FXnsFhCV/i0ruULvdOMt3YDic3E/2CjVe Dp1TY5xOdvjiDgLY1lAJKFmaIIDQrmGYX8OlgpxShatEYuwDS8V5ZLbpOwCDjOVb h38MW7EAbLyALCN8F4iAOMRJyNk+BxfOs5Sns5N+GI2N6FjxDaSgexiTzVvuLRIB PMbq+BigEFKZXoJd6qiePYLKWWPOovTybq5EeXg+JL0LP0iGTAwKG9ncehp+6OXo 9q4mIF/g1iaPPAAfJNcVoozoG9MJwV4O/gI3dAGUohYIIQBsTHqZXOeGq9e8m2tF oRtmSv3ip5KeA1dQQdMQZblf/Pdp75Q= -----END CERTIFICATE-----Generated at Sat Apr 5 21:19:09 2025 by rpki-client