$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1b50e17d-4e99-327d-97bb-dd9ce229a411.roa File: 1b50e17d-4e99-327d-97bb-dd9ce229a411.roa (raw, json) Hash identifier: mYYkN1XD9vR7Ynjit+gcqPDc8YSSaO47VoOVcPPHVJg= Subject key identifier: 5D:7B:89:8B:A3:75:E4:51:11:74:C2:D3:64:C8:6D:86:04:72:08:EF Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285848BBBB6E258DAF18BF4E790FC0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1b50e17d-4e99-327d-97bb-dd9ce229a411.roa Signing time: Sat 01 Feb 2025 02:00:39 +0000 ROA not before: Sat 01 Feb 2025 02:00:39 +0000 ROA not after: Fri 02 May 2025 01:00:39 +0000 asID: 202 IP address blocks: 192.57.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bb:bb:6e:25:8d:af:18:bf:4e:79:0f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Feb 1 02:00:39 2025 GMT Not After : May 2 01:00:39 2025 GMT Subject: CN=86fb5a30-4454-4437-8fa8-40edf628d0fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:4d:11:b5:52:d7:a0:bf:e7:4f:e4:54:c4:e9: d5:3e:1d:be:39:c5:72:86:91:bf:6f:c9:e7:f5:5f: 87:66:cf:39:9e:c6:00:a3:49:76:9f:63:9e:14:7d: bb:32:12:2e:19:c5:33:fb:e7:a8:41:28:f9:80:d5: f1:95:3c:e4:b0:24:7a:69:b7:4c:36:0b:dc:e1:79: fe:23:75:a3:f7:ac:e7:a3:01:bf:0b:e3:6d:aa:2d: ef:a5:7b:9f:ec:6b:31:4d:54:1d:9c:12:a0:49:38: 93:4a:70:2a:1b:a0:82:ff:90:64:5d:bd:71:33:80: f4:59:40:20:a8:fc:72:96:ac:ca:c5:d9:aa:c4:39: c4:30:08:58:7f:ea:94:de:4f:fd:f9:71:22:22:b9: 47:50:55:2a:15:7f:ba:0e:2b:04:a3:0c:05:09:9c: e4:2b:d2:40:df:08:c9:e7:8e:11:43:c4:bb:3e:ae: 4a:bf:35:24:16:2a:48:60:31:ea:1f:d0:7c:0e:88: d3:41:bc:da:2c:88:44:61:26:0b:f1:bb:16:21:c2: 49:77:73:18:cf:d1:4b:c8:d3:06:e0:f5:6a:dd:a1: ed:b9:f6:35:3d:5a:51:01:bf:47:ca:4b:dc:4e:72: b4:b7:b1:b3:c7:4f:de:c2:4f:c4:9f:84:c5:77:74: 81:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:7B:89:8B:A3:75:E4:51:11:74:C2:D3:64:C8:6D:86:04:72:08:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1b50e17d-4e99-327d-97bb-dd9ce229a411.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.57.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:bd:5e:10:8a:e7:d3:f2:f8:a1:f1:e8:c0:e6:c8:24:5d:b9: 1b:32:c8:8d:17:07:59:b3:95:51:69:19:ce:b5:86:93:80:9d: 3a:58:4d:de:33:4b:d5:53:92:80:24:7b:c7:ed:bc:11:26:ab: 0e:ae:23:7d:3f:c5:0c:14:65:05:8c:43:a0:37:61:20:04:60: 1c:4a:d8:5a:76:89:28:36:5a:9d:80:c3:b8:d3:fa:a0:c1:11: dd:9c:ba:a8:37:7b:58:0e:41:1e:cf:48:46:33:d9:02:fd:29: a2:67:82:80:27:9f:50:5e:5d:67:0b:f3:ed:e7:76:1e:88:b2: 62:9a:db:88:72:c2:2c:c1:f4:cf:14:65:54:61:43:be:4d:23: 12:f3:24:bf:0a:9b:2a:ae:42:0c:33:e9:66:d8:89:f6:35:73: 08:5d:64:f9:3a:ab:d6:7e:e6:70:35:96:3a:5c:aa:bf:db:f2: fc:ac:11:7d:26:06:01:85:23:d2:eb:35:9c:9b:56:d4:f3:cb: 6e:da:c6:5b:35:89:7e:77:b6:83:38:71:cd:33:28:75:b9:63: 89:f6:b2:00:2f:84:74:64:58:7a:69:b2:ed:57:34:b6:2f:b9: 8e:b7:b1:a7:45:a8:ac:d1:60:58:08:40:15:91:9c:73:83:e4: 56:0f:60:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi7u24lja8Yv055D8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDIwMTAyMDAzOVoXDTI1MDUwMjAxMDAzOVowLzEtMCsGA1UEAxMk ODZmYjVhMzAtNDQ1NC00NDM3LThmYTgtNDBlZGY2MjhkMGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl00RtVLXoL/nT+RUxOnVPh2+OcVyhpG/b8nn 9V+HZs85nsYAo0l2n2OeFH27MhIuGcUz++eoQSj5gNXxlTzksCR6abdMNgvc4Xn+ I3Wj96znowG/C+Ntqi3vpXuf7GsxTVQdnBKgSTiTSnAqG6CC/5BkXb1xM4D0WUAg qPxylqzKxdmqxDnEMAhYf+qU3k/9+XEiIrlHUFUqFX+6DisEowwFCZzkK9JA3wjJ 544RQ8S7Pq5KvzUkFipIYDHqH9B8DojTQbzaLIhEYSYL8bsWIcJJd3MYz9FLyNMG 4PVq3aHtufY1PVpRAb9HykvcTnK0t7Gzx0/ewk/En4TFd3SBhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF17iYujdeRREXTC02TIbYYEcgjvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMWI1MGUxN2QtNGU5OS0z MjdkLTk3YmItZGQ5Y2UyMjlhNDExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDlxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFq9XhCK59Py+KHx6MDmyCRduRsyyI0XB1mzlVFpGc61hpOAnTpYTd4z S9VTkoAke8ftvBEmqw6uI30/xQwUZQWMQ6A3YSAEYBxK2Fp2iSg2Wp2Aw7jT+qDB Ed2cuqg3e1gOQR7PSEYz2QL9KaJngoAnn1BeXWcL8+3ndh6IsmKa24hywizB9M8U ZVRhQ75NIxLzJL8KmyquQgwz6WbYifY1cwhdZPk6q9Z+5nA1ljpcqr/b8vysEX0m BgGFI9LrNZybVtTzy27axls1iX53toM4cc0zKHW5Y4n2sgAvhHRkWHppsu1XNLYv uY63sadFqKzRYFgIQBWRnHOD5FYPYAY= -----END CERTIFICATE-----Generated at Sun Feb 16 15:43:12 2025 by rpki-client