$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2f588f6e-9714-38a1-b533-e769f33ac2d4.roa File: 2f588f6e-9714-38a1-b533-e769f33ac2d4.roa (raw, json) Hash identifier: 29uzj02P6Kl5u7W0APpfPtuFx4dk/weCkjrVMEaC33g= Subject key identifier: 4E:74:32:66:77:4F:5A:A9:B1:56:6D:C2:1C:75:FC:82:66:6B:C8:E2 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584832F022FFDC683B16BED99780 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2f588f6e-9714-38a1-b533-e769f33ac2d4.roa Signing time: Sat 14 Dec 2024 02:00:39 +0000 ROA not before: Sat 14 Dec 2024 02:00:39 +0000 ROA not after: Fri 14 Mar 2025 01:00:39 +0000 asID: 202 IP address blocks: 192.57.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:32:f0:22:ff:dc:68:3b:16:be:d9:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Dec 14 02:00:39 2024 GMT Not After : Mar 14 01:00:39 2025 GMT Subject: CN=79eade2d-2b3c-4a97-bbbf-a1d42854c50b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f0:7b:b8:84:f3:a9:6d:ff:f5:6d:19:1d:3e: ef:73:7d:37:91:08:ce:5f:29:15:ff:cc:d7:f8:5e: 77:d6:b5:a8:b0:1f:7f:7e:67:02:57:c7:8b:c4:58: 17:0c:58:b5:1e:ca:d1:6e:73:56:ed:90:4b:a5:9f: cd:bd:bd:a3:6f:14:2e:a4:0c:e0:33:4a:93:58:03: 46:78:8f:bc:4d:2b:e2:f8:c5:f6:c3:1e:bb:ba:48: 54:39:ae:5b:8a:1a:1a:80:b7:af:d1:6f:1a:0f:83: 66:38:07:c0:7d:14:1d:04:23:4d:b3:95:a7:1e:19: 16:7d:b1:7b:15:cc:2c:71:86:40:68:7a:79:d7:58: 15:9a:b9:d1:06:40:c6:8b:5f:4f:0f:15:68:43:6b: 1a:10:39:cb:54:d9:b3:03:58:14:73:d1:ad:a3:39: f5:4e:5f:60:74:87:17:e3:1e:3d:e1:aa:56:67:ca: db:6c:31:4a:a1:50:44:f9:59:a0:d6:22:51:80:02: 6b:88:8a:de:57:d1:d8:a2:6f:04:e1:13:77:dc:c6: 1a:73:65:31:c1:16:02:76:44:f7:ab:b3:af:8b:aa: 5d:5e:30:d7:72:85:2d:02:27:ac:fc:b8:d3:89:ec: 56:6c:cb:3f:8a:8c:90:54:9d:d6:ac:e5:a4:ec:fc: 7c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:74:32:66:77:4F:5A:A9:B1:56:6D:C2:1C:75:FC:82:66:6B:C8:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2f588f6e-9714-38a1-b533-e769f33ac2d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.57.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:13:d6:2e:23:a1:bc:71:f7:4c:c6:ba:f0:58:ce:ba:f6:27: fb:43:f3:18:8f:b5:ff:2e:be:c4:13:ab:8b:28:e5:4d:44:4e: 38:32:c9:1f:50:a5:e5:3e:6f:dd:f4:aa:09:7c:67:51:e3:ae: ca:e2:bf:7e:fe:a0:fd:d8:c5:ff:09:b2:af:cc:3c:42:ea:dd: fc:e5:43:87:11:b5:79:51:dc:23:38:ce:29:80:d6:09:23:43: f5:e9:7f:d3:5a:db:f9:13:45:29:14:2b:eb:e8:c6:84:7a:67: 2b:ab:07:bc:af:27:be:2f:0a:1a:45:4d:cb:ea:08:59:3b:53: 83:dc:a8:67:bd:25:d6:0e:bd:33:eb:0c:08:90:40:95:99:01: 76:9d:a5:8f:33:b0:d3:85:94:d3:db:83:19:c7:f1:a4:39:d7: 15:f1:e3:db:46:04:d8:29:50:69:d5:7c:f4:4d:c4:9c:fb:9a: 65:fc:98:f6:0e:8d:2c:f7:78:a8:68:34:2a:28:23:c2:47:42: 99:3a:32:75:0c:a3:d7:3f:86:ce:f6:c1:f4:a1:7f:26:29:b5: 24:0e:26:88:07:b0:b3:9d:12:a4:5e:72:4d:eb:9c:89:1c:c3: b8:d3:15:05:c4:c2:9a:c1:62:ca:74:c7:86:23:0c:3a:9b:9e: 7a:dd:94:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgy8CL/3Gg7Fr7Zl4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI0MTIxNDAyMDAzOVoXDTI1MDMxNDAxMDAzOVowLzEtMCsGA1UEAxMk NzllYWRlMmQtMmIzYy00YTk3LWJiYmYtYTFkNDI4NTRjNTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/B7uITzqW3/9W0ZHT7vc303kQjOXykV/8zX +F531rWosB9/fmcCV8eLxFgXDFi1HsrRbnNW7ZBLpZ/Nvb2jbxQupAzgM0qTWANG eI+8TSvi+MX2wx67ukhUOa5bihoagLev0W8aD4NmOAfAfRQdBCNNs5WnHhkWfbF7 FcwscYZAaHp511gVmrnRBkDGi19PDxVoQ2saEDnLVNmzA1gUc9Gtozn1Tl9gdIcX 4x494apWZ8rbbDFKoVBE+Vmg1iJRgAJriIreV9HYom8E4RN33MYac2UxwRYCdkT3 q7Ovi6pdXjDXcoUtAies/LjTiexWbMs/ioyQVJ3WrOWk7Px8dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE50MmZ3T1qpsVZtwhx1/IJma8jiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMmY1ODhmNmUtOTcxNC0z OGExLWI1MzMtZTc2OWYzM2FjMmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDntMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHAT1i4jobxx90zGuvBYzrr2J/tD8xiPtf8uvsQTq4so5U1ETjgyyR9Q peU+b930qgl8Z1Hjrsriv37+oP3Yxf8Jsq/MPELq3fzlQ4cRtXlR3CM4zimA1gkj Q/Xpf9Na2/kTRSkUK+voxoR6ZyurB7yvJ74vChpFTcvqCFk7U4PcqGe9JdYOvTPr DAiQQJWZAXadpY8zsNOFlNPbgxnH8aQ51xXx49tGBNgpUGnVfPRNxJz7mmX8mPYO jSz3eKhoNCooI8JHQpk6MnUMo9c/hs72wfShfyYptSQOJogHsLOdEqReck3rnIkc w7jTFQXEwprBYsp0x4YjDDqbnnrdlL8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:54:51 2025 by rpki-client