$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/427c4b9e-23bf-3e14-99c0-c0de2aa46fd0.roa File: 427c4b9e-23bf-3e14-99c0-c0de2aa46fd0.roa (raw, json) Hash identifier: +pEpHkTxA+gvHfySJ4V20HedbeBvZciSZIGQWeVKldE= Subject key identifier: F8:42:0C:1B:61:1E:C7:7B:84:D0:4D:8D:21:59:A6:2D:F7:E0:34:E5 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285848ADC61DA87B452082D8BA7B40 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/427c4b9e-23bf-3e14-99c0-c0de2aa46fd0.roa Signing time: Mon 27 Jan 2025 02:00:39 +0000 ROA not before: Mon 27 Jan 2025 02:00:39 +0000 ROA not after: Sun 27 Apr 2025 01:00:39 +0000 asID: 3360 IP address blocks: 216.240.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ad:c6:1d:a8:7b:45:20:82:d8:ba:7b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jan 27 02:00:39 2025 GMT Not After : Apr 27 01:00:39 2025 GMT Subject: CN=5f19d3cc-8ba4-409a-8537-6459a7049cb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:15:d5:79:2d:5f:24:73:35:04:87:00:a0:51: 91:59:e8:f1:7c:74:5d:be:b8:5e:6b:6c:98:9f:af: bc:b6:d9:ff:2b:37:6d:47:17:b5:74:96:4d:66:f1: ff:7d:6b:45:dc:3b:9e:73:18:95:9a:e0:9d:5c:34: 73:02:d8:d4:ec:75:44:2a:2c:7a:a3:92:93:f5:b2: ba:03:14:cd:61:3d:0a:82:97:a0:bc:84:29:72:7c: e8:6e:fb:2d:7d:98:1f:bd:b0:ce:a3:c3:26:ae:5c: 2d:08:18:c4:b7:4c:84:65:c7:c6:b5:96:16:24:12: 5c:36:b7:d6:f2:7a:21:2b:91:c8:7c:11:09:3d:78: fa:97:c7:72:e3:c3:a0:c1:79:7b:47:f7:93:62:13: d6:d0:32:ee:aa:25:f7:60:e5:dc:7a:bb:e9:6d:5a: 30:98:b8:94:df:47:cb:a0:9f:04:91:e2:c8:a3:96: eb:c5:75:86:50:be:65:e7:26:69:d3:57:25:00:61: 85:0c:d4:c3:97:1b:6d:fc:0a:a5:da:05:37:b8:83: 56:ef:e5:84:61:cb:05:c3:c3:a7:92:14:43:8c:2d: 96:ca:06:45:24:06:48:12:b5:1b:a2:18:c0:2b:4f: 1b:33:be:b6:f6:de:cd:fa:63:53:7c:bf:4a:02:80: 07:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:42:0C:1B:61:1E:C7:7B:84:D0:4D:8D:21:59:A6:2D:F7:E0:34:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/427c4b9e-23bf-3e14-99c0-c0de2aa46fd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 216.240.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:b9:35:68:c5:65:34:c2:9d:e7:de:d3:7d:56:6e:25:6a:c3: c2:c7:fc:e0:e9:d1:5e:e0:c2:2a:70:0a:60:02:73:40:02:b0: 69:67:e9:fa:f4:d3:4d:36:db:af:17:19:e3:59:77:b8:f4:f8: 7e:ad:64:8f:ba:14:ea:83:95:14:c7:db:4a:6f:40:fa:fc:80: 28:c7:86:76:47:d1:eb:52:27:3d:ed:01:63:7a:58:bc:bb:31: 19:64:3d:8e:38:69:76:ea:af:43:87:7e:f8:18:f1:a0:16:d4: d5:6a:90:a3:60:d8:75:a8:9e:e2:34:de:f4:d2:39:27:e6:8e: 6f:eb:d2:d9:8e:e2:ff:6d:7f:a6:60:6b:92:c3:41:8a:4d:bf: 24:11:ab:c1:38:65:47:20:4c:ee:b4:64:71:a0:ef:b7:22:e5: d8:16:06:c5:f6:80:b7:36:fa:2f:33:eb:74:0e:b0:a7:42:73: 97:01:15:e9:59:9c:9e:e5:6e:f7:ff:a5:b1:2e:db:1f:fc:90: 9e:3b:40:07:33:92:d8:c4:5b:ed:3e:f1:b7:77:20:1d:d0:bc: 5e:60:36:22:8f:cf:ea:f8:fc:50:a9:d7:f0:87:d4:2f:29:ec: 9b:4b:7c:e3:de:ea:6a:c9:85:95:08:91:c4:89:d1:ef:23:79: f0:84:67:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEitxh2oe0Uggti6e0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDEyNzAyMDAzOVoXDTI1MDQyNzAxMDAzOVowLzEtMCsGA1UEAxMk NWYxOWQzY2MtOGJhNC00MDlhLTg1MzctNjQ1OWE3MDQ5Y2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRXVeS1fJHM1BIcAoFGRWejxfHRdvrhea2yY n6+8ttn/KzdtRxe1dJZNZvH/fWtF3DuecxiVmuCdXDRzAtjU7HVEKix6o5KT9bK6 AxTNYT0KgpegvIQpcnzobvstfZgfvbDOo8MmrlwtCBjEt0yEZcfGtZYWJBJcNrfW 8nohK5HIfBEJPXj6l8dy48OgwXl7R/eTYhPW0DLuqiX3YOXcervpbVowmLiU30fL oJ8EkeLIo5brxXWGUL5l5yZp01clAGGFDNTDlxtt/Aql2gU3uINW7+WEYcsFw8On khRDjC2WygZFJAZIErUbohjAK08bM7629t7N+mNTfL9KAoAH9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPhCDBthHsd7hNBNjSFZpi334DTlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNDI3YzRiOWUtMjNiZi0z ZTE0LTk5YzAtYzBkZTJhYTQ2ZmQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PDNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFC5NWjFZTTCnefe031WbiVqw8LH/ODp0V7gwipwCmACc0ACsGln6fr0 0002268XGeNZd7j0+H6tZI+6FOqDlRTH20pvQPr8gCjHhnZH0etSJz3tAWN6WLy7 MRlkPY44aXbqr0OHfvgY8aAW1NVqkKNg2HWonuI03vTSOSfmjm/r0tmO4v9tf6Zg a5LDQYpNvyQRq8E4ZUcgTO60ZHGg77ci5dgWBsX2gLc2+i8z63QOsKdCc5cBFelZ nJ7lbvf/pbEu2x/8kJ47QAczktjEW+0+8bd3IB3QvF5gNiKPz+r4/FCp1/CH1C8p 7JtLfOPe6mrJhZUIkcSJ0e8jefCEZ5c= -----END CERTIFICATE-----Generated at Sun Feb 16 15:08:46 2025 by rpki-client