$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4331cee6-586b-3678-9efb-30032ba47a0c.roa File: 4331cee6-586b-3678-9efb-30032ba47a0c.roa (raw, json) Hash identifier: 7fSPPX1+0PvIMRxg/pN5LFh7g55tC7/2KfE8LD7rUaM= Subject key identifier: C3:23:8A:3B:39:FA:BF:0D:82:46:96:D4:C8:C9:AF:55:5B:38:ED:16 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285848BBBB6C687CC116E4A656ED00 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4331cee6-586b-3678-9efb-30032ba47a0c.roa Signing time: Sat 01 Feb 2025 02:00:39 +0000 ROA not before: Sat 01 Feb 2025 02:00:39 +0000 ROA not after: Fri 02 May 2025 01:00:39 +0000 asID: 3356 IP address blocks: 192.57.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bb:bb:6c:68:7c:c1:16:e4:a6:56:ed:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Feb 1 02:00:39 2025 GMT Not After : May 2 01:00:39 2025 GMT Subject: CN=efbf0ae8-212e-4d4c-821f-c6afd298d1e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:0f:47:95:67:1f:43:77:ce:5e:28:b9:90:55: 1d:c2:a1:80:46:bd:23:6b:39:25:39:0f:15:e9:93: 79:8e:7d:24:9f:ac:c6:96:7a:a7:7a:fe:fa:fd:81: c5:3f:72:9b:77:c9:ee:26:91:60:21:36:ea:f1:31: 9b:8d:ef:70:bd:43:c7:1f:81:26:35:cb:fc:e7:52: 24:ad:6e:cb:09:a9:f3:84:7c:f9:67:af:4c:1d:74: b3:89:c2:bb:ae:50:ce:44:8f:70:18:b2:b1:8b:f8: 58:3c:04:96:96:41:28:cd:23:5a:c1:23:e1:89:95: b1:7d:3d:69:6f:40:b7:90:59:20:ba:c0:4d:27:64: 8d:ec:4c:c6:1f:74:8a:fd:f2:9d:83:9e:fb:5a:ee: 00:6d:c8:b9:bf:52:b6:2c:7c:42:da:6a:c0:c8:d6: 70:47:34:1a:47:cb:28:d7:18:10:1a:10:2a:49:0f: e1:c2:37:58:f8:be:26:43:3d:60:47:31:8e:f8:d6: f0:d9:ba:a1:9c:a8:3d:c2:1a:b9:58:43:e8:7b:e4: 18:e3:82:e6:cb:a4:5c:eb:66:14:3d:11:06:8e:40: bb:56:75:42:4c:5c:eb:a0:b0:87:8e:fc:9b:cc:a9: 61:04:a5:5a:5c:2d:ce:0c:44:db:5c:07:43:c2:30: ad:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:23:8A:3B:39:FA:BF:0D:82:46:96:D4:C8:C9:AF:55:5B:38:ED:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4331cee6-586b-3678-9efb-30032ba47a0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.57.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:4e:ee:9f:80:58:84:9e:72:56:e7:2a:ea:d7:01:f1:88:bd: fe:81:62:1f:0f:38:6a:b3:3a:43:34:3f:53:5b:66:7b:e1:b9: 3c:42:44:ca:ab:0e:8c:79:5e:f4:58:29:f5:13:d6:7a:e6:3d: 78:57:4c:68:48:52:5d:4d:e4:5d:91:4e:4e:d8:81:d4:8a:cb: cb:9a:86:96:54:4e:d0:08:43:a9:ad:cb:94:8f:47:55:d5:25: 92:06:7f:2f:69:d2:83:b7:96:99:95:36:d2:dd:05:ef:b5:76: b3:ea:58:c3:e6:be:fc:ad:55:fc:9c:27:ea:be:24:84:ce:f6: d1:0f:90:05:68:07:97:ba:53:f4:19:d7:71:90:ab:df:15:63: 7a:cf:df:4c:db:c7:4f:99:01:9e:9d:42:0f:95:b3:0d:39:55: 71:1b:42:8f:54:21:73:db:0c:f3:0f:b6:6d:17:1b:ee:4c:8f: 42:0a:32:f4:8a:6e:d3:2a:0e:c5:37:f7:33:65:72:7d:89:aa: 2e:c9:1e:34:7e:32:c9:09:44:8e:85:6c:37:55:dd:97:c1:e7: db:66:68:80:67:ac:a5:0e:ac:6f:a8:06:8a:81:c5:e2:f8:c7: 76:4d:77:d6:e2:70:dd:7d:7a:bb:21:21:9d:93:19:b2:3a:83: f3:a7:13:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi7u2xofMEW5KZW7QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDIwMTAyMDAzOVoXDTI1MDUwMjAxMDAzOVowLzEtMCsGA1UEAxMk ZWZiZjBhZTgtMjEyZS00ZDRjLTgyMWYtYzZhZmQyOThkMWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQ9HlWcfQ3fOXii5kFUdwqGARr0jazklOQ8V 6ZN5jn0kn6zGlnqnev76/YHFP3Kbd8nuJpFgITbq8TGbje9wvUPHH4EmNcv851Ik rW7LCanzhHz5Z69MHXSzicK7rlDORI9wGLKxi/hYPASWlkEozSNawSPhiZWxfT1p b0C3kFkgusBNJ2SN7EzGH3SK/fKdg577Wu4Abci5v1K2LHxC2mrAyNZwRzQaR8so 1xgQGhAqSQ/hwjdY+L4mQz1gRzGO+Nbw2bqhnKg9whq5WEPoe+QY44Lmy6Rc62YU PREGjkC7VnVCTFzroLCHjvybzKlhBKVaXC3ODETbXAdDwjCtSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMMjijs5+r8NgkaW1MjJr1VbOO0WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNDMzMWNlZTYtNTg2Yi0z Njc4LTllZmItMzAwMzJiYTQ3YTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDlyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA5O7p+AWISeclbnKurXAfGIvf6BYh8POGqzOkM0P1NbZnvhuTxCRMqr Dox5XvRYKfUT1nrmPXhXTGhIUl1N5F2RTk7YgdSKy8uahpZUTtAIQ6mty5SPR1XV JZIGfy9p0oO3lpmVNtLdBe+1drPqWMPmvvytVfycJ+q+JITO9tEPkAVoB5e6U/QZ 13GQq98VY3rP30zbx0+ZAZ6dQg+Vsw05VXEbQo9UIXPbDPMPtm0XG+5Mj0IKMvSK btMqDsU39zNlcn2Jqi7JHjR+MskJRI6FbDdV3ZfB59tmaIBnrKUOrG+oBoqBxeL4 x3ZNd9bicN19ershIZ2TGbI6g/OnE+c= -----END CERTIFICATE-----Generated at Sun Feb 16 15:30:22 2025 by rpki-client