$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/446c798f-2400-3b43-8ca1-35a76530d216.roa File: 446c798f-2400-3b43-8ca1-35a76530d216.roa (raw, json) Hash identifier: ktsoF61hK6lKzlKELrtCRo5LmBrgchlDHxd7i5dkBpE= Subject key identifier: C8:17:08:62:A4:F6:89:37:36:59:5F:CE:78:1E:C8:8C:DB:75:8C:22 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285848BBBB6CEC3A368CE6C4759D80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/446c798f-2400-3b43-8ca1-35a76530d216.roa Signing time: Sat 01 Feb 2025 02:00:39 +0000 ROA not before: Sat 01 Feb 2025 02:00:39 +0000 ROA not after: Fri 02 May 2025 01:00:39 +0000 asID: 202 IP address blocks: 192.57.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bb:bb:6c:ec:3a:36:8c:e6:c4:75:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Feb 1 02:00:39 2025 GMT Not After : May 2 01:00:39 2025 GMT Subject: CN=bdce9056-1f51-4d72-82da-f65777408c42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d8:71:ff:44:21:2f:85:c1:50:b6:69:e3:06: 03:ee:14:2a:7e:67:0a:78:32:7b:5b:79:00:a1:e3: 08:71:f7:31:f5:1c:6e:e5:cb:c7:4b:6d:9f:16:1b: e6:33:15:85:59:54:ec:3b:8e:34:ad:77:33:da:ca: 4a:00:a4:ad:e2:27:58:f6:32:9b:cd:a4:3b:0d:58: f2:ec:14:04:90:b3:00:89:c7:e6:8a:8d:31:69:07: 7b:24:f8:74:fd:61:cd:bf:a9:b8:fc:92:84:63:7b: 7b:bb:20:9e:26:38:92:93:88:7e:2a:86:65:9b:f2: 78:b4:9d:4b:2a:ac:af:b4:cb:24:82:6e:0c:e4:f5: 9a:79:65:de:3d:8f:bb:b8:e8:b3:0a:db:90:f2:ad: 7d:31:e0:b5:ec:3b:77:74:87:5c:83:33:c9:f9:9f: 65:72:c7:b3:b7:de:11:2c:5f:01:b0:87:99:d5:e6: a7:ee:42:da:20:f6:9e:f6:d7:29:6c:2d:d1:df:50: 22:fe:60:8c:83:1a:8c:ca:54:8b:33:cc:63:ed:b6: 6d:0c:27:81:e9:f1:2c:15:11:3e:a4:bf:0f:dc:6b: 90:0e:bd:fd:9b:78:33:f6:a7:ad:4e:6f:86:58:06: f8:26:b8:cf:aa:22:fe:7e:13:86:b7:21:ed:80:39: f2:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:17:08:62:A4:F6:89:37:36:59:5F:CE:78:1E:C8:8C:DB:75:8C:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/446c798f-2400-3b43-8ca1-35a76530d216.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.57.115.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:4e:42:88:42:ac:eb:8f:41:d0:e3:d1:0c:64:3e:1e:f1:ec: 3f:9b:06:d9:a4:41:70:51:43:8b:a5:e6:1c:bd:29:b7:22:04: 4c:4d:79:90:fb:d7:dd:4e:bf:dc:b3:c9:f6:8d:c7:66:2d:09: 53:1e:dc:bd:94:b8:aa:8e:bd:6a:b1:6c:8a:24:22:10:8e:db: 46:b0:5b:8f:3f:d8:15:59:a9:7e:54:24:28:d5:9b:b6:f8:0f: a4:32:fc:e8:7e:21:a5:6f:70:51:c5:16:8e:6f:f7:7b:68:1c: a7:f7:79:5c:ee:42:4c:ad:a7:95:d5:7d:d5:d3:3a:b1:43:ff: 56:e4:70:be:ad:8d:b2:62:cc:67:a2:f7:c5:a7:e1:1a:1c:42: f5:10:8a:63:30:c3:66:5e:d5:fd:b7:21:81:f2:97:b2:3c:d8: 6c:ea:5c:f1:32:c9:71:ac:cc:d3:2a:03:18:fa:64:b8:0d:30: b0:34:4a:14:48:55:9e:6b:ae:ea:41:96:8c:10:a0:5d:ca:e0: 12:0b:5f:1d:62:fc:27:27:c3:01:4e:c6:5f:75:95:45:54:63: 10:76:37:ba:80:ed:f9:a2:c3:a0:b1:5a:7e:d6:8f:24:49:cd: e4:e3:1b:d8:06:27:e5:f4:fc:d7:8e:cb:82:92:fc:16:f3:85: 0c:5e:3c:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi7u2zsOjaM5sR1nYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDIwMTAyMDAzOVoXDTI1MDUwMjAxMDAzOVowLzEtMCsGA1UEAxMk YmRjZTkwNTYtMWY1MS00ZDcyLTgyZGEtZjY1Nzc3NDA4YzQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNhx/0QhL4XBULZp4wYD7hQqfmcKeDJ7W3kA oeMIcfcx9Rxu5cvHS22fFhvmMxWFWVTsO440rXcz2spKAKSt4idY9jKbzaQ7DVjy 7BQEkLMAicfmio0xaQd7JPh0/WHNv6m4/JKEY3t7uyCeJjiSk4h+KoZlm/J4tJ1L KqyvtMskgm4M5PWaeWXePY+7uOizCtuQ8q19MeC17Dt3dIdcgzPJ+Z9lcsezt94R LF8BsIeZ1ean7kLaIPae9tcpbC3R31Ai/mCMgxqMylSLM8xj7bZtDCeB6fEsFRE+ pL8P3GuQDr39m3gz9qetTm+GWAb4JrjPqiL+fhOGtyHtgDnyvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMgXCGKk9ok3NllfzngeyIzbdYwiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNDQ2Yzc5OGYtMjQwMC0z YjQzLThjYTEtMzVhNzY1MzBkMjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDlzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG5OQohCrOuPQdDj0QxkPh7x7D+bBtmkQXBRQ4ul5hy9KbciBExNeZD7 191Ov9yzyfaNx2YtCVMe3L2UuKqOvWqxbIokIhCO20awW48/2BVZqX5UJCjVm7b4 D6Qy/Oh+IaVvcFHFFo5v93toHKf3eVzuQkytp5XVfdXTOrFD/1bkcL6tjbJizGei 98Wn4RocQvUQimMww2Ze1f23IYHyl7I82GzqXPEyyXGszNMqAxj6ZLgNMLA0ShRI VZ5rrupBlowQoF3K4BILXx1i/CcnwwFOxl91lUVUYxB2N7qA7fmiw6CxWn7WjyRJ zeTjG9gGJ+X0/NeOy4KS/BbzhQxePK4= -----END CERTIFICATE-----Generated at Sun Feb 16 15:55:02 2025 by rpki-client