$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/643b9ccb-ad14-3b04-8e99-7af9f6b7d00c.roa File: 643b9ccb-ad14-3b04-8e99-7af9f6b7d00c.roa (raw, json) Hash identifier: SN9Dfs6jaQILY/U5ZjIVumBAJ9XPN8FXJgQiuDQh4uY= Subject key identifier: 9D:33:A2:D6:87:2D:1C:72:2B:DC:79:08:98:83:23:8C:97:C1:6A:E2 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584865303924F75EB15819A5B740 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/643b9ccb-ad14-3b04-8e99-7af9f6b7d00c.roa Signing time: Wed 01 Jan 2025 02:00:40 +0000 ROA not before: Wed 01 Jan 2025 02:00:40 +0000 ROA not after: Tue 01 Apr 2025 01:00:40 +0000 asID: 3360 IP address blocks: 15.176.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:65:30:39:24:f7:5e:b1:58:19:a5:b7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jan 1 02:00:40 2025 GMT Not After : Apr 1 01:00:40 2025 GMT Subject: CN=0ae1df1c-5ec4-4764-ad3d-82357907b502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d5:9d:37:86:a4:5f:5f:49:e1:4d:ed:0c:4f: 36:9b:c0:35:89:e8:4a:13:ca:05:9f:42:7e:7b:c8: 44:73:9f:b6:9a:6d:8e:8f:7a:12:77:12:8d:b7:66: 3e:59:70:a0:e6:3e:0c:3b:8c:11:84:57:a8:52:14: 7b:a0:5c:0b:4a:17:40:75:a6:ed:c9:60:6c:1b:2f: 09:f7:0a:2c:c6:dc:fb:8d:6f:22:c0:a5:36:50:98: 9c:80:1e:2b:85:55:76:d6:80:8b:24:b9:16:f1:ee: 44:90:b1:83:2e:a5:86:56:05:30:e3:26:a7:3d:2f: 56:5f:fb:65:78:a6:0e:16:2d:22:7a:39:8a:10:f1: cf:70:de:71:be:ed:b1:8d:18:1e:88:5d:d6:b1:5a: 16:1f:56:85:3c:ab:18:a9:52:7c:f6:53:33:5c:11: 44:d6:cd:85:2b:48:ed:35:ca:7c:cc:97:48:e8:89: 8e:b3:37:f0:d5:a8:d2:79:16:e8:20:e9:57:b0:d7: af:0d:8a:90:10:49:ab:9b:4d:60:a6:b8:32:81:54: 52:7b:1a:32:aa:52:5b:17:f0:d7:7d:cd:f5:6a:ae: c8:63:73:08:d6:f4:ef:5e:0d:f7:c2:3e:17:fb:d9: 49:46:2f:43:e6:7b:d0:6b:ac:b6:03:d1:85:c5:68: 35:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:33:A2:D6:87:2D:1C:72:2B:DC:79:08:98:83:23:8C:97:C1:6A:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/643b9ccb-ad14-3b04-8e99-7af9f6b7d00c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 15.176.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:60:4d:71:af:24:4b:11:a7:fa:6d:8e:57:7a:43:0e:64:20: 8b:b6:a6:a9:eb:da:33:42:66:fa:1c:09:57:cc:72:78:68:70: 40:a0:cc:01:25:b8:05:d0:46:60:02:a9:77:79:54:e4:f4:0f: d2:d3:62:ac:b5:b1:39:32:53:cc:96:30:ed:60:4e:60:27:30: b3:a6:16:8c:23:59:37:3e:d2:bb:36:4b:89:50:54:c5:8d:5e: d6:5f:8a:42:3c:0b:7e:65:85:7a:5b:2a:48:88:ff:0b:7d:f4: 42:1f:3d:2a:82:8b:eb:57:17:3f:e5:5c:f2:5a:a0:7c:70:7f: 2f:42:85:5b:70:74:bd:96:25:cd:1f:a0:82:12:ff:b0:4a:c2: 82:cb:f5:5a:c9:41:c0:08:96:f8:e7:68:82:e1:94:e7:79:e9: a1:a3:06:71:1b:ec:f6:30:53:e9:56:8c:a0:3b:1a:c5:21:34: 70:cd:53:1d:2b:15:e2:33:3c:23:9b:cd:b4:37:62:27:f0:06: 87:63:02:4f:be:a9:ce:45:bb:00:94:cc:77:0f:5b:26:f4:bb: 9a:3c:77:f2:c4:41:40:26:e2:0b:3d:78:c1:c6:e7:31:e9:f2: ae:93:26:53:ae:e2:51:85:84:ef:da:8b:48:87:ff:8a:45:73: db:4b:f3:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhlMDkk916xWBmlt0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDEwMTAyMDA0MFoXDTI1MDQwMTAxMDA0MFowLzEtMCsGA1UEAxMk MGFlMWRmMWMtNWVjNC00NzY0LWFkM2QtODIzNTc5MDdiNTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9WdN4akX19J4U3tDE82m8A1iehKE8oFn0J+ e8hEc5+2mm2Oj3oSdxKNt2Y+WXCg5j4MO4wRhFeoUhR7oFwLShdAdabtyWBsGy8J 9wosxtz7jW8iwKU2UJicgB4rhVV21oCLJLkW8e5EkLGDLqWGVgUw4yanPS9WX/tl eKYOFi0iejmKEPHPcN5xvu2xjRgeiF3WsVoWH1aFPKsYqVJ89lMzXBFE1s2FK0jt Ncp8zJdI6ImOszfw1ajSeRboIOlXsNevDYqQEEmrm01gprgygVRSexoyqlJbF/DX fc31aq7IY3MI1vTvXg33wj4X+9lJRi9D5nvQa6y2A9GFxWg1XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ0zotaHLRxyK9x5CJiDI4yXwWriMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNjQzYjljY2ItYWQxNC0z YjA0LThlOTktN2FmOWY2YjdkMDBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQED7BwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADhgTXGvJEsRp/ptjld6Qw5kIIu2pqnr2jNCZvocCVfMcnhocECgzAEl uAXQRmACqXd5VOT0D9LTYqy1sTkyU8yWMO1gTmAnMLOmFowjWTc+0rs2S4lQVMWN XtZfikI8C35lhXpbKkiI/wt99EIfPSqCi+tXFz/lXPJaoHxwfy9ChVtwdL2WJc0f oIIS/7BKwoLL9VrJQcAIlvjnaILhlOd56aGjBnEb7PYwU+lWjKA7GsUhNHDNUx0r FeIzPCObzbQ3YifwBodjAk++qc5FuwCUzHcPWyb0u5o8d/LEQUAm4gs9eMHG5zHp 8q6TJlOu4lGFhO/ai0iH/4pFc9tL85g= -----END CERTIFICATE-----Generated at Sun Feb 16 15:44:48 2025 by rpki-client