$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8aafb081-7770-39d7-a60c-756a4c8962aa.roa File: 8aafb081-7770-39d7-a60c-756a4c8962aa.roa (raw, json) Hash identifier: xh2ZDvlYP5MIIva3DcZlo+TvjP3Z4QX+P8A+U2LhKqU= Subject key identifier: E9:CE:02:D4:BB:BF:5A:BD:9B:97:04:92:E3:ED:C2:15:00:02:DB:5D Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285848A9962B5F110ED4A252CF8D80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8aafb081-7770-39d7-a60c-756a4c8962aa.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 203 IP address blocks: 192.57.40.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:2b:5f:11:0e:d4:a2:52:cf:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=9ce479db-c28d-44f2-8e94-047cd7bcd79b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:50:d9:03:64:c2:cb:25:d4:9b:49:86:8d:f3: 7e:e6:70:8f:c5:71:45:cb:a2:a9:e6:bd:5e:80:05: a3:d7:be:ba:a2:44:77:a0:ca:d7:57:d8:ad:6c:b3: cc:16:2a:47:54:6c:b4:a1:39:a7:a1:6e:9b:ea:2f: 41:88:bc:65:51:14:89:28:44:2c:d5:f4:6d:36:99: e3:97:59:75:f9:f1:9f:44:63:2d:c6:09:dd:3f:30: 42:87:91:a8:59:75:80:5a:c6:5b:cb:db:c8:84:97: 0d:d3:9c:a3:27:b7:bc:ca:21:8b:20:c3:da:d2:e4: b5:13:99:ef:e7:81:de:f4:80:ee:56:5f:9f:bf:06: ea:ce:c0:46:27:66:90:90:03:d7:34:5e:30:ca:0b: 20:e4:2b:f1:83:0f:fe:0d:39:18:97:4d:0d:05:b4: 78:02:2e:fc:47:8f:7e:4e:3b:60:93:82:da:ff:b3: 68:c5:b7:59:97:ed:a4:5e:ab:a5:6f:ec:31:95:91: 0c:48:19:e6:af:36:10:8e:d7:4d:61:f3:73:bf:12: ee:93:24:d1:70:c1:4f:85:74:4b:c4:dd:fa:27:7c: d7:c5:1b:4f:9e:c7:3d:4a:2e:97:4c:70:ee:b4:9b: 77:4e:3b:6f:e2:22:89:52:75:c9:ad:44:2a:62:6f: ee:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:CE:02:D4:BB:BF:5A:BD:9B:97:04:92:E3:ED:C2:15:00:02:DB:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8aafb081-7770-39d7-a60c-756a4c8962aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.57.40.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:dc:c4:3a:d0:09:3f:32:47:90:87:6b:98:6e:9d:fa:ae:4c: 0a:f5:2b:87:c9:f4:34:08:99:a3:0a:d1:9f:58:99:fb:a9:0b: b9:f2:7f:de:b2:68:92:f1:b7:fd:72:ee:31:66:bb:b6:7f:44: d8:58:65:6c:78:a1:f8:5d:60:49:30:d7:43:e0:c0:ed:d4:be: 8e:ef:1a:f8:0c:0a:3d:b6:a6:69:5f:29:7a:a1:e5:c6:0a:7e: 8b:c5:47:83:9a:d9:c8:e8:ba:e8:d3:a1:44:d1:30:c2:f3:e9: 35:b1:c6:1d:98:6c:16:ad:2d:90:51:b6:b6:c9:0f:35:b4:e3: a4:3a:65:7e:52:16:ef:0e:27:0d:f8:c1:17:54:d1:4e:d8:af: 4f:a1:1a:4b:40:ac:a4:f9:82:29:99:03:4b:d8:9f:e9:a3:09: ad:6e:b8:ab:ac:67:ff:d0:8b:56:6f:8c:cc:67:fe:57:64:9d: 85:16:45:b1:0f:9e:1e:47:55:12:a2:5b:1f:49:2b:a6:c8:9b: 11:ae:d5:01:56:ef:fa:84:95:3b:7f:22:2f:81:da:a1:79:f4: 86:f9:8a:29:87:c0:11:fa:79:d1:2b:3b:1d:e4:3a:b6:16:f1: b5:59:90:fa:6c:35:25:44:3d:4c:ab:eb:f8:de:51:cc:79:1e: 5e:c7:99:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiplitfEQ7UolLPjYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk OWNlNDc5ZGItYzI4ZC00NGYyLThlOTQtMDQ3Y2Q3YmNkNzliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFDZA2TCyyXUm0mGjfN+5nCPxXFFy6Kp5r1e gAWj1766okR3oMrXV9itbLPMFipHVGy0oTmnoW6b6i9BiLxlURSJKEQs1fRtNpnj l1l1+fGfRGMtxgndPzBCh5GoWXWAWsZby9vIhJcN05yjJ7e8yiGLIMPa0uS1E5nv 54He9IDuVl+fvwbqzsBGJ2aQkAPXNF4wygsg5Cvxgw/+DTkYl00NBbR4Ai78R49+ Tjtgk4La/7NoxbdZl+2kXqulb+wxlZEMSBnmrzYQjtdNYfNzvxLukyTRcMFPhXRL xN36J3zXxRtPnsc9Si6XTHDutJt3Tjtv4iKJUnXJrUQqYm/uSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOnOAtS7v1q9m5cEkuPtwhUAAttdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvOGFhZmIwODEtNzc3MC0z OWQ3LWE2MGMtNzU2YTRjODk2MmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwDkoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABfcxDrQCT8yR5CHa5hunfquTAr1K4fJ9DQImaMK0Z9YmfupC7nyf96y aJLxt/1y7jFmu7Z/RNhYZWx4ofhdYEkw10PgwO3Uvo7vGvgMCj22pmlfKXqh5cYK fovFR4Oa2cjouujToUTRMMLz6TWxxh2YbBatLZBRtrbJDzW046Q6ZX5SFu8OJw34 wRdU0U7Yr0+hGktArKT5gimZA0vYn+mjCa1uuKusZ//Qi1ZvjMxn/ldknYUWRbEP nh5HVRKiWx9JK6bImxGu1QFW7/qElTt/Ii+B2qF59Ib5iimHwBH6edErOx3kOrYW 8bVZkPpsNSVEPUyr6/jeUcx5Hl7Hma0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:51:12 2025 by rpki-client