$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8c0f078c-4368-32ae-9fee-746a96a146ba.roa File: 8c0f078c-4368-32ae-9fee-746a96a146ba.roa (raw, json) Hash identifier: AZyfdXuh+y3/Ek8YWbBLSsyjPUe1S9aZilgZ0HvN2xA= Subject key identifier: D5:F7:38:49:AA:1A:27:CA:2A:23:DB:3D:8D:07:B4:95:7C:FF:D4:3A Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285848BBBB6D2FFD79684122AEA040 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8c0f078c-4368-32ae-9fee-746a96a146ba.roa Signing time: Sat 01 Feb 2025 02:00:39 +0000 ROA not before: Sat 01 Feb 2025 02:00:39 +0000 ROA not after: Fri 02 May 2025 01:00:39 +0000 asID: 3360 IP address blocks: 192.57.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bb:bb:6d:2f:fd:79:68:41:22:ae:a0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Feb 1 02:00:39 2025 GMT Not After : May 2 01:00:39 2025 GMT Subject: CN=3389893b-52eb-4f9c-b0e6-dee9c57e21f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:58:2a:4e:23:8c:6e:4e:b2:0b:d5:60:42:6b: e9:74:5b:f9:2b:ba:84:ce:8f:5c:99:e1:d9:f3:72: ab:47:c3:70:b7:58:85:8d:d0:d8:91:07:41:bb:63: 2b:d1:c8:cb:d9:7e:4a:8d:58:a5:d0:64:e9:89:19: 3d:d7:d6:0e:5a:7a:87:2e:54:a6:3e:35:a7:d3:e5: 02:13:b2:fe:16:81:8e:ac:ff:85:02:71:17:e5:5a: c0:98:67:0e:a4:38:0c:f3:cb:d3:48:98:d9:2b:79: 0f:52:8b:9c:0c:0d:c2:81:55:a5:db:02:a3:27:83: 42:11:e1:9d:86:8d:23:92:37:54:c1:8b:fc:e9:bf: af:62:ee:b3:06:67:e5:0f:1d:c4:a0:86:12:d6:b2: 33:c1:dd:e0:7f:55:ba:b8:34:05:07:bb:f7:73:87: 09:1a:55:77:dc:c4:e3:de:42:f5:89:09:6d:93:6c: 08:5d:39:f6:9d:36:6e:c4:55:18:a1:b5:33:cc:26: 6c:0d:bf:70:15:dc:8d:ad:2e:75:a5:46:80:73:c8: 9c:dc:50:11:1a:5b:69:d9:0c:42:ed:e4:f4:40:e9: 68:b1:29:64:8d:e9:b6:60:d6:09:c2:f7:4a:fd:e0: 8f:bb:d9:3d:e7:9d:eb:86:2d:57:26:95:bc:85:a3: 51:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:F7:38:49:AA:1A:27:CA:2A:23:DB:3D:8D:07:B4:95:7C:FF:D4:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8c0f078c-4368-32ae-9fee-746a96a146ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.57.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:30:0c:e4:7d:fa:a8:d0:16:90:9d:6a:30:1d:47:74:de:96: 73:61:9f:48:cb:2d:b6:01:fe:0e:40:c5:df:f3:61:92:7e:fa: 46:63:f0:da:6d:35:ac:d9:89:ad:44:d3:ad:3c:f2:be:e1:2a: e2:92:cf:15:ad:4e:35:87:e5:c7:28:63:4f:bf:bd:3b:53:56: 82:3a:4b:91:4f:78:9b:6d:88:28:fa:d4:dc:81:66:86:bd:5a: 42:a2:b0:ac:78:b1:43:c1:de:64:a3:f7:02:6f:f9:00:92:52: 9a:a8:aa:77:90:78:ec:c5:e1:1e:e5:8b:18:87:2e:70:a6:13: e5:58:69:d5:8f:2f:08:ed:9c:de:0c:c3:62:d1:e7:46:57:62: 12:cd:9d:bc:96:81:eb:3f:1d:8c:88:43:96:cf:c8:38:63:66: f6:fa:5e:69:bc:54:9e:76:34:9d:c3:32:5d:cf:b9:4b:5a:00: 03:7c:02:95:a5:2b:47:ca:92:2e:10:e1:10:0e:0c:6b:70:91: df:33:17:86:e9:8a:79:b8:6b:3d:18:b4:87:8b:6c:35:6f:37: 5c:de:bc:10:e2:18:93:da:62:25:69:67:d4:2c:16:20:38:68: 5b:dc:39:19:96:42:66:ec:2b:7d:ca:96:16:a2:05:8c:61:2b: fc:5e:ef:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi7u20v/XloQSKuoEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDIwMTAyMDAzOVoXDTI1MDUwMjAxMDAzOVowLzEtMCsGA1UEAxMk MzM4OTg5M2ItNTJlYi00ZjljLWIwZTYtZGVlOWM1N2UyMWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFgqTiOMbk6yC9VgQmvpdFv5K7qEzo9cmeHZ 83KrR8Nwt1iFjdDYkQdBu2Mr0cjL2X5KjVil0GTpiRk919YOWnqHLlSmPjWn0+UC E7L+FoGOrP+FAnEX5VrAmGcOpDgM88vTSJjZK3kPUoucDA3CgVWl2wKjJ4NCEeGd ho0jkjdUwYv86b+vYu6zBmflDx3EoIYS1rIzwd3gf1W6uDQFB7v3c4cJGlV33MTj 3kL1iQltk2wIXTn2nTZuxFUYobUzzCZsDb9wFdyNrS51pUaAc8ic3FARGltp2QxC 7eT0QOlosSlkjem2YNYJwvdK/eCPu9k9553rhi1XJpW8haNRDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNX3OEmqGifKKiPbPY0HtJV8/9Q6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvOGMwZjA3OGMtNDM2OC0z MmFlLTlmZWUtNzQ2YTk2YTE0NmJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDl1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB4wDOR9+qjQFpCdajAdR3TelnNhn0jLLbYB/g5Axd/zYZJ++kZj8Npt NazZia1E06088r7hKuKSzxWtTjWH5ccoY0+/vTtTVoI6S5FPeJttiCj61NyBZoa9 WkKisKx4sUPB3mSj9wJv+QCSUpqoqneQeOzF4R7lixiHLnCmE+VYadWPLwjtnN4M w2LR50ZXYhLNnbyWges/HYyIQ5bPyDhjZvb6Xmm8VJ52NJ3DMl3PuUtaAAN8ApWl K0fKki4Q4RAODGtwkd8zF4bpinm4az0YtIeLbDVvN1zevBDiGJPaYiVpZ9QsFiA4 aFvcORmWQmbsK33KlhaiBYxhK/xe778= -----END CERTIFICATE-----Generated at Sun Feb 16 15:54:03 2025 by rpki-client