$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/941c338c-213e-3e51-9330-4013ab937b53.roa File: 941c338c-213e-3e51-9330-4013ab937b53.roa (raw, json) Hash identifier: oRnkyPjjsWDgHRBwZwuJuCum3Vznzg9xQEqFxYj45IU= Subject key identifier: AF:0F:A4:02:70:D8:A5:EA:06:A3:9D:2A:A5:55:EE:B2:20:C6:0E:6F Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285848BBBB6D5D8B4D2322A8B16A80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/941c338c-213e-3e51-9330-4013ab937b53.roa Signing time: Sat 01 Feb 2025 02:00:39 +0000 ROA not before: Sat 01 Feb 2025 02:00:39 +0000 ROA not after: Fri 02 May 2025 01:00:39 +0000 asID: 202 IP address blocks: 192.57.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bb:bb:6d:5d:8b:4d:23:22:a8:b1:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Feb 1 02:00:39 2025 GMT Not After : May 2 01:00:39 2025 GMT Subject: CN=69b358f0-b777-4b75-ad5a-3ddeed1c5dc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:1b:a4:bf:65:07:73:3e:a8:fd:4c:d9:3a:0c: 42:81:f5:9a:0c:38:8a:b8:89:19:ef:4c:f4:05:bb: 12:9f:d3:80:58:2a:44:11:d4:02:1e:53:9f:e1:45: 3b:68:6b:fa:55:08:76:0f:64:e9:3a:82:ec:38:2b: a4:41:d5:20:42:4e:c7:18:71:de:7b:84:c0:1b:e0: b5:93:cb:0e:51:f4:c9:5f:05:11:82:15:7c:f6:6e: 91:bf:37:2d:36:f7:a0:f6:3e:b4:17:bd:ee:3a:bd: 69:68:c5:67:63:c4:9c:db:41:20:0c:d6:c6:4d:78: 06:a9:76:74:bf:22:cc:e0:89:18:06:bc:8c:8a:c2: ff:f7:29:94:4f:f0:de:ab:4f:84:69:34:56:7c:38: 15:56:95:12:59:ea:be:ca:d7:72:a9:0b:d5:90:c4: ad:0f:58:72:da:e0:d8:a2:d5:ea:73:46:a4:4f:b8: 56:36:81:77:65:f2:86:03:89:e7:65:05:d1:ef:ec: 02:0d:90:5c:23:fb:3d:38:9b:19:70:2b:54:9b:e1: 00:3b:28:10:fb:01:e8:6f:67:5b:87:4e:f0:3c:7a: f3:70:3d:ed:bf:39:50:14:6f:62:15:27:3c:19:40: 96:c5:ee:4c:48:eb:c3:62:0d:ba:a9:7b:ad:e4:f2: 46:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:0F:A4:02:70:D8:A5:EA:06:A3:9D:2A:A5:55:EE:B2:20:C6:0E:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/941c338c-213e-3e51-9330-4013ab937b53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.57.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:46:31:9f:49:0c:d6:8d:16:bd:c3:dc:d4:0b:46:6d:35:b8: 65:be:eb:7a:24:b8:8a:76:c0:ed:d6:e4:8f:e2:2d:d7:e2:eb: dd:bb:e0:02:73:b1:94:22:b9:b2:93:58:01:d4:c1:70:c9:3f: c7:54:56:20:4f:4d:38:f1:7a:64:5b:2c:30:3d:84:f4:4a:78: 0f:5e:1b:f4:24:a6:12:47:d7:38:c5:e6:6c:bb:d3:2d:0a:f9: f3:18:97:b4:94:a6:5a:3b:6e:8f:f6:92:7c:ff:64:81:4d:4f: 0b:b4:a8:73:8b:57:78:2b:b8:71:96:cf:7f:2a:a1:55:c1:3c: 0f:1b:fc:f0:cc:0c:8e:05:46:7e:33:97:08:b6:10:27:05:74: 1f:13:51:45:9f:ac:38:84:41:7f:ab:02:4d:32:13:aa:31:1a: 35:0e:6b:33:d9:38:df:91:e5:e9:54:00:b7:02:23:60:de:7e: 2f:16:b8:8a:47:86:72:22:78:9b:64:20:2e:ef:35:8a:3d:5f: bb:f8:aa:f5:00:96:8b:07:af:23:7a:96:ba:89:2a:2d:4e:c5: a7:40:85:0e:86:44:a6:4f:5e:20:b7:07:64:d9:f9:ab:84:d8: 3a:69:af:19:bc:47:f0:46:78:5e:81:b9:e9:27:77:d2:25:70: f0:33:c5:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi7u21di00jIqixaoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDIwMTAyMDAzOVoXDTI1MDUwMjAxMDAzOVowLzEtMCsGA1UEAxMk NjliMzU4ZjAtYjc3Ny00Yjc1LWFkNWEtM2RkZWVkMWM1ZGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxukv2UHcz6o/UzZOgxCgfWaDDiKuIkZ70z0 BbsSn9OAWCpEEdQCHlOf4UU7aGv6VQh2D2TpOoLsOCukQdUgQk7HGHHee4TAG+C1 k8sOUfTJXwURghV89m6RvzctNveg9j60F73uOr1paMVnY8Sc20EgDNbGTXgGqXZ0 vyLM4IkYBryMisL/9ymUT/Deq0+EaTRWfDgVVpUSWeq+ytdyqQvVkMStD1hy2uDY otXqc0akT7hWNoF3ZfKGA4nnZQXR7+wCDZBcI/s9OJsZcCtUm+EAOygQ+wHob2db h07wPHrzcD3tvzlQFG9iFSc8GUCWxe5MSOvDYg26qXut5PJG3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK8PpAJw2KXqBqOdKqVV7rIgxg5vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvOTQxYzMzOGMtMjEzZS0z ZTUxLTkzMzAtNDAxM2FiOTM3YjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDl1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIdGMZ9JDNaNFr3D3NQLRm01uGW+63okuIp2wO3W5I/iLdfi69274AJz sZQiubKTWAHUwXDJP8dUViBPTTjxemRbLDA9hPRKeA9eG/QkphJH1zjF5my70y0K +fMYl7SUplo7bo/2knz/ZIFNTwu0qHOLV3gruHGWz38qoVXBPA8b/PDMDI4FRn4z lwi2ECcFdB8TUUWfrDiEQX+rAk0yE6oxGjUOazPZON+R5elUALcCI2Defi8WuIpH hnIieJtkIC7vNYo9X7v4qvUAlosHryN6lrqJKi1OxadAhQ6GRKZPXiC3B2TZ+auE 2Dpprxm8R/BGeF6Bueknd9IlcPAzxWM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:42:57 2025 by rpki-client