$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9a515169-086f-3c00-9825-cd467941e123.roa File: 9a515169-086f-3c00-9825-cd467941e123.roa (raw, json) Hash identifier: +hfnbo61VNHc7Ljk3c4x7Ya5W4MIsH20aVVZ8rb1wJA= Subject key identifier: 6E:52:74:02:D8:6C:58:7B:1C:D9:FE:69:AA:ED:B8:0E:68:5C:B0:BB Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285848AAFB5AFAB16DCC86D9C90BC0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9a515169-086f-3c00-9825-cd467941e123.roa Signing time: Sun 26 Jan 2025 02:00:38 +0000 ROA not before: Sun 26 Jan 2025 02:00:38 +0000 ROA not after: Sat 26 Apr 2025 01:00:38 +0000 asID: 202 IP address blocks: 192.238.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:aa:fb:5a:fa:b1:6d:cc:86:d9:c9:0b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jan 26 02:00:38 2025 GMT Not After : Apr 26 01:00:38 2025 GMT Subject: CN=10ce5e91-446e-4579-a621-43040896f21d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:4d:1a:63:36:21:62:b1:1d:27:14:b7:97:6c: 4e:8c:56:f6:e5:66:de:26:46:5a:e7:fd:d9:d3:28: 2c:0a:5a:8f:f8:66:e4:76:c3:e7:fe:ed:07:21:3f: e7:22:ba:15:ad:f3:42:80:63:50:45:a3:ae:d1:b1: 6d:c4:b8:9f:ed:b9:0a:c4:e7:11:51:59:5d:c7:c0: b9:9c:cf:c0:cd:dd:f3:3a:0a:8e:98:36:68:62:50: 49:2b:7d:e2:52:6a:e1:6c:57:0a:2d:fe:26:26:5f: d1:18:35:ea:01:cc:67:53:35:b3:43:99:fd:e1:6a: 68:4f:29:07:c5:2a:10:8f:a4:3c:e1:7b:a9:af:25: 87:1d:ca:78:e7:0b:33:fb:37:f3:3a:9a:ee:0a:68: 31:96:53:02:7a:fb:f2:46:1d:2e:cd:05:83:7c:cf: 49:58:ed:c5:01:f8:5e:66:24:41:98:5b:b2:5f:bf: 34:e0:4c:dd:36:54:3f:b3:51:1e:9e:ac:73:a3:ad: 1f:dd:14:fc:32:19:fa:bd:5f:6e:b2:19:2a:b9:72: 2e:7c:cb:fe:43:44:cb:a7:71:c0:92:91:31:a0:c1: a4:6a:d0:f2:e2:a0:06:a3:99:b6:3e:bc:c4:60:2c: cb:ad:50:90:99:a5:f1:bf:8e:3f:62:6f:07:9b:54: 6a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:52:74:02:D8:6C:58:7B:1C:D9:FE:69:AA:ED:B8:0E:68:5C:B0:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9a515169-086f-3c00-9825-cd467941e123.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.238.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:8f:2b:b4:c6:d2:41:6a:b2:bb:99:bd:82:94:59:df:bd:9d: 13:ed:36:e7:1e:0a:0c:48:6e:9b:20:0f:0f:b3:3f:5d:bc:fc: 12:b1:44:25:1a:2a:fb:00:4c:f1:a7:c3:95:2e:96:3f:4c:ba: c4:69:db:fe:fe:f8:0e:99:32:7f:98:c1:b5:b4:52:89:35:95: 25:c5:64:7b:7a:e4:a2:f8:07:45:d0:2b:de:8b:ee:fb:34:c3: bf:58:3c:40:da:ea:c6:0b:ba:a4:46:03:fe:b0:8d:4e:51:66: a1:62:6b:e3:cd:4a:11:ae:3f:43:a0:13:49:f8:95:ea:33:4b: a0:23:39:6e:49:89:fb:1a:9a:91:ab:00:66:58:25:76:ea:4c: 0c:a2:c7:14:4c:24:8a:d9:e8:9e:3f:43:7c:c9:6b:22:b4:23: e4:f6:e5:31:8e:77:bb:52:a3:c0:9c:05:2c:20:06:7e:3a:54: 6c:61:0a:a9:2d:da:07:24:08:29:4e:f0:a5:97:14:71:38:9b: b0:1e:da:a2:b4:1a:d4:a0:a4:ac:0f:17:e1:5d:ad:f1:b0:98: a9:62:bb:75:ce:82:3e:f8:9a:02:52:27:30:2b:f5:bc:fe:8f: cc:4a:89:46:b6:7c:ff:56:9f:9d:46:db:d7:b2:ab:a9:db:e3: 00:3c:7a:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiq+1r6sW3MhtnJC8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDEyNjAyMDAzOFoXDTI1MDQyNjAxMDAzOFowLzEtMCsGA1UEAxMk MTBjZTVlOTEtNDQ2ZS00NTc5LWE2MjEtNDMwNDA4OTZmMjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgU0aYzYhYrEdJxS3l2xOjFb25WbeJkZa5/3Z 0ygsClqP+GbkdsPn/u0HIT/nIroVrfNCgGNQRaOu0bFtxLif7bkKxOcRUVldx8C5 nM/Azd3zOgqOmDZoYlBJK33iUmrhbFcKLf4mJl/RGDXqAcxnUzWzQ5n94WpoTykH xSoQj6Q84XupryWHHcp45wsz+zfzOpruCmgxllMCevvyRh0uzQWDfM9JWO3FAfhe ZiRBmFuyX7804EzdNlQ/s1Eenqxzo60f3RT8Mhn6vV9ushkquXIufMv+Q0TLp3HA kpExoMGkatDy4qAGo5m2PrzEYCzLrVCQmaXxv44/Ym8Hm1RqJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG5SdALYbFh7HNn+aartuA5oXLC7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvOWE1MTUxNjktMDg2Zi0z YzAwLTk4MjUtY2Q0Njc5NDFlMTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwO44MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEyPK7TG0kFqsruZvYKUWd+9nRPtNuceCgxIbpsgDw+zP128/BKxRCUa KvsATPGnw5Uulj9MusRp2/7++A6ZMn+YwbW0Uok1lSXFZHt65KL4B0XQK96L7vs0 w79YPEDa6sYLuqRGA/6wjU5RZqFia+PNShGuP0OgE0n4leozS6AjOW5JifsampGr AGZYJXbqTAyixxRMJIrZ6J4/Q3zJayK0I+T25TGOd7tSo8CcBSwgBn46VGxhCqkt 2gckCClO8KWXFHE4m7Ae2qK0GtSgpKwPF+FdrfGwmKliu3XOgj74mgJSJzAr9bz+ j8xKiUa2fP9Wn51G29eyq6nb4wA8eio= -----END CERTIFICATE-----Generated at Sat Apr 5 16:47:03 2025 by rpki-client