$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a0cfa3a6-054d-30b2-b882-83512a0b899d.roa File: a0cfa3a6-054d-30b2-b882-83512a0b899d.roa (raw, json) Hash identifier: aDlRjdPkcLrb+RPkN1/EN7qri9Ku7PxMoE3Oyf6y1jk= Subject key identifier: 14:48:DB:69:4C:05:17:5A:47:2B:32:24:9B:18:37:01:38:D6:CA:B5 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285848AAFB5F1C597504D0ADE73380 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a0cfa3a6-054d-30b2-b882-83512a0b899d.roa Signing time: Sun 26 Jan 2025 02:00:38 +0000 ROA not before: Sun 26 Jan 2025 02:00:38 +0000 ROA not after: Sat 26 Apr 2025 01:00:38 +0000 asID: 202 IP address blocks: 204.104.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:aa:fb:5f:1c:59:75:04:d0:ad:e7:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jan 26 02:00:38 2025 GMT Not After : Apr 26 01:00:38 2025 GMT Subject: CN=780971b1-1eb2-4cb0-a556-c5546866a19c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f7:8a:24:87:af:c4:46:04:fd:f1:9d:3e:63: 93:98:a5:7b:7e:db:7e:83:4e:bb:06:d2:2f:cb:97: 8c:af:00:71:71:ee:39:fd:71:5a:46:24:8a:9c:38: 43:89:a0:0f:9c:84:59:57:e9:ca:4a:aa:57:78:1e: e9:43:37:d8:68:75:12:2a:a6:b2:81:bb:5f:7e:e5: 3f:d0:04:65:d5:9a:9c:db:9a:7a:f8:ef:e5:39:53: d1:d0:ef:aa:13:fe:8c:ab:ab:b8:66:0c:07:ba:0e: 4c:20:94:4f:3b:a6:b8:44:4d:77:9f:1e:44:4e:60: cf:03:25:e2:c5:ee:58:08:07:c2:21:ea:3e:25:69: a5:26:c5:fc:a6:2a:00:ae:9e:a2:3e:f1:08:93:cf: bc:b1:5f:a4:8c:7f:8e:64:74:32:18:b9:b3:27:bb: e1:2f:d8:d9:95:e2:75:e3:7c:49:91:de:90:5d:19: ed:d8:5d:3e:8c:63:99:29:b3:90:62:2e:5b:4c:51: 59:93:1b:0d:52:6e:82:e4:52:38:28:5e:9a:79:5f: db:f2:f5:0b:cc:75:e5:a0:45:15:d8:34:fe:aa:2c: 29:63:cf:5f:32:f0:8a:3a:03:20:35:8f:1c:a5:c0: ab:87:58:aa:21:bf:dd:05:f9:35:d2:cc:ae:18:00: 21:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:48:DB:69:4C:05:17:5A:47:2B:32:24:9B:18:37:01:38:D6:CA:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a0cfa3a6-054d-30b2-b882-83512a0b899d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 204.104.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:29:83:2a:80:1d:34:ba:f0:0a:d5:fd:88:0f:fb:df:b0:27: 86:94:f7:bd:78:26:15:90:0d:1e:89:6b:36:57:ae:07:7d:0c: b7:93:30:b4:b9:70:f1:5d:fe:75:a0:c2:27:56:f4:77:ad:e3: 7f:51:e3:f1:84:8e:bf:c5:a7:d4:30:e1:35:05:07:05:87:3c: 6d:35:ca:68:8b:fa:6f:bb:d9:47:37:ab:cd:ba:39:e3:c2:3f: 48:10:04:53:8c:44:fd:32:df:fd:95:91:e6:97:2e:5d:d3:40: 04:6e:0b:a4:70:54:5c:6a:0c:23:68:fe:7b:90:b7:90:80:f6: bc:1b:29:36:16:7e:52:95:6d:50:5b:8d:9f:fd:8e:90:5b:5f: 57:e4:0b:b4:e9:c5:be:cf:c4:85:9b:e9:3d:9f:67:88:94:1b: 48:1d:b6:d0:fe:9a:e5:fe:03:0e:2e:3b:8f:87:3e:80:28:24: 15:1d:d6:b6:e0:11:d4:1e:a2:48:28:dc:0d:bd:3e:43:a4:32: 9d:cc:47:38:f3:42:06:bb:ed:3b:67:dc:57:c2:dd:1c:5d:88: 3a:b9:e9:ef:c8:58:53:da:58:73:b9:87:90:4d:55:9b:b8:b8: e4:e6:24:bd:4b:20:5b:eb:d1:63:b8:70:a5:2d:4b:77:4e:e5: ea:b5:4a:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiq+18cWXUE0K3nM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDEyNjAyMDAzOFoXDTI1MDQyNjAxMDAzOFowLzEtMCsGA1UEAxMk NzgwOTcxYjEtMWViMi00Y2IwLWE1NTYtYzU1NDY4NjZhMTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/eKJIevxEYE/fGdPmOTmKV7ftt+g067BtIv y5eMrwBxce45/XFaRiSKnDhDiaAPnIRZV+nKSqpXeB7pQzfYaHUSKqaygbtffuU/ 0ARl1Zqc25p6+O/lOVPR0O+qE/6Mq6u4ZgwHug5MIJRPO6a4RE13nx5ETmDPAyXi xe5YCAfCIeo+JWmlJsX8pioArp6iPvEIk8+8sV+kjH+OZHQyGLmzJ7vhL9jZleJ1 43xJkd6QXRnt2F0+jGOZKbOQYi5bTFFZkxsNUm6C5FI4KF6aeV/b8vULzHXloEUV 2DT+qiwpY89fMvCKOgMgNY8cpcCrh1iqIb/dBfk10syuGAAhcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBRI22lMBRdaRysyJJsYNwE41sq1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYTBjZmEzYTYtMDU0ZC0z MGIyLWI4ODItODM1MTJhMGI4OTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGgNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF0pgyqAHTS68ArV/YgP+9+wJ4aU9714JhWQDR6JazZXrgd9DLeTMLS5 cPFd/nWgwidW9Het439R4/GEjr/Fp9Qw4TUFBwWHPG01ymiL+m+72Uc3q826OePC P0gQBFOMRP0y3/2VkeaXLl3TQARuC6RwVFxqDCNo/nuQt5CA9rwbKTYWflKVbVBb jZ/9jpBbX1fkC7Tpxb7PxIWb6T2fZ4iUG0gdttD+muX+Aw4uO4+HPoAoJBUd1rbg EdQeokgo3A29PkOkMp3MRzjzQga77Ttn3FfC3RxdiDq56e/IWFPaWHO5h5BNVZu4 uOTmJL1LIFvr0WO4cKUtS3dO5eq1SpE= -----END CERTIFICATE-----Generated at Sun Feb 16 15:39:29 2025 by rpki-client