$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b8d99d11-8345-3529-81a3-cd29715a837d.roa File: b8d99d11-8345-3529-81a3-cd29715a837d.roa (raw, json) Hash identifier: YZ29GK9POSCNrZfjqogdikZHvAupx8tFXLaFFi56/28= Subject key identifier: A8:3D:26:36:87:B4:CA:9B:E0:52:8B:2C:88:D4:BC:E0:DC:26:6A:AC Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285848AAFB5C033CEAC863BA0D86E0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b8d99d11-8345-3529-81a3-cd29715a837d.roa Signing time: Sun 26 Jan 2025 02:00:38 +0000 ROA not before: Sun 26 Jan 2025 02:00:38 +0000 ROA not after: Sat 26 Apr 2025 01:00:38 +0000 asID: 3356 IP address blocks: 199.228.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:aa:fb:5c:03:3c:ea:c8:63:ba:0d:86:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jan 26 02:00:38 2025 GMT Not After : Apr 26 01:00:38 2025 GMT Subject: CN=b34dc019-cd84-44b0-b6e2-b0a94a61ddf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e1:5e:2d:1b:13:ca:cf:7c:e8:e9:cd:97:72: 31:2c:1e:60:20:43:0c:8a:2e:c1:c0:a7:b4:10:bf: 3a:a7:76:ec:c3:3e:73:b3:96:41:20:e6:ad:8e:86: f6:1f:46:bd:0b:a1:4d:d4:32:c1:64:94:6d:86:3c: 9e:05:4c:48:16:da:ec:4b:d2:d8:fc:1b:86:9b:98: 0b:06:26:8a:2f:71:3d:04:02:22:1f:2f:d2:db:94: 7f:66:71:55:3e:fd:e5:59:04:8b:90:69:a6:2b:a1: 29:e6:fc:77:d9:57:d1:b5:15:bf:93:3a:f2:b9:37: ea:a6:7f:9e:ff:e9:b0:e4:fb:24:ea:b1:5f:bd:e5: 6f:20:48:e1:ab:a9:6e:c1:14:d9:3f:de:9a:33:f6: fb:17:a1:cd:f1:3c:41:30:7c:50:c6:dc:8c:f7:c6: 7b:57:bf:1e:3f:ee:e1:92:80:b2:da:32:4d:29:79: 86:69:10:1a:a2:df:72:25:07:d9:14:d5:bc:8d:70: ca:af:ec:cd:81:d9:cb:c5:b7:39:62:9d:fb:f7:0f: ff:55:9e:8a:d2:ea:6d:45:52:4f:c6:14:f7:64:0b: 1c:6c:b0:29:ea:0c:5d:51:e8:dd:67:4c:92:15:52: 8a:82:80:32:2d:0e:50:61:cb:f5:6e:09:8c:fa:72: a3:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:3D:26:36:87:B4:CA:9B:E0:52:8B:2C:88:D4:BC:E0:DC:26:6A:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b8d99d11-8345-3529-81a3-cd29715a837d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 199.228.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:e5:21:73:ec:8e:84:25:2d:d4:f9:1c:a5:ef:60:70:c4:04: cd:20:15:a2:bd:64:b4:48:ab:f8:b7:93:69:b1:7f:8c:25:23: 0f:4e:b5:7b:c9:80:c3:1c:31:69:c9:f5:3d:75:97:e6:55:85: 56:b1:1c:20:61:06:6b:4c:fd:c2:40:a1:cb:a4:b1:e6:33:a5: 1c:53:3d:4b:c6:e0:61:f0:36:2c:47:78:26:8c:2c:6a:42:47: b6:23:4f:ae:5c:06:4e:74:86:ac:d4:1d:5d:65:38:0b:bd:54: 9b:5e:c8:87:ed:5b:26:d3:e0:c1:f9:52:f3:27:7f:97:4b:81: 11:5a:44:5f:ed:45:dd:a9:13:b7:bf:c9:34:2b:c6:5f:c5:5d: 52:16:f5:d6:58:3e:93:1a:69:12:b4:ff:63:25:33:91:94:8a: 9e:66:d9:a9:06:09:4b:6c:b1:8c:6d:bd:54:fe:0b:be:9f:29: c0:b8:7f:ad:18:6a:b9:d6:b2:d6:f4:65:52:85:7a:08:f6:48: 96:2b:e3:49:80:c9:21:58:08:bf:e1:f2:08:f3:fa:c7:b4:67: f0:84:a5:d1:03:7b:29:ef:6f:35:6b:94:e7:7b:5a:4a:96:f6: f6:d6:33:71:4d:00:de:f7:5d:93:09:15:24:13:79:38:68:23: 6c:55:32:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiq+1wDPOrIY7oNhuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDEyNjAyMDAzOFoXDTI1MDQyNjAxMDAzOFowLzEtMCsGA1UEAxMk YjM0ZGMwMTktY2Q4NC00NGIwLWI2ZTItYjBhOTRhNjFkZGYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOFeLRsTys986OnNl3IxLB5gIEMMii7BwKe0 EL86p3bswz5zs5ZBIOatjob2H0a9C6FN1DLBZJRthjyeBUxIFtrsS9LY/BuGm5gL BiaKL3E9BAIiHy/S25R/ZnFVPv3lWQSLkGmmK6Ep5vx32VfRtRW/kzryuTfqpn+e /+mw5Psk6rFfveVvIEjhq6luwRTZP96aM/b7F6HN8TxBMHxQxtyM98Z7V78eP+7h koCy2jJNKXmGaRAaot9yJQfZFNW8jXDKr+zNgdnLxbc5Yp379w//VZ6K0uptRVJP xhT3ZAscbLAp6gxdUejdZ0ySFVKKgoAyLQ5QYcv1bgmM+nKj9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKg9JjaHtMqb4FKLLIjUvODcJmqsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYjhkOTlkMTEtODM0NS0z NTI5LTgxYTMtY2QyOTcxNWE4MzdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx+Q9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDlIXPsjoQlLdT5HKXvYHDEBM0gFaK9ZLRIq/i3k2mxf4wlIw9OtXvJ gMMcMWnJ9T11l+ZVhVaxHCBhBmtM/cJAocukseYzpRxTPUvG4GHwNixHeCaMLGpC R7YjT65cBk50hqzUHV1lOAu9VJteyIftWybT4MH5UvMnf5dLgRFaRF/tRd2pE7e/ yTQrxl/FXVIW9dZYPpMaaRK0/2MlM5GUip5m2akGCUtssYxtvVT+C76fKcC4f60Y arnWstb0ZVKFegj2SJYr40mAySFYCL/h8gjz+se0Z/CEpdEDeynvbzVrlOd7WkqW 9vbWM3FNAN73XZMJFSQTeThoI2xVMtg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:45:56 2025 by rpki-client