$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c4208cb5-cbac-37d8-9a6c-00c292193361.roa File: c4208cb5-cbac-37d8-9a6c-00c292193361.roa (raw, json) Hash identifier: mzKm+ZvQjMBBw6RUoJpd8hwd0xwvybwvoIsa4pKbXJ0= Subject key identifier: 51:24:3E:27:39:BE:84:97:EA:9B:B7:B4:D4:F9:7F:3A:32:8F:73:C8 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285848AAFB5C8FADC9921E0ADBDC00 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c4208cb5-cbac-37d8-9a6c-00c292193361.roa Signing time: Sun 26 Jan 2025 02:00:38 +0000 ROA not before: Sun 26 Jan 2025 02:00:38 +0000 ROA not after: Sat 26 Apr 2025 01:00:38 +0000 asID: 5714 IP address blocks: 199.228.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:aa:fb:5c:8f:ad:c9:92:1e:0a:db:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jan 26 02:00:38 2025 GMT Not After : Apr 26 01:00:38 2025 GMT Subject: CN=aa465683-dea7-408e-8c92-16b0429c3e3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:45:8a:cb:37:a1:91:a1:4a:c8:f7:68:dc:89: a5:01:47:2d:ab:16:d8:fc:1e:48:b6:6c:29:69:e8: c5:5c:ab:9c:e0:2e:90:22:fd:66:91:49:d7:9f:b4: 48:16:29:f5:d3:b4:e9:3f:4d:c2:52:d9:30:ec:ef: ec:ab:28:35:27:bf:4b:60:d5:8d:ff:61:8e:d7:79: 00:8a:49:fe:15:37:33:50:41:35:05:39:d4:a5:37: c3:db:42:ef:4e:7c:4a:1e:93:40:02:64:58:bd:f5: 4f:75:a9:fa:22:0c:b7:9c:5a:56:97:fc:4d:cc:11: 19:3f:9b:31:ba:17:11:a6:83:3e:57:36:51:5e:cd: 73:1f:63:21:aa:3f:78:04:4f:1d:de:f2:d8:8b:89: ec:48:c2:84:26:39:c0:06:85:73:c2:7d:2b:20:20: 8e:f5:a8:51:47:3c:24:b0:e8:df:40:49:91:70:41: d6:44:42:e2:d2:55:20:0a:cd:07:00:1c:39:44:eb: 98:2e:0e:7d:59:11:99:4d:ab:4e:2d:2f:b2:7e:ac: b2:94:a1:f2:59:c6:d1:54:31:bc:48:c4:2f:bd:34: bc:20:0a:1b:1f:34:19:dd:8a:91:9c:ab:ca:ac:86: b7:25:d3:f5:77:c3:90:5e:72:f5:84:0b:64:6b:05: 2a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:24:3E:27:39:BE:84:97:EA:9B:B7:B4:D4:F9:7F:3A:32:8F:73:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c4208cb5-cbac-37d8-9a6c-00c292193361.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 199.228.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:11:ae:b3:a4:47:55:1c:23:7d:d0:6e:0e:64:0a:e5:c5:24: 2b:74:6e:89:c3:a9:5f:d5:0d:46:3f:85:ab:82:42:4b:18:8c: 86:bb:16:8f:e9:06:1d:73:8d:c0:8a:4a:d9:e9:63:52:fe:86: b2:13:c9:f9:4b:e1:95:7b:1c:3e:aa:02:37:a8:6e:a6:22:5e: 35:4b:8c:5b:47:53:be:ed:e0:eb:50:0e:26:c5:04:ed:ad:4a: 15:a6:88:cf:4b:d4:5c:a1:78:3f:44:77:16:25:d8:14:8f:22: f0:13:04:34:3f:41:bf:7c:83:31:dc:f7:eb:02:95:14:0c:bd: 0f:f7:f9:f5:46:27:23:a2:00:40:13:86:35:b3:bf:cb:41:01: 87:f3:24:81:f3:98:08:df:c6:3c:21:9c:60:1a:77:08:4a:4d: 37:e1:50:3a:91:5d:99:da:77:a6:d8:01:77:a8:58:68:69:72: 69:7d:64:69:23:77:59:a3:da:4d:63:01:05:72:94:70:bd:b4: 22:ba:e4:ec:ec:2e:91:ed:7a:15:bf:79:26:fe:0d:fc:d7:cc: c9:8e:76:81:1f:fe:4f:fb:10:b9:7b:08:8f:19:d7:e8:4e:93: ea:3f:65:b3:9c:65:8b:e5:b5:ba:38:ed:b1:fc:62:82:3c:7a: 75:62:84:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiq+1yPrcmSHgrb3AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDEyNjAyMDAzOFoXDTI1MDQyNjAxMDAzOFowLzEtMCsGA1UEAxMk YWE0NjU2ODMtZGVhNy00MDhlLThjOTItMTZiMDQyOWMzZTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUWKyzehkaFKyPdo3ImlAUctqxbY/B5Itmwp aejFXKuc4C6QIv1mkUnXn7RIFin107TpP03CUtkw7O/sqyg1J79LYNWN/2GO13kA ikn+FTczUEE1BTnUpTfD20LvTnxKHpNAAmRYvfVPdan6Igy3nFpWl/xNzBEZP5sx uhcRpoM+VzZRXs1zH2Mhqj94BE8d3vLYi4nsSMKEJjnABoVzwn0rICCO9ahRRzwk sOjfQEmRcEHWRELi0lUgCs0HABw5ROuYLg59WRGZTatOLS+yfqyylKHyWcbRVDG8 SMQvvTS8IAobHzQZ3YqRnKvKrIa3JdP1d8OQXnL1hAtkawUqiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFEkPic5voSX6pu3tNT5fzoyj3PIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYzQyMDhjYjUtY2JhYy0z N2Q4LTlhNmMtMDBjMjkyMTkzMzYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx+SPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA4RrrOkR1UcI33Qbg5kCuXFJCt0bonDqV/VDUY/hauCQksYjIa7Fo/p Bh1zjcCKStnpY1L+hrITyflL4ZV7HD6qAjeobqYiXjVLjFtHU77t4OtQDibFBO2t ShWmiM9L1FyheD9EdxYl2BSPIvATBDQ/Qb98gzHc9+sClRQMvQ/3+fVGJyOiAEAT hjWzv8tBAYfzJIHzmAjfxjwhnGAadwhKTTfhUDqRXZnad6bYAXeoWGhpcml9ZGkj d1mj2k1jAQVylHC9tCK65OzsLpHtehW/eSb+DfzXzMmOdoEf/k/7ELl7CI8Z1+hO k+o/ZbOcZYvltbo47bH8YoI8enVihJg= -----END CERTIFICATE-----Generated at Sun Apr 6 01:07:38 2025 by rpki-client