$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d185413b-c1c4-3cf1-a970-c9cd2048a27b.roa File: d185413b-c1c4-3cf1-a970-c9cd2048a27b.roa (raw, json) Hash identifier: wxUMJzliWD/HT+AiI+hJQQtmxZqSDsfVxTVdFGyRPy0= Subject key identifier: E4:9B:D6:BD:3F:CC:1E:67:D6:4F:BF:1A:9E:FA:C6:17:E0:CD:BC:82 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285848AAFB67F28457360060315D00 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d185413b-c1c4-3cf1-a970-c9cd2048a27b.roa Signing time: Sun 26 Jan 2025 02:00:38 +0000 ROA not before: Sun 26 Jan 2025 02:00:38 +0000 ROA not after: Sat 26 Apr 2025 01:00:38 +0000 asID: 3360 IP address blocks: 205.141.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:aa:fb:67:f2:84:57:36:00:60:31:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jan 26 02:00:38 2025 GMT Not After : Apr 26 01:00:38 2025 GMT Subject: CN=2b4916cd-dd0a-467d-b87a-c6f931aa626e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:48:da:6a:b7:cc:bb:ae:29:e6:1f:7c:82:c3: ff:76:91:43:3a:50:a2:1d:ea:d9:52:ae:82:b7:68: d0:85:04:ab:50:26:97:39:3f:13:43:61:fb:e8:be: cf:12:9b:43:c8:d9:eb:66:5f:f7:e3:99:fc:10:78: bd:1c:c1:2f:a9:5d:23:af:e3:d1:37:9d:de:3d:b3: 39:16:55:e3:c7:83:20:fc:78:3a:d0:4d:21:a7:de: b6:6c:76:62:cd:f1:b6:04:74:1d:4b:e0:6b:a4:18: 8f:b8:8e:48:5d:db:82:20:fe:e5:0b:6a:83:58:56: 1d:75:c6:86:59:bc:6d:a2:ce:47:ec:84:46:24:f0: bd:15:3b:a2:8a:8e:14:2c:ac:46:5f:d5:27:dd:d7: 80:95:42:d2:3a:da:c8:a6:b3:61:fa:d6:3c:49:69: 97:2c:de:37:0e:a0:24:10:c2:ff:92:0d:83:9f:29: 47:9c:15:f9:1b:b8:2c:75:1e:5e:f6:a6:c5:8e:1e: 22:ef:5a:ac:3e:67:9a:04:64:14:86:00:18:3c:46: 5a:11:32:75:60:c5:7e:f0:a4:fd:dc:05:91:df:de: f5:ab:49:fd:47:11:c7:f5:c0:28:13:2a:fb:54:39: a5:e3:7e:42:49:14:5f:2f:dc:b4:41:d4:da:18:cf: da:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:9B:D6:BD:3F:CC:1E:67:D6:4F:BF:1A:9E:FA:C6:17:E0:CD:BC:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d185413b-c1c4-3cf1-a970-c9cd2048a27b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 205.141.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:30:20:3e:b6:3e:30:16:68:34:bc:46:2f:df:80:b1:22:40: f9:5b:dc:ea:9a:df:3b:80:92:f8:bb:e5:04:50:4a:95:a3:80: 12:de:0f:58:95:cb:fc:dc:28:9b:cf:68:e3:9e:5d:f9:e5:15: 65:55:e7:05:8b:c1:95:a9:22:2c:e1:62:9d:15:71:50:19:4d: a0:49:88:f7:71:c4:5a:08:00:35:9e:19:0b:3c:a2:f7:7d:49: 3b:a6:07:3c:9e:5a:2c:2e:cb:17:66:59:ea:40:97:45:4c:9a: 26:3c:cb:98:21:20:7c:05:2b:29:73:27:a1:19:8f:e0:e8:a8: 50:36:08:60:74:7a:ff:c0:fe:f9:a7:4e:7e:82:6f:00:d6:92: 60:99:a0:fe:b4:c2:f4:1e:d0:8d:28:35:98:67:14:a1:79:6b: 25:b5:30:85:4d:d2:95:8c:a7:25:89:82:64:7e:6c:10:a0:e6: d2:39:2f:96:24:9c:f1:43:e7:42:80:c2:6c:e2:72:e9:a2:02: a7:0c:d9:6f:9e:72:fe:ce:49:56:15:f6:83:65:6a:ca:50:3b: e2:fd:42:8f:43:a1:d4:a4:37:33:56:47:8b:ca:b8:e6:0b:1b: 8b:fe:76:df:35:d7:96:af:58:8e:72:3b:d7:91:f4:0a:f4:a0: 3a:e8:4e:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiq+2fyhFc2AGAxXQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDEyNjAyMDAzOFoXDTI1MDQyNjAxMDAzOFowLzEtMCsGA1UEAxMk MmI0OTE2Y2QtZGQwYS00NjdkLWI4N2EtYzZmOTMxYWE2MjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA40jaarfMu64p5h98gsP/dpFDOlCiHerZUq6C t2jQhQSrUCaXOT8TQ2H76L7PEptDyNnrZl/345n8EHi9HMEvqV0jr+PRN53ePbM5 FlXjx4Mg/Hg60E0hp962bHZizfG2BHQdS+BrpBiPuI5IXduCIP7lC2qDWFYddcaG Wbxtos5H7IRGJPC9FTuiio4ULKxGX9Un3deAlULSOtrIprNh+tY8SWmXLN43DqAk EML/kg2DnylHnBX5G7gsdR5e9qbFjh4i71qsPmeaBGQUhgAYPEZaETJ1YMV+8KT9 3AWR3971q0n9RxHH9cAoEyr7VDml435CSRRfL9y0QdTaGM/a2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOSb1r0/zB5n1k+/Gp76xhfgzbyCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZDE4NTQxM2ItYzFjNC0z Y2YxLWE5NzAtYzljZDIwNDhhMjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzY3JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAIwID62PjAWaDS8Ri/fgLEiQPlb3Oqa3zuAkvi75QRQSpWjgBLeD1iV y/zcKJvPaOOeXfnlFWVV5wWLwZWpIizhYp0VcVAZTaBJiPdxxFoIADWeGQs8ovd9 STumBzyeWiwuyxdmWepAl0VMmiY8y5ghIHwFKylzJ6EZj+DoqFA2CGB0ev/A/vmn Tn6CbwDWkmCZoP60wvQe0I0oNZhnFKF5ayW1MIVN0pWMpyWJgmR+bBCg5tI5L5Yk nPFD50KAwmzicumiAqcM2W+ecv7OSVYV9oNlaspQO+L9Qo9DodSkNzNWR4vKuOYL G4v+dt8115avWI5yO9eR9Ar0oDroThg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:35:36 2025 by rpki-client