$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ddd67d4e-3974-3eef-bca8-ef412d6c58c8.roa File: ddd67d4e-3974-3eef-bca8-ef412d6c58c8.roa (raw, json) Hash identifier: hKX1LQOeihm9z5sxVZo4+zqX1ma8cDPqkYS/b90PL4Y= Subject key identifier: 00:FE:CD:D4:A5:B5:56:15:70:7B:12:F2:DB:6E:B7:73:80:B1:5F:C2 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285848E2D11EAC71398BBA4283B880 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ddd67d4e-3974-3eef-bca8-ef412d6c58c8.roa Signing time: Sat 15 Feb 2025 02:00:39 +0000 ROA not before: Sat 15 Feb 2025 02:00:39 +0000 ROA not after: Fri 16 May 2025 01:00:39 +0000 asID: 202 IP address blocks: 192.57.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e2:d1:1e:ac:71:39:8b:ba:42:83:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Feb 15 02:00:39 2025 GMT Not After : May 16 01:00:39 2025 GMT Subject: CN=70cf687a-4db3-4620-8eb7-23ed380268fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:aa:ce:d2:f3:5f:32:7f:06:cb:19:37:25:ae: 2c:81:17:28:45:6f:1a:7c:8a:e6:3d:62:09:b2:7e: 4c:9f:d8:c3:e7:7e:06:72:79:2c:7f:92:d3:a6:2f: 02:57:4b:50:f3:51:10:6a:d3:33:16:d4:5d:22:0c: 7c:84:0a:92:dd:0f:53:85:45:ff:44:75:e5:71:b1: 25:68:7b:0d:70:ea:2e:88:8f:df:77:b9:f1:de:b6: 65:12:4b:b3:5e:71:eb:71:a0:a2:6e:d1:e3:f5:89: bf:89:4e:7b:b8:26:6d:28:9d:9f:25:9d:9d:50:14: ae:bf:e7:f4:f2:0f:a6:3f:0c:ec:1e:14:95:9a:72: 39:f8:93:4a:3f:09:2c:22:71:9e:38:3d:81:c4:fd: 0e:24:52:90:16:52:3f:35:ec:64:c3:fd:51:15:13: d9:eb:c8:f6:b1:47:62:90:d8:37:ad:a6:b4:78:37: 07:a5:b5:67:bc:4e:f3:0b:ca:df:d3:3a:e6:4d:16: e1:36:03:01:4e:3d:e4:d3:61:9b:12:f3:ee:62:6a: 09:3c:5b:65:f8:81:58:04:8c:97:eb:fe:23:bb:95: fe:04:ea:79:3b:15:95:fd:4d:bf:f4:15:66:82:f0: 92:0d:01:2a:35:f3:5b:17:95:af:8d:5c:43:38:7b: c4:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:FE:CD:D4:A5:B5:56:15:70:7B:12:F2:DB:6E:B7:73:80:B1:5F:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ddd67d4e-3974-3eef-bca8-ef412d6c58c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.57.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:56:c8:67:ae:14:8b:92:a5:5e:a7:e3:7c:28:89:e0:a9:57: d0:32:ef:dc:a0:37:8c:5a:20:07:ba:e3:e7:74:15:b8:eb:15: 90:47:4d:58:fa:66:c2:9f:9f:93:2c:f5:e5:a7:c6:40:3f:15: 7e:20:d5:1d:f3:10:28:51:76:c1:d1:34:64:6c:9a:e1:9f:03: fa:d8:e4:64:cc:1f:cb:15:0d:52:ba:5e:0d:44:83:d0:92:bd: 86:7b:52:ba:a7:8c:6b:18:9f:cf:00:44:87:be:9b:df:c7:a2: ab:64:c9:17:30:a8:17:8a:50:df:30:96:84:eb:30:4d:c1:d3: dd:27:58:23:a5:48:7e:f2:46:04:1e:7b:2b:ac:50:74:bf:68: 09:fc:73:4b:3b:bb:58:a9:a1:25:52:26:39:a9:ea:7a:90:04: ef:2d:9a:9f:5d:34:84:3d:b6:98:2e:18:0a:ee:e5:46:42:15: 33:95:5a:36:f9:1c:d1:e8:26:a1:ff:fe:24:c6:30:fe:1d:d4: 5a:45:3f:d9:81:e5:ec:89:25:d8:5b:e6:18:f3:92:bf:b8:ee: 53:67:0c:df:11:17:09:ca:fd:5a:c5:3e:35:ee:77:e5:9a:ff: ec:b7:99:76:26:1f:de:d3:90:1f:40:71:86:4f:72:10:90:ed: 81:5c:ad:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0R6scTmLukKDuIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk NzBjZjY4N2EtNGRiMy00NjIwLThlYjctMjNlZDM4MDI2OGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqrO0vNfMn8Gyxk3Ja4sgRcoRW8afIrmPWIJ sn5Mn9jD534Gcnksf5LTpi8CV0tQ81EQatMzFtRdIgx8hAqS3Q9ThUX/RHXlcbEl aHsNcOouiI/fd7nx3rZlEkuzXnHrcaCibtHj9Ym/iU57uCZtKJ2fJZ2dUBSuv+f0 8g+mPwzsHhSVmnI5+JNKPwksInGeOD2BxP0OJFKQFlI/Nexkw/1RFRPZ68j2sUdi kNg3raa0eDcHpbVnvE7zC8rf0zrmTRbhNgMBTj3k02GbEvPuYmoJPFtl+IFYBIyX 6/4ju5X+BOp5OxWV/U2/9BVmgvCSDQEqNfNbF5WvjVxDOHvE8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAD+zdSltVYVcHsS8ttut3OAsV/CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZGRkNjdkNGUtMzk3NC0z ZWVmLWJjYTgtZWY0MTJkNmM1OGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDmEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFdWyGeuFIuSpV6n43woieCpV9Ay79ygN4xaIAe64+d0FbjrFZBHTVj6 ZsKfn5Ms9eWnxkA/FX4g1R3zEChRdsHRNGRsmuGfA/rY5GTMH8sVDVK6Xg1Eg9CS vYZ7UrqnjGsYn88ARIe+m9/HoqtkyRcwqBeKUN8wloTrME3B090nWCOlSH7yRgQe eyusUHS/aAn8c0s7u1ipoSVSJjmp6nqQBO8tmp9dNIQ9tpguGAru5UZCFTOVWjb5 HNHoJqH//iTGMP4d1FpFP9mB5eyJJdhb5hjzkr+47lNnDN8RFwnK/VrFPjXud+Wa /+y3mXYmH97TkB9AcYZPchCQ7YFcrew= -----END CERTIFICATE-----Generated at Sat Apr 5 16:41:57 2025 by rpki-client