$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/fa5aa617-850e-32c2-ab38-1f7e67d475c5.roa File: fa5aa617-850e-32c2-ab38-1f7e67d475c5.roa (raw, json) Hash identifier: H3fJI8UErpMB6QCZDWOI9x+DiSaUtIjiFBcb7Vi4DR0= Subject key identifier: 27:DB:CA:44:21:B6:9C:28:82:5C:D3:24:44:47:43:30:43:CE:7A:F7 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285848AAFB55CD488F7BEE7F831980 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/fa5aa617-850e-32c2-ab38-1f7e67d475c5.roa Signing time: Sun 26 Jan 2025 02:00:38 +0000 ROA not before: Sun 26 Jan 2025 02:00:38 +0000 ROA not after: Sat 26 Apr 2025 01:00:38 +0000 asID: 203 IP address blocks: 192.57.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:aa:fb:55:cd:48:8f:7b:ee:7f:83:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jan 26 02:00:38 2025 GMT Not After : Apr 26 01:00:38 2025 GMT Subject: CN=aa15f5f2-fef7-4dc2-8b95-ad649c8dac34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a4:0b:ae:81:65:b9:bb:fa:3c:99:c8:94:72: 50:d5:a4:d1:7d:5d:9e:6c:9f:23:8e:a2:38:03:17: 31:b0:c7:54:7c:21:d2:f6:97:a8:c8:e1:49:82:04: b6:c2:22:08:84:ed:97:dd:27:f5:05:9b:53:d6:4d: 37:d1:87:e0:4b:fd:86:61:83:21:13:12:30:7f:22: c2:2e:4d:01:11:b2:e6:a8:82:66:41:34:10:b4:d5: fc:b0:fd:dd:67:05:25:c0:8c:fe:ec:8d:f8:fc:9e: 61:a6:a5:b3:a9:db:ec:f6:58:e8:6a:9e:08:c8:2c: 8a:6d:2b:58:bc:7a:e8:70:85:b2:db:03:bc:a5:3f: 6f:8a:ae:4e:90:1e:67:88:42:24:dd:e3:65:95:f5: 42:ed:02:f3:53:26:d5:07:d3:6d:b3:68:1b:33:ee: 0a:5c:55:27:b2:ea:d5:3a:da:e3:0a:de:8b:0c:97: a3:a4:76:7f:12:17:5e:75:ba:36:ef:8d:e6:25:36: 50:e4:e2:cb:bf:fe:0a:07:ca:06:79:79:9f:95:48: a0:60:e8:fe:9e:d9:6f:5a:6a:df:be:24:a4:41:7e: 13:95:48:3c:d0:fc:9a:ca:c8:21:b5:20:20:de:33: c5:da:65:23:9f:c3:7e:7e:07:db:db:1a:13:4e:bc: 7e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:DB:CA:44:21:B6:9C:28:82:5C:D3:24:44:47:43:30:43:CE:7A:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/fa5aa617-850e-32c2-ab38-1f7e67d475c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.57.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:cf:b7:86:31:a9:ca:c6:eb:27:b5:f0:13:36:3c:fc:14:73: 7e:50:a2:b6:14:1d:f3:41:32:3e:bb:f1:6e:40:d6:ce:d0:ac: 12:b0:0c:7c:3d:82:b5:19:26:ad:75:5e:d5:54:ba:c3:be:d4: 68:51:f0:3f:82:04:d2:96:5b:cf:35:c8:0d:fd:96:5f:ee:2a: d3:5a:6f:23:25:80:9e:b0:3c:90:80:c1:74:e6:8a:d9:1b:03: 46:3e:1c:b8:3a:99:db:2b:9c:53:e4:a4:47:15:44:e1:45:9e: 45:0c:b4:13:3e:b1:06:1a:d6:1a:32:10:d2:59:fe:98:51:7e: 86:f3:e5:58:9d:fa:16:1e:26:52:59:56:22:35:b6:13:f0:ea: 50:cf:eb:20:0a:99:bb:5e:e4:91:22:a1:f4:d5:39:ea:67:d4: 7b:f4:d2:be:f4:3a:c0:9a:1e:a4:6e:66:da:a7:ba:0e:78:fb: 3c:3a:e0:de:96:5b:3c:ed:47:a6:43:39:85:46:af:83:f8:18: 70:67:50:86:99:9f:43:89:03:1c:bc:00:be:02:d0:8d:e7:09: 24:da:53:9c:95:21:3c:14:b3:27:80:9e:14:0c:69:37:0b:43: 8c:9b:20:53:76:55:f7:e0:17:0d:ca:1f:b4:ab:65:94:eb:66: da:5f:82:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiq+1XNSI977n+DGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDEyNjAyMDAzOFoXDTI1MDQyNjAxMDAzOFowLzEtMCsGA1UEAxMk YWExNWY1ZjItZmVmNy00ZGMyLThiOTUtYWQ2NDljOGRhYzM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKQLroFlubv6PJnIlHJQ1aTRfV2ebJ8jjqI4 AxcxsMdUfCHS9peoyOFJggS2wiIIhO2X3Sf1BZtT1k030YfgS/2GYYMhExIwfyLC Lk0BEbLmqIJmQTQQtNX8sP3dZwUlwIz+7I34/J5hpqWzqdvs9ljoap4IyCyKbStY vHrocIWy2wO8pT9viq5OkB5niEIk3eNllfVC7QLzUybVB9Nts2gbM+4KXFUnsurV OtrjCt6LDJejpHZ/Ehdedbo2743mJTZQ5OLLv/4KB8oGeXmflUigYOj+ntlvWmrf viSkQX4TlUg80PyaysghtSAg3jPF2mUjn8N+fgfb2xoTTrx+9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCfbykQhtpwoglzTJERHQzBDznr3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZmE1YWE2MTctODUwZS0z MmMyLWFiMzgtMWY3ZTY3ZDQ3NWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDlgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFzPt4YxqcrG6ye18BM2PPwUc35QorYUHfNBMj678W5A1s7QrBKwDHw9 grUZJq11XtVUusO+1GhR8D+CBNKWW881yA39ll/uKtNabyMlgJ6wPJCAwXTmitkb A0Y+HLg6mdsrnFPkpEcVROFFnkUMtBM+sQYa1hoyENJZ/phRfobz5Vid+hYeJlJZ ViI1thPw6lDP6yAKmbte5JEiofTVOepn1Hv00r70OsCaHqRuZtqnug54+zw64N6W WzztR6ZDOYVGr4P4GHBnUIaZn0OJAxy8AL4C0I3nCSTaU5yVITwUsyeAnhQMaTcL Q4ybIFN2VffgFw3KH7SrZZTrZtpfguo= -----END CERTIFICATE-----Generated at Sun Apr 6 03:25:22 2025 by rpki-client