$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2411ce27-c6f2-3cfd-8fdc-2a6b407f8824.roa File: 2411ce27-c6f2-3cfd-8fdc-2a6b407f8824.roa (raw, json) Hash identifier: pLQasJ3Py86T8Ty2q0ZpIzogf/tzFHJU/LqDpg9szxc= Subject key identifier: 53:07:15:53:9C:FA:12:09:6E:1B:D6:32:CA:C4:BE:95:7C:68:8A:EC Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285849998F3AD385C03FB364821A80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2411ce27-c6f2-3cfd-8fdc-2a6b407f8824.roa Signing time: Mon 21 Apr 2025 13:00:59 +0000 ROA not before: Mon 21 Apr 2025 13:00:59 +0000 ROA not after: Sun 20 Jul 2025 13:00:59 +0000 asID: 3360 IP address blocks: 192.57.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:99:8f:3a:d3:85:c0:3f:b3:64:82:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 21 13:00:59 2025 GMT Not After : Jul 20 13:00:59 2025 GMT Subject: CN=db7f4b1e-2611-4be0-b1ca-88ae83048003 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b3:24:66:07:de:9b:73:5c:90:c6:52:28:d0: ef:d0:ae:31:b5:27:9e:27:5e:c5:6e:ca:41:26:4e: f7:87:39:9c:1e:7b:62:ce:cf:40:41:32:e4:1e:86: c9:a0:f5:ae:3b:64:14:72:19:f3:da:f2:40:de:b0: 05:eb:a2:73:11:d4:d5:64:ea:6c:a9:76:5f:b6:db: 91:6c:aa:ea:6a:0c:17:8f:8c:cb:e4:b1:10:b5:71: 95:68:f4:9b:48:9b:68:3b:62:5e:72:31:42:98:9d: ea:b3:17:d9:f8:ea:8a:aa:64:f1:56:dc:0b:66:ab: ef:b5:79:ad:31:c1:1c:29:aa:84:b2:8d:99:ef:a4: 5f:ac:e6:f9:f5:a7:a7:17:b5:1a:34:52:12:1b:2c: 1c:51:38:13:07:e3:16:5b:e1:ec:f9:84:3e:cc:14: c3:2b:1d:14:e7:82:dd:f9:b8:42:3c:ff:c0:58:49: 72:40:7f:01:7f:78:53:33:22:28:8b:18:1b:05:15: cc:1c:1b:27:22:c7:61:3d:43:18:8d:52:b1:46:5f: 5e:73:87:cd:6c:38:aa:bf:1f:03:0a:1a:d4:2b:35: 16:75:c4:0e:b2:63:36:8e:9d:5e:62:a2:ec:e6:4a: ac:17:ef:3d:55:64:7f:8f:f3:db:ce:04:c5:1a:e8: 59:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:07:15:53:9C:FA:12:09:6E:1B:D6:32:CA:C4:BE:95:7C:68:8A:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2411ce27-c6f2-3cfd-8fdc-2a6b407f8824.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.57.118.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:50:cf:f2:2f:6b:f6:6d:74:d6:db:1f:96:b2:c4:b7:48:91: 2e:07:11:70:fd:e6:f3:84:03:a4:d7:a5:4e:ec:95:d0:91:3c: 63:43:19:e9:bb:ce:77:9b:45:a3:ce:6e:96:61:0a:a9:b9:5a: 16:f5:a5:d4:6a:bd:f0:92:41:c8:90:81:8f:7c:e8:eb:46:07: 26:03:bf:2c:a8:b0:d9:1d:48:c2:7a:78:7b:d6:2e:91:73:08: 0f:11:27:a6:b1:9a:a8:29:9a:61:0f:05:97:79:7a:ba:e4:fb: 57:8b:d0:e7:32:1d:1e:3a:5c:7c:b9:81:a9:a1:1d:b0:06:d5: 2b:0c:27:58:ea:93:90:c2:b2:0c:f5:1c:17:e8:e3:b5:7a:14: 9a:69:02:b2:00:62:b0:f1:69:b4:14:29:40:4f:5f:15:93:14: 82:b4:63:aa:38:34:3d:d4:c4:09:03:62:05:04:77:8f:6a:27: f0:74:c6:cd:a4:0e:79:97:4d:e6:4b:df:d8:80:42:8b:31:ed: 6d:fa:7c:f8:82:55:9e:cd:6b:7b:92:b4:8f:84:d7:da:71:bd: b1:a8:a4:e6:6c:b4:9f:1d:51:4e:13:8f:61:c0:67:5c:54:0e: 19:80:e2:5e:49:20:a2:06:4e:38:28:79:63:cd:38:29:6c:68: 40:2b:68:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmZjzrThcA/s2SCGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDQyMTEzMDA1OVoXDTI1MDcyMDEzMDA1OVowLzEtMCsGA1UEAxMk ZGI3ZjRiMWUtMjYxMS00YmUwLWIxY2EtODhhZTgzMDQ4MDAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLMkZgfem3NckMZSKNDv0K4xtSeeJ17FbspB Jk73hzmcHntizs9AQTLkHobJoPWuO2QUchnz2vJA3rAF66JzEdTVZOpsqXZfttuR bKrqagwXj4zL5LEQtXGVaPSbSJtoO2JecjFCmJ3qsxfZ+OqKqmTxVtwLZqvvtXmt McEcKaqEso2Z76RfrOb59aenF7UaNFISGywcUTgTB+MWW+Hs+YQ+zBTDKx0U54Ld +bhCPP/AWElyQH8Bf3hTMyIoixgbBRXMHBsnIsdhPUMYjVKxRl9ec4fNbDiqvx8D ChrUKzUWdcQOsmM2jp1eYqLs5kqsF+89VWR/j/PbzgTFGuhZlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFMHFVOc+hIJbhvWMsrEvpV8aIrsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMjQxMWNlMjctYzZmMi0z Y2ZkLThmZGMtMmE2YjQwN2Y4ODI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDl2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACRQz/Iva/ZtdNbbH5ayxLdIkS4HEXD95vOEA6TXpU7sldCRPGNDGem7 znebRaPObpZhCqm5Whb1pdRqvfCSQciQgY986OtGByYDvyyosNkdSMJ6eHvWLpFz CA8RJ6axmqgpmmEPBZd5errk+1eL0OcyHR46XHy5gamhHbAG1SsMJ1jqk5DCsgz1 HBfo47V6FJppArIAYrDxabQUKUBPXxWTFIK0Y6o4ND3UxAkDYgUEd49qJ/B0xs2k DnmXTeZL39iAQosx7W36fPiCVZ7Na3uStI+E19pxvbGopOZstJ8dUU4Tj2HAZ1xU DhmA4l5JIKIGTjgoeWPNOClsaEAraL8= -----END CERTIFICATE-----Generated at Tue Apr 29 10:16:59 2025 by rpki-client