$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/32a51265-be61-3aa3-bebf-bc4ef6f14ae4.roa File: 32a51265-be61-3aa3-bebf-bc4ef6f14ae4.roa (raw, json) Hash identifier: V85aHB0BGla1OzIzsY+a0j9O3bZT4j7qES82GLFkoh0= Subject key identifier: 09:EC:38:D4:34:4D:8A:66:33:B3:81:77:E1:60:CF:46:F4:19:AB:BE Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858499AF485CDD64F62F911ABDE80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/32a51265-be61-3aa3-bebf-bc4ef6f14ae4.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 203 IP address blocks: 192.57.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:85:cd:d6:4f:62:f9:11:ab:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=5cce706a-d3c0-4495-a15a-ebe6b3b0b8fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d1:0f:bc:f4:58:e4:b9:f2:50:e1:b6:80:36: ce:d4:b3:88:ca:7d:dc:01:19:19:ba:a6:37:59:02: 78:7b:98:b6:c9:c0:04:1f:d5:0b:0b:01:0f:24:10: f4:24:e0:61:73:3b:12:ed:75:0b:6b:fa:d4:f5:18: 82:9f:ca:a1:e4:aa:d1:67:bc:d2:ef:80:f8:b7:8c: 41:fa:c4:52:71:4f:b8:97:64:62:61:50:32:74:14: 5c:99:e2:2a:5e:36:16:50:0a:5a:e8:cf:6a:58:6d: 7a:4f:a4:52:4d:39:bb:3e:7f:bb:de:6e:33:44:18: 7c:df:00:4d:88:a3:5c:77:86:0d:b8:64:5b:70:1d: d1:d6:ad:6d:4a:1a:48:89:0f:5a:0b:ea:67:cd:cf: b9:5b:a8:e1:ac:8f:34:72:8b:2c:53:3e:19:6e:2e: aa:e2:f6:c0:95:9a:14:30:48:d6:6d:25:39:da:4c: 42:73:14:6a:f4:e5:99:bb:eb:f2:a8:c3:f0:3d:8a: ae:5b:38:0a:ac:9f:81:95:68:0d:f9:e9:ed:16:22: 4a:71:45:a3:e0:10:29:a9:98:fc:f8:03:c6:a2:76: 54:b7:79:31:e6:61:60:bf:44:a6:82:0a:c1:ad:8b: 2b:00:18:f7:eb:eb:5a:8f:12:98:23:ca:5d:3a:6b: 41:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:EC:38:D4:34:4D:8A:66:33:B3:81:77:E1:60:CF:46:F4:19:AB:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/32a51265-be61-3aa3-bebf-bc4ef6f14ae4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.57.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:d7:83:87:a4:15:8f:76:8b:f2:e7:9d:03:1a:13:90:eb:a2: d0:a4:c7:7a:5e:0a:85:1c:d2:f7:54:27:56:4e:64:b6:32:c9: 4a:96:42:ea:07:e8:f3:cb:7e:4f:a9:48:99:c4:f4:5d:b6:38: 48:d8:fe:ca:2c:26:11:a3:6f:6d:7f:52:be:d6:2d:a0:75:25: f9:cf:e4:16:be:ad:98:09:6a:89:ca:36:d6:2d:a2:b9:b9:d5: 1a:14:01:b3:ad:68:0b:a5:44:4f:cf:8b:b8:3a:79:dc:e4:9e: d2:0a:24:6d:68:80:e5:21:64:d2:e9:00:83:12:f8:25:5b:2b: dd:46:84:fb:21:d8:b3:f9:16:b0:78:be:0e:b8:b5:9d:9a:34: 36:22:3a:f0:3c:88:c2:f9:be:79:59:7e:33:5b:80:a6:1f:2a: 7e:37:a0:20:61:8c:60:d2:5b:47:ac:22:b6:cd:93:41:e9:02: c4:d2:eb:eb:78:0b:42:c8:7f:84:50:e9:fa:39:2a:9d:65:41: 98:66:3c:0a:1e:c8:f2:92:92:13:70:20:b2:e7:af:f8:58:9e: 2a:3b:02:5b:c0:cc:cc:cc:4a:c7:2e:de:41:1e:65:a3:1e:3b: 69:07:90:3c:7c:ac:4d:8c:a6:41:d9:9d:42:d2:b1:41:e3:38: aa:b6:7d:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9IXN1k9i+RGr3oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk NWNjZTcwNmEtZDNjMC00NDk1LWExNWEtZWJlNmIzYjBiOGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdEPvPRY5LnyUOG2gDbO1LOIyn3cARkZuqY3 WQJ4e5i2ycAEH9ULCwEPJBD0JOBhczsS7XULa/rU9RiCn8qh5KrRZ7zS74D4t4xB +sRScU+4l2RiYVAydBRcmeIqXjYWUApa6M9qWG16T6RSTTm7Pn+73m4zRBh83wBN iKNcd4YNuGRbcB3R1q1tShpIiQ9aC+pnzc+5W6jhrI80cossUz4Zbi6q4vbAlZoU MEjWbSU52kxCcxRq9OWZu+vyqMPwPYquWzgKrJ+BlWgN+entFiJKcUWj4BApqZj8 +APGonZUt3kx5mFgv0SmggrBrYsrABj36+tajxKYI8pdOmtB6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAnsONQ0TYpmM7OBd+Fgz0b0Gau+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMzJhNTEyNjUtYmU2MS0z YWEzLWJlYmYtYmM0ZWY2ZjE0YWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDlxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAvXg4ekFY92i/LnnQMaE5DrotCkx3peCoUc0vdUJ1ZOZLYyyUqWQuoH 6PPLfk+pSJnE9F22OEjY/sosJhGjb21/Ur7WLaB1JfnP5Ba+rZgJaonKNtYtorm5 1RoUAbOtaAulRE/Pi7g6edzkntIKJG1ogOUhZNLpAIMS+CVbK91GhPsh2LP5FrB4 vg64tZ2aNDYiOvA8iML5vnlZfjNbgKYfKn43oCBhjGDSW0esIrbNk0HpAsTS6+t4 C0LIf4RQ6fo5Kp1lQZhmPAoeyPKSkhNwILLnr/hYnio7AlvAzMzMSscu3kEeZaMe O2kHkDx8rE2MpkHZnULSsUHjOKq2fVo= -----END CERTIFICATE-----Generated at Sat Apr 26 19:20:12 2025 by rpki-client