$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4291302d-89c7-3e70-a924-e474ea5110e5.roa File: 4291302d-89c7-3e70-a924-e474ea5110e5.roa (raw, json) Hash identifier: +DLcHPf156AVJjTC25OCI8WJYDq44rD1Goj6Tfx7Jdk= Subject key identifier: 77:35:DE:EC:85:73:51:A2:47:FB:9F:B9:05:D4:37:EF:20:A2:CE:E3 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858498A346836C2F9ECB8D62A6F80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4291302d-89c7-3e70-a924-e474ea5110e5.roa Signing time: Wed 16 Apr 2025 01:00:48 +0000 ROA not before: Wed 16 Apr 2025 01:00:48 +0000 ROA not after: Tue 15 Jul 2025 01:00:48 +0000 asID: 3360 IP address blocks: 192.238.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8a:34:68:36:c2:f9:ec:b8:d6:2a:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 16 01:00:48 2025 GMT Not After : Jul 15 01:00:48 2025 GMT Subject: CN=bd0e8523-185f-4c62-a668-8fd0c5bc8214 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:15:c5:b9:0c:bc:25:07:d9:89:65:63:c3:05: 04:c3:5d:c2:a6:29:74:12:1a:8d:37:7f:17:a1:85: 35:60:48:03:ec:8b:48:1d:46:b5:70:2f:6d:00:38: 03:09:7f:23:e7:78:f4:d4:e3:85:4e:53:39:e1:95: d7:14:ae:b4:07:02:7b:47:cc:9f:71:7f:3f:ee:7a: b5:5f:df:ce:3f:f1:f7:69:94:bb:0f:27:df:e2:d4: b8:bf:6e:17:a0:ba:ae:38:51:03:11:5a:f3:e7:9d: 88:09:48:51:13:fb:44:04:38:cc:71:2c:71:42:50: 75:f3:79:e8:f9:67:c6:0d:77:8c:0f:6d:83:85:bf: 3a:f1:23:ee:af:33:de:c3:5f:70:53:19:2c:66:26: e8:a4:95:2e:0a:2f:b0:5d:db:0d:3a:42:25:0a:85: 63:9c:2c:03:cf:99:2f:d0:80:25:37:cd:f2:1e:14: ed:96:8c:ba:89:2f:57:78:0d:13:48:e2:49:e8:a6: 05:de:94:d5:6a:6d:11:ee:38:0a:29:89:97:95:f5: 55:39:e4:29:d0:97:7e:5d:a7:fc:13:46:e8:a5:52: 31:19:c2:a9:be:3b:03:e6:fa:b8:84:75:b7:f1:3c: 85:ee:df:3f:f9:df:ba:09:dc:f8:52:86:8f:c5:62: 4d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:35:DE:EC:85:73:51:A2:47:FB:9F:B9:05:D4:37:EF:20:A2:CE:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4291302d-89c7-3e70-a924-e474ea5110e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.238.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:ab:6d:9e:3d:71:33:f1:c7:70:10:84:5e:6d:e8:e0:dc:f3: c2:91:e8:6d:34:c8:13:0a:a9:9c:88:d2:33:b2:5a:1c:17:4f: e4:b8:73:1b:c5:a2:13:15:82:75:0f:14:5f:f3:5d:af:46:1a: 10:48:c5:6c:81:bf:7e:f7:fc:bd:40:8c:46:f9:74:ec:90:e1: 7b:19:90:f5:f5:ee:68:e0:cc:e1:09:e0:e9:cb:80:f7:70:d9: 3c:6a:aa:75:d4:4f:5b:83:1a:de:3a:f8:a3:b0:70:9c:0c:6b: 11:28:15:d9:32:5a:3b:dc:72:f7:6e:97:9b:14:77:03:52:30: dc:7b:05:24:11:66:90:4c:91:7e:67:b5:1c:f3:e2:63:9e:38: d0:23:0d:c7:09:d5:3e:d8:9c:a5:e7:b6:ac:cb:6e:73:91:7c: 65:ae:0d:6c:4d:60:cd:22:ed:ee:0b:11:ca:5d:a6:7e:a6:4a: 9e:a5:64:92:be:73:a7:32:02:67:c9:13:2c:84:f4:76:ce:1a: 5a:6b:77:ca:79:b2:96:03:23:5c:06:a0:dd:23:6f:92:0a:55: cd:94:c4:da:27:48:1c:d7:30:c8:cd:25:d9:d5:0a:7c:a9:83: 48:7e:c6:0e:24:43:02:d2:b1:b3:44:8c:b4:2f:6e:15:8c:a0: 2b:38:7d:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmKNGg2wvnsuNYqb4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDQxNjAxMDA0OFoXDTI1MDcxNTAxMDA0OFowLzEtMCsGA1UEAxMk YmQwZTg1MjMtMTg1Zi00YzYyLWE2NjgtOGZkMGM1YmM4MjE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxXFuQy8JQfZiWVjwwUEw13Cpil0EhqNN38X oYU1YEgD7ItIHUa1cC9tADgDCX8j53j01OOFTlM54ZXXFK60BwJ7R8yfcX8/7nq1 X9/OP/H3aZS7Dyff4tS4v24XoLquOFEDEVrz552ICUhRE/tEBDjMcSxxQlB183no +WfGDXeMD22Dhb868SPurzPew19wUxksZibopJUuCi+wXdsNOkIlCoVjnCwDz5kv 0IAlN83yHhTtloy6iS9XeA0TSOJJ6KYF3pTVam0R7jgKKYmXlfVVOeQp0Jd+Xaf8 E0bopVIxGcKpvjsD5vq4hHW38TyF7t8/+d+6Cdz4UoaPxWJNpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHc13uyFc1GiR/ufuQXUN+8gos7jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNDI5MTMwMmQtODljNy0z ZTcwLWE5MjQtZTQ3NGVhNTExMGU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwO46MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABirbZ49cTPxx3AQhF5t6ODc88KR6G00yBMKqZyI0jOyWhwXT+S4cxvF ohMVgnUPFF/zXa9GGhBIxWyBv373/L1AjEb5dOyQ4XsZkPX17mjgzOEJ4OnLgPdw 2TxqqnXUT1uDGt46+KOwcJwMaxEoFdkyWjvccvdul5sUdwNSMNx7BSQRZpBMkX5n tRzz4mOeONAjDccJ1T7YnKXntqzLbnORfGWuDWxNYM0i7e4LEcpdpn6mSp6lZJK+ c6cyAmfJEyyE9HbOGlprd8p5spYDI1wGoN0jb5IKVc2UxNonSBzXMMjNJdnVCnyp g0h+xg4kQwLSsbNEjLQvbhWMoCs4fTA= -----END CERTIFICATE-----Generated at Sun Apr 27 12:59:38 2025 by rpki-client