$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/610adf60-4be1-374e-a08b-7c855b0b7743.roa File: 610adf60-4be1-374e-a08b-7c855b0b7743.roa (raw, json) Hash identifier: 1XSr/rQVKiyyrh/dJJ0ufeYEgYQkYftvFhdwF8I3XqE= Subject key identifier: E1:8F:CD:D3:4E:AC:1A:DC:B5:0C:FA:90:FA:51:A3:78:D4:1B:A7:BD Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858498A3467F975AB28896E174D30 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/610adf60-4be1-374e-a08b-7c855b0b7743.roa Signing time: Wed 16 Apr 2025 01:00:48 +0000 ROA not before: Wed 16 Apr 2025 01:00:48 +0000 ROA not after: Tue 15 Jul 2025 01:00:48 +0000 asID: 202 IP address blocks: 192.238.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8a:34:67:f9:75:ab:28:89:6e:17:4d:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 16 01:00:48 2025 GMT Not After : Jul 15 01:00:48 2025 GMT Subject: CN=5deb3a20-7800-4215-9cd8-1f6ae08183c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:21:b4:e0:17:28:f1:08:e3:43:46:23:8c:eb: 94:d4:6c:ad:a9:a8:ef:7b:fb:1b:af:3f:0d:f2:d2: fe:84:74:75:32:ae:07:ec:b5:d1:ad:cd:2c:38:ac: 8c:83:8e:17:72:24:2d:18:74:25:eb:53:f3:a0:07: 2b:c0:ea:34:58:4d:54:0d:c4:8f:df:b3:02:59:cb: 78:30:c1:18:b3:da:c5:f8:bd:ca:bb:4c:85:29:98: f2:b2:1d:7a:a2:90:fd:66:a0:ca:b2:30:f3:11:45: cb:43:8f:77:16:79:1a:1c:ac:d3:5b:34:c4:c3:85: 10:41:0a:9b:a7:32:12:99:12:7f:76:ab:23:d5:bb: 89:3f:a2:53:fc:83:0a:31:b2:9d:09:c3:d7:04:67: c6:71:0d:4f:b6:fa:3e:77:79:b6:b4:b7:4e:33:8e: dc:bc:f8:a0:18:b1:1e:a4:ab:c7:df:a6:47:07:f2: 5c:36:f0:eb:ed:e8:f6:ac:00:09:66:1f:bd:e4:cd: 5e:09:47:c4:f9:f4:d0:34:8d:6a:89:6b:9e:41:28: 33:93:c4:3c:8c:de:b9:9f:15:4e:ec:6e:3c:bb:33: b3:c4:a9:2c:d7:c4:d8:37:20:01:c6:6e:27:f1:5a: f4:45:56:39:8b:a4:44:8c:87:99:ce:8b:0f:d8:a1: d0:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:8F:CD:D3:4E:AC:1A:DC:B5:0C:FA:90:FA:51:A3:78:D4:1B:A7:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/610adf60-4be1-374e-a08b-7c855b0b7743.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.238.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:00:27:fb:6d:d8:2a:a3:62:8c:a0:e4:75:82:40:36:80:95: 99:8e:b5:c6:ba:0a:a7:e8:71:f9:54:ef:7d:25:c8:b3:fc:d7: cc:7e:21:a5:fa:15:a4:c4:5e:8e:35:6e:74:86:87:45:fe:ce: 25:17:b7:e3:df:73:0f:07:f7:86:49:f7:9c:df:bc:c1:84:c1: 20:22:f0:da:db:ed:e8:db:f1:ed:bc:67:41:7c:70:5f:80:e7: cc:6b:e3:38:59:77:b9:7e:0c:1d:8e:8c:aa:19:73:25:65:f6: 73:99:a8:5d:bf:3a:84:fe:53:ac:47:f6:83:61:ed:ec:8d:04: 32:0f:94:3d:a5:46:80:fe:d4:9f:a6:b1:77:30:b4:b5:9b:c3: f5:b8:90:f4:35:0c:90:09:a6:1f:d2:22:d8:ec:d8:a1:84:1b: 64:85:98:9f:5c:0f:3d:9e:f4:74:dc:27:68:27:73:ca:76:ce: 3e:60:5a:7b:f1:ab:79:6e:14:94:5c:86:9c:0e:7c:11:55:f3: 68:81:82:8e:18:7c:e1:f4:fe:a2:d7:10:b8:b3:8e:53:36:64: bb:ce:01:98:33:13:84:dc:43:3e:1e:0c:0b:fa:96:7d:c1:0d: 84:7f:bd:83:36:0a:e3:85:24:14:65:0d:e2:f6:90:2a:19:f4: 26:5d:fb:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmKNGf5dasoiW4XTTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDQxNjAxMDA0OFoXDTI1MDcxNTAxMDA0OFowLzEtMCsGA1UEAxMk NWRlYjNhMjAtNzgwMC00MjE1LTljZDgtMWY2YWUwODE4M2MyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSG04Bco8QjjQ0YjjOuU1Gytqajve/sbrz8N 8tL+hHR1Mq4H7LXRrc0sOKyMg44XciQtGHQl61PzoAcrwOo0WE1UDcSP37MCWct4 MMEYs9rF+L3Ku0yFKZjysh16opD9ZqDKsjDzEUXLQ493FnkaHKzTWzTEw4UQQQqb pzISmRJ/dqsj1buJP6JT/IMKMbKdCcPXBGfGcQ1Ptvo+d3m2tLdOM47cvPigGLEe pKvH36ZHB/JcNvDr7ej2rAAJZh+95M1eCUfE+fTQNI1qiWueQSgzk8Q8jN65nxVO 7G48uzOzxKks18TYNyABxm4n8Vr0RVY5i6REjIeZzosP2KHQtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOGPzdNOrBrctQz6kPpRo3jUG6e9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNjEwYWRmNjAtNGJlMS0z NzRlLWEwOGItN2M4NTViMGI3NzQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwO45MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABgAJ/tt2CqjYoyg5HWCQDaAlZmOtca6CqfocflU730lyLP818x+IaX6 FaTEXo41bnSGh0X+ziUXt+Pfcw8H94ZJ95zfvMGEwSAi8Nrb7ejb8e28Z0F8cF+A 58xr4zhZd7l+DB2OjKoZcyVl9nOZqF2/OoT+U6xH9oNh7eyNBDIPlD2lRoD+1J+m sXcwtLWbw/W4kPQ1DJAJph/SItjs2KGEG2SFmJ9cDz2e9HTcJ2gnc8p2zj5gWnvx q3luFJRchpwOfBFV82iBgo4YfOH0/qLXELizjlM2ZLvOAZgzE4TcQz4eDAv6ln3B DYR/vYM2CuOFJBRlDeL2kCoZ9CZd+xI= -----END CERTIFICATE-----Generated at Sat Apr 26 19:18:18 2025 by rpki-client