$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/7fb21dfd-3e04-3a67-a9bb-af94afa62413.roa File: 7fb21dfd-3e04-3a67-a9bb-af94afa62413.roa (raw, json) Hash identifier: 6/nC+PLGdfxLnGTqEHHnb+4Q8h0glr8wjVeqJF4mcnI= Subject key identifier: 86:8E:D2:38:28:99:76:55:71:A6:70:9B:C1:70:7C:64:D1:5B:02:DB Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858498A346853FEE66EB02E7005C0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/7fb21dfd-3e04-3a67-a9bb-af94afa62413.roa Signing time: Wed 16 Apr 2025 01:00:48 +0000 ROA not before: Wed 16 Apr 2025 01:00:48 +0000 ROA not after: Tue 15 Jul 2025 01:00:48 +0000 asID: 202 IP address blocks: 192.238.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8a:34:68:53:fe:e6:6e:b0:2e:70:05:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 16 01:00:48 2025 GMT Not After : Jul 15 01:00:48 2025 GMT Subject: CN=178af11a-00cc-45ef-b2c4-3502f8fb8009 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:8b:f4:5a:0e:88:b3:a5:6e:b6:c4:f2:b0:d4: 47:a8:9d:46:ad:20:b4:4a:a6:1b:98:17:5b:03:c8: 6c:3d:3e:44:3b:f1:b9:03:00:b3:be:8f:ce:94:d5: 7b:cf:5f:8c:e1:f8:6d:46:33:0f:21:c8:b8:ea:ff: d0:4b:c2:c8:e3:86:70:d7:7f:6b:a9:30:6c:eb:e4: 23:3f:5e:ad:0a:3a:f7:17:de:47:c5:0d:ce:85:b6: 0e:10:8c:68:e0:ba:67:e1:3e:f6:8f:c1:ba:6a:b6: 32:3e:7f:38:6d:ce:81:23:37:0a:ff:fe:27:3c:db: 3a:2b:fe:43:07:ca:fc:80:95:99:8c:75:0d:55:2f: 2f:40:74:11:ce:85:d4:85:93:8d:52:c6:bf:18:e1: f5:7b:53:85:b4:f0:ad:58:10:8a:f9:24:fc:11:79: 08:de:6c:5c:ea:90:a9:c4:d6:ba:51:ef:8d:78:27: a1:c8:e0:f7:cb:ee:5d:35:f8:c6:24:ca:6e:d9:27: e4:6a:ea:15:82:d4:c1:2a:6e:96:f7:f8:42:ad:e9: 04:13:c8:85:8c:33:de:47:fa:9e:28:0c:0e:2a:b1: 44:de:26:72:6f:63:f4:a0:86:5e:c8:6d:b6:15:17: 50:88:f5:37:00:a7:92:a0:ae:e9:90:19:28:89:cd: 70:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:8E:D2:38:28:99:76:55:71:A6:70:9B:C1:70:7C:64:D1:5B:02:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/7fb21dfd-3e04-3a67-a9bb-af94afa62413.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.238.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:e3:a9:04:18:e5:a9:2d:da:21:3e:ee:7f:f2:9e:52:c8:7d: 08:50:a5:51:ae:22:cf:06:63:a2:eb:f7:cc:e6:ab:86:1a:e7: f7:9e:36:c7:71:9d:69:65:f5:8c:fa:98:e8:21:ec:1f:20:1d: ef:2a:90:42:57:42:29:71:29:ed:4d:3e:b1:b2:af:08:3e:25: 3a:55:68:a6:04:7c:bc:b6:6f:85:48:ab:e8:13:d2:8f:59:1b: 43:93:4a:65:6c:93:b1:0e:97:89:04:17:6f:da:7d:7e:6e:38: 4c:a0:fb:00:16:a9:c2:3f:06:c7:f2:fa:d8:98:9c:9c:2f:2e: c2:58:4e:29:ca:53:db:be:f9:31:5c:66:4a:73:94:13:90:ac: bf:8f:bb:f4:93:50:3e:7b:fa:2f:95:e7:f9:cf:c0:3a:6a:f1: d4:f8:91:fc:0e:87:e8:b4:35:82:5d:3b:ef:0c:2c:f3:8a:de: 94:df:77:b4:bf:fb:10:f0:0e:5f:f2:67:d7:e2:6d:9c:5d:1d: b5:21:a5:bd:d2:47:4a:da:c8:bd:90:03:b4:61:7a:b7:46:af: 13:a8:86:30:b7:43:6c:28:e0:6f:cd:ed:6b:3b:66:a0:02:2a: a7:45:e9:20:9e:93:23:c6:0e:96:7c:56:6a:65:a9:bd:c6:af: 28:3e:db:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmKNGhT/uZusC5wBcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDQxNjAxMDA0OFoXDTI1MDcxNTAxMDA0OFowLzEtMCsGA1UEAxMk MTc4YWYxMWEtMDBjYy00NWVmLWIyYzQtMzUwMmY4ZmI4MDA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIv0Wg6Is6VutsTysNRHqJ1GrSC0SqYbmBdb A8hsPT5EO/G5AwCzvo/OlNV7z1+M4fhtRjMPIci46v/QS8LI44Zw139rqTBs6+Qj P16tCjr3F95HxQ3OhbYOEIxo4Lpn4T72j8G6arYyPn84bc6BIzcK//4nPNs6K/5D B8r8gJWZjHUNVS8vQHQRzoXUhZONUsa/GOH1e1OFtPCtWBCK+ST8EXkI3mxc6pCp xNa6Ue+NeCehyOD3y+5dNfjGJMpu2SfkauoVgtTBKm6W9/hCrekEE8iFjDPeR/qe KAwOKrFE3iZyb2P0oIZeyG22FRdQiPU3AKeSoK7pkBkoic1wLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIaO0jgomXZVcaZwm8FwfGTRWwLbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvN2ZiMjFkZmQtM2UwNC0z YTY3LWE5YmItYWY5NGFmYTYyNDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwO46MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJXjqQQY5akt2iE+7n/ynlLIfQhQpVGuIs8GY6Lr98zmq4Ya5/eeNsdx nWll9Yz6mOgh7B8gHe8qkEJXQilxKe1NPrGyrwg+JTpVaKYEfLy2b4VIq+gT0o9Z G0OTSmVsk7EOl4kEF2/afX5uOEyg+wAWqcI/Bsfy+tiYnJwvLsJYTinKU9u++TFc ZkpzlBOQrL+Pu/STUD57+i+V5/nPwDpq8dT4kfwOh+i0NYJdO+8MLPOK3pTfd7S/ +xDwDl/yZ9fibZxdHbUhpb3SR0rayL2QA7RherdGrxOohjC3Q2wo4G/N7Ws7ZqAC KqdF6SCekyPGDpZ8Vmplqb3Gryg+2yM= -----END CERTIFICATE-----Generated at Sat Apr 26 18:09:16 2025 by rpki-client