$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/865f51a6-3be5-374c-aa5e-ce1766089882.roa File: 865f51a6-3be5-374c-aa5e-ce1766089882.roa (raw, json) Hash identifier: 5RIz4sDg5tFIKm4DVd6S+grNz1HNNqi/Ixa4AxjBXVs= Subject key identifier: 6D:76:E9:E3:3E:9B:8C:12:47:4C:05:ED:EF:64:B3:B8:3B:49:7C:EA Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285849998F3A30E4602BE7F6A18800 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/865f51a6-3be5-374c-aa5e-ce1766089882.roa Signing time: Mon 21 Apr 2025 13:00:59 +0000 ROA not before: Mon 21 Apr 2025 13:00:59 +0000 ROA not after: Sun 20 Jul 2025 13:00:59 +0000 asID: 3356 IP address blocks: 192.57.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:99:8f:3a:30:e4:60:2b:e7:f6:a1:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 21 13:00:59 2025 GMT Not After : Jul 20 13:00:59 2025 GMT Subject: CN=7ed7eb87-bb1a-429f-af6d-1d75311ac7cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e2:73:b1:d5:da:0d:80:dd:d8:15:0b:98:42: 8e:16:57:8c:6e:6c:e3:d6:5c:59:ee:4d:b9:68:35: 2f:e2:8c:77:e5:97:b0:99:f6:8a:cb:36:80:5b:49: 07:3b:94:7a:45:56:da:6e:21:58:1d:75:5b:9c:1e: 7f:f1:4b:89:cb:cd:ad:b8:8b:cf:a5:e6:74:58:5c: 3c:40:7c:80:b4:ac:24:8e:ee:dc:80:84:42:7e:f2: 15:78:1d:99:48:d5:51:bf:b5:fe:ef:61:3a:55:25: ed:c8:ec:d9:fc:01:83:4c:ce:4c:5c:93:70:2a:e4: bd:7c:a4:b4:7a:38:a8:3f:c4:b5:7b:dc:cc:48:a7: 3b:17:c0:49:70:75:5c:ab:eb:7d:a9:af:98:8a:79: 02:16:e6:e3:ec:79:a6:90:e3:a1:02:60:15:e7:e9: 8c:da:c6:07:e8:69:40:7d:58:86:23:67:8c:17:0d: 70:ac:57:bd:19:dd:83:4c:e8:d6:d4:58:48:ba:44: 3d:27:36:56:b5:28:61:b7:0d:7c:be:37:3e:18:98: 85:e1:dd:4a:24:a2:00:75:02:a8:e7:51:12:32:0d: 7b:6d:7b:b7:a3:ce:d6:d2:a0:61:a5:98:2d:11:65: 8b:4e:28:57:2e:62:d9:7b:9b:dd:57:e2:34:d6:a2: 17:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:76:E9:E3:3E:9B:8C:12:47:4C:05:ED:EF:64:B3:B8:3B:49:7C:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/865f51a6-3be5-374c-aa5e-ce1766089882.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.57.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:fc:e1:87:31:58:b4:35:4f:cb:a9:58:f7:09:21:67:9f:fa: 87:81:70:11:92:04:01:e4:6c:e3:10:4c:61:2b:6c:b9:e5:0e: bd:a8:fe:cf:f4:98:9e:43:58:a6:77:b0:18:69:45:99:9e:8c: d9:90:37:3b:c9:e5:47:fa:c1:f6:38:0a:d4:ee:22:81:c7:6a: 85:68:f7:25:54:01:b1:7b:60:88:bc:29:96:9a:16:6b:d9:73: ed:6c:8c:7a:98:75:0a:01:58:4f:3d:1d:52:1c:29:a2:d5:0d: c1:c5:6f:f3:91:5b:f4:2c:ef:87:57:d5:93:f6:6b:da:1d:6f: c3:db:c7:cd:81:1d:3d:73:cd:3e:86:a9:6f:5e:2f:68:c9:c5: 06:ff:1b:9b:8b:61:a3:75:20:db:4f:da:b9:36:14:2c:79:a9: 74:65:6d:16:c3:fa:78:9e:f7:44:97:bc:af:e2:de:bf:10:81: ef:d7:92:b7:de:8c:2c:98:57:a1:9e:09:ea:99:5c:e1:f8:af: c0:ae:4a:82:c3:57:af:62:9a:fb:79:4f:38:87:10:fc:ff:f5: 9c:41:cd:29:83:97:f5:46:eb:3f:11:92:b6:82:e8:e0:24:1d: 5e:f2:22:68:34:c6:71:35:37:af:87:bb:3a:11:2b:e7:1a:e5: 9a:5a:49:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmZjzow5GAr5/ahiAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDQyMTEzMDA1OVoXDTI1MDcyMDEzMDA1OVowLzEtMCsGA1UEAxMk N2VkN2ViODctYmIxYS00MjlmLWFmNmQtMWQ3NTMxMWFjN2NjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseJzsdXaDYDd2BULmEKOFleMbmzj1lxZ7k25 aDUv4ox35ZewmfaKyzaAW0kHO5R6RVbabiFYHXVbnB5/8UuJy82tuIvPpeZ0WFw8 QHyAtKwkju7cgIRCfvIVeB2ZSNVRv7X+72E6VSXtyOzZ/AGDTM5MXJNwKuS9fKS0 ejioP8S1e9zMSKc7F8BJcHVcq+t9qa+YinkCFubj7HmmkOOhAmAV5+mM2sYH6GlA fViGI2eMFw1wrFe9Gd2DTOjW1FhIukQ9JzZWtShhtw18vjc+GJiF4d1KJKIAdQKo 51ESMg17bXu3o87W0qBhpZgtEWWLTihXLmLZe5vdV+I01qIXFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG126eM+m4wSR0wF7e9ks7g7SXzqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvODY1ZjUxYTYtM2JlNS0z NzRjLWFhNWUtY2UxNzY2MDg5ODgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDlwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJr84YcxWLQ1T8upWPcJIWef+oeBcBGSBAHkbOMQTGErbLnlDr2o/s/0 mJ5DWKZ3sBhpRZmejNmQNzvJ5Uf6wfY4CtTuIoHHaoVo9yVUAbF7YIi8KZaaFmvZ c+1sjHqYdQoBWE89HVIcKaLVDcHFb/ORW/Qs74dX1ZP2a9odb8Pbx82BHT1zzT6G qW9eL2jJxQb/G5uLYaN1INtP2rk2FCx5qXRlbRbD+nie90SXvK/i3r8Qge/Xkrfe jCyYV6GeCeqZXOH4r8CuSoLDV69imvt5TziHEPz/9ZxBzSmDl/VG6z8RkraC6OAk HV7yImg0xnE1N6+HuzoRK+ca5ZpaSe4= -----END CERTIFICATE-----Generated at Sat Apr 26 19:11:12 2025 by rpki-client