$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/98d85f83-4e00-3430-9a7c-520b0e5fac89.roa File: 98d85f83-4e00-3430-9a7c-520b0e5fac89.roa (raw, json) Hash identifier: 4imjEBg9YKsyHtzLmnnP6e7i6LEXr2TZttP9xaIt49w= Subject key identifier: A4:D5:7F:6C:86:0E:63:B1:56:2D:C2:2E:6D:76:AF:68:D2:15:FD:15 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858499AF4851D11CB0EED7B2A40B0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/98d85f83-4e00-3430-9a7c-520b0e5fac89.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 3356 IP address blocks: 192.57.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:85:1d:11:cb:0e:ed:7b:2a:40:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=1c3a6024-891c-44c2-9e14-2fa41ca77811 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:d9:cc:20:a0:b7:cb:f4:bf:a5:c6:d7:3a:ae: ca:35:8d:83:86:3f:46:0e:51:0f:cd:e9:91:93:c5: 87:07:7d:f0:97:88:e2:71:c7:b1:9e:8c:2c:be:76: 7b:0b:d8:22:bf:a6:e4:d0:35:5e:e2:af:39:68:03: 33:f4:1f:17:52:3a:d7:08:5d:2a:2a:cd:bd:c5:e1: 7c:48:24:53:34:6c:3a:8d:88:0c:8e:8d:c8:f7:fc: 8a:54:ed:14:dd:d2:cc:c9:cb:47:c1:50:aa:bb:26: 4b:15:fc:cf:af:a6:38:2d:b2:37:dc:60:38:5c:de: 9c:ef:59:7a:92:f9:b1:1a:6a:fc:70:ea:9b:a0:18: 6a:9e:b3:27:bb:18:58:ea:42:8e:b9:53:b8:42:eb: f7:4c:77:6b:9e:a5:ea:84:13:e0:20:5f:e1:49:cf: 9a:19:3e:65:7b:d6:ce:14:7f:c7:b5:1f:b9:fb:cf: 67:64:42:f8:d1:a8:6b:aa:57:0c:ba:aa:28:1e:4b: 2a:48:11:0e:b5:fd:d3:17:0d:9f:d8:64:b2:b4:b5: 5f:8b:0f:1e:4d:c3:9a:71:19:d8:0d:03:1a:af:1f: 72:4e:a2:ff:b8:c9:6d:9b:e2:7d:0e:91:ed:e9:16: 58:82:3e:68:2b:6c:0b:39:5b:f4:c3:de:2a:bf:43: 10:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:D5:7F:6C:86:0E:63:B1:56:2D:C2:2E:6D:76:AF:68:D2:15:FD:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/98d85f83-4e00-3430-9a7c-520b0e5fac89.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.57.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:34:a9:21:f9:7b:9e:d5:c3:9d:83:55:a9:1e:6f:02:24:73: 53:7f:92:a5:72:30:ee:cf:b6:97:8c:1b:ea:bd:7f:bb:dd:90: ec:10:15:b1:10:7f:86:5c:bf:91:da:be:96:57:74:0c:a1:fe: 68:0e:6c:d9:be:39:e3:d8:db:0f:6f:15:1f:d1:57:6d:a0:3d: 92:1f:49:33:5b:e8:f1:7a:d0:2e:93:04:ed:7f:6e:79:c2:84: 49:d8:8d:13:8c:e2:2b:c8:5e:38:af:c3:94:83:5b:9e:56:5e: 7a:7b:3d:fc:e0:5f:19:11:de:2d:63:68:7b:2e:f2:df:30:03: f4:55:94:24:22:9e:e4:5c:b9:81:2b:2c:66:2f:aa:97:70:03: b2:10:14:82:07:b5:96:ff:23:ae:ae:bf:dd:30:81:0f:bb:91: 7e:f7:b5:45:ae:17:8c:8d:25:41:a6:98:86:cd:b4:2e:7e:fb: 2b:96:49:64:51:9e:41:17:8a:fd:1c:3a:2d:20:6c:dd:78:d4: 19:0f:af:3d:cb:e2:ea:39:c9:55:95:65:7e:14:11:9c:d9:3f: d4:61:9b:1b:0e:12:05:c8:7a:03:4c:4d:e2:03:91:2e:57:09: 9b:52:03:6d:06:41:f0:76:fd:ec:d6:18:1a:68:c0:b8:49:1e: 7b:76:d3:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9IUdEcsO7XsqQLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk MWMzYTYwMjQtODkxYy00NGMyLTllMTQtMmZhNDFjYTc3ODExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4dnMIKC3y/S/pcbXOq7KNY2Dhj9GDlEPzemR k8WHB33wl4jiccexnowsvnZ7C9giv6bk0DVe4q85aAMz9B8XUjrXCF0qKs29xeF8 SCRTNGw6jYgMjo3I9/yKVO0U3dLMyctHwVCquyZLFfzPr6Y4LbI33GA4XN6c71l6 kvmxGmr8cOqboBhqnrMnuxhY6kKOuVO4Quv3THdrnqXqhBPgIF/hSc+aGT5le9bO FH/HtR+5+89nZEL40ahrqlcMuqooHksqSBEOtf3TFw2f2GSytLVfiw8eTcOacRnY DQMarx9yTqL/uMltm+J9DpHt6RZYgj5oK2wLOVv0w94qv0MQsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKTVf2yGDmOxVi3CLm12r2jSFf0VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvOThkODVmODMtNGUwMC0z NDMwLTlhN2MtNTIwYjBlNWZhYzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDl1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEw0qSH5e57Vw52DVakebwIkc1N/kqVyMO7PtpeMG+q9f7vdkOwQFbEQ f4Zcv5HavpZXdAyh/mgObNm+OePY2w9vFR/RV22gPZIfSTNb6PF60C6TBO1/bnnC hEnYjROM4ivIXjivw5SDW55WXnp7PfzgXxkR3i1jaHsu8t8wA/RVlCQinuRcuYEr LGYvqpdwA7IQFIIHtZb/I66uv90wgQ+7kX73tUWuF4yNJUGmmIbNtC5++yuWSWRR nkEXiv0cOi0gbN141BkPrz3L4uo5yVWVZX4UEZzZP9RhmxsOEgXIegNMTeIDkS5X CZtSA20GQfB2/ezWGBpowLhJHnt201E= -----END CERTIFICATE-----Generated at Sat Apr 26 19:23:37 2025 by rpki-client