$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9fee3fb2-65cf-3a2e-b38c-7d5f3f1da63c.roa File: 9fee3fb2-65cf-3a2e-b38c-7d5f3f1da63c.roa (raw, json) Hash identifier: hkOMa1bJquYUsVfI6TYxXJfAUNOr1Zu/avQbzbJKcuQ= Subject key identifier: CA:11:14:2B:EB:E4:00:CB:0E:00:84:46:C8:72:39:C5:4A:F8:41:7E Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285849998F3AAF34DBB1174B495080 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9fee3fb2-65cf-3a2e-b38c-7d5f3f1da63c.roa Signing time: Mon 21 Apr 2025 13:00:59 +0000 ROA not before: Mon 21 Apr 2025 13:00:59 +0000 ROA not after: Sun 20 Jul 2025 13:00:59 +0000 asID: 203 IP address blocks: 192.57.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:99:8f:3a:af:34:db:b1:17:4b:49:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 21 13:00:59 2025 GMT Not After : Jul 20 13:00:59 2025 GMT Subject: CN=929f8eb0-8ab1-4bd7-b590-ec770f66047a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:39:03:83:5d:27:9c:0d:4f:d0:69:2c:45:be: b2:73:39:68:8e:65:8e:08:e4:91:69:a3:fe:61:3c: 28:ce:e4:92:85:a6:65:70:46:50:af:b1:de:8e:92: 01:97:34:24:d8:15:7b:d6:92:a2:31:f4:57:16:06: 14:bc:2d:61:a2:87:35:d9:4c:0a:ef:67:8b:09:bf: 28:aa:10:54:0d:21:f7:31:e2:27:a7:17:9a:7b:5e: be:9a:94:2a:a7:ec:5c:63:25:28:15:70:17:0f:12: 84:39:af:56:34:27:7e:fc:d4:3e:d8:a2:98:f7:16: 76:dc:1b:4d:c0:cb:a8:58:6e:6f:ac:fc:be:6c:03: 5b:dc:e2:89:0f:09:52:56:65:9d:2a:81:df:3f:1c: b1:83:35:20:50:7d:36:37:f3:be:9d:31:09:4a:96: 1f:a1:46:16:f9:48:ec:b2:02:a8:89:aa:79:90:ca: 12:98:26:f8:95:ee:ee:b1:22:4b:ef:bd:7a:68:7f: 28:d8:ea:59:af:8e:bf:6d:0a:cb:7c:31:d2:b7:4e: 4b:ec:3d:16:a8:b9:36:0d:c5:78:f8:df:b3:62:cd: 29:57:3b:02:b1:26:fb:ce:38:6d:5a:1a:fc:79:67: 6a:ea:b5:5c:a0:b3:58:1f:f4:dd:a2:c6:a6:10:20: 4c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:11:14:2B:EB:E4:00:CB:0E:00:84:46:C8:72:39:C5:4A:F8:41:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9fee3fb2-65cf-3a2e-b38c-7d5f3f1da63c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.57.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:b9:1d:f4:e9:a5:4c:1e:b0:73:14:21:0a:1f:aa:83:86:62: a0:ef:68:08:e7:09:90:67:6d:ef:ad:0e:db:96:cb:ca:4d:0a: f4:ac:07:d8:7a:45:43:1d:36:c3:14:b5:39:ea:29:b3:f7:14: 1d:3d:11:d1:fb:e0:f2:dc:a9:3e:08:cf:ae:d2:55:f5:90:a6: f1:83:24:d3:91:2b:8e:e8:29:ca:09:7c:da:aa:67:8c:09:59: 3e:a8:14:57:04:e0:1f:dd:13:72:f1:56:12:61:8f:f6:83:11: 3a:5c:1b:e7:94:3f:c7:4d:f6:b7:e5:16:7f:46:11:e0:16:8a: f1:f5:9c:fa:1c:a5:96:fc:13:8e:56:5b:a8:bd:0a:c5:c2:8f: a9:a0:3d:73:3e:ef:1b:50:04:23:a1:48:e3:8d:3a:59:a9:32: b1:73:33:b9:f1:26:a1:68:1c:a1:f2:b9:15:ee:28:52:06:b3: ad:58:ae:e9:d1:26:29:b9:6a:0b:58:aa:7c:30:d3:50:21:b8: a5:ee:51:8d:6c:12:19:ff:c4:37:f7:62:57:80:29:45:d3:57: ea:37:0e:08:9b:65:62:61:12:0d:37:f3:43:c9:4a:3c:b8:a2: 2f:03:0e:11:60:9f:b1:9d:bf:29:3f:2e:db:1c:e9:c7:a2:83: 24:4a:14:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmZjzqvNNuxF0tJUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDQyMTEzMDA1OVoXDTI1MDcyMDEzMDA1OVowLzEtMCsGA1UEAxMk OTI5ZjhlYjAtOGFiMS00YmQ3LWI1OTAtZWM3NzBmNjYwNDdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijkDg10nnA1P0GksRb6yczlojmWOCOSRaaP+ YTwozuSShaZlcEZQr7HejpIBlzQk2BV71pKiMfRXFgYUvC1hooc12UwK72eLCb8o qhBUDSH3MeInpxeae16+mpQqp+xcYyUoFXAXDxKEOa9WNCd+/NQ+2KKY9xZ23BtN wMuoWG5vrPy+bANb3OKJDwlSVmWdKoHfPxyxgzUgUH02N/O+nTEJSpYfoUYW+Ujs sgKoiap5kMoSmCb4le7usSJL7716aH8o2OpZr46/bQrLfDHSt05L7D0WqLk2DcV4 +N+zYs0pVzsCsSb7zjhtWhr8eWdq6rVcoLNYH/TdosamECBM+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMoRFCvr5ADLDgCERshyOcVK+EF+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvOWZlZTNmYjItNjVjZi0z YTJlLWIzOGMtN2Q1ZjNmMWRhNjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDl0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABK5HfTppUwesHMUIQofqoOGYqDvaAjnCZBnbe+tDtuWy8pNCvSsB9h6 RUMdNsMUtTnqKbP3FB09EdH74PLcqT4Iz67SVfWQpvGDJNORK47oKcoJfNqqZ4wJ WT6oFFcE4B/dE3LxVhJhj/aDETpcG+eUP8dN9rflFn9GEeAWivH1nPocpZb8E45W W6i9CsXCj6mgPXM+7xtQBCOhSOONOlmpMrFzM7nxJqFoHKHyuRXuKFIGs61YrunR Jim5agtYqnww01AhuKXuUY1sEhn/xDf3YleAKUXTV+o3DgibZWJhEg0380PJSjy4 oi8DDhFgn7Gdvyk/Ltsc6ceigyRKFK0= -----END CERTIFICATE-----Generated at Sat Apr 26 19:05:07 2025 by rpki-client