$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b3af1e8f-bfaf-30a3-9710-6bbaf13ec2b9.roa File: b3af1e8f-bfaf-30a3-9710-6bbaf13ec2b9.roa (raw, json) Hash identifier: 1AAjCOiygNod8p9tuFk/sAHd8kb8vBCyxv4o04a+fk8= Subject key identifier: 9C:CD:52:CB:2C:27:94:B9:62:57:26:DA:9E:22:20:35:ED:78:B0:22 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285849998F3A58FE683BD73C8C8B40 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b3af1e8f-bfaf-30a3-9710-6bbaf13ec2b9.roa Signing time: Mon 21 Apr 2025 13:00:59 +0000 ROA not before: Mon 21 Apr 2025 13:00:59 +0000 ROA not after: Sun 20 Jul 2025 13:00:59 +0000 asID: 203 IP address blocks: 192.57.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:99:8f:3a:58:fe:68:3b:d7:3c:8c:8b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 21 13:00:59 2025 GMT Not After : Jul 20 13:00:59 2025 GMT Subject: CN=8ff900e0-1bed-4561-a949-c8639b24a32e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:f3:2c:cc:08:c6:0e:1d:fe:c4:cf:98:cc:f1: d0:b3:8b:d3:bd:c5:21:b3:8b:8d:39:bd:3c:42:cb: d4:aa:b7:18:49:d2:c7:9e:99:52:71:73:d8:db:2d: a7:f9:8f:de:69:36:0d:e8:b3:85:0e:84:c1:34:f9: a1:ab:11:ce:39:9f:e0:52:72:9e:16:95:81:e2:88: 7d:ff:92:25:27:2c:30:ec:3a:02:cc:d9:b3:bd:04: d9:08:10:c6:4f:8c:e1:23:9b:7c:70:cc:9d:26:65: 46:bd:d8:95:9c:92:40:1a:78:de:10:8b:95:ef:a9: 0d:77:be:66:67:ed:ea:ad:85:f9:1b:5f:e2:da:cf: 27:08:6e:2d:6e:f1:64:34:ad:87:d4:5d:95:a2:cd: d0:6c:0b:af:3d:f5:33:80:6c:4a:48:47:77:f3:78: ec:03:64:d0:ab:6f:a6:bc:25:f2:5b:f2:17:b4:46: aa:28:8e:e1:19:89:c2:23:f9:67:b3:67:a4:87:a2: e0:46:cc:cd:25:dc:3c:75:77:a1:ca:f4:a1:ef:83: 8c:cb:26:5b:6f:f4:83:0b:75:4f:66:8f:60:62:6d: 4e:94:e0:8c:ff:5a:f3:ba:76:dd:5b:79:6f:88:1e: a1:e8:dd:17:d7:c6:8e:2b:0e:19:5a:17:72:92:3d: dc:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:CD:52:CB:2C:27:94:B9:62:57:26:DA:9E:22:20:35:ED:78:B0:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b3af1e8f-bfaf-30a3-9710-6bbaf13ec2b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.57.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:72:49:e8:5c:3e:fe:7b:21:04:c6:5e:0f:14:b5:9a:49:2e: c3:fb:33:9c:e5:a9:2e:6f:29:37:b7:6d:4d:71:21:ae:ce:56: 08:93:8f:b7:a8:3e:46:0f:36:47:90:b7:00:97:26:c9:8f:3d: 99:66:fb:14:9e:88:32:7b:59:cf:db:2f:5f:b1:bc:78:ee:19: 88:1a:81:5d:bf:fd:2f:01:31:22:8e:15:25:3a:ad:ff:5a:83: 5c:6d:aa:22:e2:08:0d:5f:5a:54:26:6b:de:5c:98:3e:bc:03: 91:c7:6c:9a:bb:98:0d:71:10:16:ad:36:f4:22:a1:a9:ec:92: 45:82:f6:ed:2d:71:3d:0e:18:5e:b6:c4:31:80:dd:ae:71:b6: d5:59:e6:f7:94:21:fb:3a:c7:10:04:5c:92:f4:b3:b9:5c:d1: f6:ed:65:50:36:07:1c:ed:84:ff:86:22:e1:bf:62:0e:21:5b: 15:01:6e:2a:01:69:51:f6:5a:0f:7c:5e:ed:9d:79:0a:a6:a7: de:be:c9:25:05:00:8d:ec:7d:01:e7:78:7c:bf:18:08:52:30: 3a:60:59:b7:0c:01:e2:14:95:3d:c5:cf:d2:6d:30:8e:0a:00: f0:bf:91:64:7e:00:16:6e:1d:17:69:a1:24:ef:9a:bc:7a:c2: a5:b1:8e:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmZjzpY/mg71zyMi0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDQyMTEzMDA1OVoXDTI1MDcyMDEzMDA1OVowLzEtMCsGA1UEAxMk OGZmOTAwZTAtMWJlZC00NTYxLWE5NDktYzg2MzliMjRhMzJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfMszAjGDh3+xM+YzPHQs4vTvcUhs4uNOb08 QsvUqrcYSdLHnplScXPY2y2n+Y/eaTYN6LOFDoTBNPmhqxHOOZ/gUnKeFpWB4oh9 /5IlJyww7DoCzNmzvQTZCBDGT4zhI5t8cMydJmVGvdiVnJJAGnjeEIuV76kNd75m Z+3qrYX5G1/i2s8nCG4tbvFkNK2H1F2Vos3QbAuvPfUzgGxKSEd383jsA2TQq2+m vCXyW/IXtEaqKI7hGYnCI/lns2ekh6LgRszNJdw8dXehyvSh74OMyyZbb/SDC3VP Zo9gYm1OlOCM/1rzunbdW3lviB6h6N0X18aOKw4ZWhdykj3c1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJzNUsssJ5S5Ylcm2p4iIDXteLAiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYjNhZjFlOGYtYmZhZi0z MGEzLTk3MTAtNmJiYWYxM2VjMmI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDlwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHVySehcPv57IQTGXg8UtZpJLsP7M5zlqS5vKTe3bU1xIa7OVgiTj7eo PkYPNkeQtwCXJsmPPZlm+xSeiDJ7Wc/bL1+xvHjuGYgagV2//S8BMSKOFSU6rf9a g1xtqiLiCA1fWlQma95cmD68A5HHbJq7mA1xEBatNvQioanskkWC9u0tcT0OGF62 xDGA3a5xttVZ5veUIfs6xxAEXJL0s7lc0fbtZVA2BxzthP+GIuG/Yg4hWxUBbioB aVH2Wg98Xu2deQqmp96+ySUFAI3sfQHneHy/GAhSMDpgWbcMAeIUlT3Fz9JtMI4K APC/kWR+ABZuHRdpoSTvmrx6wqWxjkM= -----END CERTIFICATE-----Generated at Sat Apr 26 19:09:49 2025 by rpki-client