$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c9ac6880-13f8-3402-b332-67ac04e2b2f3.roa File: c9ac6880-13f8-3402-b332-67ac04e2b2f3.roa (raw, json) Hash identifier: F2PJFpjW+ySI8CYNByWHs+IBrH63rwFom0wJsm1MA0E= Subject key identifier: CC:5E:01:86:FE:F9:83:6A:F7:E5:27:1C:E5:E5:8D:6A:68:5E:F9:28 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858498A3468F506C38FE736D92A00 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c9ac6880-13f8-3402-b332-67ac04e2b2f3.roa Signing time: Wed 16 Apr 2025 01:00:48 +0000 ROA not before: Wed 16 Apr 2025 01:00:48 +0000 ROA not after: Tue 15 Jul 2025 01:00:48 +0000 asID: 203 IP address blocks: 199.228.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8a:34:68:f5:06:c3:8f:e7:36:d9:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 16 01:00:48 2025 GMT Not After : Jul 15 01:00:48 2025 GMT Subject: CN=f7b3a6fb-f8e8-40f5-9469-0697dbb45a8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:0b:c2:fb:91:3e:7b:40:39:0f:1c:6f:20:50: 18:64:1e:79:1e:bb:58:dd:ec:52:e4:ea:be:f5:81: 88:b2:d7:98:78:e1:f2:2f:83:49:a9:79:31:dc:cb: 12:57:27:98:d8:63:43:7f:f9:aa:09:b1:6f:be:24: 14:d9:bd:49:2d:a3:2d:cc:f5:7d:0b:7e:27:ba:f1: bb:9b:02:06:98:fb:a8:3b:ea:90:33:4c:b3:a2:c2: dc:60:78:89:2e:37:41:da:aa:d4:bb:af:71:98:9a: 49:0e:87:e8:bb:ef:a6:e6:c3:3b:76:4b:dc:13:08: 23:a4:29:b9:d8:21:e6:3f:dc:f7:59:b7:c9:03:54: a5:21:27:2a:d2:72:3d:5a:36:0d:ed:44:59:43:82: 0f:7b:c1:14:32:ee:66:96:53:f1:2f:d8:c3:0f:41: c3:03:cb:e4:f8:f0:1b:d0:0c:03:ec:db:7b:51:0d: 50:7b:76:54:07:39:3a:56:4d:df:52:8b:ce:74:5f: 01:0e:dc:88:d2:49:f8:5a:e3:70:17:34:2a:a8:07: 6f:66:d5:b7:33:98:55:28:8c:04:7d:ed:64:8f:dd: b5:7f:3a:ba:4f:c9:1c:be:0a:29:c6:f6:2d:f1:98: 43:2b:55:25:2e:cb:3e:53:c6:12:11:bb:ff:b8:01: a6:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:5E:01:86:FE:F9:83:6A:F7:E5:27:1C:E5:E5:8D:6A:68:5E:F9:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c9ac6880-13f8-3402-b332-67ac04e2b2f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 199.228.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:81:63:5e:40:2f:61:78:ef:6e:bc:63:a4:30:2d:ed:af:9c: d4:80:60:32:7a:0c:de:e0:ea:99:ed:74:60:aa:2a:2d:df:44: 27:7d:d9:04:12:00:aa:0d:f3:04:9b:d3:a8:39:78:6a:01:fe: e5:61:28:24:1e:a1:1a:58:aa:a5:aa:78:b3:04:72:bc:60:43: 56:33:d2:43:39:a5:95:4d:80:b1:ec:1a:b4:f0:89:f5:ad:51: 1d:e8:da:c4:21:49:6e:10:26:07:8e:e6:e9:05:cf:fe:a6:aa: 4c:60:30:00:a9:fa:51:88:28:03:17:b4:d4:03:e7:e9:ee:47: 20:34:5d:2a:b6:cd:5a:93:68:e8:ea:40:5c:86:e9:c5:08:05: cd:5a:63:0e:25:06:09:e7:bd:de:cb:64:52:f6:f7:67:84:b0: 2a:5a:1c:c7:94:2f:51:8b:20:f9:3d:a6:6a:3f:0a:4b:46:2a: 32:60:1e:db:0d:cd:02:94:c7:5c:b5:85:b3:c9:56:db:13:d9: b9:2e:32:0f:58:a2:de:55:02:0e:b1:f6:15:ec:b8:85:77:e5: 80:cf:19:8c:5c:5f:47:b5:20:41:8c:bb:1c:a5:89:b3:e6:bd: 94:a4:08:91:68:ce:0b:00:08:1c:3a:d0:a6:ef:e7:70:62:df: 5b:f8:ad:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmKNGj1BsOP5zbZKgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDQxNjAxMDA0OFoXDTI1MDcxNTAxMDA0OFowLzEtMCsGA1UEAxMk ZjdiM2E2ZmItZjhlOC00MGY1LTk0NjktMDY5N2RiYjQ1YThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgvC+5E+e0A5DxxvIFAYZB55HrtY3exS5Oq+ 9YGIsteYeOHyL4NJqXkx3MsSVyeY2GNDf/mqCbFvviQU2b1JLaMtzPV9C34nuvG7 mwIGmPuoO+qQM0yzosLcYHiJLjdB2qrUu69xmJpJDofou++m5sM7dkvcEwgjpCm5 2CHmP9z3WbfJA1SlIScq0nI9WjYN7URZQ4IPe8EUMu5mllPxL9jDD0HDA8vk+PAb 0AwD7Nt7UQ1Qe3ZUBzk6Vk3fUovOdF8BDtyI0kn4WuNwFzQqqAdvZtW3M5hVKIwE fe1kj921fzq6T8kcvgopxvYt8ZhDK1UlLss+U8YSEbv/uAGmmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMxeAYb++YNq9+UnHOXljWpoXvkoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYzlhYzY4ODAtMTNmOC0z NDAyLWIzMzItNjdhYzA0ZTJiMmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx+SOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABWBY15AL2F47268Y6QwLe2vnNSAYDJ6DN7g6pntdGCqKi3fRCd92QQS AKoN8wSb06g5eGoB/uVhKCQeoRpYqqWqeLMEcrxgQ1Yz0kM5pZVNgLHsGrTwifWt UR3o2sQhSW4QJgeO5ukFz/6mqkxgMACp+lGIKAMXtNQD5+nuRyA0XSq2zVqTaOjq QFyG6cUIBc1aYw4lBgnnvd7LZFL292eEsCpaHMeUL1GLIPk9pmo/CktGKjJgHtsN zQKUx1y1hbPJVtsT2bkuMg9Yot5VAg6x9hXsuIV35YDPGYxcX0e1IEGMuxylibPm vZSkCJFozgsACBw60Kbv53Bi31v4rV0= -----END CERTIFICATE-----Generated at Sat Apr 26 19:27:45 2025 by rpki-client