$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/089026d7-e721-3141-b0b7-9a538692e5ae.roa File: 089026d7-e721-3141-b0b7-9a538692e5ae.roa (raw, json) Hash identifier: 8TmMbJl9vA4uGTzW3nOCnCetO7BOcbe3y3HTf+TqBoE= Subject key identifier: 10:C3:C3:B9:0A:DB:1A:8A:C0:D7:4A:5F:3F:51:27:FB:83:23:90:FB Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858498A34617EA346ACD4C1BF2260 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/089026d7-e721-3141-b0b7-9a538692e5ae.roa Signing time: Wed 16 Apr 2025 01:00:48 +0000 ROA not before: Wed 16 Apr 2025 01:00:48 +0000 ROA not after: Tue 15 Jul 2025 01:00:48 +0000 asID: 5714 IP address blocks: 192.57.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8a:34:61:7e:a3:46:ac:d4:c1:bf:22:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 16 01:00:48 2025 GMT Not After : Jul 15 01:00:48 2025 GMT Subject: CN=9af29567-62c6-470b-ba76-6820a0c55712 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:73:97:54:ec:86:51:61:3e:00:2c:6b:c3:b2: 06:22:6e:1c:a3:1a:ef:29:5f:9b:26:bf:87:eb:60: 33:83:02:79:5b:61:36:2c:10:b8:e3:97:cb:02:73: 0e:39:ac:c7:d3:f3:9a:02:4c:b4:7c:4e:f3:3f:d0: 90:4b:fb:e6:87:56:44:83:43:d0:94:c9:6b:72:f4: fa:70:51:fb:79:77:24:4e:46:7b:fb:c7:cb:0b:94: da:2c:17:67:38:9b:e1:82:58:dd:28:c9:ba:7f:fa: 0b:43:54:38:17:6e:a0:64:98:5d:de:a6:69:b7:30: 01:a7:fa:e5:f7:ca:52:28:16:2e:bc:41:32:12:61: 3e:76:b9:56:8f:e9:9b:b5:e6:a8:bb:36:03:9e:67: cc:a8:13:cb:40:02:ee:1c:66:33:20:08:a5:78:5f: 0b:b8:69:e0:60:69:30:b6:5b:72:b4:08:c6:0e:58: c9:4d:97:6d:d4:30:e8:6a:6b:72:13:39:82:11:28: e4:77:42:e0:ff:19:d0:36:8e:0c:26:8b:14:51:af: f4:a5:0d:ab:0b:27:b5:57:4d:26:49:c4:78:19:9e: e6:e0:93:f8:3d:ff:2d:15:1e:3f:8f:9d:f3:7a:6d: c9:a4:8e:99:f0:4b:ad:bf:45:9e:77:2e:16:1d:4d: 76:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:C3:C3:B9:0A:DB:1A:8A:C0:D7:4A:5F:3F:51:27:FB:83:23:90:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/089026d7-e721-3141-b0b7-9a538692e5ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.57.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:dc:30:ef:6e:a3:85:21:bb:a0:db:1a:f4:e2:07:2e:df:f1: c3:2f:2e:e2:4a:93:74:ac:73:89:f3:9c:63:d2:a8:25:38:cb: 75:ca:e6:e1:9a:0d:df:3f:10:4f:e7:3d:68:05:91:8e:20:ae: a1:29:9c:1d:7c:74:40:f1:9b:67:69:c2:de:9f:da:0f:2b:00: e8:a2:06:87:c9:7f:c7:23:54:64:e3:4d:76:a3:51:15:78:ea: 81:79:c5:7a:a4:34:33:ec:a2:80:8b:5e:88:9c:76:1b:30:7d: c1:be:c0:e8:d6:43:d1:db:5c:21:7d:c2:6f:2a:94:18:dc:63: db:65:ce:72:56:79:15:85:00:5a:52:7b:eb:86:a5:3e:e0:f1: e6:ff:79:bb:78:bf:3f:d3:ae:32:56:da:83:d1:2a:5a:9b:27: 1b:1c:97:90:6e:1e:ac:e4:75:ff:ec:d8:00:e5:80:fb:4e:86: 89:07:1d:ad:09:03:c4:66:ff:06:fc:4d:06:d4:f7:e8:57:42: 27:7d:f7:b0:d9:8c:d0:ab:4c:08:42:49:c1:97:83:3e:7e:0f: 6f:83:55:c9:dc:1e:1b:ae:f9:0e:3a:8d:b2:bd:10:90:9d:3b: a2:ef:1d:41:6d:9b:b3:84:b7:08:3f:a1:16:c9:12:2c:97:cf: d3:c3:f2:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmKNGF+o0as1MG/ImAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDQxNjAxMDA0OFoXDTI1MDcxNTAxMDA0OFowLzEtMCsGA1UEAxMk OWFmMjk1NjctNjJjNi00NzBiLWJhNzYtNjgyMGEwYzU1NzEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHOXVOyGUWE+ACxrw7IGIm4coxrvKV+bJr+H 62AzgwJ5W2E2LBC445fLAnMOOazH0/OaAky0fE7zP9CQS/vmh1ZEg0PQlMlrcvT6 cFH7eXckTkZ7+8fLC5TaLBdnOJvhgljdKMm6f/oLQ1Q4F26gZJhd3qZptzABp/rl 98pSKBYuvEEyEmE+drlWj+mbteaouzYDnmfMqBPLQALuHGYzIAileF8LuGngYGkw tltytAjGDljJTZdt1DDoamtyEzmCESjkd0Lg/xnQNo4MJosUUa/0pQ2rCye1V00m ScR4GZ7m4JP4Pf8tFR4/j53zem3JpI6Z8Eutv0Wedy4WHU12uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBDDw7kK2xqKwNdKXz9RJ/uDI5D7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMDg5MDI2ZDctZTcyMS0z MTQxLWIwYjctOWE1Mzg2OTJlNWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDkwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJfcMO9uo4Uhu6DbGvTiBy7f8cMvLuJKk3Ssc4nznGPSqCU4y3XK5uGa Dd8/EE/nPWgFkY4grqEpnB18dEDxm2dpwt6f2g8rAOiiBofJf8cjVGTjTXajURV4 6oF5xXqkNDPsooCLXoicdhswfcG+wOjWQ9HbXCF9wm8qlBjcY9tlznJWeRWFAFpS e+uGpT7g8eb/ebt4vz/TrjJW2oPRKlqbJxscl5BuHqzkdf/s2ADlgPtOhokHHa0J A8Rm/wb8TQbU9+hXQid997DZjNCrTAhCScGXgz5+D2+DVcncHhuu+Q46jbK9EJCd O6LvHUFtm7OEtwg/oRbJEiyXz9PD8mI= -----END CERTIFICATE-----Generated at Sun Apr 27 04:02:31 2025 by rpki-client