$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/35023989-e506-3bde-b36c-ea2a9b9db547.roa File: 35023989-e506-3bde-b36c-ea2a9b9db547.roa (raw, json) Hash identifier: ZZ5D3XW6Ric3nzjQ4FbOFLcgk/bQPmXZk2RiSqxdyUE= Subject key identifier: 64:12:E6:ED:84:E9:4D:C2:7E:AC:27:5B:F5:70:4D:0C:20:88:9A:D4 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858499DBF33559AD35E39832D2BEE Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/35023989-e506-3bde-b36c-ea2a9b9db547.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 2159 IP address blocks: 192.57.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:33:55:9a:d3:5e:39:83:2d:2b:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=ec7436e7-561a-45fa-9151-329bdb82795d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:32:0a:ca:65:7d:36:03:3b:80:9c:50:fd:14: ce:c9:91:c2:37:ad:58:20:b8:10:03:4b:85:90:f9: da:59:c1:bd:57:7e:47:e2:46:c5:06:b7:10:2f:77: c2:9b:10:65:18:46:06:46:91:37:52:bc:82:57:7b: fa:11:b8:9a:07:9e:4b:cb:c7:a8:88:ed:c2:47:e6: c9:f0:cc:dd:49:02:09:32:bc:08:5b:75:ca:0e:3c: e0:80:b7:6d:f0:ff:c9:71:fb:ac:ef:69:df:d7:8e: 3a:b8:65:50:da:97:cf:da:29:37:1b:fd:4d:91:a3: b9:0d:a7:a9:6c:1a:82:d6:6c:76:56:cd:68:22:88: d5:48:a6:36:e2:fe:e7:43:e3:42:31:92:7e:0e:fa: 39:4a:07:0a:ee:a8:37:ea:14:20:35:0b:6d:d5:ea: 80:d7:5f:29:fc:f5:49:6f:1e:f1:ea:ad:78:b1:34: e1:6f:39:4a:22:01:65:e1:9c:e6:e5:a1:17:9d:a7: e8:df:32:7c:c7:e0:4e:ae:e8:34:9a:1c:24:08:4b: c4:01:e0:53:50:82:f1:84:f2:d2:91:ce:95:c2:8b: f1:43:fd:6f:e7:b8:e4:b1:a1:42:c9:8b:15:15:6d: 77:a0:6e:27:0b:57:b4:17:47:51:a3:f1:8b:ac:93: f4:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:12:E6:ED:84:E9:4D:C2:7E:AC:27:5B:F5:70:4D:0C:20:88:9A:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/35023989-e506-3bde-b36c-ea2a9b9db547.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.57.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:67:ab:91:44:ce:7c:27:90:1b:36:55:12:52:f4:3a:49:7b: fa:6b:f5:6d:cc:ae:43:68:32:3b:12:76:20:ae:1d:f7:7e:10: 52:ff:f1:d5:f6:4f:59:f9:5a:98:7c:b8:c9:d4:d5:1d:44:98: 14:da:92:17:9b:3c:0f:25:c4:d5:2a:76:8b:a3:c8:1f:c9:30: d3:42:1b:9c:7d:b0:d9:27:1c:81:19:85:11:55:8a:78:c3:e2: d1:86:8d:71:79:3f:aa:a1:a4:90:36:3f:58:7a:d9:3b:19:d4: dd:0c:73:35:59:9e:40:f0:e8:72:3d:c0:f8:4b:d6:52:bb:20: 2d:ba:b7:ef:1e:3f:26:5a:7c:28:43:e8:66:4d:bc:7b:bd:c6: c7:b2:36:c5:c3:ed:90:88:8a:a7:d7:4c:64:e2:44:0f:c4:1b: 4c:4f:65:af:22:e6:86:c5:86:a6:a0:f5:fe:c8:bc:bd:82:bf: f0:0f:fd:c2:b6:ad:79:8c:4c:49:01:fd:d0:ba:96:85:9c:bb: 73:cf:b3:00:e6:01:d0:c2:4a:2f:15:ae:e3:f4:3b:0e:55:24: 6f:0b:b3:de:97:0c:c4:23:21:e6:d0:ee:d2:14:b5:fb:19:74: bf:43:eb:6c:7b:f3:70:2a:80:6e:41:a0:71:cc:3c:4c:15:5c: 88:25:8c:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdvzNVmtNeOYMtK+4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk ZWM3NDM2ZTctNTYxYS00NWZhLTkxNTEtMzI5YmRiODI3OTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjIKymV9NgM7gJxQ/RTOyZHCN61YILgQA0uF kPnaWcG9V35H4kbFBrcQL3fCmxBlGEYGRpE3UryCV3v6EbiaB55Ly8eoiO3CR+bJ 8MzdSQIJMrwIW3XKDjzggLdt8P/Jcfus72nf1446uGVQ2pfP2ik3G/1NkaO5Daep bBqC1mx2Vs1oIojVSKY24v7nQ+NCMZJ+Dvo5SgcK7qg36hQgNQtt1eqA118p/PVJ bx7x6q14sTThbzlKIgFl4Zzm5aEXnafo3zJ8x+BOrug0mhwkCEvEAeBTUILxhPLS kc6VwovxQ/1v57jksaFCyYsVFW13oG4nC1e0F0dRo/GLrJP0dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGQS5u2E6U3CfqwnW/VwTQwgiJrUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMzUwMjM5ODktZTUwNi0z YmRlLWIzNmMtZWEyYTliOWRiNTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwDmYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADFnq5FEznwnkBs2VRJS9DpJe/pr9W3MrkNoMjsSdiCuHfd+EFL/8dX2 T1n5Wph8uMnU1R1EmBTakhebPA8lxNUqdoujyB/JMNNCG5x9sNknHIEZhRFVinjD 4tGGjXF5P6qhpJA2P1h62TsZ1N0MczVZnkDw6HI9wPhL1lK7IC26t+8ePyZafChD 6GZNvHu9xseyNsXD7ZCIiqfXTGTiRA/EG0xPZa8i5obFhqag9f7IvL2Cv/AP/cK2 rXmMTEkB/dC6loWcu3PPswDmAdDCSi8VruP0Ow5VJG8Ls96XDMQjIebQ7tIUtfsZ dL9D62x783AqgG5BoHHMPEwVXIgljDI= -----END CERTIFICATE-----Generated at Mon Apr 28 02:39:44 2025 by rpki-client