$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3de0c2d5-a779-3444-afd7-ea90488fb855.roa File: 3de0c2d5-a779-3444-afd7-ea90488fb855.roa (raw, json) Hash identifier: 0+qdmvdNMBqegvr3ViktGUQPQBG7OOR2PkyObd5Jk6s= Subject key identifier: 12:EC:DB:A4:2C:63:59:4A:19:EE:B6:14:31:AE:65:83:C2:5F:E3:99 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285849F17FD67EF307943329CC2700 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3de0c2d5-a779-3444-afd7-ea90488fb855.roa Signing time: Fri 23 May 2025 01:00:49 +0000 ROA not before: Fri 23 May 2025 01:00:49 +0000 ROA not after: Thu 21 Aug 2025 01:00:49 +0000 asID: 3360 IP address blocks: 192.57.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:7f:d6:7e:f3:07:94:33:29:cc:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: May 23 01:00:49 2025 GMT Not After : Aug 21 01:00:49 2025 GMT Subject: CN=f1fcfea2-c9e4-4f45-ba9f-63c527cbe52e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:dc:3d:40:36:31:2a:d9:6f:b6:22:28:74:0c: 1b:d7:0f:77:ed:34:32:2a:61:57:cd:6f:55:9b:5a: b7:6b:f5:b0:f6:95:4d:57:f9:26:a1:3c:79:5f:06: 92:bb:31:83:9e:d6:da:6a:57:8e:d0:96:6e:fd:dd: 08:8b:91:61:b9:e9:ca:71:86:34:45:9a:fc:72:93: 60:c3:a3:5f:17:a6:4c:79:2a:0a:20:21:4e:76:2d: 59:2a:f4:2c:0c:ac:aa:00:fc:33:cb:e7:2a:3b:bb: c6:39:b9:93:f6:7f:f6:b1:6b:08:92:3a:d7:97:9b: 66:4d:c0:d4:8a:19:c6:73:69:68:fc:07:a0:f6:69: 2e:7f:60:16:06:9e:dd:a5:42:b8:a6:c7:8c:f9:62: 6c:80:ab:06:e4:52:e3:40:1b:a0:6f:f1:f8:fa:cf: bd:0c:63:82:58:b0:2b:e8:c0:a4:00:21:c0:f0:ec: d6:54:38:c5:b6:c5:25:30:57:ce:15:41:4c:9f:a0: 83:4b:b2:05:ff:c5:78:c9:c5:03:0c:87:35:95:ba: 10:66:c8:bc:3d:ee:01:f4:40:56:21:c9:e1:0a:43: 49:ad:37:cd:cd:a7:b2:7a:66:a9:d9:9d:1a:36:ec: 54:88:2d:a9:7f:90:89:69:7c:4e:88:19:00:ed:1a: 2d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:EC:DB:A4:2C:63:59:4A:19:EE:B6:14:31:AE:65:83:C2:5F:E3:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3de0c2d5-a779-3444-afd7-ea90488fb855.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.57.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:b1:80:73:26:91:d8:53:c5:f7:88:6b:07:cf:d9:6e:3f:5f: 54:60:95:e4:d2:fc:fb:3d:78:12:b8:12:af:e8:12:aa:f9:fa: 93:38:6d:96:a1:7f:79:e5:55:3b:73:67:bb:15:51:96:8d:b1: cf:6c:2d:72:28:fb:cc:9c:bf:25:60:ac:94:e4:53:a3:54:7d: 48:df:55:93:d6:27:39:a2:2c:18:db:be:01:df:27:6e:1e:66: 0d:5d:6d:95:6d:56:3d:db:83:98:d3:f7:b6:6f:b2:12:6a:1a: ba:24:57:a6:45:71:23:c1:53:92:16:49:71:14:b3:bd:c7:bd: 58:01:b1:b8:70:a1:d7:b3:70:02:85:20:35:5b:fe:1d:c1:63: b3:28:2b:60:b1:46:3d:90:cd:c1:1e:b8:91:02:16:14:45:b2: 56:c8:48:75:a6:49:19:65:51:bc:6c:4a:78:c3:9d:eb:ca:f3: 16:56:fe:11:d8:06:ad:7a:64:cb:5e:21:d2:2b:25:e7:28:03: e2:af:55:51:fe:b6:85:75:89:95:e6:92:6a:c1:51:1e:ff:44: eb:b2:47:16:7f:32:90:57:b8:c5:a0:64:ab:23:5f:ad:ac:87: f8:b0:87:14:59:44:eb:2b:88:7e:96:d8:b3:b1:0e:d3:25:fd: e0:c6:fb:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxf9Z+8weUMynMJwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk ZjFmY2ZlYTItYzllNC00ZjQ1LWJhOWYtNjNjNTI3Y2JlNTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9w9QDYxKtlvtiIodAwb1w937TQyKmFXzW9V m1q3a/Ww9pVNV/kmoTx5XwaSuzGDntbaaleO0JZu/d0Ii5FhuenKcYY0RZr8cpNg w6NfF6ZMeSoKICFOdi1ZKvQsDKyqAPwzy+cqO7vGObmT9n/2sWsIkjrXl5tmTcDU ihnGc2lo/Aeg9mkuf2AWBp7dpUK4pseM+WJsgKsG5FLjQBugb/H4+s+9DGOCWLAr 6MCkACHA8OzWVDjFtsUlMFfOFUFMn6CDS7IF/8V4ycUDDIc1lboQZsi8Pe4B9EBW IcnhCkNJrTfNzaeyemap2Z0aNuxUiC2pf5CJaXxOiBkA7RotxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBLs26QsY1lKGe62FDGuZYPCX+OZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvM2RlMGMyZDUtYTc3OS0z NDQ0LWFmZDctZWE5MDQ4OGZiODU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDnEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHKxgHMmkdhTxfeIawfP2W4/X1RgleTS/Ps9eBK4Eq/oEqr5+pM4bZah f3nlVTtzZ7sVUZaNsc9sLXIo+8ycvyVgrJTkU6NUfUjfVZPWJzmiLBjbvgHfJ24e Zg1dbZVtVj3bg5jT97ZvshJqGrokV6ZFcSPBU5IWSXEUs73HvVgBsbhwodezcAKF IDVb/h3BY7MoK2CxRj2QzcEeuJECFhRFslbISHWmSRllUbxsSnjDnevK8xZW/hHY Bq16ZMteIdIrJecoA+KvVVH+toV1iZXmkmrBUR7/ROuyRxZ/MpBXuMWgZKsjX62s h/iwhxRZROsriH6W2LOxDtMl/eDG+5g= -----END CERTIFICATE-----Generated at Sun Jun 15 18:05:06 2025 by rpki-client