$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6e6d3c43-a435-3289-a639-6c28743a2d47.roa File: 6e6d3c43-a435-3289-a639-6c28743a2d47.roa (raw, json) Hash identifier: CAsatcYE3wxK+JDN+qg79WATUvEQNYnMOaJ564SSRzI= Subject key identifier: FA:BF:56:22:61:CA:28:D2:2E:AC:18:EF:53:95:1C:09:E3:C1:1C:CD Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285849998F3BC88E05F6F805EFA580 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6e6d3c43-a435-3289-a639-6c28743a2d47.roa Signing time: Mon 21 Apr 2025 13:00:59 +0000 ROA not before: Mon 21 Apr 2025 13:00:59 +0000 ROA not after: Sun 20 Jul 2025 13:00:59 +0000 asID: 202 IP address blocks: 192.85.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:99:8f:3b:c8:8e:05:f6:f8:05:ef:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 21 13:00:59 2025 GMT Not After : Jul 20 13:00:59 2025 GMT Subject: CN=74acf429-6134-4765-967a-0930c9c8b184 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:95:a9:d0:c6:8b:8e:27:4a:fa:35:e6:83:3d: 94:ae:61:f5:ce:2b:af:0f:db:8d:64:73:7e:51:fc: 68:b7:07:56:78:b6:6a:ce:bb:da:e3:86:f0:4f:d1: ab:6d:e2:4e:1d:22:f5:64:01:10:30:f5:4a:83:f0: 14:18:7b:d7:5d:8b:8a:03:7b:44:e5:81:6e:82:5b: bf:0c:bc:9c:76:ab:8f:a4:b8:2e:68:65:f6:08:07: b0:62:50:43:e6:a8:81:25:65:97:0b:48:c2:24:07: e9:90:b0:b4:38:82:e3:11:44:23:d2:e6:cf:d0:13: 15:04:94:87:f4:7d:f6:d5:ad:3c:68:59:f0:bc:41: bf:75:12:b1:9d:70:95:40:18:a3:17:db:1c:89:8a: 84:9d:a4:34:09:6e:80:9b:98:7e:b7:97:7c:9b:92: 5f:af:77:b8:b5:58:49:c0:59:1f:6c:cf:be:5a:b2: 10:f1:26:3b:27:cd:b2:a1:28:fc:3a:77:c1:36:46: cb:dc:d8:2b:ca:d2:49:b2:b9:ea:07:0f:ac:fc:30: 9a:5a:3e:0a:0b:dd:e6:fe:7f:54:e0:51:54:5f:5d: ec:42:d9:d9:c7:7a:b4:f2:b6:e5:75:d8:b9:86:fc: ee:06:7c:a6:13:e7:55:8b:00:21:da:f6:0f:3a:83: f7:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:BF:56:22:61:CA:28:D2:2E:AC:18:EF:53:95:1C:09:E3:C1:1C:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6e6d3c43-a435-3289-a639-6c28743a2d47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.85.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:a7:05:5b:46:ba:37:40:49:96:74:c1:f9:2e:96:ff:95:75: 41:65:f0:ac:23:28:c3:5e:7a:f8:d6:88:ff:2a:b3:b8:a0:41: f0:34:57:0b:15:1e:8c:45:4c:0a:54:e9:a4:bc:2c:5c:6c:03: c3:35:92:97:e6:75:60:36:10:a8:b4:cd:58:6f:86:21:66:82: 6d:42:46:23:c2:60:50:29:87:a2:de:bb:84:b4:31:1d:44:85: 50:e2:6d:c4:49:05:c2:2f:a5:02:84:32:1f:27:81:26:82:51: a3:fa:a8:53:a8:e4:2c:2a:bc:15:42:4e:93:1a:f6:9b:59:e2: 8c:74:de:03:48:98:61:ad:47:56:55:2e:cb:c2:e4:df:b8:44: 3e:3a:87:a2:97:b4:b6:9a:34:13:f7:80:46:f7:5e:e3:fa:e6: aa:04:42:b2:cb:c5:2b:1c:d7:4a:f2:55:d7:d3:86:66:87:d1: 7d:98:c2:2e:2a:e3:d1:a0:2c:51:4e:1b:59:6e:23:b1:47:21: 15:f6:86:dc:31:1a:7c:a4:d1:db:d1:15:be:6a:fb:a8:d5:b8: 51:22:e8:66:75:38:79:0f:0d:c7:b4:20:97:3f:31:d1:af:b9: bc:60:41:42:67:db:ce:9c:08:ba:44:4a:5b:fe:1d:9d:50:a1: 44:6b:ad:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmZjzvIjgX2+AXvpYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDQyMTEzMDA1OVoXDTI1MDcyMDEzMDA1OVowLzEtMCsGA1UEAxMk NzRhY2Y0MjktNjEzNC00NzY1LTk2N2EtMDkzMGM5YzhiMTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZWp0MaLjidK+jXmgz2UrmH1ziuvD9uNZHN+ UfxotwdWeLZqzrva44bwT9GrbeJOHSL1ZAEQMPVKg/AUGHvXXYuKA3tE5YFuglu/ DLycdquPpLguaGX2CAewYlBD5qiBJWWXC0jCJAfpkLC0OILjEUQj0ubP0BMVBJSH 9H321a08aFnwvEG/dRKxnXCVQBijF9sciYqEnaQ0CW6Am5h+t5d8m5Jfr3e4tVhJ wFkfbM++WrIQ8SY7J82yoSj8OnfBNkbL3NgrytJJsrnqBw+s/DCaWj4KC93m/n9U 4FFUX13sQtnZx3q08rblddi5hvzuBnymE+dViwAh2vYPOoP3WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPq/ViJhyijSLqwY71OVHAnjwRzNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNmU2ZDNjNDMtYTQzNS0z Mjg5LWE2MzktNmMyODc0M2EyZDQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFV8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH6nBVtGujdASZZ0wfkulv+VdUFl8KwjKMNeevjWiP8qs7igQfA0VwsV HoxFTApU6aS8LFxsA8M1kpfmdWA2EKi0zVhvhiFmgm1CRiPCYFAph6Leu4S0MR1E hVDibcRJBcIvpQKEMh8ngSaCUaP6qFOo5CwqvBVCTpMa9ptZ4ox03gNImGGtR1ZV LsvC5N+4RD46h6KXtLaaNBP3gEb3XuP65qoEQrLLxSsc10ryVdfThmaH0X2Ywi4q 49GgLFFOG1luI7FHIRX2htwxGnyk0dvRFb5q+6jVuFEi6GZ1OHkPDce0IJc/MdGv ubxgQUJn286cCLpESlv+HZ1QoURrrWY= -----END CERTIFICATE-----Generated at Sat Apr 26 18:09:09 2025 by rpki-client