$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/7af485d2-1411-389c-a251-d3d163a361e3.roa File: 7af485d2-1411-389c-a251-d3d163a361e3.roa (raw, json) Hash identifier: HbTC5DYgZFYOKPgKXEtR1wIsI5k2BTZwNMfZBNovGC0= Subject key identifier: 3A:1B:F5:90:09:65:D9:0D:B4:9C:F8:D8:4E:FC:8B:08:FF:1D:CB:7F Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858499DBF33902BA7E09C6F14C400 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/7af485d2-1411-389c-a251-d3d163a361e3.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 203 IP address blocks: 192.57.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:33:90:2b:a7:e0:9c:6f:14:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=694e0981-cd3f-4b29-94a4-8f0f559793f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c0:da:b7:e5:4e:1f:e7:18:bd:83:b6:fe:4a: e0:87:15:41:3b:46:a4:9d:46:0c:3d:f0:3e:6f:9a: 9e:34:f4:9c:ec:c8:0f:37:a0:13:50:53:51:f8:d2: 36:39:4c:7d:50:24:6b:c9:5f:58:cc:1b:4b:7d:d9: 8f:a3:df:09:8f:b6:0d:36:98:6a:63:54:5e:31:cf: 60:cc:9f:49:e1:bb:21:18:c5:ce:dd:ac:ae:8d:0d: 46:00:81:4d:f5:2f:43:fd:f0:d1:fb:79:e2:b8:f8: 21:d4:8e:f4:ea:8d:50:30:14:c6:f7:a4:aa:cb:b8: 1a:30:f6:5b:d4:f4:90:c7:0a:a8:f5:b4:c9:41:bd: 07:c7:f3:d4:97:4f:33:04:3c:0c:df:63:64:a7:14: f1:83:88:aa:c7:62:3b:85:e9:4d:00:5f:19:8e:a6: 7e:f3:30:f1:e2:9e:25:94:95:ac:d5:f8:75:68:8c: a2:98:e2:06:24:17:23:9b:79:8a:85:83:85:91:b5: 00:07:2f:b2:f7:c1:b9:1c:69:a9:d7:6f:ac:53:39: c8:65:06:a0:7a:03:34:18:f1:e4:3f:d2:1c:f3:54: 38:21:d5:d3:4c:51:64:f7:21:d8:4c:77:a8:01:fb: 02:ce:1e:ab:b4:45:f8:56:46:90:51:e6:9b:c5:df: 04:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:1B:F5:90:09:65:D9:0D:B4:9C:F8:D8:4E:FC:8B:08:FF:1D:CB:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/7af485d2-1411-389c-a251-d3d163a361e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.57.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:e9:0c:34:2e:46:5b:43:98:67:49:6f:f1:69:2a:db:ae:5f: 2f:ff:96:c9:c8:33:5f:87:1a:69:07:8d:3f:2f:5f:4e:f9:36: df:d3:e2:6e:5b:43:02:9f:a3:d8:bf:95:58:8b:15:c9:be:df: 00:2b:06:56:07:f2:d7:5d:40:a3:cb:e8:92:cc:02:a2:80:13: 2d:f6:1f:ed:3e:9c:bf:fb:e0:59:d6:44:5a:6f:6e:9c:32:48: 8c:5c:e2:d4:24:ac:b8:79:2d:20:93:61:c1:f9:fe:91:19:48: 2f:09:b9:61:f3:c0:9f:9f:9a:5e:f1:6d:85:12:50:e9:fe:41: 57:83:1c:80:bf:aa:74:8d:3d:28:17:1e:44:ba:e8:22:35:40: 83:f4:3f:35:e4:06:ab:78:a7:1c:21:2f:54:a9:cb:81:a2:1b: 58:71:c0:5e:12:78:6d:c4:67:15:9f:3d:67:6e:e7:9a:f7:e5: 5e:dc:cf:51:ac:26:b9:7f:7a:1f:81:cb:c1:fe:18:76:4a:df: bb:4f:9e:d2:2c:d5:9d:a7:6e:42:1f:1f:d0:d1:1f:b7:c9:5d: 21:1a:a5:a9:6d:a1:9e:d0:09:ad:5f:43:b1:e5:6f:b4:08:7a: fd:00:eb:0f:26:39:7d:95:8d:a2:65:51:c1:37:df:a2:40:3f: 4b:a7:4f:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdvzOQK6fgnG8UxAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk Njk0ZTA5ODEtY2QzZi00YjI5LTk0YTQtOGYwZjU1OTc5M2Y1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncDat+VOH+cYvYO2/krghxVBO0aknUYMPfA+ b5qeNPSc7MgPN6ATUFNR+NI2OUx9UCRryV9YzBtLfdmPo98Jj7YNNphqY1ReMc9g zJ9J4bshGMXO3ayujQ1GAIFN9S9D/fDR+3niuPgh1I706o1QMBTG96Sqy7gaMPZb 1PSQxwqo9bTJQb0Hx/PUl08zBDwM32NkpxTxg4iqx2I7helNAF8ZjqZ+8zDx4p4l lJWs1fh1aIyimOIGJBcjm3mKhYOFkbUABy+y98G5HGmp12+sUznIZQagegM0GPHk P9Ic81Q4IdXTTFFk9yHYTHeoAfsCzh6rtEX4VkaQUeabxd8EJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDob9ZAJZdkNtJz42E78iwj/Hct/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvN2FmNDg1ZDItMTQxMS0z ODljLWEyNTEtZDNkMTYzYTM2MWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwDmYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEHpDDQuRltDmGdJb/FpKtuuXy//lsnIM1+HGmkHjT8vX075Nt/T4m5b QwKfo9i/lViLFcm+3wArBlYH8tddQKPL6JLMAqKAEy32H+0+nL/74FnWRFpvbpwy SIxc4tQkrLh5LSCTYcH5/pEZSC8JuWHzwJ+fml7xbYUSUOn+QVeDHIC/qnSNPSgX HkS66CI1QIP0PzXkBqt4pxwhL1Spy4GiG1hxwF4SeG3EZxWfPWdu55r35V7cz1Gs Jrl/eh+By8H+GHZK37tPntIs1Z2nbkIfH9DRH7fJXSEapaltoZ7QCa1fQ7Hlb7QI ev0A6w8mOX2VjaJlUcE336JAP0unT0w= -----END CERTIFICATE-----Generated at Sun Apr 27 16:33:34 2025 by rpki-client