$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a67e2871-e269-3af8-852b-bc7652a142ca.roa File: a67e2871-e269-3af8-852b-bc7652a142ca.roa (raw, json) Hash identifier: V5aLLrHx/RyC3m1BGMo1CFEj9ov4WxhkbUdU6DG2YSk= Subject key identifier: AB:97:08:BF:DC:85:E4:52:E8:F5:1B:CC:DA:15:33:09:E0:89:E7:A9 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858498CFF134C73CCC2AD921E1A80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a67e2871-e269-3af8-852b-bc7652a142ca.roa Signing time: Thu 17 Apr 2025 01:00:45 +0000 ROA not before: Thu 17 Apr 2025 01:00:45 +0000 ROA not after: Wed 16 Jul 2025 01:00:45 +0000 asID: 202 IP address blocks: 199.228.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:ff:13:4c:73:cc:c2:ad:92:1e:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 17 01:00:45 2025 GMT Not After : Jul 16 01:00:45 2025 GMT Subject: CN=315dd223-3304-4e5d-b82b-974625de7439 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1e:55:0a:88:a1:a0:34:87:a6:61:4f:a4:d4: 92:3f:ea:f9:93:f9:ff:6c:83:e3:e6:48:54:aa:1c: ed:85:80:74:1c:72:a1:3b:99:0b:5f:4c:85:70:46: 17:26:d3:28:e0:86:a1:b0:58:fe:52:4e:3c:d3:1d: 58:79:54:75:7b:88:12:07:ef:27:90:fd:e4:b7:1a: 27:d0:d9:91:95:f9:0a:43:df:50:0d:f0:8a:fe:36: 32:e1:b0:05:c5:d9:24:dd:91:6c:04:3f:6b:d9:41: 4e:bf:77:9b:5d:0c:11:85:7f:54:c9:06:76:25:5a: ce:a6:2f:9a:0c:22:be:a6:93:a2:a2:f1:2e:d0:f2: 89:52:cf:c7:25:ec:35:f4:cd:2d:dc:79:6d:35:a1: e8:3b:92:93:a8:bb:f4:bc:fc:0e:e2:f4:dc:19:3d: a8:47:a6:11:6b:f4:73:8b:ca:16:ed:9a:cd:00:dd: 77:15:02:04:ef:5c:56:77:c5:20:65:f2:40:78:57: c9:e9:12:96:68:a3:eb:db:8b:43:4c:0c:50:3a:eb: b3:81:d1:db:ef:4b:d3:cf:70:00:6b:cd:4e:b3:07: 29:63:b8:50:02:5f:95:55:34:cb:8c:b9:ed:16:5f: 36:35:19:ed:89:19:2d:b0:59:18:5f:86:ef:63:92: 10:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:97:08:BF:DC:85:E4:52:E8:F5:1B:CC:DA:15:33:09:E0:89:E7:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a67e2871-e269-3af8-852b-bc7652a142ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 199.228.190.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:26:0e:69:71:e9:7e:e7:a8:c3:2c:58:c6:1c:d1:a4:be:3e: 9a:5e:22:f9:3b:ea:4b:1b:37:c4:cf:38:2f:52:d3:9b:81:b7: cf:b1:4f:6b:b4:8f:e1:9d:5e:cb:aa:d7:9c:fd:03:33:8f:e0: 59:e1:8f:74:60:55:c2:bc:dc:fd:62:7e:05:f5:41:84:93:49: db:04:e5:3a:7d:8e:ff:3b:a4:14:f9:6a:80:7a:25:ae:ba:8d: 3d:d6:5e:3d:27:55:9a:03:e5:06:73:83:ef:bb:73:db:93:e7: fd:bc:bf:a8:cb:29:c6:89:3b:3f:9b:dc:75:e6:ce:f5:5d:87: e9:3e:1e:45:39:58:b5:aa:1d:5e:d8:48:41:db:88:f5:4e:b3: a6:8d:b3:d7:36:77:be:03:7e:27:de:6d:71:a3:b4:ab:fa:df: 17:85:a7:27:9d:50:8b:0b:a3:df:d3:04:72:a2:3d:c2:6b:9f: ed:a7:fb:ee:b8:d1:73:5a:34:1d:61:25:0b:e8:2e:44:4e:1e: b0:ab:4b:03:69:61:59:00:98:6f:24:bf:49:cc:47:a3:c2:99: 5a:ea:e1:6e:f7:86:5e:0e:18:04:08:33:96:45:c2:04:a6:7f: 68:e4:96:7c:d1:a3:90:fa:bd:00:e1:92:55:8b:a7:db:a4:df: 33:cd:f4:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmM/xNMc8zCrZIeGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk MzE1ZGQyMjMtMzMwNC00ZTVkLWI4MmItOTc0NjI1ZGU3NDM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApR5VCoihoDSHpmFPpNSSP+r5k/n/bIPj5khU qhzthYB0HHKhO5kLX0yFcEYXJtMo4IahsFj+Uk480x1YeVR1e4gSB+8nkP3ktxon 0NmRlfkKQ99QDfCK/jYy4bAFxdkk3ZFsBD9r2UFOv3ebXQwRhX9UyQZ2JVrOpi+a DCK+ppOiovEu0PKJUs/HJew19M0t3HltNaHoO5KTqLv0vPwO4vTcGT2oR6YRa/Rz i8oW7ZrNAN13FQIE71xWd8UgZfJAeFfJ6RKWaKPr24tDTAxQOuuzgdHb70vTz3AA a81OswcpY7hQAl+VVTTLjLntFl82NRntiRktsFkYX4bvY5IQtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKuXCL/cheRS6PUbzNoVMwngieepMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYTY3ZTI4NzEtZTI2OS0z YWY4LTg1MmItYmM3NjUyYTE0MmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx+S+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0mDmlx6X7nqMMsWMYc0aS+PppeIvk76ksbN8TPOC9S05uBt8+xT2u0 j+GdXsuq15z9AzOP4Fnhj3RgVcK83P1ifgX1QYSTSdsE5Tp9jv87pBT5aoB6Ja66 jT3WXj0nVZoD5QZzg++7c9uT5/28v6jLKcaJOz+b3HXmzvVdh+k+HkU5WLWqHV7Y SEHbiPVOs6aNs9c2d74DfifebXGjtKv63xeFpyedUIsLo9/TBHKiPcJrn+2n++64 0XNaNB1hJQvoLkROHrCrSwNpYVkAmG8kv0nMR6PCmVrq4W73hl4OGAQIM5ZFwgSm f2jklnzRo5D6vQDhklWLp9uk3zPN9G0= -----END CERTIFICATE-----Generated at Sat Apr 26 18:08:22 2025 by rpki-client