$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a7e26c7a-b1e6-3d01-ae02-7faa09a46c52.roa File: a7e26c7a-b1e6-3d01-ae02-7faa09a46c52.roa (raw, json) Hash identifier: 2e9oZKKXmONGF17uiw9qFqS5nAcV5mrmJA+VuRXC2TU= Subject key identifier: 69:C4:13:DD:8D:52:61:54:89:81:DC:31:05:58:08:7D:B1:DC:E1:2D Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858498A346654CE998155077B0F40 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a7e26c7a-b1e6-3d01-ae02-7faa09a46c52.roa Signing time: Wed 16 Apr 2025 01:00:48 +0000 ROA not before: Wed 16 Apr 2025 01:00:48 +0000 ROA not after: Tue 15 Jul 2025 01:00:48 +0000 asID: 3356 IP address blocks: 192.85.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8a:34:66:54:ce:99:81:55:07:7b:0f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 16 01:00:48 2025 GMT Not After : Jul 15 01:00:48 2025 GMT Subject: CN=94f4e1e7-65b7-4ba8-8dba-29a198c4ba69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:8b:36:31:be:d1:b2:f8:ed:24:18:89:47:ac: 7f:0b:e6:04:ce:48:2c:7c:f6:78:72:9a:63:20:f1: 6d:a6:24:82:97:ce:c9:24:41:5e:cf:65:62:fd:02: 81:e3:ff:ae:ef:ba:76:50:62:7a:de:e1:eb:f5:59: 1b:c6:49:87:01:06:b2:73:4b:78:c5:40:6a:ae:b5: 25:28:b1:cd:38:29:15:f2:44:09:d0:33:78:0a:4c: a8:cf:30:68:3b:b9:ee:b5:f3:7c:d8:d4:3b:93:9a: 8d:e0:7b:71:fc:24:49:ec:08:ce:ce:c3:2d:80:d1: 5a:72:00:48:65:d8:fd:f8:c6:36:65:bb:42:6e:01: de:ca:13:67:2c:a0:2f:45:e9:4e:76:b8:41:04:ca: 11:41:e6:57:a1:e3:58:f4:d1:8e:5f:ae:d7:71:de: 32:fc:b9:d8:f8:2a:a3:4a:dc:ac:5a:8d:26:55:db: 96:41:c1:32:cd:94:91:f5:c6:83:7b:27:46:0e:f4: c7:87:ad:a0:f5:f6:68:e1:0f:c3:c3:2e:36:6b:51: 6e:2a:77:f5:5c:3e:32:48:00:60:42:30:17:a3:83: 20:9c:39:f1:68:36:b1:6d:30:a9:48:18:fa:02:70: de:54:65:1e:bd:c4:2c:a0:a9:c9:fd:f3:11:fc:a3: be:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:C4:13:DD:8D:52:61:54:89:81:DC:31:05:58:08:7D:B1:DC:E1:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a7e26c7a-b1e6-3d01-ae02-7faa09a46c52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.85.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:59:ae:35:a7:99:ec:da:1a:42:62:42:3b:a9:cf:b7:a6:a4: 49:fe:33:06:7c:ba:ab:c3:bd:3f:19:d5:eb:f8:82:43:88:14: 18:ed:ed:5c:20:13:98:e5:25:a1:ba:f5:fc:6c:47:bb:9b:e4: 3a:7a:5f:a4:5d:8d:40:7d:0c:92:56:3b:f3:26:de:ae:92:72: 87:59:d4:bb:3d:39:c2:44:1d:7d:fb:c2:33:a9:3d:3b:cf:52: 98:2a:c8:bc:3f:87:83:31:06:d0:61:27:46:08:3a:b1:42:e5: 47:3d:d0:8b:a3:15:b7:66:1f:25:9b:4b:27:f1:cf:b2:3d:91: de:4d:bd:4c:90:6d:cf:3a:89:0c:42:a0:be:82:ae:dc:f6:40: 01:6a:5d:dc:41:88:2b:02:06:9b:64:c2:dd:d1:94:59:45:c2: 58:90:fa:10:b5:dc:84:c7:ca:fd:46:7e:42:c7:a8:a3:5c:0c: ee:11:19:4c:5e:65:be:05:dd:d7:54:db:8b:2e:02:e4:6a:75: 22:b9:01:96:5b:7b:bd:a4:27:32:62:3a:1f:d5:8e:5d:52:de: 99:a7:f0:2f:de:6f:56:13:91:89:a4:8a:c1:61:27:d8:b1:4a: c7:76:c2:c5:9e:ea:c5:ce:ea:3b:11:21:6e:1b:22:08:91:48: 01:b2:51:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmKNGZUzpmBVQd7D0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDQxNjAxMDA0OFoXDTI1MDcxNTAxMDA0OFowLzEtMCsGA1UEAxMk OTRmNGUxZTctNjViNy00YmE4LThkYmEtMjlhMTk4YzRiYTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYs2Mb7RsvjtJBiJR6x/C+YEzkgsfPZ4cppj IPFtpiSCl87JJEFez2Vi/QKB4/+u77p2UGJ63uHr9VkbxkmHAQayc0t4xUBqrrUl KLHNOCkV8kQJ0DN4CkyozzBoO7nutfN82NQ7k5qN4Htx/CRJ7AjOzsMtgNFacgBI Zdj9+MY2ZbtCbgHeyhNnLKAvRelOdrhBBMoRQeZXoeNY9NGOX67Xcd4y/LnY+Cqj StysWo0mVduWQcEyzZSR9caDeydGDvTHh62g9fZo4Q/Dwy42a1FuKnf1XD4ySABg QjAXo4MgnDnxaDaxbTCpSBj6AnDeVGUevcQsoKnJ/fMR/KO+1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGnEE92NUmFUiYHcMQVYCH2x3OEtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYTdlMjZjN2EtYjFlNi0z ZDAxLWFlMDItN2ZhYTA5YTQ2YzUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFWMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJtZrjWnmezaGkJiQjupz7empEn+MwZ8uqvDvT8Z1ev4gkOIFBjt7Vwg E5jlJaG69fxsR7ub5Dp6X6RdjUB9DJJWO/Mm3q6ScodZ1Ls9OcJEHX37wjOpPTvP UpgqyLw/h4MxBtBhJ0YIOrFC5Uc90IujFbdmHyWbSyfxz7I9kd5NvUyQbc86iQxC oL6Crtz2QAFqXdxBiCsCBptkwt3RlFlFwliQ+hC13ITHyv1GfkLHqKNcDO4RGUxe Zb4F3ddU24suAuRqdSK5AZZbe72kJzJiOh/Vjl1S3pmn8C/eb1YTkYmkisFhJ9ix Ssd2wsWe6sXO6jsRIW4bIgiRSAGyUUc= -----END CERTIFICATE-----Generated at Sun Apr 27 01:11:58 2025 by rpki-client