$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d46d4954-1d6e-3a32-a165-6df6a604505d.roa File: d46d4954-1d6e-3a32-a165-6df6a604505d.roa (raw, json) Hash identifier: /DoKmCRU0WF0f7lege0I+EzRj2GBw9/h3+i9wy1AbgA= Subject key identifier: 35:B0:88:C6:7A:E9:AC:D3:8F:DB:A5:72:59:F3:72:A8:13:29:E0:B1 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285849F17FD418BFF0F5FBD392B000 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d46d4954-1d6e-3a32-a165-6df6a604505d.roa Signing time: Fri 23 May 2025 01:00:49 +0000 ROA not before: Fri 23 May 2025 01:00:49 +0000 ROA not after: Thu 21 Aug 2025 01:00:49 +0000 asID: 203 IP address blocks: 192.85.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:7f:d4:18:bf:f0:f5:fb:d3:92:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: May 23 01:00:49 2025 GMT Not After : Aug 21 01:00:49 2025 GMT Subject: CN=6338b5cc-5ec4-49f2-a008-496dcc0b39db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:08:e8:7c:e8:66:1c:b9:8c:1d:a2:c0:46:e1: ef:c2:76:47:fd:35:dc:a6:81:5c:f2:49:b5:72:7e: 08:c3:d6:37:d0:c9:f7:dd:b1:46:ac:23:4b:2c:bf: 7a:17:2a:96:ed:47:8d:4f:9e:99:91:5d:b9:60:de: c1:d5:3a:ee:aa:6d:26:2b:42:92:00:a1:5d:f0:c8: 2b:3f:e5:ef:87:3b:01:2f:27:01:ca:33:96:24:6e: d3:ce:e8:bd:6b:58:5e:a3:eb:b5:7d:d6:92:e9:8c: 26:7b:2c:81:2c:19:e6:29:e0:c0:35:5f:c0:b3:8c: 1a:3a:11:ce:1b:7e:15:84:83:a0:b1:a6:bd:4b:8c: 33:1c:b9:ba:86:5d:8f:38:d1:6c:88:2b:25:dc:c7: 8d:bc:af:6e:b3:f5:0c:6f:07:a0:27:bb:1e:1e:a6: 3d:3c:b4:68:af:8d:a9:8c:36:81:d1:4d:cb:b5:bc: bf:de:37:87:17:29:9d:68:a6:dd:c8:65:21:80:cb: 42:63:2f:1e:bc:5b:59:06:53:5e:ee:3e:b9:e2:81: 59:4a:e5:03:ca:d5:f0:5d:d2:db:d8:cc:bc:ea:ee: fa:3f:96:03:2a:49:4e:eb:11:b5:b9:b5:3c:1b:e8: 0e:3a:64:c3:e0:32:4c:80:13:66:d6:40:48:56:ac: e2:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:B0:88:C6:7A:E9:AC:D3:8F:DB:A5:72:59:F3:72:A8:13:29:E0:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d46d4954-1d6e-3a32-a165-6df6a604505d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.85.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:50:32:58:04:f0:8b:89:2f:e0:62:cb:57:bf:18:50:ee:28: 40:d5:39:1e:85:46:51:35:72:75:73:83:44:e3:f3:20:76:19: d9:39:a9:c8:50:68:07:f2:c2:2d:08:cb:4c:fc:18:16:da:37: 3d:0d:ed:e2:54:15:f0:e6:40:1c:1d:0c:ca:63:a9:53:f8:42: 2b:21:88:b4:ef:c7:df:f6:b4:8c:1d:ef:44:b2:e8:b3:4e:30: 3b:ca:bd:9a:8b:ed:75:7d:ea:d5:6d:f9:90:6d:e9:a2:94:77: 1a:1d:40:8d:c4:26:bf:b0:e9:f3:e5:cc:d3:94:a1:f8:fe:0a: de:f8:d2:84:5a:07:76:56:41:d2:2b:b8:37:95:46:f3:0c:db: e4:bf:f6:e2:3f:f3:df:e0:de:98:b6:fd:03:27:e9:95:c6:5a: 33:ba:c8:d6:32:a6:db:9e:f6:4f:75:02:f0:b0:33:4d:37:3c: 87:db:83:f6:61:c0:b0:81:8c:01:b3:b5:1d:6d:ac:39:6a:02: 04:58:73:d5:6f:2d:14:cf:80:b8:30:86:8c:01:72:e4:fa:85: e3:b3:78:64:b9:dc:8a:d3:52:4b:8b:23:d0:99:96:ad:60:11: 01:af:f9:e5:e2:28:86:0d:0d:06:f8:e3:fc:17:8d:59:20:45: 05:8a:b0:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxf9QYv/D1+9OSsAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk NjMzOGI1Y2MtNWVjNC00OWYyLWEwMDgtNDk2ZGNjMGIzOWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAjofOhmHLmMHaLARuHvwnZH/TXcpoFc8km1 cn4Iw9Y30Mn33bFGrCNLLL96FyqW7UeNT56ZkV25YN7B1Truqm0mK0KSAKFd8Mgr P+XvhzsBLycByjOWJG7Tzui9a1heo+u1fdaS6YwmeyyBLBnmKeDANV/As4waOhHO G34VhIOgsaa9S4wzHLm6hl2PONFsiCsl3MeNvK9us/UMbwegJ7seHqY9PLRor42p jDaB0U3Ltby/3jeHFymdaKbdyGUhgMtCYy8evFtZBlNe7j654oFZSuUDytXwXdLb 2My86u76P5YDKklO6xG1ubU8G+gOOmTD4DJMgBNm1kBIVqziLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDWwiMZ66azTj9ulclnzcqgTKeCxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZDQ2ZDQ5NTQtMWQ2ZS0z YTMyLWExNjUtNmRmNmE2MDQ1MDVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFXmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI5QMlgE8IuJL+Biy1e/GFDuKEDVOR6FRlE1cnVzg0Tj8yB2Gdk5qchQ aAfywi0Iy0z8GBbaNz0N7eJUFfDmQBwdDMpjqVP4QishiLTvx9/2tIwd70Sy6LNO MDvKvZqL7XV96tVt+ZBt6aKUdxodQI3EJr+w6fPlzNOUofj+Ct740oRaB3ZWQdIr uDeVRvMM2+S/9uI/89/g3pi2/QMn6ZXGWjO6yNYyptue9k91AvCwM003PIfbg/Zh wLCBjAGztR1trDlqAgRYc9VvLRTPgLgwhowBcuT6heOzeGS53IrTUkuLI9CZlq1g EQGv+eXiKIYNDQb44/wXjVkgRQWKsOA= -----END CERTIFICATE-----Generated at Sun Jun 15 06:42:07 2025 by rpki-client