$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d525276d-4107-3afe-877a-c2b1c82a534b.roa File: d525276d-4107-3afe-877a-c2b1c82a534b.roa (raw, json) Hash identifier: h4GAxi/fvxDuGTYdIINWU7D1I/VUJxa1/gkANLnbG1A= Subject key identifier: 26:5B:20:D4:57:3B:4C:DE:51:31:B6:95:65:44:94:A4:70:56:28:12 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285849998F3647169EAB671D87F280 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d525276d-4107-3afe-877a-c2b1c82a534b.roa Signing time: Mon 21 Apr 2025 13:00:59 +0000 ROA not before: Mon 21 Apr 2025 13:00:59 +0000 ROA not after: Sun 20 Jul 2025 13:00:59 +0000 asID: 202 IP address blocks: 192.85.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:99:8f:36:47:16:9e:ab:67:1d:87:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 21 13:00:59 2025 GMT Not After : Jul 20 13:00:59 2025 GMT Subject: CN=8b83bb3e-b1d8-4020-adb5-f8d755e92ffc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:bf:b4:2b:bd:12:13:4c:5b:d2:80:03:65:5b: 8b:e8:0f:dc:d9:d5:42:b2:6e:bd:11:f9:4e:28:ce: 20:40:8f:f0:02:c7:af:6e:3c:f2:51:6a:b8:24:2a: 70:a1:9b:a3:ad:3e:30:20:e9:2c:2f:49:1c:04:2a: ba:60:ea:b7:a7:73:99:1f:42:b6:2f:9e:51:e8:eb: 66:31:e5:17:67:be:ae:40:67:dd:7f:4a:dc:77:81: 44:d7:0a:6d:ae:bc:a5:3d:64:53:45:62:19:8d:b5: 93:82:f2:21:a4:38:3b:84:8a:4d:4d:2e:66:b5:ef: 6d:e7:db:23:2c:0b:d0:5a:51:18:71:12:99:17:f5: 6d:48:a5:31:96:a9:18:93:58:b3:5a:8f:c5:db:5b: 07:2d:28:f5:04:64:06:81:80:f3:07:ba:cc:07:1e: ac:b2:ad:de:6f:01:89:0c:98:54:e7:15:98:82:b8: ea:1c:aa:f3:9c:64:76:07:9e:cd:43:76:cf:70:3c: 53:57:27:35:7c:f0:ab:a1:b5:e3:ea:ec:9f:c6:69: 73:b4:60:e5:88:95:22:56:f1:72:af:11:cc:9c:90: 6c:c4:0b:bf:b9:95:26:62:fd:f5:e5:d1:b4:19:11: f9:87:e6:c0:82:48:ed:27:58:9f:2a:96:35:24:06: ee:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:5B:20:D4:57:3B:4C:DE:51:31:B6:95:65:44:94:A4:70:56:28:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d525276d-4107-3afe-877a-c2b1c82a534b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.85.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:35:a2:8e:76:ee:ee:66:24:eb:60:22:68:9b:39:be:0f:e3: 7a:00:fa:4a:5e:48:70:13:a8:30:30:b0:20:0c:8d:af:5a:19: 2b:34:b4:c2:e3:93:10:a8:69:b0:f1:45:cf:b8:ed:a0:ca:9e: 14:21:d9:60:f8:e9:cf:23:78:6a:57:0a:62:67:72:b0:13:6d: b5:42:53:ef:1c:e2:fc:63:f7:0e:d4:a3:07:b3:43:5a:d0:63: 38:ad:64:1e:da:d1:76:c1:59:f8:36:bb:b2:11:b7:76:f6:c4: b2:5e:36:c5:13:7c:51:a3:b2:23:f5:54:1f:89:73:67:46:7d: e4:fa:6f:9c:78:67:f3:a7:78:47:19:9a:ad:00:da:85:8b:71: cc:10:c0:26:59:ce:b6:d1:38:55:5b:ad:04:1f:bd:ce:69:28: 23:9f:4c:b7:60:93:d8:48:43:46:e4:8f:24:ef:a5:11:ef:07: f2:bf:df:15:2b:49:cc:6a:8e:50:be:a7:be:e0:da:1a:9c:94: 00:e2:25:30:dd:11:52:99:2f:9c:89:76:fc:fb:1a:de:b9:f3: 65:c4:6d:33:81:79:41:aa:55:c1:23:86:61:d6:56:87:f9:63: 89:10:7f:3c:b4:5e:da:17:02:8c:58:60:99:23:91:5b:5d:71: 2d:64:79:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmZjzZHFp6rZx2H8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDQyMTEzMDA1OVoXDTI1MDcyMDEzMDA1OVowLzEtMCsGA1UEAxMk OGI4M2JiM2UtYjFkOC00MDIwLWFkYjUtZjhkNzU1ZTkyZmZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkr+0K70SE0xb0oADZVuL6A/c2dVCsm69EflO KM4gQI/wAsevbjzyUWq4JCpwoZujrT4wIOksL0kcBCq6YOq3p3OZH0K2L55R6Otm MeUXZ76uQGfdf0rcd4FE1wptrrylPWRTRWIZjbWTgvIhpDg7hIpNTS5mte9t59sj LAvQWlEYcRKZF/VtSKUxlqkYk1izWo/F21sHLSj1BGQGgYDzB7rMBx6ssq3ebwGJ DJhU5xWYgrjqHKrznGR2B57NQ3bPcDxTVyc1fPCrobXj6uyfxmlztGDliJUiVvFy rxHMnJBsxAu/uZUmYv315dG0GRH5h+bAgkjtJ1ifKpY1JAbubQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCZbINRXO0zeUTG2lWVElKRwVigSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZDUyNTI3NmQtNDEwNy0z YWZlLTg3N2EtYzJiMWM4MmE1MzRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFUXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABM1oo527u5mJOtgImibOb4P43oA+kpeSHATqDAwsCAMja9aGSs0tMLj kxCoabDxRc+47aDKnhQh2WD46c8jeGpXCmJncrATbbVCU+8c4vxj9w7UowezQ1rQ YzitZB7a0XbBWfg2u7IRt3b2xLJeNsUTfFGjsiP1VB+Jc2dGfeT6b5x4Z/OneEcZ mq0A2oWLccwQwCZZzrbROFVbrQQfvc5pKCOfTLdgk9hIQ0bkjyTvpRHvB/K/3xUr ScxqjlC+p77g2hqclADiJTDdEVKZL5yJdvz7Gt6582XEbTOBeUGqVcEjhmHWVof5 Y4kQfzy0XtoXAoxYYJkjkVtdcS1keZc= -----END CERTIFICATE-----Generated at Sat Apr 26 23:09:53 2025 by rpki-client