$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e689d9c6-168a-3b34-b58f-fd8a86526dc8.roa File: e689d9c6-168a-3b34-b58f-fd8a86526dc8.roa (raw, json) Hash identifier: OkmE3iTBh/62WJJrYNSCSgBxNRwhhWJPa00ytfS5ycc= Subject key identifier: 94:09:DB:E1:9D:E4:4E:6E:BE:5D:77:19:3A:9B:F9:D7:43:52:AF:22 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285849F17FD3A20467CE5B6C5E9C80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e689d9c6-168a-3b34-b58f-fd8a86526dc8.roa Signing time: Fri 23 May 2025 01:00:49 +0000 ROA not before: Fri 23 May 2025 01:00:49 +0000 ROA not after: Thu 21 Aug 2025 01:00:49 +0000 asID: 203 IP address blocks: 192.85.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:7f:d3:a2:04:67:ce:5b:6c:5e:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: May 23 01:00:49 2025 GMT Not After : Aug 21 01:00:49 2025 GMT Subject: CN=9b5506f2-bc78-4783-b7af-e2e9ecb0f031 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:0a:ac:7f:79:db:ef:12:c0:7e:8a:24:d3:48: 82:1f:9b:ec:c4:8f:fd:ab:81:7f:d9:c2:84:cd:02: 57:15:ae:e5:1b:de:2c:cc:67:4c:08:67:7b:f3:29: 2b:9d:d4:0e:34:08:66:0d:fc:03:9f:89:dd:3d:f2: 1b:9b:4f:9c:f3:d0:e4:11:6d:d4:d2:89:d0:90:66: ae:6d:22:3c:c4:a8:91:1e:3e:5f:1c:bc:eb:49:5c: e2:bc:d0:50:2e:81:52:ac:18:f0:d5:f6:77:07:0b: 14:f5:39:aa:15:41:8c:f2:13:65:7e:33:eb:8a:40: 44:85:9e:53:02:9a:e0:44:1d:a9:a7:39:b2:58:57: b1:bc:e1:82:4b:86:d9:a6:d3:41:0e:58:bf:8f:d9: 7a:f2:15:d2:cc:fe:46:fe:c0:d9:f0:b1:f9:14:98: dd:05:2a:67:79:dc:92:df:24:94:96:f5:6b:69:e9: fd:6d:df:22:45:71:26:6f:96:da:b3:d4:ba:60:ee: 60:9a:13:f4:44:9c:97:59:bc:4f:07:63:03:b3:4e: 15:61:d8:d3:22:d7:84:a0:3e:f1:7a:eb:67:da:2b: 0b:d6:fa:14:f0:51:47:39:58:3b:56:8d:25:3b:b1: 29:ef:35:21:cb:b9:2e:be:5a:69:79:33:a7:ea:78: 28:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:09:DB:E1:9D:E4:4E:6E:BE:5D:77:19:3A:9B:F9:D7:43:52:AF:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e689d9c6-168a-3b34-b58f-fd8a86526dc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.85.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:07:7a:88:08:9c:1d:99:22:0f:35:0e:b0:80:52:5b:47:aa: ed:7a:8a:07:43:bf:a0:bc:6c:e0:93:15:b3:88:1d:05:d4:b4: ea:c2:29:4f:71:26:de:b9:b6:d9:94:2a:33:a2:c4:d0:76:d9: 1a:b8:fb:2c:cf:68:55:80:71:16:17:bc:88:43:5b:3d:20:9a: 45:f9:f6:db:ab:22:b8:fc:19:8b:36:ed:20:47:99:6a:8e:21: 90:eb:b4:20:06:16:3c:a7:d2:34:5c:b4:e2:c6:10:3b:47:e1: 14:d9:06:ee:cb:7f:34:78:c8:be:80:98:24:57:c4:4b:44:85: d2:dd:ec:fb:0a:3d:f3:77:d1:53:d0:5d:1e:c0:14:b1:54:7b: 19:62:0d:98:97:93:7b:1c:95:f6:f5:c4:e6:79:fb:be:39:8c: d9:e1:05:c8:77:44:e5:39:7e:3b:b7:ff:67:bc:c4:a6:ed:81: 2f:5a:98:59:4d:b4:c9:fd:40:d4:01:61:ed:ab:49:f2:c2:ed: 1a:5e:39:1f:74:a0:64:1c:9b:30:00:2a:d4:cf:4b:48:3b:3c: ce:f3:3c:28:f8:97:7e:b4:52:55:1a:89:c3:2a:55:93:9d:2b: a2:ea:dd:0f:f7:79:9a:c2:d0:5c:9b:c8:f2:26:a6:c3:bd:47: 47:27:69:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxf9OiBGfOW2xenIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk OWI1NTA2ZjItYmM3OC00NzgzLWI3YWYtZTJlOWVjYjBmMDMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAqsf3nb7xLAfook00iCH5vsxI/9q4F/2cKE zQJXFa7lG94szGdMCGd78ykrndQONAhmDfwDn4ndPfIbm0+c89DkEW3U0onQkGau bSI8xKiRHj5fHLzrSVzivNBQLoFSrBjw1fZ3BwsU9TmqFUGM8hNlfjPrikBEhZ5T AprgRB2ppzmyWFexvOGCS4bZptNBDli/j9l68hXSzP5G/sDZ8LH5FJjdBSpnedyS 3ySUlvVraen9bd8iRXEmb5bas9S6YO5gmhP0RJyXWbxPB2MDs04VYdjTIteEoD7x eutn2isL1voU8FFHOVg7Vo0lO7Ep7zUhy7kuvlppeTOn6ngobwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJQJ2+Gd5E5uvl13GTqb+ddDUq8iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZTY4OWQ5YzYtMTY4YS0z YjM0LWI1OGYtZmQ4YTg2NTI2ZGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFU7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFcHeogInB2ZIg81DrCAUltHqu16igdDv6C8bOCTFbOIHQXUtOrCKU9x Jt65ttmUKjOixNB22Rq4+yzPaFWAcRYXvIhDWz0gmkX59turIrj8GYs27SBHmWqO IZDrtCAGFjyn0jRctOLGEDtH4RTZBu7LfzR4yL6AmCRXxEtEhdLd7PsKPfN30VPQ XR7AFLFUexliDZiXk3sclfb1xOZ5+745jNnhBch3ROU5fju3/2e8xKbtgS9amFlN tMn9QNQBYe2rSfLC7RpeOR90oGQcmzAAKtTPS0g7PM7zPCj4l360UlUaicMqVZOd K6Lq3Q/3eZrC0FybyPImpsO9R0cnaUo= -----END CERTIFICATE-----Generated at Sun Jun 15 17:48:18 2025 by rpki-client