$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f6f3be8a-fe77-36dd-8cac-6dcf2c5bfac5.roa File: f6f3be8a-fe77-36dd-8cac-6dcf2c5bfac5.roa (raw, json) Hash identifier: KENXnNZldmYWxZ/TEt3Ad/qZR1qGMwfL3QLLDgKVMMU= Subject key identifier: FD:35:B7:18:D8:D0:F8:09:C0:54:EA:41:BF:79:90:9A:E1:69:4A:46 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858498CFF13292FDF1DD608092300 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f6f3be8a-fe77-36dd-8cac-6dcf2c5bfac5.roa Signing time: Thu 17 Apr 2025 01:00:45 +0000 ROA not before: Thu 17 Apr 2025 01:00:45 +0000 ROA not after: Wed 16 Jul 2025 01:00:45 +0000 asID: 3360 IP address blocks: 199.228.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:ff:13:29:2f:df:1d:d6:08:09:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 17 01:00:45 2025 GMT Not After : Jul 16 01:00:45 2025 GMT Subject: CN=096bf9c4-c52d-4bd0-b25d-00d230e1dca0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:c3:ba:1c:0c:fc:4b:a2:f5:cb:55:33:6f:21: a9:0c:24:81:3c:c8:37:77:6f:42:14:9a:78:e5:48: 8a:f8:b9:1e:9f:57:44:52:21:cb:e8:5e:bf:18:e7: a8:be:92:a8:b9:97:9d:99:6d:e3:14:d9:0b:7a:e1: 1b:92:a3:ad:1e:26:e0:9f:41:8e:82:93:9e:08:2a: 9a:6f:d0:32:84:b2:cb:52:71:73:8a:89:e8:c9:a4: bf:9f:38:c7:90:c2:cc:69:ff:bb:2e:64:e4:38:95: d2:b9:b1:92:99:6d:e7:93:f9:e4:07:1c:d0:ff:26: b7:3b:8e:0b:12:67:f7:b6:70:75:25:6d:b2:a1:3e: 8b:2f:37:68:b8:68:f8:22:44:1a:ad:89:ef:f0:d1: bb:9e:c3:da:35:ca:c8:17:d4:95:24:23:42:bc:a0: c1:61:2c:d1:af:14:b1:48:7f:c9:bc:30:b8:bf:66: 13:60:5c:39:82:0c:89:3f:10:cf:cc:13:44:33:b7: 9b:8b:da:3a:2d:78:0c:4c:e6:e5:a0:de:3a:a6:70: b5:67:b2:09:13:39:ec:5d:31:18:15:4b:46:35:db: 8b:de:c2:04:20:96:6f:a9:eb:fb:bb:22:c0:46:23: 80:8b:0b:46:bb:39:0c:30:03:05:7e:1f:1d:78:e7: 40:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:35:B7:18:D8:D0:F8:09:C0:54:EA:41:BF:79:90:9A:E1:69:4A:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f6f3be8a-fe77-36dd-8cac-6dcf2c5bfac5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 199.228.190.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:7c:15:43:bf:33:d2:0d:2d:5d:55:2e:f5:0e:d5:86:1a:fd: a2:19:b2:1b:79:21:4b:63:62:fa:ce:5f:1e:ca:51:f8:b4:e6: 8a:dd:af:b1:4e:47:1a:fc:73:b4:2f:5d:49:ab:20:21:d6:05: 1e:5a:88:c6:8f:13:3c:10:86:66:e1:2b:94:f4:59:d7:5e:70: 15:c3:d2:24:c5:b7:fd:87:c2:49:da:ba:18:ca:b8:7f:57:ce: f1:df:32:30:76:23:66:23:e5:7e:9d:19:ea:99:8c:4b:00:1a: e7:2d:ce:bc:bb:93:45:8f:c2:18:a0:cb:a5:01:2d:3e:76:77: 26:7f:10:4b:8e:62:83:48:c6:9e:f0:27:98:01:84:e0:1a:16: e8:92:7a:bd:c5:55:ac:41:4c:77:13:32:5d:16:de:a2:a0:d7: c8:42:b6:92:31:9f:a5:08:38:34:18:f1:93:ff:de:93:5e:b8: 47:c3:da:4f:04:70:fd:46:ce:8b:91:4b:0b:f1:66:ec:1a:4a: 3e:11:92:f6:43:3b:00:3f:bb:08:58:58:77:1a:bf:01:e1:7f: e3:0a:8f:e1:9e:b0:ab:19:4b:cd:91:09:3f:1f:3d:09:79:7e: 32:90:c6:74:bd:09:fa:3a:12:5d:98:ea:c9:48:e5:bd:3e:46: 59:4b:35:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmM/xMpL98d1ggJIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk MDk2YmY5YzQtYzUyZC00YmQwLWIyNWQtMDBkMjMwZTFkY2EwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhcO6HAz8S6L1y1UzbyGpDCSBPMg3d29CFJp4 5UiK+Lken1dEUiHL6F6/GOeovpKouZedmW3jFNkLeuEbkqOtHibgn0GOgpOeCCqa b9AyhLLLUnFzionoyaS/nzjHkMLMaf+7LmTkOJXSubGSmW3nk/nkBxzQ/ya3O44L Emf3tnB1JW2yoT6LLzdouGj4IkQarYnv8NG7nsPaNcrIF9SVJCNCvKDBYSzRrxSx SH/JvDC4v2YTYFw5ggyJPxDPzBNEM7ebi9o6LXgMTObloN46pnC1Z7IJEznsXTEY FUtGNduL3sIEIJZvqev7uyLARiOAiwtGuzkMMAMFfh8deOdAtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP01txjY0PgJwFTqQb95kJrhaUpGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZjZmM2JlOGEtZmU3Ny0z NmRkLThjYWMtNmRjZjJjNWJmYWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx+S+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACx8FUO/M9INLV1VLvUO1YYa/aIZsht5IUtjYvrOXx7KUfi05ordr7FO Rxr8c7QvXUmrICHWBR5aiMaPEzwQhmbhK5T0WddecBXD0iTFt/2HwknauhjKuH9X zvHfMjB2I2Yj5X6dGeqZjEsAGuctzry7k0WPwhigy6UBLT52dyZ/EEuOYoNIxp7w J5gBhOAaFuiSer3FVaxBTHcTMl0W3qKg18hCtpIxn6UIODQY8ZP/3pNeuEfD2k8E cP1GzouRSwvxZuwaSj4RkvZDOwA/uwhYWHcavwHhf+MKj+GesKsZS82RCT8fPQl5 fjKQxnS9Cfo6El2Y6slI5b0+RllLNWg= -----END CERTIFICATE-----Generated at Sun Apr 27 00:15:25 2025 by rpki-client