$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/148f57e5-a69e-3867-8d75-2518d154bc4c.roa File: 148f57e5-a69e-3867-8d75-2518d154bc4c.roa (raw, json) Hash identifier: nEhe3iHzid9J2FjLwxZOCC+IUSX5on+G8YgIk3lq8F4= Subject key identifier: 8A:82:73:56:58:B0:E7:FD:75:A4:CC:61:41:C1:7A:D8:5B:6D:E4:57 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285848AAFB5878DFC3CCA0580D4280 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/148f57e5-a69e-3867-8d75-2518d154bc4c.roa Signing time: Sun 26 Jan 2025 02:00:38 +0000 ROA not before: Sun 26 Jan 2025 02:00:38 +0000 ROA not after: Sat 26 Apr 2025 01:00:38 +0000 asID: 3356 IP address blocks: 192.85.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:aa:fb:58:78:df:c3:cc:a0:58:0d:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jan 26 02:00:38 2025 GMT Not After : Apr 26 01:00:38 2025 GMT Subject: CN=e45ac7c5-5c24-4355-a846-5940e7be4a04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:3b:0f:62:92:42:f0:43:d6:12:59:03:c1:80: 1a:79:30:c3:41:ff:67:6b:9d:e2:b7:61:cf:f0:47: 6c:80:02:74:df:9a:d0:1a:65:01:33:2f:37:85:07: ae:34:78:22:98:27:c8:5c:51:65:6c:c6:9f:8e:ce: 8b:72:f7:70:74:bb:67:c8:37:b1:07:a0:f1:91:04: f8:19:b2:5b:45:7d:29:a0:7e:d1:4b:71:9c:64:a5: 4b:08:fe:c3:86:3e:cd:a1:ad:39:d5:b4:c6:79:c5: ca:c9:77:f9:57:be:6a:44:b6:b4:ba:85:26:3e:3a: 93:04:e9:94:01:31:c2:95:a5:4d:7b:ff:0c:06:35: 40:c4:24:6b:4e:ab:b6:d8:c1:ef:1b:54:42:c6:53: ea:7a:eb:a7:ea:95:6f:b6:96:65:ae:91:75:38:bd: 08:92:32:c0:54:b3:f3:b5:a5:eb:2b:c7:4b:fc:c9: 08:94:fb:ed:10:45:e7:fd:bb:60:a0:ac:9d:ab:33: 8e:9b:29:80:0c:8e:f2:e6:12:b6:ee:34:b3:d9:5a: 7b:df:4f:1b:e3:27:ef:d9:65:90:fd:26:f2:88:67: a7:6d:d2:a1:9d:b2:77:e7:8d:df:2c:69:3c:19:62: 1f:8a:b5:7b:a2:4f:d0:a6:b2:7c:77:50:f4:2f:a3: 51:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:82:73:56:58:B0:E7:FD:75:A4:CC:61:41:C1:7A:D8:5B:6D:E4:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/148f57e5-a69e-3867-8d75-2518d154bc4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.85.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:4e:08:1b:09:8b:21:52:2b:1d:1c:3b:fb:a3:0f:2e:10:93: cb:42:73:ad:5d:25:5b:83:a6:55:54:ad:2b:41:85:03:e3:cf: 90:8d:f3:9d:88:80:1a:de:63:64:29:01:a1:a2:fa:81:ed:39: f9:06:93:25:c1:67:00:a0:c5:79:4b:be:0b:f4:e0:53:8b:bd: 23:e1:d0:49:04:96:a2:83:56:68:75:5d:0b:41:5c:56:f6:10: ec:79:cc:ee:d5:11:cd:91:d8:1f:19:b6:df:22:0e:70:08:6f: 2e:3b:3e:85:fc:c1:86:bf:e2:f6:36:40:90:47:66:03:8e:a0: 22:5a:d7:8b:3b:4c:aa:29:4f:45:41:d3:21:ed:0e:ee:9e:be: 25:7e:40:83:64:fd:4f:f9:46:f8:16:ef:ac:46:8e:01:42:cf: 92:8f:4b:1f:c0:6b:cf:b8:19:90:f7:87:b6:dc:f6:b7:76:7f: 2e:22:eb:6a:06:a3:13:d2:6e:67:69:b7:63:2c:bf:d1:9e:ea: 70:46:6d:a9:2d:a9:7b:ba:e1:60:7f:9c:76:12:e7:d4:6d:8f: 28:79:36:c6:25:87:74:a4:bd:94:68:76:fe:1d:7c:a1:58:7f: a3:b4:a1:41:f2:61:6a:f8:7a:aa:25:8f:4c:93:ad:d9:55:49: 35:db:a7:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiq+1h438PMoFgNQoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDEyNjAyMDAzOFoXDTI1MDQyNjAxMDAzOFowLzEtMCsGA1UEAxMk ZTQ1YWM3YzUtNWMyNC00MzU1LWE4NDYtNTk0MGU3YmU0YTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzsPYpJC8EPWElkDwYAaeTDDQf9na53it2HP 8EdsgAJ035rQGmUBMy83hQeuNHgimCfIXFFlbMafjs6LcvdwdLtnyDexB6DxkQT4 GbJbRX0poH7RS3GcZKVLCP7Dhj7Noa051bTGecXKyXf5V75qRLa0uoUmPjqTBOmU ATHClaVNe/8MBjVAxCRrTqu22MHvG1RCxlPqeuun6pVvtpZlrpF1OL0IkjLAVLPz taXrK8dL/MkIlPvtEEXn/btgoKydqzOOmymADI7y5hK27jSz2Vp7308b4yfv2WWQ /SbyiGenbdKhnbJ3543fLGk8GWIfirV7ok/QprJ8d1D0L6NREQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIqCc1ZYsOf9daTMYUHBethbbeRXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMTQ4ZjU3ZTUtYTY5ZS0z ODY3LThkNzUtMjUxOGQxNTRiYzRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFVZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA1OCBsJiyFSKx0cO/ujDy4Qk8tCc61dJVuDplVUrStBhQPjz5CN852I gBreY2QpAaGi+oHtOfkGkyXBZwCgxXlLvgv04FOLvSPh0EkElqKDVmh1XQtBXFb2 EOx5zO7VEc2R2B8Ztt8iDnAIby47PoX8wYa/4vY2QJBHZgOOoCJa14s7TKopT0VB 0yHtDu6eviV+QINk/U/5RvgW76xGjgFCz5KPSx/Aa8+4GZD3h7bc9rd2fy4i62oG oxPSbmdpt2Msv9Ge6nBGbaktqXu64WB/nHYS59Rtjyh5NsYlh3SkvZRodv4dfKFY f6O0oUHyYWr4eqolj0yTrdlVSTXbp+I= -----END CERTIFICATE-----Generated at Fri Mar 14 10:16:27 2025 by rpki-client