$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/35a0c62c-d62b-3066-a4c5-473f10fd1af7.roa File: 35a0c62c-d62b-3066-a4c5-473f10fd1af7.roa (raw, json) Hash identifier: uHyWv0hwbRWNcPW+jMNDGp3yfuWJ7xVTBqQgdRbcbW8= Subject key identifier: C6:26:C3:A4:12:68:33:BA:8C:E3:EC:65:12:F1:4F:A5:27:A6:15:AD Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285848BE8620E5A8346BE325CD0280 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/35a0c62c-d62b-3066-a4c5-473f10fd1af7.roa Signing time: Sun 02 Feb 2025 02:00:39 +0000 ROA not before: Sun 02 Feb 2025 02:00:39 +0000 ROA not after: Sat 03 May 2025 01:00:39 +0000 asID: 3356 IP address blocks: 192.57.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:be:86:20:e5:a8:34:6b:e3:25:cd:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Feb 2 02:00:39 2025 GMT Not After : May 3 01:00:39 2025 GMT Subject: CN=60be2100-339e-4402-8ad5-4d45b460b9cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:f1:08:45:4e:a7:aa:3f:57:20:d1:d7:b8:04: f7:fe:de:24:25:59:2e:30:5d:f9:f9:f0:1c:f6:dd: 1c:12:32:cd:a8:31:5c:25:dc:27:ee:f8:40:21:62: bb:55:68:ab:d7:4d:ae:c4:71:0e:d9:c1:08:e0:a8: 44:e5:44:9f:02:04:9e:9d:ba:d9:a9:f6:4a:a2:34: 2d:8b:a6:e9:3c:1e:12:1e:b5:fe:e1:07:08:a8:bb: 25:5f:1e:8f:48:8b:9c:c9:6a:03:37:e9:e3:b0:cf: ee:d4:12:86:79:5c:88:52:fc:8e:e6:81:43:26:7c: cb:0f:9f:b8:7c:a6:8b:43:05:6c:13:c9:41:59:fe: 7c:9a:b4:9d:22:35:9b:44:03:6e:73:cd:76:83:c1: b2:9c:c1:2e:08:86:74:35:60:cb:fe:2c:53:97:b5: 84:2f:4a:20:d9:73:8b:be:6f:a8:11:fa:03:ad:c2: d9:5c:03:5c:2f:a4:95:2f:48:a7:8c:fd:c4:b7:1f: e9:5e:4b:af:18:d5:ec:35:9c:f6:35:eb:7f:92:6d: 72:df:91:6c:69:c4:2a:e9:61:5c:0f:27:24:95:ad: 3f:b8:b8:72:d5:a5:50:d7:27:9d:c8:a5:ff:d0:49: d9:0f:3f:36:60:be:56:57:61:ae:6a:16:d4:f0:4b: 16:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:26:C3:A4:12:68:33:BA:8C:E3:EC:65:12:F1:4F:A5:27:A6:15:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/35a0c62c-d62b-3066-a4c5-473f10fd1af7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.57.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:04:08:3e:3b:98:6a:8b:12:d1:d8:3f:14:6c:ff:3d:2f:be: 34:8f:e4:3c:c5:d0:fa:a0:88:ac:73:92:ea:1e:36:08:1f:e0: a2:87:83:7c:5d:ba:9f:06:6c:0c:d4:24:ef:8c:9c:70:1b:0b: 2d:e0:5e:dd:c5:1e:ed:40:68:0b:e6:fe:1a:c5:76:7d:83:1a: b4:ce:64:83:7f:c9:75:45:36:01:76:04:be:46:c3:00:5b:7c: 35:70:f6:9c:1b:7f:6d:f6:81:52:72:5b:0d:75:f9:0d:cb:6f: bf:84:32:6d:52:ed:04:16:ca:7a:66:39:8f:27:49:ad:20:cd: 00:12:6d:cd:bb:22:0a:98:dc:5f:db:99:e2:bd:69:40:b1:12: 99:3b:e6:95:6f:a3:51:13:9d:c5:82:7c:39:d6:a7:e8:3e:40: 94:b3:a9:50:e6:7a:7b:48:c3:a0:9e:27:64:2a:92:2f:a9:49: 08:9b:d3:1d:2d:8a:06:e4:2f:9a:e0:59:99:3a:f7:dd:44:eb: 66:31:ee:91:6a:95:08:3c:82:23:76:31:7b:6f:c1:d9:96:9e: 81:90:90:ef:d9:e4:21:6e:e7:8a:3b:4b:eb:49:a6:95:d8:76: 62:34:35:dc:33:bb:db:18:ae:0c:80:8e:69:fc:1a:22:60:32: e1:96:bb:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi+hiDlqDRr4yXNAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDIwMjAyMDAzOVoXDTI1MDUwMzAxMDAzOVowLzEtMCsGA1UEAxMk NjBiZTIxMDAtMzM5ZS00NDAyLThhZDUtNGQ0NWI0NjBiOWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfEIRU6nqj9XINHXuAT3/t4kJVkuMF35+fAc 9t0cEjLNqDFcJdwn7vhAIWK7VWir102uxHEO2cEI4KhE5USfAgSenbrZqfZKojQt i6bpPB4SHrX+4QcIqLslXx6PSIucyWoDN+njsM/u1BKGeVyIUvyO5oFDJnzLD5+4 fKaLQwVsE8lBWf58mrSdIjWbRANuc812g8GynMEuCIZ0NWDL/ixTl7WEL0og2XOL vm+oEfoDrcLZXANcL6SVL0injP3Etx/pXkuvGNXsNZz2Net/km1y35FsacQq6WFc Dyckla0/uLhy1aVQ1yedyKX/0EnZDz82YL5WV2GuahbU8EsWeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMYmw6QSaDO6jOPsZRLxT6UnphWtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMzVhMGM2MmMtZDYyYi0z MDY2LWE0YzUtNDczZjEwZmQxYWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwDmYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGcECD47mGqLEtHYPxRs/z0vvjSP5DzF0PqgiKxzkuoeNggf4KKHg3xd up8GbAzUJO+MnHAbCy3gXt3FHu1AaAvm/hrFdn2DGrTOZIN/yXVFNgF2BL5GwwBb fDVw9pwbf232gVJyWw11+Q3Lb7+EMm1S7QQWynpmOY8nSa0gzQASbc27IgqY3F/b meK9aUCxEpk75pVvo1ETncWCfDnWp+g+QJSzqVDmentIw6CeJ2Qqki+pSQib0x0t igbkL5rgWZk6991E62Yx7pFqlQg8giN2MXtvwdmWnoGQkO/Z5CFu54o7S+tJppXY dmI0Ndwzu9sYrgyAjmn8GiJgMuGWuyc= -----END CERTIFICATE-----Generated at Sun Feb 16 15:18:15 2025 by rpki-client