$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3b5511ee-703d-3f0b-a332-e4dd28cdb1cb.roa File: 3b5511ee-703d-3f0b-a332-e4dd28cdb1cb.roa (raw, json) Hash identifier: hH0I3OtEaBDlH2+tsj5cUJcXCUO1zQWOdvEJgs9/mi8= Subject key identifier: 8D:E0:94:A6:F7:D5:CD:17:DA:F0:02:DD:82:1D:FA:63:CE:BD:F6:25 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858495ABEE2A91CD074F37E53D000 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3b5511ee-703d-3f0b-a332-e4dd28cdb1cb.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 3360 IP address blocks: 192.85.78.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:e2:a9:1c:d0:74:f3:7e:53:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=4e2db331-9bb7-4678-98ad-e91498b42e30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6c:fc:cb:8a:6b:28:47:b2:68:26:a0:9b:94: 5e:7a:96:f5:8a:a1:24:17:74:4e:70:f2:02:1b:c8: d6:08:86:c3:23:fa:6a:a8:28:5c:3a:c4:e8:3e:8e: 43:e4:af:67:94:63:3a:3e:8b:61:f9:23:79:13:7c: f0:41:da:7c:cb:27:ba:d0:44:16:91:53:57:a5:01: 0a:37:56:0a:ba:e6:74:c9:cb:7e:20:af:ee:c3:08: 84:4e:4e:2f:ae:0a:b5:70:56:1d:bc:b1:86:0b:0d: 48:0e:67:24:80:35:49:9f:c7:21:c7:50:e7:ac:70: e1:90:76:48:ef:26:41:c4:87:13:f4:97:fc:11:1d: e5:d7:74:82:45:bf:7f:0f:cd:17:07:9f:bb:db:ec: c6:63:90:eb:6d:e4:ef:c1:ef:be:fe:5b:4c:d5:4a: 9f:8a:f0:f4:37:84:b8:4b:8d:83:f2:58:84:2f:50: 60:87:2c:c8:71:3a:56:43:92:b3:a9:d9:5f:6f:a2: 1a:63:f9:74:03:3f:88:a5:95:1a:95:7c:c2:71:54: c5:e3:df:f3:fa:e2:d5:61:61:2e:ac:19:ed:1f:f9: ba:1c:bb:f2:e2:1e:50:a9:e6:44:cf:a3:cb:a0:32: 65:29:2f:05:f0:18:3e:3c:f3:5d:ad:c9:1a:51:25: f7:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:E0:94:A6:F7:D5:CD:17:DA:F0:02:DD:82:1D:FA:63:CE:BD:F6:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3b5511ee-703d-3f0b-a332-e4dd28cdb1cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.85.78.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:3a:c0:dd:c4:57:f9:b5:bb:4c:27:b2:42:75:33:ed:e5:67: aa:6e:b0:ae:4d:4b:d5:9c:ef:26:6c:32:5e:e8:9b:3b:4e:fb: 16:0a:64:61:8e:04:09:74:91:48:cc:a6:3b:86:51:aa:6c:00: 9a:73:49:16:9f:76:0a:75:a8:87:74:c7:0b:28:b1:8d:e7:94: ee:83:76:5f:b2:86:1b:52:af:9d:36:35:1a:ff:8d:aa:2b:56: c4:5b:dc:89:20:6b:ff:47:04:19:22:a2:dc:43:4a:b4:db:d4: 65:54:a4:38:2a:18:b4:b0:df:c3:d0:e7:d9:23:b6:cb:9f:f4: 83:ad:d2:17:5a:9b:9b:57:a1:9e:91:d3:c7:46:5c:97:d0:3d: c9:7d:d7:b7:45:1b:c1:f9:56:63:79:b9:57:c3:c4:0c:c3:0c: 82:37:87:46:6c:54:f8:86:a0:ac:38:11:ba:f3:7c:15:1d:42: 28:62:92:a9:18:73:ac:30:24:dd:5c:4b:a9:42:47:f5:22:7a: b2:0d:62:e3:96:52:89:92:3e:2e:ba:af:91:8a:79:e5:b3:02: ea:5f:a0:1a:d1:87:2a:a5:ac:19:6b:dd:7f:9d:e4:16:8c:1e: 72:3a:46:a9:05:12:3d:50:86:9e:23:d1:ea:66:04:24:20:45: ba:0d:c1:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavuKpHNB0835T0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk NGUyZGIzMzEtOWJiNy00Njc4LTk4YWQtZTkxNDk4YjQyZTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWz8y4prKEeyaCagm5Reepb1iqEkF3ROcPIC G8jWCIbDI/pqqChcOsToPo5D5K9nlGM6Poth+SN5E3zwQdp8yye60EQWkVNXpQEK N1YKuuZ0yct+IK/uwwiETk4vrgq1cFYdvLGGCw1IDmckgDVJn8chx1DnrHDhkHZI 7yZBxIcT9Jf8ER3l13SCRb9/D80XB5+72+zGY5DrbeTvwe++/ltM1UqfivD0N4S4 S42D8liEL1BghyzIcTpWQ5Kzqdlfb6IaY/l0Az+IpZUalXzCcVTF49/z+uLVYWEu rBntH/m6HLvy4h5QqeZEz6PLoDJlKS8F8Bg+PPNdrckaUSX3UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI3glKb31c0X2vAC3YId+mPOvfYlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvM2I1NTExZWUtNzAzZC0z ZjBiLWEzMzItZTRkZDI4Y2RiMWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwFVOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHc6wN3EV/m1u0wnskJ1M+3lZ6pusK5NS9Wc7yZsMl7omztO+xYKZGGO BAl0kUjMpjuGUapsAJpzSRafdgp1qId0xwsosY3nlO6Ddl+yhhtSr502NRr/jaor VsRb3Ikga/9HBBkiotxDSrTb1GVUpDgqGLSw38PQ59kjtsuf9IOt0hdam5tXoZ6R 08dGXJfQPcl917dFG8H5VmN5uVfDxAzDDII3h0ZsVPiGoKw4EbrzfBUdQihikqkY c6wwJN1cS6lCR/UierINYuOWUomSPi66r5GKeeWzAupfoBrRhyqlrBlr3X+d5BaM HnI6RqkFEj1Qhp4j0epmBCQgRboNwQc= -----END CERTIFICATE-----Generated at Sat Apr 5 21:18:36 2025 by rpki-client