$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4a13f0af-13de-3e9c-bebf-7dfaba4cc58e.roa File: 4a13f0af-13de-3e9c-bebf-7dfaba4cc58e.roa (raw, json) Hash identifier: LLLyeD4jnjTINodgz9m6NG7PLNf7E7XjtNw6bFvwFes= Subject key identifier: D3:1D:A0:B7:78:A7:C2:01:7F:24:CD:F0:15:48:8A:F7:2B:A5:AD:B4 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858495ABEE2C54E3DE57B90FD9380 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4a13f0af-13de-3e9c-bebf-7dfaba4cc58e.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 202 IP address blocks: 192.85.78.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:e2:c5:4e:3d:e5:7b:90:fd:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=2cd55220-85a3-4a7a-bcad-a73e7c12402f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b3:ae:56:7e:0f:bc:4f:2a:c8:b8:1a:20:9a: 48:46:c7:48:f4:f2:19:f8:f3:89:08:9d:92:1b:0b: cb:c6:f5:48:d1:ce:8e:62:ad:57:7d:f3:6f:a3:74: af:07:9d:c5:fe:28:76:e7:cd:cc:38:96:c6:df:46: 91:b2:df:29:54:ce:21:bc:06:06:f6:86:83:33:db: 2e:e0:7e:82:5b:5b:74:33:13:5d:bb:36:bb:64:9c: 18:46:a3:0e:75:42:cc:1b:71:8e:fc:4a:00:c6:89: a5:44:9d:7a:8c:31:e3:65:d6:cf:71:ac:12:47:f3: 66:7a:6a:f6:50:6b:ad:c6:2b:55:9f:a2:27:16:31: c3:ac:84:2f:83:8c:b4:8e:ed:6a:1e:7f:83:21:5b: 54:9e:e5:54:71:41:06:4e:be:69:1b:d6:91:a2:de: 80:db:d7:95:64:2b:21:ee:3b:f3:60:6f:07:14:77: dc:33:12:05:50:8c:80:78:cc:8b:f5:0b:3a:0a:fb: 2c:3a:ae:00:91:56:49:da:d9:02:e2:ee:a7:d0:1f: 10:63:5d:8a:34:b8:de:d1:66:3c:40:cd:69:e3:b8: 74:2d:84:e3:05:df:e3:50:28:ed:1e:d0:21:42:e8: 03:8b:51:a6:9a:27:5d:7e:84:d0:29:67:11:89:11: 0f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:1D:A0:B7:78:A7:C2:01:7F:24:CD:F0:15:48:8A:F7:2B:A5:AD:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4a13f0af-13de-3e9c-bebf-7dfaba4cc58e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.85.78.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:bb:9d:7f:1f:e5:92:2b:aa:b2:cc:41:0c:e2:a4:0c:3a:13: 6d:44:6d:da:f3:7b:c3:da:5e:c9:2b:35:a8:5c:13:1f:20:b9: de:29:63:df:34:c7:1c:c2:64:cf:72:e5:e6:d4:bf:25:21:0e: 71:49:ff:66:21:e7:2a:2f:35:1e:47:28:15:e8:55:7b:34:31: 2b:0b:1a:35:07:f5:ff:1b:c0:db:08:b5:48:59:01:18:e9:b9: cf:5f:37:53:3c:c7:16:c3:ef:da:ae:3f:7f:e3:17:80:3d:4b: 80:a5:92:59:f2:f5:86:34:a8:88:06:37:c6:72:e1:f5:4a:cb: 08:dc:0f:2f:f2:46:dc:e4:a0:a6:f9:93:e2:59:c9:36:5c:2d: 02:90:c8:41:af:68:bb:82:f9:98:35:36:4e:24:4c:be:ba:35: ec:a7:6d:20:f8:ed:74:ce:0c:68:f8:f5:70:5d:3d:8b:f3:a1: b2:6e:b3:e1:2f:93:8f:cb:5f:13:79:42:f4:3c:44:56:21:9d: 29:7f:54:a4:cd:b7:9a:4f:da:47:52:a9:1f:e9:c0:00:8e:79: ac:cc:4d:8d:57:e5:0c:36:97:3c:22:d7:e6:16:04:10:30:d5: 69:f8:f3:b3:a9:37:f8:10:22:a2:c8:d4:68:d6:ce:6d:d3:fa: 59:74:14:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavuLFTj3le5D9k4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk MmNkNTUyMjAtODVhMy00YTdhLWJjYWQtYTczZTdjMTI0MDJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLOuVn4PvE8qyLgaIJpIRsdI9PIZ+POJCJ2S GwvLxvVI0c6OYq1XffNvo3SvB53F/ih2583MOJbG30aRst8pVM4hvAYG9oaDM9su 4H6CW1t0MxNduza7ZJwYRqMOdULMG3GO/EoAxomlRJ16jDHjZdbPcawSR/Nmemr2 UGutxitVn6InFjHDrIQvg4y0ju1qHn+DIVtUnuVUcUEGTr5pG9aRot6A29eVZCsh 7jvzYG8HFHfcMxIFUIyAeMyL9Qs6CvssOq4AkVZJ2tkC4u6n0B8QY12KNLje0WY8 QM1p47h0LYTjBd/jUCjtHtAhQugDi1GmmiddfoTQKWcRiREPbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNMdoLd4p8IBfyTN8BVIivcrpa20MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNGExM2YwYWYtMTNkZS0z ZTljLWJlYmYtN2RmYWJhNGNjNThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwFVOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEO7nX8f5ZIrqrLMQQzipAw6E21Ebdrze8PaXskrNahcEx8gud4pY980 xxzCZM9y5ebUvyUhDnFJ/2Yh5yovNR5HKBXoVXs0MSsLGjUH9f8bwNsItUhZARjp uc9fN1M8xxbD79quP3/jF4A9S4Clklny9YY0qIgGN8Zy4fVKywjcDy/yRtzkoKb5 k+JZyTZcLQKQyEGvaLuC+Zg1Nk4kTL66NeynbSD47XTODGj49XBdPYvzobJus+Ev k4/LXxN5QvQ8RFYhnSl/VKTNt5pP2kdSqR/pwACOeazMTY1X5Qw2lzwi1+YWBBAw 1Wn487OpN/gQIqLI1GjWzm3T+ll0FOg= -----END CERTIFICATE-----Generated at Sat Apr 5 16:42:09 2025 by rpki-client