$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/52e0c708-d581-338b-a618-cc5c3a9caf20.roa File: 52e0c708-d581-338b-a618-cc5c3a9caf20.roa (raw, json) Hash identifier: d4WE2/Ly8qmXBiDJKXFOhHwbGc3NBekw0GJ1YipOwjw= Subject key identifier: 88:7A:B2:C8:8C:CF:8A:46:14:58:68:FD:64:C2:EC:EA:77:EA:35:4A Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858491246C92A795B7F464051F054 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/52e0c708-d581-338b-a618-cc5c3a9caf20.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 202 IP address blocks: 192.85.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:c9:2a:79:5b:7f:46:40:51:f0:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=a947369f-a971-401c-824a-e82e895ec48e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:3c:a5:0c:ab:85:09:85:53:c5:b1:98:07:0a: 96:7a:f6:87:72:ef:c5:61:ab:cd:54:e8:e0:8f:45: 94:3a:91:81:59:e3:98:3f:5f:3b:95:57:11:73:e3: 19:f6:82:bd:c5:32:27:4b:f8:dd:d5:4f:8c:06:9a: 16:3a:f8:f6:44:7b:cb:44:bf:2b:2b:16:40:32:24: a6:04:29:07:d0:56:22:f0:65:d1:34:1f:7f:ab:e2: ed:a3:3f:18:5e:21:4e:5a:ed:a5:18:47:dd:89:24: ed:13:f2:27:4e:09:01:14:2d:28:28:6f:5f:52:17: 83:92:47:83:2f:a6:1b:29:b3:45:a7:6a:91:b9:4f: 85:3d:88:00:7c:84:1c:0c:fb:e5:00:6f:39:c7:51: e0:0b:7b:b1:e5:22:e4:9d:3c:73:19:37:ed:1f:dc: 40:99:89:83:7c:59:48:c8:ad:82:4c:0d:a7:d2:b6: 96:8e:87:7d:e3:d3:e8:f0:db:f9:3f:2b:03:78:de: 00:98:dc:53:3b:8e:5f:ed:5f:35:be:bb:38:3f:11: c3:cc:26:e1:fc:27:ff:09:ca:e3:2f:dc:c4:17:c9: 0b:41:48:68:10:17:d2:3f:9f:ff:62:7a:1e:a5:13: fb:55:c8:e6:60:d5:1d:8e:0e:e6:89:29:65:3b:38: 30:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:7A:B2:C8:8C:CF:8A:46:14:58:68:FD:64:C2:EC:EA:77:EA:35:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/52e0c708-d581-338b-a618-cc5c3a9caf20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.85.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:5f:a4:6d:a2:11:78:96:f3:4a:bc:29:7d:74:d0:59:55:6b: 88:c2:d4:4d:61:5b:ca:93:1e:2d:4d:7f:b0:ea:6b:bf:a0:cd: b2:5b:59:62:00:92:57:7b:29:1c:03:47:ca:e2:ae:6e:68:70: 27:24:02:73:7d:c2:74:d2:11:07:eb:74:d4:e0:5b:cf:8c:1a: 13:5d:4e:79:94:78:d3:33:11:5b:22:65:7b:48:e2:25:14:df: c4:96:9a:0c:a1:70:89:9d:48:02:f8:7c:6c:b9:71:e2:75:79: ce:e4:be:72:d5:0d:e5:4c:16:28:c1:35:18:a4:02:ca:c7:c9: 56:83:5f:99:0e:5c:3f:29:bf:d4:28:32:70:b7:88:65:44:f9: a0:ea:80:5f:ad:73:de:ad:ed:af:43:3c:d6:40:46:e5:11:50: 86:82:07:8a:29:aa:37:9e:f3:a6:75:6b:67:1e:42:f5:64:4d: 58:dd:81:07:13:c9:43:2e:57:4d:ef:2a:45:bc:9b:6c:cf:7d: 39:c6:5f:b4:5f:83:94:49:7f:f3:4f:59:d0:a5:5d:69:7d:e9: 45:1d:0f:38:c7:43:fc:5c:19:b3:1e:da:32:db:0a:44:85:d5: a5:99:ab:65:20:87:f9:44:54:fb:1c:31:4c:14:43:ea:22:d3: 27:fd:23:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRskqeVt/RkBR8FQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk YTk0NzM2OWYtYTk3MS00MDFjLTgyNGEtZTgyZTg5NWVjNDhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzylDKuFCYVTxbGYBwqWevaHcu/FYavNVOjg j0WUOpGBWeOYP187lVcRc+MZ9oK9xTInS/jd1U+MBpoWOvj2RHvLRL8rKxZAMiSm BCkH0FYi8GXRNB9/q+Ltoz8YXiFOWu2lGEfdiSTtE/InTgkBFC0oKG9fUheDkkeD L6YbKbNFp2qRuU+FPYgAfIQcDPvlAG85x1HgC3ux5SLknTxzGTftH9xAmYmDfFlI yK2CTA2n0raWjod949Po8Nv5PysDeN4AmNxTO45f7V81vrs4PxHDzCbh/Cf/Ccrj L9zEF8kLQUhoEBfSP5//YnoepRP7VcjmYNUdjg7miSllOzgwuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIh6ssiMz4pGFFho/WTC7Op36jVKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNTJlMGM3MDgtZDU4MS0z MzhiLWE2MTgtY2M1YzNhOWNhZjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFU7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEpfpG2iEXiW80q8KX100FlVa4jC1E1hW8qTHi1Nf7Dqa7+gzbJbWWIA kld7KRwDR8rirm5ocCckAnN9wnTSEQfrdNTgW8+MGhNdTnmUeNMzEVsiZXtI4iUU 38SWmgyhcImdSAL4fGy5ceJ1ec7kvnLVDeVMFijBNRikAsrHyVaDX5kOXD8pv9Qo MnC3iGVE+aDqgF+tc96t7a9DPNZARuURUIaCB4opqjee86Z1a2ceQvVkTVjdgQcT yUMuV03vKkW8m2zPfTnGX7Rfg5RJf/NPWdClXWl96UUdDzjHQ/xcGbMe2jLbCkSF 1aWZq2Ugh/lEVPscMUwUQ+oi0yf9I3g= -----END CERTIFICATE-----Generated at Sat Apr 5 16:47:08 2025 by rpki-client