$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/574c1acc-801c-310d-8306-fe7a9299a466.roa File: 574c1acc-801c-310d-8306-fe7a9299a466.roa (raw, json) Hash identifier: d6C+2Zd2aRjIkhzDYXQ9VoYoBNuJYJ5/c4vFSHldVbU= Subject key identifier: 0F:05:FE:D7:4A:4A:EB:8B:48:F1:36:C7:A6:C7:92:2B:04:E2:88:31 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285848BA563E34C8EE9BC7F866FBE0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/574c1acc-801c-310d-8306-fe7a9299a466.roa Signing time: Fri 31 Jan 2025 14:00:51 +0000 ROA not before: Fri 31 Jan 2025 14:00:51 +0000 ROA not after: Thu 01 May 2025 13:00:51 +0000 asID: 2158 IP address blocks: 192.85.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ba:56:3e:34:c8:ee:9b:c7:f8:66:fb:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jan 31 14:00:51 2025 GMT Not After : May 1 13:00:51 2025 GMT Subject: CN=87b24296-b98c-4f5d-8657-072a34b1b136 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:03:9b:14:cf:6f:d5:00:e2:a1:d3:f9:3f:5a: 6e:95:c5:7f:ee:d4:4c:a0:af:89:c8:cf:a9:5f:04: 84:01:27:93:50:73:e3:67:90:05:f9:1b:d7:d0:8b: 96:f8:ae:ad:b9:e7:69:9d:52:c2:42:91:4c:f2:d1: 29:63:4f:5e:cd:d7:55:0e:b5:5c:e3:12:68:54:ca: 1e:22:8c:29:33:e0:51:37:f7:91:39:6c:49:1b:32: c9:fd:8d:f7:b3:32:eb:ef:8a:70:47:a4:70:1f:5a: 8c:f7:69:06:d9:bc:da:9b:3d:26:8a:96:57:33:a6: 72:35:87:7a:dd:9d:0f:ce:f9:b6:67:7a:52:be:94: 37:c0:32:9b:c4:12:8a:22:1c:79:6f:5d:26:e3:5b: cc:de:a2:cd:2f:38:3c:85:a4:b0:68:68:bd:e9:c2: 51:cb:e3:07:1c:43:37:8d:5e:ab:d9:fe:03:8b:67: f8:05:b4:9f:78:19:dc:fe:c1:ef:ad:76:69:bd:6f: 48:67:b4:b7:6a:6a:4b:1e:cc:01:93:25:69:88:48: ef:30:d6:dc:c2:c5:c0:88:fe:dd:ed:45:56:2b:40: 28:28:0b:fc:cb:9b:2b:04:f4:09:bb:e8:e9:9c:c4: 40:a7:ed:bf:0a:8b:9c:54:58:8e:8f:15:8f:13:4b: 73:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:05:FE:D7:4A:4A:EB:8B:48:F1:36:C7:A6:C7:92:2B:04:E2:88:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/574c1acc-801c-310d-8306-fe7a9299a466.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.85.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:71:29:43:10:e9:b4:0f:9a:48:7c:0d:e5:f2:77:5e:06:e9: 7a:6a:28:32:5c:7c:cb:92:ee:1a:8a:2f:95:4a:26:85:f7:2b: 56:46:a4:9d:bc:f5:23:42:0e:0f:65:54:8f:d5:22:9a:9d:c3: 04:18:e2:51:65:ab:c5:c5:f5:8e:bc:85:f4:34:93:76:1c:0c: a8:ad:94:1a:98:55:1d:7f:b2:4f:d2:1c:c3:a9:31:9c:89:5b: 02:87:67:40:bb:0e:7b:67:57:91:9f:14:68:b2:3e:d0:0e:e7: b7:57:61:72:29:6d:6d:42:e5:63:8e:06:4e:a5:53:99:93:f0: 46:4a:a1:1f:a8:e0:b6:d8:4d:64:de:f8:5e:bb:d3:48:86:40: fb:39:2f:31:3e:69:b0:f2:b1:a2:0c:15:81:43:5f:0a:d3:40: be:58:a8:0c:9e:ca:9e:ec:aa:5e:99:a4:95:c5:6e:ca:ad:af: 90:0c:9d:ba:78:53:6b:bd:65:2e:bc:46:5e:d9:1d:d8:a7:48: 4f:05:b6:99:c2:80:2f:d1:f2:62:80:b7:32:6d:b9:96:a7:b5: 97:7e:94:a3:2a:b3:8b:d3:d5:00:f6:41:07:3a:1e:33:38:02: 53:75:8a:c4:80:fc:ee:9c:bb:81:b5:fd:05:72:ab:e6:22:d6: 08:b6:9c:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi6Vj40yO6bx/hm++AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDEzMTE0MDA1MVoXDTI1MDUwMTEzMDA1MVowLzEtMCsGA1UEAxMk ODdiMjQyOTYtYjk4Yy00ZjVkLTg2NTctMDcyYTM0YjFiMTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wObFM9v1QDiodP5P1pulcV/7tRMoK+JyM+p XwSEASeTUHPjZ5AF+RvX0IuW+K6tuedpnVLCQpFM8tEpY09ezddVDrVc4xJoVMoe IowpM+BRN/eROWxJGzLJ/Y33szLr74pwR6RwH1qM92kG2bzamz0mipZXM6ZyNYd6 3Z0Pzvm2Z3pSvpQ3wDKbxBKKIhx5b10m41vM3qLNLzg8haSwaGi96cJRy+MHHEM3 jV6r2f4Di2f4BbSfeBnc/sHvrXZpvW9IZ7S3ampLHswBkyVpiEjvMNbcwsXAiP7d 7UVWK0AoKAv8y5srBPQJu+jpnMRAp+2/CoucVFiOjxWPE0tz5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA8F/tdKSuuLSPE2x6bHkisE4ogxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNTc0YzFhY2MtODAxYy0z MTBkLTgzMDYtZmU3YTkyOTlhNDY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFV8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFRxKUMQ6bQPmkh8DeXyd14G6XpqKDJcfMuS7hqKL5VKJoX3K1ZGpJ28 9SNCDg9lVI/VIpqdwwQY4lFlq8XF9Y68hfQ0k3YcDKitlBqYVR1/sk/SHMOpMZyJ WwKHZ0C7DntnV5GfFGiyPtAO57dXYXIpbW1C5WOOBk6lU5mT8EZKoR+o4LbYTWTe +F6700iGQPs5LzE+abDysaIMFYFDXwrTQL5YqAyeyp7sql6ZpJXFbsqtr5AMnbp4 U2u9ZS68Rl7ZHdinSE8FtpnCgC/R8mKAtzJtuZantZd+lKMqs4vT1QD2QQc6HjM4 AlN1isSA/O6cu4G1/QVyq+Yi1gi2nKU= -----END CERTIFICATE-----Generated at Sun Feb 16 15:45:33 2025 by rpki-client