$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6e6d3c43-a435-3289-a639-6c28743a2d47.roa File: 6e6d3c43-a435-3289-a639-6c28743a2d47.roa (raw, json) Hash identifier: 7sOthCWAcIt74Pm5OnyTF0ABstE0AZNVKAHAZ9NtGvQ= Subject key identifier: F0:AC:D6:FF:17:94:D9:EB:26:3B:7F:A0:76:54:E1:16:E6:07:10:8B Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285848BA563EBB40C5131C00C58880 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6e6d3c43-a435-3289-a639-6c28743a2d47.roa Signing time: Fri 31 Jan 2025 14:00:51 +0000 ROA not before: Fri 31 Jan 2025 14:00:51 +0000 ROA not after: Thu 01 May 2025 13:00:51 +0000 asID: 202 IP address blocks: 192.85.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ba:56:3e:bb:40:c5:13:1c:00:c5:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jan 31 14:00:51 2025 GMT Not After : May 1 13:00:51 2025 GMT Subject: CN=f352753e-9680-4ba0-a29f-1f3de6bdba85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:e7:93:fd:d4:8e:8a:7f:2c:b1:24:4b:d0:29: 2b:87:c2:6b:41:27:4a:fd:d9:81:9f:ce:31:e5:30: 81:00:04:d5:5d:8e:0d:7d:66:d4:bf:fc:92:be:61: e3:fa:2f:a5:6d:22:c6:0a:c9:5b:3b:47:6a:6a:1f: b7:78:cf:fc:03:35:f8:4b:1d:0f:13:a2:0d:87:d5: f2:d0:41:13:79:ce:b5:43:5a:32:2d:79:bf:43:52: fb:a7:ed:89:81:00:cd:8a:96:1f:71:73:3b:af:04: 46:c3:b8:ee:64:64:7d:6f:94:84:ec:dd:08:c3:63: f0:4f:7f:be:61:a1:41:b5:81:c4:fb:a3:47:27:87: e8:69:0c:5d:b2:86:7f:71:ac:8b:6e:f4:7e:4d:1d: 33:13:bc:80:b8:64:76:d9:99:08:3b:c6:7a:12:92: b9:09:80:a8:63:6d:ad:9b:9b:c3:f0:16:37:16:0f: fe:a0:1b:db:f8:5b:0f:07:30:6b:a9:ad:f2:25:36: 32:fe:2b:14:b0:b3:5f:ea:74:f9:24:50:f0:80:03: a7:fd:1b:75:5a:6a:25:88:d3:53:17:9c:cc:c4:1a: 46:f4:7b:e1:a9:a2:38:f4:84:1f:a8:28:e5:18:3e: 63:91:85:31:8b:39:c6:5f:33:5b:bc:5b:eb:4d:b4: a8:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:AC:D6:FF:17:94:D9:EB:26:3B:7F:A0:76:54:E1:16:E6:07:10:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6e6d3c43-a435-3289-a639-6c28743a2d47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.85.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:b7:97:d9:31:ef:52:9c:fe:df:6e:ab:b9:ff:c8:59:32:90: a9:cd:d8:a1:c1:44:31:df:1c:56:dd:24:e2:cc:9f:4f:87:09: ed:cf:00:58:fd:2b:a9:6f:53:80:f5:6f:79:20:b0:b7:47:78: e0:65:7f:54:27:41:9e:7d:a7:2a:a9:e2:44:4b:94:b1:ec:ea: f7:80:77:2b:7a:cf:e9:f0:60:e5:55:5f:af:d5:8a:38:25:86: 95:d1:9d:32:c7:e6:02:fc:87:45:cd:7d:fd:60:0d:4d:06:7d: 94:f8:7a:02:f3:42:98:4e:e1:c3:a6:78:b4:40:bc:70:d1:cd: c2:7a:47:ba:3c:bd:28:8a:ef:74:ca:12:2e:1f:ae:c2:0f:eb: fb:74:9c:d2:d5:c4:95:da:17:db:bd:5f:90:4e:ce:17:d8:f8: 37:78:c8:c4:bf:ee:8e:9a:ba:bc:2d:5a:98:92:95:a6:44:9a: 1c:de:3f:78:17:62:11:e4:3d:65:66:31:c1:c8:9a:d2:c8:07: 14:59:8b:26:c1:56:9e:77:b6:9f:d6:95:73:f4:c2:5d:60:77: 21:83:ae:de:04:53:2a:64:84:1f:67:39:89:cd:2b:0e:00:c0: d8:2d:58:83:17:1d:52:22:ab:79:3b:e5:01:02:6a:73:97:13: aa:e2:35:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi6Vj67QMUTHADFiIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDEzMTE0MDA1MVoXDTI1MDUwMTEzMDA1MVowLzEtMCsGA1UEAxMk ZjM1Mjc1M2UtOTY4MC00YmEwLWEyOWYtMWYzZGU2YmRiYTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOeT/dSOin8ssSRL0Ckrh8JrQSdK/dmBn84x 5TCBAATVXY4NfWbUv/ySvmHj+i+lbSLGCslbO0dqah+3eM/8AzX4Sx0PE6INh9Xy 0EETec61Q1oyLXm/Q1L7p+2JgQDNipYfcXM7rwRGw7juZGR9b5SE7N0Iw2PwT3++ YaFBtYHE+6NHJ4foaQxdsoZ/cayLbvR+TR0zE7yAuGR22ZkIO8Z6EpK5CYCoY22t m5vD8BY3Fg/+oBvb+FsPBzBrqa3yJTYy/isUsLNf6nT5JFDwgAOn/Rt1WmoliNNT F5zMxBpG9HvhqaI49IQfqCjlGD5jkYUxiznGXzNbvFvrTbSoAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPCs1v8XlNnrJjt/oHZU4RbmBxCLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNmU2ZDNjNDMtYTQzNS0z Mjg5LWE2MzktNmMyODc0M2EyZDQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFV8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADG3l9kx71Kc/t9uq7n/yFkykKnN2KHBRDHfHFbdJOLMn0+HCe3PAFj9 K6lvU4D1b3kgsLdHeOBlf1QnQZ59pyqp4kRLlLHs6veAdyt6z+nwYOVVX6/Vijgl hpXRnTLH5gL8h0XNff1gDU0GfZT4egLzQphO4cOmeLRAvHDRzcJ6R7o8vSiK73TK Ei4frsIP6/t0nNLVxJXaF9u9X5BOzhfY+Dd4yMS/7o6aurwtWpiSlaZEmhzeP3gX YhHkPWVmMcHImtLIBxRZiybBVp53tp/WlXP0wl1gdyGDrt4EUypkhB9nOYnNKw4A wNgtWIMXHVIiq3k75QECanOXE6riNY8= -----END CERTIFICATE-----Generated at Fri Mar 14 09:27:12 2025 by rpki-client