$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/79130a2c-4311-3f1a-bbda-69eaafc3e66d.roa File: 79130a2c-4311-3f1a-bbda-69eaafc3e66d.roa (raw, json) Hash identifier: vhCKquE8FUI3ICeq/U49USZw3Bs3ggsokgspOX1iK8Y= Subject key identifier: 24:5F:53:AF:10:A0:A3:05:92:39:EC:17:E3:C1:CF:E6:48:0B:D7:D4 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285848AAFB5A93B99904F406154900 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/79130a2c-4311-3f1a-bbda-69eaafc3e66d.roa Signing time: Sun 26 Jan 2025 02:00:38 +0000 ROA not before: Sun 26 Jan 2025 02:00:38 +0000 ROA not after: Sat 26 Apr 2025 01:00:38 +0000 asID: 3356 IP address blocks: 192.85.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:aa:fb:5a:93:b9:99:04:f4:06:15:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jan 26 02:00:38 2025 GMT Not After : Apr 26 01:00:38 2025 GMT Subject: CN=f604a99b-30bf-41b3-856c-0e1759418c70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:90:1d:6a:9d:e3:2f:cd:26:2b:0d:58:f6:1c: eb:b0:ea:13:b5:04:2a:9f:b3:9f:f3:14:0a:fb:df: 05:4c:0c:71:85:21:37:c2:e3:b7:7b:23:0c:c2:ea: c5:32:f5:04:af:e5:c8:d1:2e:b4:da:ab:34:6e:be: e9:ec:ff:5c:ae:00:6d:f1:4a:97:84:8d:c1:e4:ba: df:53:55:67:df:c6:7a:40:db:66:38:59:e0:95:86: 9a:7c:36:43:d7:43:f9:eb:c1:ba:09:76:04:fd:6b: a6:81:e0:cf:30:1e:79:ca:b8:ba:73:60:ef:b2:ed: 31:90:15:7a:b3:6e:cb:15:c9:67:38:fa:74:f6:f8: ee:49:f8:1c:58:d9:d1:26:74:83:f0:90:90:e3:ce: 0d:0e:1c:eb:d7:6d:a2:98:14:d7:4d:95:2f:0b:f4: 50:bc:bd:2b:b9:24:e0:dd:6b:aa:3d:09:c6:77:f2: 99:be:a3:c9:d5:b5:48:c7:91:7a:18:c0:62:e6:30: b4:93:6a:d7:e1:43:72:92:42:0f:a7:27:51:d7:f9: 06:c4:d6:dd:1c:07:31:15:01:ab:25:c8:24:3c:3c: b7:0d:58:a2:24:da:76:6f:21:a2:74:6e:c9:88:6f: 64:a0:10:d9:e1:d7:0b:cd:0d:00:fc:d2:c2:ef:e8: de:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:5F:53:AF:10:A0:A3:05:92:39:EC:17:E3:C1:CF:E6:48:0B:D7:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/79130a2c-4311-3f1a-bbda-69eaafc3e66d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.85.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:c1:3c:9a:f0:90:b5:d3:27:73:c8:8c:43:37:7f:c9:e0:9c: 65:06:70:2c:04:02:60:a8:4e:5c:f7:3d:ec:6a:f8:0b:0c:98: 07:07:9e:ae:cb:95:47:e4:3e:4b:ba:7a:70:8d:a9:d8:2b:4a: 38:ee:98:c6:85:5a:6e:d8:d8:df:4c:02:de:74:9a:f8:4e:24: 00:3d:dc:9e:9d:51:0e:ff:74:fc:31:37:70:bb:b8:4b:17:57: 79:11:e3:b8:24:f8:11:08:94:05:1e:60:cd:ca:3d:20:ee:79: a7:a3:d8:06:b7:0d:28:a8:47:04:3c:cc:77:2e:8a:58:00:cb: 19:26:5e:93:ca:c4:aa:57:00:fe:b3:bf:4e:fd:f2:3e:8d:5d: 4b:25:51:fa:4e:a5:5d:bc:e1:05:89:b5:4c:a0:6d:b9:4c:6a: 84:2e:cc:d9:2b:2a:31:ae:7d:a4:0b:3a:02:6d:6f:75:1b:af: 18:0d:56:9c:9f:a4:82:e2:bb:b8:4f:60:10:2d:bd:24:b6:40: 4d:09:8e:33:8f:8a:9d:d1:94:f3:b2:98:6f:c7:20:56:43:eb: cb:6f:a3:b2:62:5c:70:4a:58:37:ec:0b:35:5b:49:5f:3c:43: 37:fc:e5:2e:a2:7a:33:03:cb:58:bd:05:43:c8:6f:dc:bd:16: 48:95:1d:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiq+1qTuZkE9AYVSQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDEyNjAyMDAzOFoXDTI1MDQyNjAxMDAzOFowLzEtMCsGA1UEAxMk ZjYwNGE5OWItMzBiZi00MWIzLTg1NmMtMGUxNzU5NDE4YzcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpAdap3jL80mKw1Y9hzrsOoTtQQqn7Of8xQK +98FTAxxhSE3wuO3eyMMwurFMvUEr+XI0S602qs0br7p7P9crgBt8UqXhI3B5Lrf U1Vn38Z6QNtmOFnglYaafDZD10P568G6CXYE/WumgeDPMB55yri6c2Dvsu0xkBV6 s27LFclnOPp09vjuSfgcWNnRJnSD8JCQ484NDhzr122imBTXTZUvC/RQvL0ruSTg 3WuqPQnGd/KZvqPJ1bVIx5F6GMBi5jC0k2rX4UNykkIPpydR1/kGxNbdHAcxFQGr JcgkPDy3DViiJNp2byGidG7JiG9koBDZ4dcLzQ0A/NLC7+jeQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCRfU68QoKMFkjnsF+PBz+ZIC9fUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNzkxMzBhMmMtNDMxMS0z ZjFhLWJiZGEtNjllYWFmYzNlNjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFX5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGTBPJrwkLXTJ3PIjEM3f8ngnGUGcCwEAmCoTlz3Pexq+AsMmAcHnq7L lUfkPku6enCNqdgrSjjumMaFWm7Y2N9MAt50mvhOJAA93J6dUQ7/dPwxN3C7uEsX V3kR47gk+BEIlAUeYM3KPSDueaej2Aa3DSioRwQ8zHcuilgAyxkmXpPKxKpXAP6z v0798j6NXUslUfpOpV284QWJtUygbblMaoQuzNkrKjGufaQLOgJtb3UbrxgNVpyf pILiu7hPYBAtvSS2QE0JjjOPip3RlPOymG/HIFZD68tvo7JiXHBKWDfsCzVbSV88 Qzf85S6iejMDy1i9BUPIb9y9FkiVHZY= -----END CERTIFICATE-----Generated at Sat Apr 5 12:33:10 2025 by rpki-client