$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/83816df6-0fd2-3776-94a8-5804ec3e377c.roa File: 83816df6-0fd2-3776-94a8-5804ec3e377c.roa (raw, json) Hash identifier: 08+Qlp9Cs9p1zxdqS/5etInBsQyb5y8St/EjAHu27G0= Subject key identifier: 77:FF:FF:DD:DC:84:82:2D:21:0F:DA:75:7D:C1:D2:F2:1E:4C:22:FB Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285848AAFB5889A3D804C2B9761FF0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/83816df6-0fd2-3776-94a8-5804ec3e377c.roa Signing time: Sun 26 Jan 2025 02:00:38 +0000 ROA not before: Sun 26 Jan 2025 02:00:38 +0000 ROA not after: Sat 26 Apr 2025 01:00:38 +0000 asID: 202 IP address blocks: 192.85.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:aa:fb:58:89:a3:d8:04:c2:b9:76:1f:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jan 26 02:00:38 2025 GMT Not After : Apr 26 01:00:38 2025 GMT Subject: CN=4e4b833c-2740-4363-bda5-08ffad25fef3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:99:e4:17:ae:40:0e:32:00:90:67:99:dd:44: 0f:1b:56:df:94:1b:3c:f8:71:01:49:68:2e:a2:d8: 32:55:f3:b3:a3:c9:b5:5b:82:ef:7c:f7:64:5e:2b: f2:e6:e4:78:8c:72:54:62:70:89:db:34:b4:96:bf: 00:42:c3:e7:48:48:b3:96:08:2d:81:bd:7e:25:0c: 1f:c9:23:da:3d:89:d7:c2:d8:3c:b7:a9:c2:ed:c6: b2:40:fd:d3:cf:9e:fb:65:f2:f0:a6:e2:3b:3c:c5: 30:37:8f:b2:7c:8a:e4:90:79:9b:83:4b:f5:59:3e: 86:3f:be:0f:3f:a2:80:f0:e8:b1:85:9c:f7:71:30: 83:50:f5:90:18:9e:07:2c:a8:01:c2:63:ed:2d:c2: f1:4f:82:6c:01:f1:13:a7:59:63:85:17:0f:d4:26: ee:a8:4b:0c:ad:b4:79:79:c0:aa:44:aa:62:d7:25: 34:ca:3a:f0:15:7e:e9:c6:65:14:af:5a:5f:b0:ef: fa:e4:65:49:17:dc:4c:98:df:30:9e:c2:1d:d1:9e: 71:61:2c:5b:77:a9:2f:e6:ff:65:57:b9:f1:2f:6e: d3:0b:f0:aa:23:ed:f1:fe:13:32:7e:f8:bb:e6:60: d4:f4:dc:81:26:92:e0:54:5e:c9:b3:a1:78:c4:92: 8e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:FF:FF:DD:DC:84:82:2D:21:0F:DA:75:7D:C1:D2:F2:1E:4C:22:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/83816df6-0fd2-3776-94a8-5804ec3e377c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.85.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:b3:a1:74:28:8a:b1:71:7c:0d:46:cb:d5:31:47:c4:fd:bc: cb:25:fb:38:5f:19:9f:ae:0b:d5:42:a1:c7:58:0f:ed:14:a8: 23:13:f0:38:bb:d1:37:99:53:59:7c:36:d0:f4:99:13:4d:e4: 6f:ba:06:c3:89:38:57:eb:4b:b1:81:0c:f5:9f:3f:b9:15:8b: ee:9e:5c:74:57:67:65:39:6e:fe:95:00:b0:eb:5e:2b:76:9d: 9d:99:8a:02:c7:63:9e:2b:03:f9:6a:ac:e2:19:87:93:fb:eb: 5e:2b:92:03:14:fa:08:9a:cd:40:d9:43:1f:27:f7:a2:89:0b: fe:cd:1c:d0:f8:d4:d3:88:56:74:68:10:89:c8:a0:58:b9:1a: d6:db:f0:02:94:f3:ec:cd:2e:bd:e3:01:65:60:d3:33:57:62: 5d:aa:81:43:14:80:02:72:4b:fa:14:50:40:b3:db:9c:b7:62: 6d:17:3c:b0:d8:3e:90:8c:5e:03:d2:07:22:09:5b:db:d4:21: 6f:fa:11:7f:e3:1d:fb:1d:af:06:af:a3:e5:9e:bd:ff:2c:d7: 9b:d7:92:de:e0:de:be:d1:40:fb:3f:8f:df:e8:48:68:ef:58: b8:40:e0:67:a2:fc:22:86:9a:85:71:0c:3b:d9:14:df:f6:d3: 6a:88:b7:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiq+1iJo9gEwrl2H/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDEyNjAyMDAzOFoXDTI1MDQyNjAxMDAzOFowLzEtMCsGA1UEAxMk NGU0YjgzM2MtMjc0MC00MzYzLWJkYTUtMDhmZmFkMjVmZWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpnkF65ADjIAkGeZ3UQPG1bflBs8+HEBSWgu otgyVfOzo8m1W4LvfPdkXivy5uR4jHJUYnCJ2zS0lr8AQsPnSEizlggtgb1+JQwf ySPaPYnXwtg8t6nC7cayQP3Tz577ZfLwpuI7PMUwN4+yfIrkkHmbg0v1WT6GP74P P6KA8OixhZz3cTCDUPWQGJ4HLKgBwmPtLcLxT4JsAfETp1ljhRcP1CbuqEsMrbR5 ecCqRKpi1yU0yjrwFX7pxmUUr1pfsO/65GVJF9xMmN8wnsId0Z5xYSxbd6kv5v9l V7nxL27TC/CqI+3x/hMyfvi75mDU9NyBJpLgVF7Js6F4xJKOgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHf//93chIItIQ/adX3B0vIeTCL7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvODM4MTZkZjYtMGZkMi0z Nzc2LTk0YTgtNTgwNGVjM2UzNzdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFVZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI2zoXQoirFxfA1Gy9UxR8T9vMsl+zhfGZ+uC9VCocdYD+0UqCMT8Di7 0TeZU1l8NtD0mRNN5G+6BsOJOFfrS7GBDPWfP7kVi+6eXHRXZ2U5bv6VALDrXit2 nZ2ZigLHY54rA/lqrOIZh5P7614rkgMU+giazUDZQx8n96KJC/7NHND41NOIVnRo EInIoFi5Gtbb8AKU8+zNLr3jAWVg0zNXYl2qgUMUgAJyS/oUUECz25y3Ym0XPLDY PpCMXgPSByIJW9vUIW/6EX/jHfsdrwavo+Wevf8s15vXkt7g3r7RQPs/j9/oSGjv WLhA4Gei/CKGmoVxDDvZFN/202qItxo= -----END CERTIFICATE-----Generated at Sun Feb 16 15:47:19 2025 by rpki-client