$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/cb302221-d341-395d-a96e-bfb12cbac0f6.roa File: cb302221-d341-395d-a96e-bfb12cbac0f6.roa (raw, json) Hash identifier: Jt3Z3iZgRQE6pG5EKac1oVBnGN2n/mB43jKVqM8rMec= Subject key identifier: 0C:B2:86:DA:4C:7F:EA:0A:C1:8C:33:21:E0:23:53:D3:93:69:A1:39 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285848AAFB57C344220D3EF9975500 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/cb302221-d341-395d-a96e-bfb12cbac0f6.roa Signing time: Sun 26 Jan 2025 02:00:38 +0000 ROA not before: Sun 26 Jan 2025 02:00:38 +0000 ROA not after: Sat 26 Apr 2025 01:00:38 +0000 asID: 203 IP address blocks: 192.85.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:aa:fb:57:c3:44:22:0d:3e:f9:97:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jan 26 02:00:38 2025 GMT Not After : Apr 26 01:00:38 2025 GMT Subject: CN=e49e99e5-6949-46c5-90c2-879e2db8ca0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ff:90:0e:4b:9e:f9:03:47:4c:dc:90:05:db: 87:e7:86:de:ed:f1:43:41:a7:fb:f0:9a:27:80:5b: 93:c3:62:ad:2e:d1:8e:6b:fc:56:dd:a4:65:e5:78: 8c:f0:9f:d3:83:05:69:f1:de:8d:fc:e3:80:44:3a: 47:68:98:0d:b3:a8:82:80:73:c9:23:4c:ca:d0:cf: 59:16:8b:92:53:4b:23:b2:da:25:bc:53:3d:fd:d8: ef:35:d6:de:a5:91:93:65:f4:4d:b3:70:32:a0:d6: f4:96:2b:21:96:ee:00:ae:f2:a3:05:e9:91:9b:1d: d7:e5:2b:9e:ec:90:71:c3:aa:d2:d8:20:05:55:bc: 27:79:fd:b9:3c:a9:c8:b8:34:f1:31:11:60:97:4e: d4:7c:78:e1:68:06:97:05:fa:63:ff:f6:f9:cc:4b: 19:e2:f3:2f:23:b1:05:9d:3d:09:8b:08:6f:c2:d4: 98:52:54:4f:ce:b9:79:75:9d:bc:1a:89:93:bb:3c: 48:92:54:02:39:07:d5:26:8c:df:a3:9b:91:1c:3a: 9c:33:4a:75:95:1d:f7:dc:8d:bf:6b:8c:4c:87:4f: 0e:67:a1:39:59:6e:13:04:55:b0:f7:67:fc:88:b7: 46:c9:31:8d:14:3e:ef:16:13:39:0d:71:5f:76:35: 52:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:B2:86:DA:4C:7F:EA:0A:C1:8C:33:21:E0:23:53:D3:93:69:A1:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/cb302221-d341-395d-a96e-bfb12cbac0f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.85.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:75:28:ac:a1:75:8f:d9:05:09:76:9c:ae:26:9e:8d:00:bc: d9:3e:a9:b0:12:e0:79:50:ef:f7:75:37:67:20:f4:49:53:74: 36:c5:e2:a7:7c:83:b3:81:c5:14:05:2b:4e:2b:a5:16:a4:5d: 27:ef:f6:72:7b:bb:00:d2:b0:30:41:96:13:ec:b3:a0:00:40: 02:a1:89:57:ae:26:be:f2:54:8d:96:37:c7:63:de:dd:23:6a: 27:c5:74:fd:ef:5e:e0:27:0c:a6:34:8f:b2:41:c7:f9:c8:f1: f1:53:2e:d6:75:68:86:90:5b:8b:41:dc:fd:51:42:d7:2a:ab: 12:e6:f1:07:6f:e4:f4:22:87:4f:f7:b9:73:5e:17:5c:05:53: 4b:03:af:02:19:4b:e1:bc:6d:93:91:36:06:a5:a6:53:13:8e: 32:6a:54:e8:d5:08:39:ce:a5:8e:92:4d:b8:9c:d1:cb:c5:e2: f0:a4:39:14:14:5d:ae:27:ca:49:61:42:21:a7:f7:95:44:e9: 0c:e3:b7:2a:aa:3c:af:34:96:60:b3:44:25:27:69:34:f7:ce: 31:b3:fb:bd:74:e0:6c:45:66:bc:48:6e:0e:05:13:ff:8d:1c: d8:b2:c5:cb:ed:4b:87:8f:8a:b4:41:c5:ca:40:29:2f:6e:9a: 3a:e9:d0:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiq+1fDRCINPvmXVQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDEyNjAyMDAzOFoXDTI1MDQyNjAxMDAzOFowLzEtMCsGA1UEAxMk ZTQ5ZTk5ZTUtNjk0OS00NmM1LTkwYzItODc5ZTJkYjhjYTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhf+QDkue+QNHTNyQBduH54be7fFDQaf78Jon gFuTw2KtLtGOa/xW3aRl5XiM8J/TgwVp8d6N/OOARDpHaJgNs6iCgHPJI0zK0M9Z FouSU0sjstolvFM9/djvNdbepZGTZfRNs3AyoNb0lishlu4ArvKjBemRmx3X5Sue 7JBxw6rS2CAFVbwnef25PKnIuDTxMRFgl07UfHjhaAaXBfpj//b5zEsZ4vMvI7EF nT0JiwhvwtSYUlRPzrl5dZ28GomTuzxIklQCOQfVJozfo5uRHDqcM0p1lR333I2/ a4xMh08OZ6E5WW4TBFWw92f8iLdGyTGNFD7vFhM5DXFfdjVStwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAyyhtpMf+oKwYwzIeAjU9OTaaE5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvY2IzMDIyMjEtZDM0MS0z OTVkLWE5NmUtYmZiMTJjYmFjMGY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFU6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAN1KKyhdY/ZBQl2nK4mno0AvNk+qbAS4HlQ7/d1N2cg9ElTdDbF4qd8 g7OBxRQFK04rpRakXSfv9nJ7uwDSsDBBlhPss6AAQAKhiVeuJr7yVI2WN8dj3t0j aifFdP3vXuAnDKY0j7JBx/nI8fFTLtZ1aIaQW4tB3P1RQtcqqxLm8Qdv5PQih0/3 uXNeF1wFU0sDrwIZS+G8bZORNgalplMTjjJqVOjVCDnOpY6STbic0cvF4vCkORQU Xa4nyklhQiGn95VE6QzjtyqqPK80lmCzRCUnaTT3zjGz+7104GxFZrxIbg4FE/+N HNiyxcvtS4ePirRBxcpAKS9umjrp0FA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:27:38 2025 by rpki-client