$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d01ce32c-1662-3504-b850-d0fc890b7e54.roa File: d01ce32c-1662-3504-b850-d0fc890b7e54.roa (raw, json) Hash identifier: 7nArRZFKKbazHzyY+7ftJ9CLzK3Utv4lcyg9707104I= Subject key identifier: 4E:72:B1:9E:F5:A2:DC:06:B4:64:1E:3A:FF:16:E6:F7:FA:F8:DB:6F Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285848AAFB59605B793FE94721BC80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d01ce32c-1662-3504-b850-d0fc890b7e54.roa Signing time: Sun 26 Jan 2025 02:00:38 +0000 ROA not before: Sun 26 Jan 2025 02:00:38 +0000 ROA not after: Sat 26 Apr 2025 01:00:38 +0000 asID: 3360 IP address blocks: 192.85.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:aa:fb:59:60:5b:79:3f:e9:47:21:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jan 26 02:00:38 2025 GMT Not After : Apr 26 01:00:38 2025 GMT Subject: CN=d1b6e7ed-6ebf-4d13-86fa-18b23e6dd2d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ac:d6:2d:26:28:e9:d9:a6:c6:6d:1d:1a:5b: 72:64:0b:0d:00:88:9d:4c:0e:75:c0:bf:0c:a1:15: 27:45:8d:14:e2:d1:dc:0e:fe:2d:ca:5d:ba:f1:2e: d9:d0:0a:ce:b6:89:e9:70:c7:06:ed:c9:a8:6d:a0: df:02:04:ac:e9:4a:d7:33:43:e4:17:d0:e1:78:d3: aa:be:0c:6e:0e:40:07:97:42:1a:72:d4:eb:79:16: 38:14:7d:37:44:56:aa:1e:0a:1f:c2:38:63:84:87: 3a:98:68:ff:8b:f3:58:25:5b:05:09:7d:6e:26:1b: 14:ca:01:e0:ce:d0:b9:63:fe:e6:81:62:03:0d:2a: d5:90:a3:14:0b:0e:23:6c:8e:0e:d2:24:51:d6:4a: 6c:25:96:db:03:3e:17:67:69:c9:0e:8f:42:25:59: 5a:2d:3c:29:f0:9d:4b:10:28:d7:b8:59:a4:29:43: 11:fd:ae:7b:9f:fd:3e:a6:1b:ec:3c:39:e2:bf:48: 47:23:43:ea:b0:8a:37:5a:0b:ae:67:c8:14:07:55: 46:9f:cb:23:c5:35:a0:97:e0:58:3a:14:94:00:76: 01:3e:ff:ec:a3:51:16:87:46:65:12:35:be:43:be: 44:14:6c:14:da:56:f1:ac:49:25:d7:85:85:7c:d5: 9b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:72:B1:9E:F5:A2:DC:06:B4:64:1E:3A:FF:16:E6:F7:FA:F8:DB:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d01ce32c-1662-3504-b850-d0fc890b7e54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.85.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:09:5b:64:17:d0:5a:23:d7:fb:f9:ed:fd:66:e2:2b:53:0a: 57:ec:4f:26:c4:8d:aa:63:4b:37:f4:51:29:fc:f3:33:23:92: 3c:45:5f:1b:d4:3d:3a:80:ef:73:b9:8c:98:89:e5:f7:6f:db: 06:f7:ed:48:e1:81:48:32:81:ae:c0:2d:d6:22:ba:79:80:72: e5:c5:8a:a1:f1:35:9c:80:33:16:63:35:1f:d4:b1:02:4b:1a: 7f:7c:42:d5:1d:74:f6:90:71:85:c3:6c:fa:7f:53:f1:6a:08: 25:47:64:39:cb:5a:29:74:8b:eb:6d:39:1e:e3:f5:28:8f:ea: 6e:20:3b:67:f3:aa:57:8d:4e:15:35:8f:6e:1d:51:96:e6:7f: 82:eb:2f:f7:38:6e:e7:12:2a:dc:10:77:f9:a9:1b:53:a4:f3: 36:19:2d:95:e5:fa:f7:c8:a5:a9:c5:89:4b:d5:d5:84:3d:26: 85:a1:cd:ed:10:cb:9d:3e:3c:2d:50:77:fd:47:2c:7e:e5:6e: 9a:f5:22:1a:b9:3d:6a:1e:bd:9d:a2:80:64:a4:1e:29:00:ce: 7e:a8:19:a1:3c:cb:ee:8e:33:22:7b:76:b6:37:a9:e4:ba:33: be:ae:fe:82:d3:c1:a9:b9:ef:a8:56:e6:3f:3a:fc:89:2e:05: 93:82:d4:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiq+1lgW3k/6UchvIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDEyNjAyMDAzOFoXDTI1MDQyNjAxMDAzOFowLzEtMCsGA1UEAxMk ZDFiNmU3ZWQtNmViZi00ZDEzLTg2ZmEtMThiMjNlNmRkMmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6zWLSYo6dmmxm0dGltyZAsNAIidTA51wL8M oRUnRY0U4tHcDv4tyl268S7Z0ArOtonpcMcG7cmobaDfAgSs6UrXM0PkF9DheNOq vgxuDkAHl0IactTreRY4FH03RFaqHgofwjhjhIc6mGj/i/NYJVsFCX1uJhsUygHg ztC5Y/7mgWIDDSrVkKMUCw4jbI4O0iRR1kpsJZbbAz4XZ2nJDo9CJVlaLTwp8J1L ECjXuFmkKUMR/a57n/0+phvsPDniv0hHI0PqsIo3WguuZ8gUB1VGn8sjxTWgl+BY OhSUAHYBPv/so1EWh0ZlEjW+Q75EFGwU2lbxrEkl14WFfNWbhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE5ysZ71otwGtGQeOv8W5vf6+NtvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZDAxY2UzMmMtMTY2Mi0z NTA0LWI4NTAtZDBmYzg5MGI3ZTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFWMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADoJW2QX0Foj1/v57f1m4itTClfsTybEjapjSzf0USn88zMjkjxFXxvU PTqA73O5jJiJ5fdv2wb37UjhgUgyga7ALdYiunmAcuXFiqHxNZyAMxZjNR/UsQJL Gn98QtUddPaQcYXDbPp/U/FqCCVHZDnLWil0i+ttOR7j9SiP6m4gO2fzqleNThU1 j24dUZbmf4LrL/c4bucSKtwQd/mpG1Ok8zYZLZXl+vfIpanFiUvV1YQ9JoWhze0Q y50+PC1Qd/1HLH7lbpr1Ihq5PWoevZ2igGSkHikAzn6oGaE8y+6OMyJ7drY3qeS6 M76u/oLTwam576hW5j86/IkuBZOC1Jw= -----END CERTIFICATE-----Generated at Sat Apr 5 21:22:03 2025 by rpki-client