$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e894738f-a5ad-37d5-a627-b088b4baddd9.roa File: e894738f-a5ad-37d5-a627-b088b4baddd9.roa (raw, json) Hash identifier: 5FuwG50bbAuOZah9b79MmJILeNxrvF8HREDOL4RlSpk= Subject key identifier: 56:F6:7A:E7:7D:4B:8A:75:96:EA:F6:4C:CF:B7:71:32:9E:3F:6C:36 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285848AAFB590DEF648EB2319D9080 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e894738f-a5ad-37d5-a627-b088b4baddd9.roa Signing time: Sun 26 Jan 2025 02:00:38 +0000 ROA not before: Sun 26 Jan 2025 02:00:38 +0000 ROA not after: Sat 26 Apr 2025 01:00:38 +0000 asID: 3360 IP address blocks: 192.85.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:aa:fb:59:0d:ef:64:8e:b2:31:9d:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jan 26 02:00:38 2025 GMT Not After : Apr 26 01:00:38 2025 GMT Subject: CN=069de6ae-3a0c-45dc-a8de-3a8f8051fe01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7c:d6:0e:7f:e5:26:05:87:c5:54:19:13:2a: f4:19:91:71:50:54:c1:bd:33:19:01:c4:09:b8:3a: ae:5e:8d:f6:b4:0a:94:28:48:a9:ea:e5:35:0f:6b: f2:b0:b0:37:28:0a:59:ff:77:fb:fa:13:bc:d1:0b: 40:b3:59:74:b9:4b:f3:b3:72:81:c1:d5:1a:f5:2f: 74:4c:a0:20:2c:51:d6:6e:cd:7e:b2:28:96:54:26: da:bc:0a:33:99:39:4e:6d:c5:a0:49:fb:e0:49:3b: 23:36:98:2a:41:37:46:04:99:08:06:9f:56:72:5f: 0e:66:20:8d:0a:d6:c8:56:61:8b:c0:38:e5:2f:17: e8:e3:d4:05:f8:b6:df:fd:d6:29:0c:99:dc:78:d0: 31:4a:3f:ca:3a:30:7f:3f:26:2a:70:a2:d0:31:10: 46:a8:11:18:6e:78:68:99:7c:58:5b:e7:05:45:70: eb:3d:1d:d5:4b:7e:61:6c:13:67:ff:25:a9:6e:f5: 10:09:fb:d5:90:76:9f:31:2c:fe:2a:7d:e7:3e:63: 8a:09:6f:d3:3a:0f:fb:e3:a1:b1:3f:4a:a0:cf:ed: ad:b3:ec:24:ce:68:c9:34:b8:5b:8b:3c:11:12:50: c0:95:f3:ce:39:89:d0:0e:28:fa:f8:27:24:ca:bc: 7f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:F6:7A:E7:7D:4B:8A:75:96:EA:F6:4C:CF:B7:71:32:9E:3F:6C:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e894738f-a5ad-37d5-a627-b088b4baddd9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.85.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:5f:22:49:e0:0e:80:bc:f4:5c:10:c5:df:28:0d:61:df:4e: 24:01:bc:f5:bd:3d:52:d3:3a:28:20:bd:93:4b:41:c2:46:45: 98:45:8e:8d:fa:82:f8:0e:39:dd:e1:77:a4:6a:e7:97:b6:c2: f2:02:a2:c7:ac:8e:d7:32:aa:9c:24:8b:f6:fe:17:cf:20:f6: 57:16:b6:2b:89:8d:e6:e3:7e:2f:fd:6c:95:bf:5a:6d:27:f5: 38:55:68:cf:80:1f:84:44:e4:dc:52:13:72:09:d8:1b:20:3a: 26:da:7f:3a:4f:fe:df:29:54:78:8a:ea:a7:cb:d0:eb:4e:cd: 67:d1:24:92:dd:c1:28:b7:8f:53:83:1c:fe:c0:22:df:79:0f: 75:91:01:9d:e6:93:8d:29:43:1d:07:f0:0b:2c:ae:0e:cc:4e: 54:99:91:86:47:c5:a3:12:5d:25:29:18:e5:7d:7d:71:f6:3f: 0e:44:86:32:4c:91:72:ce:56:7a:60:90:7b:f0:45:be:20:a2: 0c:a2:a9:d6:20:ca:75:35:e8:06:8f:a9:0a:8c:8a:38:fa:f1: 10:07:ca:3a:21:0b:27:50:2d:44:44:63:bb:cf:33:9e:a3:5a: 86:93:f0:46:5b:d9:4c:c8:50:47:31:12:a7:2a:de:39:34:c4: 35:53:25:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiq+1kN72SOsjGdkIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDEyNjAyMDAzOFoXDTI1MDQyNjAxMDAzOFowLzEtMCsGA1UEAxMk MDY5ZGU2YWUtM2EwYy00NWRjLWE4ZGUtM2E4ZjgwNTFmZTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3zWDn/lJgWHxVQZEyr0GZFxUFTBvTMZAcQJ uDquXo32tAqUKEip6uU1D2vysLA3KApZ/3f7+hO80QtAs1l0uUvzs3KBwdUa9S90 TKAgLFHWbs1+siiWVCbavAozmTlObcWgSfvgSTsjNpgqQTdGBJkIBp9Wcl8OZiCN CtbIVmGLwDjlLxfo49QF+Lbf/dYpDJnceNAxSj/KOjB/PyYqcKLQMRBGqBEYbnho mXxYW+cFRXDrPR3VS35hbBNn/yWpbvUQCfvVkHafMSz+Kn3nPmOKCW/TOg/746Gx P0qgz+2ts+wkzmjJNLhbizwRElDAlfPOOYnQDij6+Cckyrx/XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFb2eud9S4p1lur2TM+3cTKeP2w2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZTg5NDczOGYtYTVhZC0z N2Q1LWE2MjctYjA4OGI0YmFkZGQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFVgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADVfIkngDoC89FwQxd8oDWHfTiQBvPW9PVLTOiggvZNLQcJGRZhFjo36 gvgOOd3hd6Rq55e2wvICosesjtcyqpwki/b+F88g9lcWtiuJjebjfi/9bJW/Wm0n 9ThVaM+AH4RE5NxSE3IJ2BsgOibafzpP/t8pVHiK6qfL0OtOzWfRJJLdwSi3j1OD HP7AIt95D3WRAZ3mk40pQx0H8Assrg7MTlSZkYZHxaMSXSUpGOV9fXH2Pw5EhjJM kXLOVnpgkHvwRb4gogyiqdYgynU16AaPqQqMijj68RAHyjohCydQLUREY7vPM56j WoaT8EZb2UzIUEcxEqcq3jk0xDVTJYY= -----END CERTIFICATE-----Generated at Sun Feb 16 15:38:14 2025 by rpki-client