$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/574c1acc-801c-310d-8306-fe7a9299a466.roa File: 574c1acc-801c-310d-8306-fe7a9299a466.roa (raw, json) Hash identifier: xwXcBiHFmgHNwsv4ltxJWdDZgLi1ohlmGve+1D2ieKE= Subject key identifier: C7:A4:FA:81:24:55:E2:64:8B:AF:BE:28:7B:8A:B8:9C:D3:50:85:4B Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285849998F3B218E70E6813E465B20 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/574c1acc-801c-310d-8306-fe7a9299a466.roa Signing time: Mon 21 Apr 2025 13:00:59 +0000 ROA not before: Mon 21 Apr 2025 13:00:59 +0000 ROA not after: Sun 20 Jul 2025 13:00:59 +0000 asID: 2158 IP address blocks: 192.85.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:99:8f:3b:21:8e:70:e6:81:3e:46:5b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 21 13:00:59 2025 GMT Not After : Jul 20 13:00:59 2025 GMT Subject: CN=b49253e8-0e3a-42bf-bf9e-fdda96445956 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b5:63:3c:ee:a1:76:4a:d5:77:56:cd:77:61: fa:48:65:db:db:85:83:00:84:47:03:9b:8c:b1:d9: d5:ee:1c:28:a5:33:2c:6b:23:f5:67:25:6b:39:8d: 8c:be:96:cb:2c:a2:53:c8:c0:29:c6:43:cd:51:3e: a7:0e:c0:7d:7b:08:be:49:66:be:5a:8a:24:de:fe: 05:a9:f5:4e:d9:9b:e3:21:fd:7d:1f:25:c3:b9:3f: 18:3a:b7:68:27:c2:59:cd:f2:3b:29:a4:56:75:fa: fb:4d:95:db:00:2f:fc:8f:bb:f9:b6:e1:fc:6a:03: 6d:72:c1:9e:44:73:c4:98:0e:d1:58:36:3a:6a:65: f0:1d:c4:de:66:35:a0:34:6f:5b:ff:92:b0:8c:04: 7e:66:88:d8:ef:7f:5d:d6:6d:fb:48:79:2b:2c:fd: 2d:86:89:f7:ba:d7:4e:5d:4a:e5:ab:77:31:80:2a: 3c:8c:83:e7:2b:c4:35:d1:d2:7c:93:d2:6a:b2:e7: e6:91:97:17:4f:8f:69:73:9c:52:fb:1a:94:7c:a7: f6:ac:8b:27:84:12:94:0f:ac:05:43:8f:d4:25:d3: bc:ad:2d:23:8a:6b:d2:9a:2f:16:fc:08:57:fd:c6: 19:86:3c:d6:5b:1e:07:df:cc:cc:58:83:2b:ea:91: e4:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:A4:FA:81:24:55:E2:64:8B:AF:BE:28:7B:8A:B8:9C:D3:50:85:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/574c1acc-801c-310d-8306-fe7a9299a466.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.85.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:34:62:cd:9f:38:80:cc:a3:37:83:e6:1b:f5:49:80:d8:4c: 9f:57:64:ce:70:7d:72:b3:3e:97:ed:c4:4f:48:4f:7b:61:d3: d8:b8:1c:d3:51:8f:47:45:4a:8c:f6:46:fd:9e:2c:1e:e2:83: ed:e2:b9:85:1c:b5:93:68:9b:cc:09:c7:2b:6d:77:4f:0d:36: 9a:f3:7b:23:65:61:3d:a7:ff:92:65:6b:5f:84:de:d2:98:07: 12:a5:1e:97:2a:06:39:47:5d:ca:d8:6b:f2:3d:32:44:f0:03: 25:40:39:38:9c:c9:d5:52:23:cb:40:2f:cb:3f:97:7e:96:7c: 02:2a:71:a5:4a:d4:37:49:cf:92:00:83:75:49:58:bb:ba:89: 68:7d:15:b9:4c:84:87:9b:82:49:0e:f9:c2:b4:da:6d:a7:16: 95:66:ec:38:c6:df:02:80:f0:8c:6b:40:0f:f9:18:8a:51:1c: 6d:20:9e:8a:cb:98:b2:04:54:8a:fe:3c:42:fe:14:ab:f7:5d: e4:df:50:ac:85:f2:ca:6c:7d:6f:ba:9a:22:a5:db:b8:86:9d: a2:06:ae:c0:ce:b8:b0:96:1a:b5:f9:41:e0:86:8f:b6:72:f7: b5:ec:ba:3b:35:6e:c0:26:59:37:7e:62:b9:2e:5e:7b:e2:18: 99:58:ec:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmZjzshjnDmgT5GWyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDQyMTEzMDA1OVoXDTI1MDcyMDEzMDA1OVowLzEtMCsGA1UEAxMk YjQ5MjUzZTgtMGUzYS00MmJmLWJmOWUtZmRkYTk2NDQ1OTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7VjPO6hdkrVd1bNd2H6SGXb24WDAIRHA5uM sdnV7hwopTMsayP1ZyVrOY2MvpbLLKJTyMApxkPNUT6nDsB9ewi+SWa+Wook3v4F qfVO2ZvjIf19HyXDuT8YOrdoJ8JZzfI7KaRWdfr7TZXbAC/8j7v5tuH8agNtcsGe RHPEmA7RWDY6amXwHcTeZjWgNG9b/5KwjAR+ZojY739d1m37SHkrLP0thon3utdO XUrlq3cxgCo8jIPnK8Q10dJ8k9JqsufmkZcXT49pc5xS+xqUfKf2rIsnhBKUD6wF Q4/UJdO8rS0jimvSmi8W/AhX/cYZhjzWWx4H38zMWIMr6pHkFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMek+oEkVeJki6++KHuKuJzTUIVLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNTc0YzFhY2MtODAxYy0z MTBkLTgzMDYtZmU3YTkyOTlhNDY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFV8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJE0Ys2fOIDMozeD5hv1SYDYTJ9XZM5wfXKzPpftxE9IT3th09i4HNNR j0dFSoz2Rv2eLB7ig+3iuYUctZNom8wJxyttd08NNprzeyNlYT2n/5Jla1+E3tKY BxKlHpcqBjlHXcrYa/I9MkTwAyVAOTicydVSI8tAL8s/l36WfAIqcaVK1DdJz5IA g3VJWLu6iWh9FblMhIebgkkO+cK02m2nFpVm7DjG3wKA8IxrQA/5GIpRHG0gnorL mLIEVIr+PEL+FKv3XeTfUKyF8spsfW+6miKl27iGnaIGrsDOuLCWGrX5QeCGj7Zy 97Xsujs1bsAmWTd+YrkuXnviGJlY7EY= -----END CERTIFICATE-----Generated at Mon May 12 08:19:46 2025 by rpki-client