$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/88fbdccf-30cf-3061-8568-4b9965ec2071.roa File: 88fbdccf-30cf-3061-8568-4b9965ec2071.roa (raw, json) Hash identifier: kPQAsCimLgPbbRmarKeDQPN/b8QcVhNoMz59piQewnU= Subject key identifier: 34:C5:86:43:FA:2D:E4:23:0C:AC:C1:FC:19:D4:AB:E2:5B:7B:23:94 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858491246C960B871CDE396932B00 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/88fbdccf-30cf-3061-8568-4b9965ec2071.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 202 IP address blocks: 192.85.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:c9:60:b8:71:cd:e3:96:93:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=2b5efe36-2da2-4d1d-b6f1-5be163a0a6ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:90:93:99:fb:59:33:34:3b:27:76:c2:e1:bf: 5b:6d:6f:40:31:82:b0:8b:88:66:a7:33:75:aa:cf: e4:fa:08:55:45:7c:11:a6:2c:df:47:19:d7:f9:ea: 43:5f:81:3a:53:b4:22:3f:2f:24:dd:21:fc:91:8e: 05:2d:d1:84:4f:8f:78:3d:47:a6:61:00:af:3b:5c: bc:5a:23:6b:a6:30:38:34:29:32:16:ce:4a:ca:5d: 80:bf:43:f3:c6:dc:c5:48:84:25:92:10:10:7b:fd: e0:53:bd:6e:3a:96:10:1a:3d:92:8f:33:de:09:74: 77:0b:37:1e:f4:b3:b7:c7:7e:a3:10:93:c6:42:d2: 4a:65:73:87:8b:5d:e3:60:a5:e7:62:3e:51:ce:c2: 87:31:e9:92:c5:e7:33:e2:f3:44:f1:11:f6:28:ef: ef:82:f7:b2:3c:82:e3:58:b0:aa:da:0b:6f:b1:8a: 7d:4f:cb:b9:53:f4:1f:dc:8c:92:b4:d8:a6:38:6b: 3f:58:1d:8b:25:62:6a:8a:2a:65:e4:04:3c:ff:cd: de:cf:5c:b4:d1:92:f2:7d:57:64:a1:37:d4:2a:fd: 0e:20:c0:a3:64:96:9c:6a:86:2e:01:46:97:aa:41: a0:d2:15:86:e2:08:ec:7d:3d:30:32:be:fd:a1:08: ec:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:C5:86:43:FA:2D:E4:23:0C:AC:C1:FC:19:D4:AB:E2:5B:7B:23:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/88fbdccf-30cf-3061-8568-4b9965ec2071.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.85.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:20:61:f2:bb:dc:e8:c7:68:73:d7:fd:1e:f4:da:ec:df:ef: 03:04:ef:bf:8c:66:8f:69:67:0a:ef:c3:af:f0:52:60:f1:8a: 86:ff:18:d6:c6:c8:c3:37:fe:a3:b9:2f:a6:a4:a6:35:7a:be: 38:a6:ab:b2:05:68:e8:43:db:20:b9:6a:a6:cf:50:b0:cf:ad: e9:5b:14:7c:ae:c0:3e:18:b0:ce:cb:ff:c4:41:69:d1:c2:11: b7:21:cd:78:9a:1e:e5:4b:c7:e6:89:48:b0:76:0f:66:8d:74: 3e:08:bb:4d:27:43:16:5e:2d:ab:09:30:06:4c:fa:fc:a8:4f: 1a:8b:6f:c4:8c:12:01:9c:6a:ca:77:6e:4d:03:a5:5b:9b:37: 6f:e6:49:3c:5b:01:e5:a3:fb:33:19:47:95:06:91:04:78:d6: 48:e0:20:b6:aa:3e:0e:94:30:eb:a0:8b:0d:ed:f2:8f:a4:d2: d4:5a:7c:32:5c:04:ba:3c:45:a0:70:58:7d:dd:00:13:0a:be: e8:b0:d7:55:79:4d:a1:a7:ca:d4:fb:22:36:90:df:4a:7e:b3: ec:2f:38:16:07:76:53:5c:39:46:6a:f6:92:b5:f0:69:5a:10: 03:1d:70:59:68:4a:4f:25:06:c9:2d:c9:d5:42:01:9d:5a:4a: 38:e8:f0:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRslguHHN45aTKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk MmI1ZWZlMzYtMmRhMi00ZDFkLWI2ZjEtNWJlMTYzYTBhNmJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZCTmftZMzQ7J3bC4b9bbW9AMYKwi4hmpzN1 qs/k+ghVRXwRpizfRxnX+epDX4E6U7QiPy8k3SH8kY4FLdGET494PUemYQCvO1y8 WiNrpjA4NCkyFs5Kyl2Av0PzxtzFSIQlkhAQe/3gU71uOpYQGj2SjzPeCXR3Czce 9LO3x36jEJPGQtJKZXOHi13jYKXnYj5RzsKHMemSxecz4vNE8RH2KO/vgveyPILj WLCq2gtvsYp9T8u5U/Qf3IyStNimOGs/WB2LJWJqiipl5AQ8/83ez1y00ZLyfVdk oTfUKv0OIMCjZJacaoYuAUaXqkGg0hWG4gjsfT0wMr79oQjsBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDTFhkP6LeQjDKzB/BnUq+JbeyOUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvODhmYmRjY2YtMzBjZi0z MDYxLTg1NjgtNGI5OTY1ZWMyMDcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFXRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACsgYfK73OjHaHPX/R702uzf7wME77+MZo9pZwrvw6/wUmDxiob/GNbG yMM3/qO5L6akpjV6vjimq7IFaOhD2yC5aqbPULDPrelbFHyuwD4YsM7L/8RBadHC EbchzXiaHuVLx+aJSLB2D2aNdD4Iu00nQxZeLasJMAZM+vyoTxqLb8SMEgGcasp3 bk0DpVubN2/mSTxbAeWj+zMZR5UGkQR41kjgILaqPg6UMOugiw3t8o+k0tRafDJc BLo8RaBwWH3dABMKvuiw11V5TaGnytT7IjaQ30p+s+wvOBYHdlNcOUZq9pK18Gla EAMdcFloSk8lBsktydVCAZ1aSjjo8G8= -----END CERTIFICATE-----Generated at Mon May 12 01:53:45 2025 by rpki-client