$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/89c8a95c-6e43-32ce-9ff7-fa445a8c6904.roa File: 89c8a95c-6e43-32ce-9ff7-fa445a8c6904.roa (raw, json) Hash identifier: ivxeg3HKVpCD+NIY7spS/vg0qfWOK42WzqAeDxYwtF0= Subject key identifier: 78:C5:1A:76:2D:38:9A:D0:95:3F:4D:25:50:C9:B4:D6:28:1A:29:F7 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858498A34703BAA937A947CA6C8C0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/89c8a95c-6e43-32ce-9ff7-fa445a8c6904.roa Signing time: Wed 16 Apr 2025 01:00:48 +0000 ROA not before: Wed 16 Apr 2025 01:00:48 +0000 ROA not after: Tue 15 Jul 2025 01:00:48 +0000 asID: 5714 IP address blocks: 205.141.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8a:34:70:3b:aa:93:7a:94:7c:a6:c8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 16 01:00:48 2025 GMT Not After : Jul 15 01:00:48 2025 GMT Subject: CN=23a55fd3-c5d4-4742-a921-f4d026bf79d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c9:4e:b1:37:75:f8:0b:42:2a:ae:bc:b4:43: f6:a8:05:a7:fd:b1:7d:b0:34:43:48:19:8e:41:3d: 93:a2:84:45:7b:56:e1:12:75:b0:cd:14:46:67:2d: 68:76:4d:e7:af:e1:73:5a:49:c0:f5:57:5e:40:25: 47:d0:c5:12:67:b1:d3:3b:af:ed:19:f8:96:d5:c3: 23:e5:3d:02:9a:4f:7f:b9:92:79:55:8b:db:90:e7: 06:f9:5c:1c:7a:ad:2d:e7:24:ad:1b:1b:0b:d2:81: fe:2d:12:11:36:c8:45:8f:8b:d1:6d:0c:a1:88:41: b5:1b:73:01:2c:30:5d:73:16:d8:4b:41:0c:79:1c: d8:38:17:e5:c1:d0:f1:54:9e:26:68:0b:5f:25:39: ac:6c:67:2d:40:cd:22:fb:35:6e:4b:9f:6f:ce:d6: b9:16:40:07:b2:0e:bd:29:5e:f1:36:f8:13:02:93: 37:8b:c1:f5:0f:23:51:7a:54:f0:9a:91:6a:78:53: 82:78:52:7e:a2:70:94:fc:04:e1:ca:f3:14:2a:19: 3d:d8:fc:02:fc:54:bd:76:c5:9e:39:2d:fc:de:4e: 1a:50:a6:1e:8b:5d:21:81:84:e4:85:1d:5a:1b:24: b0:49:d9:f6:69:79:c6:22:37:30:72:04:c8:9a:d1: 32:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:C5:1A:76:2D:38:9A:D0:95:3F:4D:25:50:C9:B4:D6:28:1A:29:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/89c8a95c-6e43-32ce-9ff7-fa445a8c6904.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 205.141.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:7b:6d:16:08:cc:56:d5:08:3e:62:84:55:74:bc:5a:4b:6d: c0:ec:e4:5c:07:c1:f0:95:cc:14:9d:14:b1:b8:e0:4e:9a:b5: 30:d2:2f:db:f4:75:39:d5:c9:46:40:8e:1c:72:6c:5e:af:2f: aa:fb:94:52:ff:1a:bf:12:12:a3:2d:22:73:ef:7d:bc:ac:8c: a1:e0:ee:5b:46:76:8e:77:d3:68:29:f2:98:dc:68:c4:76:81: 02:af:15:63:c6:45:4f:1c:d7:fe:ff:15:83:12:9b:ab:9a:ed: c3:24:6e:f8:ad:d1:71:b7:9e:6a:8c:93:e8:dc:c7:5a:da:8d: cd:c9:ec:f5:01:61:f2:e4:e6:93:4b:b9:b2:69:ba:40:28:e8: d2:78:f5:10:03:9c:1c:17:71:e3:e8:e7:6f:9a:f3:fc:96:28: 0d:cf:ad:e9:76:36:90:6f:b5:9b:13:ba:40:0d:29:0b:e0:0b: 04:cb:45:1e:f0:cb:38:bd:d5:c0:f5:8d:0c:60:4c:5c:75:40: 65:09:25:5c:5d:07:d3:6f:aa:d2:cc:64:b3:36:8f:f5:08:f5: af:aa:10:fe:fd:b5:ac:c1:d7:15:f5:1a:15:1d:d5:e4:4e:26: aa:95:90:8b:02:92:c1:10:4b:c7:1d:85:1a:8e:dc:0d:cb:90: cd:19:ab:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmKNHA7qpN6lHymyMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDQxNjAxMDA0OFoXDTI1MDcxNTAxMDA0OFowLzEtMCsGA1UEAxMk MjNhNTVmZDMtYzVkNC00NzQyLWE5MjEtZjRkMDI2YmY3OWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMlOsTd1+AtCKq68tEP2qAWn/bF9sDRDSBmO QT2TooRFe1bhEnWwzRRGZy1odk3nr+FzWknA9VdeQCVH0MUSZ7HTO6/tGfiW1cMj 5T0Cmk9/uZJ5VYvbkOcG+Vwceq0t5yStGxsL0oH+LRIRNshFj4vRbQyhiEG1G3MB LDBdcxbYS0EMeRzYOBflwdDxVJ4maAtfJTmsbGctQM0i+zVuS59vzta5FkAHsg69 KV7xNvgTApM3i8H1DyNRelTwmpFqeFOCeFJ+onCU/AThyvMUKhk92PwC/FS9dsWe OS383k4aUKYei10hgYTkhR1aGySwSdn2aXnGIjcwcgTImtEytwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHjFGnYtOJrQlT9NJVDJtNYoGin3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvODljOGE5NWMtNmU0My0z MmNlLTlmZjctZmE0NDVhOGM2OTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzY3AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ17bRYIzFbVCD5ihFV0vFpLbcDs5FwHwfCVzBSdFLG44E6atTDSL9v0 dTnVyUZAjhxybF6vL6r7lFL/Gr8SEqMtInPvfbysjKHg7ltGdo5302gp8pjcaMR2 gQKvFWPGRU8c1/7/FYMSm6ua7cMkbvit0XG3nmqMk+jcx1rajc3J7PUBYfLk5pNL ubJpukAo6NJ49RADnBwXcePo52+a8/yWKA3Prel2NpBvtZsTukANKQvgCwTLRR7w yzi91cD1jQxgTFx1QGUJJVxdB9NvqtLMZLM2j/UI9a+qEP79tazB1xX1GhUd1eRO JqqVkIsCksEQS8cdhRqO3A3LkM0Zq2g= -----END CERTIFICATE-----Generated at Mon May 12 11:05:11 2025 by rpki-client