$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/31b3b419-a301-30bc-9d6e-f0861927fa0a.roa File: 31b3b419-a301-30bc-9d6e-f0861927fa0a.roa (raw, json) Hash identifier: T2YfdX9i0oC/9Lhr7rQIYf1Efz9jqcKu3nHFD3jGhT8= Subject key identifier: C4:2F:2F:3F:7C:FC:52:AE:90:3E:07:6C:98:90:1A:40:A3:C1:02:DC Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584A698B2A5B0DEB84658DD76F00 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/31b3b419-a301-30bc-9d6e-f0861927fa0a.roa Signing time: Sat 05 Jul 2025 01:00:50 +0000 ROA not before: Sat 05 Jul 2025 01:00:50 +0000 ROA not after: Fri 03 Oct 2025 01:00:50 +0000 asID: 3360 IP address blocks: 204.104.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:69:8b:2a:5b:0d:eb:84:65:8d:d7:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jul 5 01:00:50 2025 GMT Not After : Oct 3 01:00:50 2025 GMT Subject: CN=178ddbc6-7e70-4dab-b65f-7cb622b27c92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:7a:9f:b8:91:e7:c8:cb:ff:bf:72:7d:be:16: 64:c1:d8:b7:12:9d:21:a3:dd:ab:db:80:d4:16:53: ed:4d:d3:b1:da:7d:64:9e:8e:36:9a:61:10:2a:f3: 58:7c:39:04:41:ba:25:06:c5:c7:41:2d:4c:ea:d9: f2:c5:bb:d2:77:7d:35:2c:2f:ec:65:0f:6f:3b:75: a2:68:d2:9e:95:d1:fe:2a:fd:d9:ab:52:8d:6e:12: 98:9c:2e:a1:51:f2:18:ca:76:18:56:54:70:cb:05: 53:04:57:3b:d7:a6:2f:2e:07:95:46:ff:f2:80:21: d8:61:2c:5b:34:98:1b:61:7d:e4:96:e4:14:25:0d: a1:84:a8:5d:02:41:bd:f1:20:90:e4:f5:bd:44:cb: a4:47:3b:8b:c9:b8:dc:63:b9:ec:ff:d6:91:0b:22: f4:b5:b2:dd:27:01:64:d2:5c:68:b6:79:a3:14:6b: 54:70:86:f4:bb:a7:b2:ba:6c:6a:39:77:b3:71:2e: e1:aa:f5:ce:13:16:9a:0f:91:a5:aa:b0:9a:e8:c7: 1c:43:d3:3a:a2:64:f7:5a:99:5d:d4:27:db:2a:8e: ce:bc:a8:5a:e2:64:6b:5a:76:f9:d3:ec:dc:4b:8e: 73:39:f6:b9:48:bc:f7:c1:5a:60:6e:e1:4f:b1:60: 53:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:2F:2F:3F:7C:FC:52:AE:90:3E:07:6C:98:90:1A:40:A3:C1:02:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/31b3b419-a301-30bc-9d6e-f0861927fa0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 204.104.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:82:f0:e0:b6:2f:18:46:6f:36:8d:f3:08:a2:e4:14:64:d6: b8:65:93:31:75:19:54:30:ae:ad:96:9c:90:b2:8c:04:71:5a: be:b4:cb:68:82:b9:4f:1d:94:ed:8a:c5:a7:63:29:04:ac:19: 0a:3f:d9:27:48:e6:0e:7b:54:be:be:64:06:83:71:fe:20:c6: 01:f0:c6:90:d7:bc:3d:de:6b:d6:9e:3f:e0:46:fc:60:2a:65: 4f:60:29:30:40:35:49:29:99:18:e1:c3:b6:54:85:2c:8a:33: f9:0f:58:06:cc:ce:ee:a1:0e:c4:8e:cc:69:35:1e:08:5c:78: 87:5e:b0:d9:f6:3f:8c:bb:52:b1:67:91:52:7e:b8:a3:a5:31: 62:91:12:fd:27:cf:2e:87:4a:36:6d:5b:59:6e:92:4b:75:5f: 41:c8:47:bc:17:c9:ab:f8:bb:4c:ea:f9:ee:ba:04:53:d8:30: 76:76:30:f3:19:01:39:ab:c2:84:4a:96:be:93:62:62:15:2b: cc:2a:9c:e8:fb:36:82:de:12:f3:54:40:3d:36:ce:8f:72:85: c4:5e:45:bc:8e:f6:5b:f8:0e:90:d7:0b:a9:c1:48:03:df:0b: 9a:6e:95:7d:77:5c:73:23:3e:7b:23:43:ef:26:67:53:1b:0a: 21:29:3e:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEppiypbDeuEZY3XbwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDcwNTAxMDA1MFoXDTI1MTAwMzAxMDA1MFowLzEtMCsGA1UEAxMk MTc4ZGRiYzYtN2U3MC00ZGFiLWI2NWYtN2NiNjIyYjI3YzkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHqfuJHnyMv/v3J9vhZkwdi3Ep0ho92r24DU FlPtTdOx2n1kno42mmEQKvNYfDkEQbolBsXHQS1M6tnyxbvSd301LC/sZQ9vO3Wi aNKeldH+Kv3Zq1KNbhKYnC6hUfIYynYYVlRwywVTBFc716YvLgeVRv/ygCHYYSxb NJgbYX3kluQUJQ2hhKhdAkG98SCQ5PW9RMukRzuLybjcY7ns/9aRCyL0tbLdJwFk 0lxotnmjFGtUcIb0u6eyumxqOXezcS7hqvXOExaaD5GlqrCa6MccQ9M6omT3Wpld 1CfbKo7OvKha4mRrWnb50+zcS45zOfa5SLz3wVpgbuFPsWBTEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMQvLz98/FKukD4HbJiQGkCjwQLcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMzFiM2I0MTktYTMwMS0z MGJjLTlkNmUtZjA4NjE5MjdmYTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGgOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADOC8OC2LxhGbzaN8wii5BRk1rhlkzF1GVQwrq2WnJCyjARxWr60y2iC uU8dlO2KxadjKQSsGQo/2SdI5g57VL6+ZAaDcf4gxgHwxpDXvD3ea9aeP+BG/GAq ZU9gKTBANUkpmRjhw7ZUhSyKM/kPWAbMzu6hDsSOzGk1HghceIdesNn2P4y7UrFn kVJ+uKOlMWKREv0nzy6HSjZtW1lukkt1X0HIR7wXyav4u0zq+e66BFPYMHZ2MPMZ ATmrwoRKlr6TYmIVK8wqnOj7NoLeEvNUQD02zo9yhcReRbyO9lv4DpDXC6nBSAPf C5pulX13XHMjPnsjQ+8mZ1MbCiEpPq8= -----END CERTIFICATE-----Generated at Sun Jul 27 01:41:26 2025 by rpki-client