$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ce286e78-8869-3b72-bd69-c4cc06be8f8c.roa File: ce286e78-8869-3b72-bd69-c4cc06be8f8c.roa (raw, json) Hash identifier: To6iW/mCI+49EAF5SizlC+yzCTVLvlKKgobSatxAtdY= Subject key identifier: E0:9D:BD:7E:D9:9E:3F:74:B5:00:3C:52:85:A0:2C:A2:BF:67:25:62 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584A6C55DF6272598D8F8F8D1440 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ce286e78-8869-3b72-bd69-c4cc06be8f8c.roa Signing time: Sun 06 Jul 2025 01:00:49 +0000 ROA not before: Sun 06 Jul 2025 01:00:49 +0000 ROA not after: Sat 04 Oct 2025 01:00:49 +0000 asID: 202 IP address blocks: 216.240.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6c:55:df:62:72:59:8d:8f:8f:8d:14:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jul 6 01:00:49 2025 GMT Not After : Oct 4 01:00:49 2025 GMT Subject: CN=aa63b77c-f83b-4aa7-bca7-96d7b6fa3413 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e1:50:76:93:46:b2:c0:9e:83:46:7d:8e:07: 5f:fb:5e:26:29:51:bb:cc:de:3e:59:27:b4:b7:8c: 30:10:08:17:13:69:f8:4e:64:5b:9d:41:69:dd:32: 49:70:80:2d:50:e4:d6:69:7e:59:00:62:d6:24:29: 6a:7d:c3:da:3b:71:9e:81:72:96:23:3c:56:0d:ce: 74:f7:5b:b9:d9:c7:a4:fd:be:62:6d:e1:d4:6c:10: 25:d2:c0:10:77:25:5c:19:39:0c:df:35:12:76:42: cd:82:cf:e9:ad:12:75:e6:c7:bb:05:00:45:7d:bd: 18:32:d4:a1:b4:21:93:a7:34:08:44:2c:24:f7:d6: 57:11:9e:d2:43:c2:19:eb:ec:63:53:2d:59:a8:f3: 1b:71:a1:e4:26:ee:61:16:d1:d6:67:d6:42:3d:ea: 7c:b9:90:41:af:d0:18:94:70:ec:25:70:92:4a:6c: f7:77:b0:f6:cd:9c:a4:d3:29:8c:e0:c8:9b:b6:26: c8:2a:ed:cd:55:60:1e:2d:11:ac:98:23:43:42:9e: 25:97:c1:d4:48:46:ce:aa:68:f1:92:a6:65:46:94: bc:fe:1e:92:b1:86:88:98:db:cb:55:36:a6:35:e4: 11:f9:2c:62:66:14:0a:3e:47:7c:4e:e2:71:ce:00: c0:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:9D:BD:7E:D9:9E:3F:74:B5:00:3C:52:85:A0:2C:A2:BF:67:25:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ce286e78-8869-3b72-bd69-c4cc06be8f8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 216.240.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:1e:e5:ae:02:3e:60:8e:be:4b:74:07:1c:ae:35:04:ed:15: dc:67:31:4e:5d:6b:31:23:d3:1e:78:d0:cb:23:5b:64:35:74: 0a:fe:93:64:41:fa:53:c2:b4:59:5c:3f:34:a6:14:29:79:99: 97:f1:be:33:ec:b1:28:eb:25:b3:f9:90:2a:4f:d4:35:16:e0: 33:72:d6:f1:e2:27:f1:79:c2:f5:1d:a7:91:e2:38:37:34:e3: 0a:cf:37:92:ac:b1:ab:28:64:52:f3:81:ef:17:c3:06:ba:b6: 4f:72:ff:c3:11:56:a6:8a:78:93:1a:5f:0d:00:ee:58:e1:1d: 2d:a2:b3:e2:be:c9:da:bf:f8:c1:cf:1b:02:71:b1:cc:a0:91: c3:f1:09:6e:86:48:87:d4:1f:c8:40:36:c9:4d:64:e4:3e:82: 0a:e0:1c:1d:23:9f:49:a2:20:42:b2:33:32:3d:9d:95:6e:df: 5c:44:5d:ea:c6:ad:78:f6:f9:4c:51:a2:24:12:59:c5:ad:77: 9f:64:4a:9f:8e:0f:58:7a:29:36:4d:f2:71:bc:33:96:8d:20: 7b:1f:32:4c:0c:f7:e5:a4:fb:54:05:48:51:f6:3d:ff:79:6f: 9a:86:03:56:49:da:4c:15:cb:58:8e:a5:32:06:19:7d:4d:2c: 7a:51:66:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpsVd9iclmNj4+NFEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDcwNjAxMDA0OVoXDTI1MTAwNDAxMDA0OVowLzEtMCsGA1UEAxMk YWE2M2I3N2MtZjgzYi00YWE3LWJjYTctOTZkN2I2ZmEzNDEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOFQdpNGssCeg0Z9jgdf+14mKVG7zN4+WSe0 t4wwEAgXE2n4TmRbnUFp3TJJcIAtUOTWaX5ZAGLWJClqfcPaO3GegXKWIzxWDc50 91u52cek/b5ibeHUbBAl0sAQdyVcGTkM3zUSdkLNgs/prRJ15se7BQBFfb0YMtSh tCGTpzQIRCwk99ZXEZ7SQ8IZ6+xjUy1ZqPMbcaHkJu5hFtHWZ9ZCPep8uZBBr9AY lHDsJXCSSmz3d7D2zZyk0ymM4MibtibIKu3NVWAeLRGsmCNDQp4ll8HUSEbOqmjx kqZlRpS8/h6SsYaImNvLVTamNeQR+SxiZhQKPkd8TuJxzgDARwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOCdvX7Znj90tQA8UoWgLKK/ZyViMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvY2UyODZlNzgtODg2OS0z YjcyLWJkNjktYzRjYzA2YmU4ZjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PDMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJIe5a4CPmCOvkt0BxyuNQTtFdxnMU5dazEj0x540MsjW2Q1dAr+k2RB +lPCtFlcPzSmFCl5mZfxvjPssSjrJbP5kCpP1DUW4DNy1vHiJ/F5wvUdp5HiODc0 4wrPN5KssasoZFLzge8Xwwa6tk9y/8MRVqaKeJMaXw0A7ljhHS2is+K+ydq/+MHP GwJxscygkcPxCW6GSIfUH8hANslNZOQ+ggrgHB0jn0miIEKyMzI9nZVu31xEXerG rXj2+UxRoiQSWcWtd59kSp+OD1h6KTZN8nG8M5aNIHsfMkwM9+Wk+1QFSFH2Pf95 b5qGA1ZJ2kwVy1iOpTIGGX1NLHpRZi8= -----END CERTIFICATE-----Generated at Mon Jul 21 18:04:30 2025 by rpki-client