$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d4451a8c-dfdc-3116-a0e2-e7f95835dac2.roa File: d4451a8c-dfdc-3116-a0e2-e7f95835dac2.roa (raw, json) Hash identifier: fFU5FH5AWg4TJ49+gQYyxEm3KKYS4f6YB9mxA2Y4IEw= Subject key identifier: D6:C0:59:E8:95:DD:44:80:D5:CB:60:D6:CE:D8:99:8F:61:E9:AB:BF Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584A6C55DF2C3D23CE3BEA69D5C0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d4451a8c-dfdc-3116-a0e2-e7f95835dac2.roa Signing time: Sun 06 Jul 2025 01:00:49 +0000 ROA not before: Sun 06 Jul 2025 01:00:49 +0000 ROA not after: Sat 04 Oct 2025 01:00:49 +0000 asID: 202 IP address blocks: 216.240.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6c:55:df:2c:3d:23:ce:3b:ea:69:d5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jul 6 01:00:49 2025 GMT Not After : Oct 4 01:00:49 2025 GMT Subject: CN=8f7f6ecd-bd25-4828-b161-015fd195e4af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f4:f6:21:6e:1e:1d:1f:ff:c5:0c:6e:1b:93: 88:aa:21:ed:f8:68:a2:d7:0a:d4:c3:6b:dc:37:64: 4d:40:68:3b:02:9c:7c:59:2c:9d:3b:68:a9:87:bb: b5:e0:52:b9:2a:3c:19:c3:1f:93:9a:05:41:b6:d7: 54:5c:ed:34:cd:9c:df:de:7c:38:18:76:29:ca:51: 3f:b9:b1:54:ce:84:ef:49:2a:a4:5d:d7:55:43:51: 5c:30:5a:5b:f3:8c:e8:93:00:58:e6:a8:05:5f:b6: 24:36:7e:21:40:c9:9c:47:ae:45:88:66:a7:18:bd: 07:f2:b3:e3:06:db:d7:e7:d0:94:f1:41:2a:ec:17: 32:d0:2f:92:f9:fe:fb:45:93:a5:50:4a:96:65:04: e8:84:10:b1:3d:9e:55:3a:25:38:2e:8a:6b:4c:52: c9:5e:00:d2:96:28:fc:25:15:3b:1b:12:78:fc:f6: 00:4d:5c:d7:81:3f:bd:23:32:0c:a6:c4:bc:78:b6: a8:fa:61:00:04:4d:9f:e1:7a:77:24:9c:73:d9:98: a1:54:25:4d:85:46:4b:ba:17:53:42:b6:97:d9:e7: 3e:b0:90:ec:4d:a4:7e:a5:b8:1c:cf:25:de:2e:f0: 24:fe:21:ea:b9:d9:d6:dd:a2:a9:16:c6:8d:b9:65: 49:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:C0:59:E8:95:DD:44:80:D5:CB:60:D6:CE:D8:99:8F:61:E9:AB:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d4451a8c-dfdc-3116-a0e2-e7f95835dac2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 216.240.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:81:2a:09:75:b4:16:8e:5e:26:d5:9f:f5:ba:b2:a3:5f:e8: 11:d7:b6:1f:08:81:35:58:60:c7:4f:aa:64:f6:48:2f:67:46: af:7f:71:6d:14:ba:6a:d8:b3:1a:36:a5:7e:e1:a5:da:f3:ad: 36:ec:ff:29:d7:90:5f:32:cc:27:0c:54:9a:15:5f:b5:a6:97: fa:d3:a8:24:d0:fa:7a:ca:2c:1c:ae:74:6c:29:8f:2e:b9:bd: 5d:d3:2c:ff:ec:5a:d4:f0:be:69:b6:12:7b:c3:57:21:19:ad: f7:5a:02:f5:d3:3a:c5:af:1d:21:c5:79:1d:28:be:36:69:c8: f3:43:6d:1f:86:8e:97:62:4c:88:6b:ce:47:92:10:ec:ba:cd: 80:f3:9c:55:e7:67:d4:1a:34:b6:dd:5f:62:a5:49:70:bc:45: c8:41:89:b6:d8:6c:a0:4d:60:c1:5a:34:13:9c:1a:e8:7a:c4: 1a:42:f1:9e:7b:21:06:23:f4:aa:0a:58:69:e4:76:86:ae:43: 1e:33:e0:76:ea:11:80:bc:55:1a:3d:6f:49:e8:0c:c0:57:a2: ac:76:88:72:d8:fa:0a:91:e3:3d:56:0e:78:87:6b:b1:cc:ed: 52:7b:68:37:03:f5:3a:1a:12:16:99:fc:d1:5c:3a:d0:32:e1: 4a:60:fc:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpsVd8sPSPOO+pp1cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDcwNjAxMDA0OVoXDTI1MTAwNDAxMDA0OVowLzEtMCsGA1UEAxMk OGY3ZjZlY2QtYmQyNS00ODI4LWIxNjEtMDE1ZmQxOTVlNGFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPT2IW4eHR//xQxuG5OIqiHt+Gii1wrUw2vc N2RNQGg7Apx8WSydO2iph7u14FK5KjwZwx+TmgVBttdUXO00zZzf3nw4GHYpylE/ ubFUzoTvSSqkXddVQ1FcMFpb84zokwBY5qgFX7YkNn4hQMmcR65FiGanGL0H8rPj BtvX59CU8UEq7Bcy0C+S+f77RZOlUEqWZQTohBCxPZ5VOiU4LoprTFLJXgDSlij8 JRU7GxJ4/PYATVzXgT+9IzIMpsS8eLao+mEABE2f4Xp3JJxz2ZihVCVNhUZLuhdT QraX2ec+sJDsTaR+pbgczyXeLvAk/iHqudnW3aKpFsaNuWVJ0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNbAWeiV3USA1ctg1s7YmY9h6au/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZDQ0NTFhOGMtZGZkYy0z MTE2LWEwZTItZTdmOTU4MzVkYWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PDEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADuBKgl1tBaOXibVn/W6sqNf6BHXth8IgTVYYMdPqmT2SC9nRq9/cW0U umrYsxo2pX7hpdrzrTbs/ynXkF8yzCcMVJoVX7Wml/rTqCTQ+nrKLByudGwpjy65 vV3TLP/sWtTwvmm2EnvDVyEZrfdaAvXTOsWvHSHFeR0ovjZpyPNDbR+GjpdiTIhr zkeSEOy6zYDznFXnZ9QaNLbdX2KlSXC8RchBibbYbKBNYMFaNBOcGuh6xBpC8Z57 IQYj9KoKWGnkdoauQx4z4HbqEYC8VRo9b0noDMBXoqx2iHLY+gqR4z1WDniHa7HM 7VJ7aDcD9ToaEhaZ/NFcOtAy4Upg/CM= -----END CERTIFICATE-----Generated at Mon Jul 21 08:02:06 2025 by rpki-client