$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/07c46749-3d70-367d-b3b6-1047e52d62ff.roa File: 07c46749-3d70-367d-b3b6-1047e52d62ff.roa (raw, json) Hash identifier: 6wgA2/cjlvfC+0Zxt8wIiUzZdCdo1+TJRvQlv+XuyTM= Subject key identifier: C2:C4:46:51:BD:42:E3:FD:70:56:8A:AD:98:9B:72:D5:13:73:2A:36 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285848BE86218ECC578CDA7F4F87C0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/07c46749-3d70-367d-b3b6-1047e52d62ff.roa Signing time: Sun 02 Feb 2025 02:00:39 +0000 ROA not before: Sun 02 Feb 2025 02:00:39 +0000 ROA not after: Sat 03 May 2025 01:00:39 +0000 asID: 2159 IP address blocks: 204.230.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:be:86:21:8e:cc:57:8c:da:7f:4f:87:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Feb 2 02:00:39 2025 GMT Not After : May 3 01:00:39 2025 GMT Subject: CN=0a159b5a-ea5b-4fa7-be0d-3e00bffd221c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:99:52:07:8f:9e:b4:be:42:69:55:80:17:e1: 12:28:1e:7b:c7:9c:4e:c6:1d:7b:40:f9:52:be:5e: 97:72:2d:3a:5d:26:fd:4c:b8:db:01:38:85:b7:a0: e7:c2:1f:40:09:d2:ca:6b:a0:3e:6b:43:10:2c:79: 7f:0f:51:c2:f6:4c:68:5d:92:cb:37:d0:20:1e:93: 48:8e:02:6f:cc:25:78:58:8f:2f:5a:99:4d:45:b5: 79:d2:59:20:9a:b4:c8:59:de:5c:48:3f:0e:ba:8d: d4:f9:7c:1d:ab:55:af:18:83:aa:da:e7:dc:51:b6: f8:d0:02:46:b9:a0:c4:13:4b:82:68:3f:1d:61:23: bd:a4:ae:35:de:85:9b:e1:5b:86:7c:45:66:e2:c1: 53:36:32:9b:23:c1:df:bd:bb:9e:45:7f:8e:90:22: 66:57:03:b7:a7:da:df:8c:8d:db:4f:2c:db:ae:4c: af:fe:6d:5d:d4:6e:a5:14:51:af:01:9f:70:22:eb: 3e:47:8d:40:b6:ac:4a:44:83:37:03:ff:4b:d5:13: cc:20:33:0b:3f:68:51:1f:17:1b:5b:7a:79:e1:c9: 9b:61:2f:8b:03:e1:39:d8:3b:9a:d9:0b:43:65:15: 50:1d:1f:84:7b:9d:d6:39:41:10:d2:57:c9:95:28: bd:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:C4:46:51:BD:42:E3:FD:70:56:8A:AD:98:9B:72:D5:13:73:2A:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/07c46749-3d70-367d-b3b6-1047e52d62ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 204.230.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:f8:1c:bb:5e:ec:7a:55:1f:8d:2b:7b:0a:25:cd:fb:4b:16: 1b:5c:35:4f:49:4d:b7:48:f0:5c:63:09:56:76:61:a2:45:dd: 01:54:8b:83:16:b1:14:59:bb:bd:1d:00:46:46:a5:7b:46:5b: a1:39:7c:cd:53:b0:d6:56:a1:cf:07:40:c3:73:d6:10:5e:a2: d5:6a:75:e0:c3:cd:01:57:ac:c7:00:21:61:8b:2b:b3:e6:56: d5:32:fa:70:c2:8d:a8:4c:d9:b3:46:61:04:a5:84:8d:fd:e1: 20:c5:e5:3d:57:0e:1b:0f:b1:c8:0b:3d:76:bc:91:a1:3f:79: 1c:a5:d6:d8:a5:1d:fe:88:da:34:ce:a6:e8:7c:4d:63:31:ef: ce:ce:16:d7:85:9d:ac:c2:d3:43:c5:21:f6:07:53:c5:40:b6: 6b:dc:91:fc:72:28:83:5b:ad:82:84:6b:8a:29:69:51:7f:e3: 42:f8:10:c6:99:df:47:b5:65:01:51:6c:f0:ab:26:66:8c:1c: db:20:87:b1:85:4e:5a:51:f9:5c:b3:a6:4b:ed:9d:18:29:b9: fb:12:20:e2:eb:21:9e:07:f7:b3:f3:d0:c3:fe:01:f3:56:42: 2e:d6:cf:d6:72:a1:04:90:20:7d:4e:44:f2:ff:b2:5f:b8:f7: 2d:cf:6c:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi+hiGOzFeM2n9Ph8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDIwMjAyMDAzOVoXDTI1MDUwMzAxMDAzOVowLzEtMCsGA1UEAxMk MGExNTliNWEtZWE1Yi00ZmE3LWJlMGQtM2UwMGJmZmQyMjFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqplSB4+etL5CaVWAF+ESKB57x5xOxh17QPlS vl6Xci06XSb9TLjbATiFt6Dnwh9ACdLKa6A+a0MQLHl/D1HC9kxoXZLLN9AgHpNI jgJvzCV4WI8vWplNRbV50lkgmrTIWd5cSD8Ouo3U+Xwdq1WvGIOq2ufcUbb40AJG uaDEE0uCaD8dYSO9pK413oWb4VuGfEVm4sFTNjKbI8HfvbueRX+OkCJmVwO3p9rf jI3bTyzbrkyv/m1d1G6lFFGvAZ9wIus+R41AtqxKRIM3A/9L1RPMIDMLP2hRHxcb W3p54cmbYS+LA+E52Dua2QtDZRVQHR+Ee53WOUEQ0lfJlSi98wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMLERlG9QuP9cFaKrZibctUTcyo2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMDdjNDY3NDktM2Q3MC0z NjdkLWIzYjYtMTA0N2U1MmQ2MmZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzOYsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEz4HLte7HpVH40rewolzftLFhtcNU9JTbdI8FxjCVZ2YaJF3QFUi4MW sRRZu70dAEZGpXtGW6E5fM1TsNZWoc8HQMNz1hBeotVqdeDDzQFXrMcAIWGLK7Pm VtUy+nDCjahM2bNGYQSlhI394SDF5T1XDhsPscgLPXa8kaE/eRyl1tilHf6I2jTO puh8TWMx787OFteFnazC00PFIfYHU8VAtmvckfxyKINbrYKEa4opaVF/40L4EMaZ 30e1ZQFRbPCrJmaMHNsgh7GFTlpR+VyzpkvtnRgpufsSIOLrIZ4H97Pz0MP+AfNW Qi7Wz9ZyoQSQIH1ORPL/sl+49y3PbB0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:36:08 2025 by rpki-client