$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0d6c09e8-2b13-365f-832e-baa9416ff23b.roa File: 0d6c09e8-2b13-365f-832e-baa9416ff23b.roa (raw, json) Hash identifier: qufIFOrLvKQbImIvVOjLcO16lcEsxP7MBRyqq6IPIrw= Subject key identifier: 58:62:ED:46:70:9C:6F:AB:DD:DB:5F:49:8E:DB:EB:75:FD:DB:19:15 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285848BE8624EB1DEF3D0108CE3400 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0d6c09e8-2b13-365f-832e-baa9416ff23b.roa Signing time: Sun 02 Feb 2025 02:00:39 +0000 ROA not before: Sun 02 Feb 2025 02:00:39 +0000 ROA not after: Sat 03 May 2025 01:00:39 +0000 asID: 202 IP address blocks: 207.37.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:be:86:24:eb:1d:ef:3d:01:08:ce:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Feb 2 02:00:39 2025 GMT Not After : May 3 01:00:39 2025 GMT Subject: CN=ed0f7faa-3ee6-473f-8878-3b463b7439a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:80:1a:98:2a:d1:10:36:1f:ac:77:af:59:c2: 18:c7:e1:a7:4a:24:1a:87:29:ae:21:f9:c1:31:54: 35:10:cc:ce:05:f7:c8:e1:ef:7d:3e:ce:d8:35:45: 9e:4f:ca:d6:92:c2:fe:16:71:04:c3:77:2f:64:f9: f6:ad:ac:b9:b1:10:8a:e5:68:60:79:2d:9d:88:88: 53:62:55:64:5c:ff:31:58:23:4a:f6:58:c4:d6:a4: f6:70:03:93:d9:07:dd:7b:11:26:83:13:31:2e:73: d2:5a:81:20:da:a9:b3:6f:40:16:24:23:4b:b5:1b: 18:cf:b8:a4:79:86:ef:8b:5a:27:67:2a:39:b2:8a: ec:80:a4:6c:ba:4e:d4:ee:7d:f0:f1:bf:63:6d:51: 81:e7:d6:9a:04:0f:e7:c0:be:0c:13:61:5e:d8:2f: 4d:22:ec:86:5a:7b:22:4a:34:8a:31:de:ad:5f:f7: 3b:f8:ba:09:5d:c7:2f:c4:e7:0c:2f:fc:36:41:8b: 69:3c:7b:b1:4a:fb:85:52:96:ca:43:ff:5f:0d:76: 46:3d:68:a7:f2:6a:33:71:a8:7f:45:4f:22:f5:d9: 21:06:31:01:23:b1:6f:0b:2c:54:2f:ad:5e:48:7e: f1:87:e7:ee:46:30:ef:cc:d6:73:75:04:16:c0:1a: b4:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:62:ED:46:70:9C:6F:AB:DD:DB:5F:49:8E:DB:EB:75:FD:DB:19:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0d6c09e8-2b13-365f-832e-baa9416ff23b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 207.37.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:fe:9d:37:f7:95:f6:6d:53:c6:fa:24:19:94:e4:9f:08:fc: 51:73:d2:83:91:83:b6:c1:84:ef:a5:d6:ff:a9:d2:50:67:b1: 01:3d:11:06:35:cc:f0:8f:04:33:a8:41:eb:1f:95:d7:41:4b: 38:bd:d6:0d:5d:62:33:8a:bd:3f:c6:e3:54:74:bf:96:2e:4d: c6:d3:c4:f1:cd:89:a7:3b:36:09:bc:be:bf:e7:40:77:1e:5e: 16:67:c4:01:ee:d8:7a:6d:22:ba:c4:a5:b0:26:63:6e:ad:36: f3:7b:a8:aa:01:33:32:36:fa:55:11:96:ba:ce:8e:e7:86:4f: 8b:af:f8:29:e9:2e:13:5a:58:21:30:d5:dd:b4:38:51:b0:d7: b3:a9:d6:ca:ea:ad:c2:93:48:39:73:b7:c4:d4:9b:87:10:4f: d9:df:d6:91:18:bf:4a:b6:fc:62:99:1a:35:19:14:99:ac:ed: c4:a7:85:ab:a6:ff:d7:3f:82:94:a0:02:aa:4a:98:a5:31:0c: 8a:6c:2f:f2:94:44:dd:2f:7b:9e:9d:a6:21:f9:f4:19:c6:24: a6:19:33:26:fa:1f:82:7b:17:21:15:f5:13:7c:49:5e:01:bd: a9:b4:a6:26:d2:ad:fe:d1:ef:ff:92:5f:65:65:67:f4:2b:1f: 5d:61:94:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi+hiTrHe89AQjONAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDIwMjAyMDAzOVoXDTI1MDUwMzAxMDAzOVowLzEtMCsGA1UEAxMk ZWQwZjdmYWEtM2VlNi00NzNmLTg4NzgtM2I0NjNiNzQzOWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIAamCrREDYfrHevWcIYx+GnSiQahymuIfnB MVQ1EMzOBffI4e99Ps7YNUWeT8rWksL+FnEEw3cvZPn2ray5sRCK5WhgeS2diIhT YlVkXP8xWCNK9ljE1qT2cAOT2QfdexEmgxMxLnPSWoEg2qmzb0AWJCNLtRsYz7ik eYbvi1onZyo5sorsgKRsuk7U7n3w8b9jbVGB59aaBA/nwL4ME2Fe2C9NIuyGWnsi SjSKMd6tX/c7+LoJXccvxOcML/w2QYtpPHuxSvuFUpbKQ/9fDXZGPWin8mozcah/ RU8i9dkhBjEBI7FvCyxUL61eSH7xh+fuRjDvzNZzdQQWwBq0ywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFhi7UZwnG+r3dtfSY7b63X92xkVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMGQ2YzA5ZTgtMmIxMy0z NjVmLTgzMmUtYmFhOTQxNmZmMjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzyXwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABX+nTf3lfZtU8b6JBmU5J8I/FFz0oORg7bBhO+l1v+p0lBnsQE9EQY1 zPCPBDOoQesflddBSzi91g1dYjOKvT/G41R0v5YuTcbTxPHNiac7Ngm8vr/nQHce XhZnxAHu2HptIrrEpbAmY26tNvN7qKoBMzI2+lURlrrOjueGT4uv+CnpLhNaWCEw 1d20OFGw17Op1srqrcKTSDlzt8TUm4cQT9nf1pEYv0q2/GKZGjUZFJms7cSnhaum /9c/gpSgAqpKmKUxDIpsL/KURN0ve56dpiH59BnGJKYZMyb6H4J7FyEV9RN8SV4B vam0pibSrf7R7/+SX2VlZ/QrH11hlOQ= -----END CERTIFICATE-----Generated at Fri Mar 14 13:56:53 2025 by rpki-client