$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1d9b0de1-ff31-3cca-8252-4e1cd6156b29.roa File: 1d9b0de1-ff31-3cca-8252-4e1cd6156b29.roa (raw, json) Hash identifier: nx//j2cX7JSxBeQh1oKttnlYaUpPZB8nf3WVC4b3GCc= Subject key identifier: 64:52:49:80:7A:81:E4:8B:B4:79:A5:FD:C8:20:41:93:D4:08:60:21 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285848AAFB61701A4279C233FAF760 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1d9b0de1-ff31-3cca-8252-4e1cd6156b29.roa Signing time: Sun 26 Jan 2025 02:00:38 +0000 ROA not before: Sun 26 Jan 2025 02:00:38 +0000 ROA not after: Sat 26 Apr 2025 01:00:38 +0000 asID: 202 IP address blocks: 204.104.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:aa:fb:61:70:1a:42:79:c2:33:fa:f7:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jan 26 02:00:38 2025 GMT Not After : Apr 26 01:00:38 2025 GMT Subject: CN=324e25b5-fe4c-47ef-84a1-c1c12c01064a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:1f:4b:d1:a9:7f:b1:29:44:1a:6c:0d:2c:d1: 93:67:6e:ff:ca:c3:f9:d5:d1:3a:78:91:94:54:64: 1e:0f:0c:48:d7:d1:28:48:89:1e:58:e5:c3:48:72: 0f:89:74:b9:bb:3d:fb:e8:9b:ab:1e:7b:cb:f8:90: 85:b3:79:86:8d:af:db:8d:a1:3f:4e:60:84:3d:72: 9e:cb:91:ea:99:5e:8d:8a:55:3d:db:27:dd:38:f4: 5a:04:f3:53:90:09:86:32:18:3e:48:90:38:cd:01: 29:9f:65:e1:de:c1:99:7e:6b:9e:d6:c3:1c:fe:30: bd:f5:79:9c:e5:2d:7a:a8:5c:b7:38:7c:4e:34:f5: 41:d1:f0:29:59:55:4e:a2:e1:ea:ad:53:73:c6:90: 1c:fa:1f:1a:44:07:0c:6d:91:fc:dc:fe:60:43:5f: 1e:43:da:f7:44:04:26:8f:d7:d6:db:17:b0:ae:32: 79:aa:ea:38:6f:6f:53:ee:bf:4b:d3:9f:79:83:7b: 7b:33:a5:a2:d5:0a:f3:c2:cf:13:5c:3a:b7:42:52: 87:0f:f7:b7:93:0d:dc:4d:37:5f:38:7d:c3:4c:f0: 54:c1:6c:37:b7:6b:d4:a3:59:86:fe:bf:56:06:4e: 59:27:84:26:55:6b:dc:38:86:ec:ae:f9:4e:72:17: 9a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:52:49:80:7A:81:E4:8B:B4:79:A5:FD:C8:20:41:93:D4:08:60:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1d9b0de1-ff31-3cca-8252-4e1cd6156b29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 204.104.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:b6:ed:3f:18:a8:e6:61:a5:1a:2c:ce:43:ea:84:c9:a1:96: 6c:f9:b9:0b:01:60:30:a7:52:93:31:93:59:49:b7:36:9e:62: 84:77:9a:65:3f:c8:7d:ca:05:c8:15:12:92:15:73:56:07:0b: d2:c5:f6:ea:64:b7:c0:f4:a6:ea:2c:51:3c:d6:79:dd:4d:a4: 35:b2:a5:f9:8b:c4:4a:b7:03:67:5f:c6:91:7b:6f:3b:84:0f: 26:85:1e:f4:93:a9:a1:83:90:8f:21:36:f5:b7:34:b9:75:11: f8:1e:4b:c3:92:34:8f:bb:7b:b6:30:2c:5a:d2:c9:d6:7e:01: 11:67:83:3a:9f:aa:5c:0f:6f:4e:59:28:c1:b9:fe:7c:5c:83: 69:f9:96:61:87:e8:77:b1:65:d7:9b:03:d8:08:0b:76:a6:30: 2b:e6:59:09:f6:29:1c:d2:eb:be:38:28:e6:bc:d3:b2:84:fb: d5:33:b3:c5:01:96:43:a7:96:8c:82:02:b4:9c:0b:9b:fd:1f: b1:7c:40:ca:75:23:a8:c6:6c:b3:b9:32:e9:46:19:8a:bf:13: 2c:8c:9f:4d:85:fb:17:ab:39:0a:d8:9d:25:c6:9e:da:0f:31: 4f:ec:70:16:6f:e6:3a:45:95:96:a8:16:a3:6e:8b:94:65:cb: 7f:6d:93:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiq+2FwGkJ5wjP692AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDEyNjAyMDAzOFoXDTI1MDQyNjAxMDAzOFowLzEtMCsGA1UEAxMk MzI0ZTI1YjUtZmU0Yy00N2VmLTg0YTEtYzFjMTJjMDEwNjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkx9L0al/sSlEGmwNLNGTZ27/ysP51dE6eJGU VGQeDwxI19EoSIkeWOXDSHIPiXS5uz376JurHnvL+JCFs3mGja/bjaE/TmCEPXKe y5HqmV6NilU92yfdOPRaBPNTkAmGMhg+SJA4zQEpn2Xh3sGZfmue1sMc/jC99Xmc 5S16qFy3OHxONPVB0fApWVVOouHqrVNzxpAc+h8aRAcMbZH83P5gQ18eQ9r3RAQm j9fW2xewrjJ5quo4b29T7r9L0595g3t7M6Wi1Qrzws8TXDq3QlKHD/e3kw3cTTdf OH3DTPBUwWw3t2vUo1mG/r9WBk5ZJ4QmVWvcOIbsrvlOcheaEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGRSSYB6geSLtHml/cggQZPUCGAhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMWQ5YjBkZTEtZmYzMS0z Y2NhLTgyNTItNGUxY2Q2MTU2YjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGhDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJW27T8YqOZhpRoszkPqhMmhlmz5uQsBYDCnUpMxk1lJtzaeYoR3mmU/ yH3KBcgVEpIVc1YHC9LF9upkt8D0puosUTzWed1NpDWypfmLxEq3A2dfxpF7bzuE DyaFHvSTqaGDkI8hNvW3NLl1EfgeS8OSNI+7e7YwLFrSydZ+ARFngzqfqlwPb05Z KMG5/nxcg2n5lmGH6HexZdebA9gIC3amMCvmWQn2KRzS6744KOa807KE+9Uzs8UB lkOnloyCArScC5v9H7F8QMp1I6jGbLO5MulGGYq/EyyMn02F+xerOQrYnSXGntoP MU/scBZv5jpFlZaoFqNui5Rly39tkwc= -----END CERTIFICATE-----Generated at Sat Apr 5 16:41:53 2025 by rpki-client