$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/22502d83-8eb0-3092-98c2-4b38d9e9a509.roa File: 22502d83-8eb0-3092-98c2-4b38d9e9a509.roa (raw, json) Hash identifier: y48ajYuidDsMx45CI9pQHs1lX3m+tK3WCDcwb2oZUNM= Subject key identifier: F3:F6:B3:98:B1:FB:B4:F6:59:24:4F:11:4D:77:C7:DE:D7:C4:F7:4B Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285848AAFB622CC055DE04421DAD20 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/22502d83-8eb0-3092-98c2-4b38d9e9a509.roa Signing time: Sun 26 Jan 2025 02:00:38 +0000 ROA not before: Sun 26 Jan 2025 02:00:38 +0000 ROA not after: Sat 26 Apr 2025 01:00:38 +0000 asID: 5714 IP address blocks: 204.104.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:aa:fb:62:2c:c0:55:de:04:42:1d:ad:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jan 26 02:00:38 2025 GMT Not After : Apr 26 01:00:38 2025 GMT Subject: CN=d5b64856-dbfa-47e4-8806-19540a6194bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e4:6e:ad:ec:11:23:7c:b0:96:5c:e3:18:ca: 6a:51:b3:b1:45:a8:7b:22:67:bb:dc:b2:6d:f9:dc: db:5e:af:c8:bc:96:60:d5:ca:41:f5:a7:9a:1f:0d: c6:c7:2a:62:e7:a2:01:75:eb:28:e6:9d:e5:1a:95: e0:e6:5e:d1:63:d1:3f:7b:75:d2:6d:c8:21:30:45: 72:05:47:fd:34:03:08:96:87:75:55:2f:22:66:6c: f9:80:7c:6a:da:ce:69:18:74:4e:66:6c:a7:21:6c: 8f:4e:d9:ab:77:4f:3e:aa:d0:1c:1a:f2:72:76:25: 79:de:fa:6b:11:30:a6:49:cf:9c:d1:44:1c:01:1a: fe:ab:8a:4c:20:d4:f4:b1:1b:5e:f0:15:a1:db:ae: 75:08:d6:3d:67:09:b7:92:e3:59:3b:3f:17:e8:c0: 44:35:fc:72:1e:22:5c:e3:7a:21:12:c6:55:5b:26: 81:86:be:79:ab:e8:12:de:46:92:00:cc:b0:76:ab: 22:de:f2:38:94:96:23:40:99:46:c4:89:38:2a:f3: 2c:71:0e:1a:08:fa:84:f6:52:11:80:08:5e:a2:4d: 6c:57:ed:97:aa:ca:0d:2e:74:6b:1b:8a:07:d3:c4: ee:6b:22:4a:d7:70:9c:16:26:95:3e:b2:94:ec:3d: 95:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:F6:B3:98:B1:FB:B4:F6:59:24:4F:11:4D:77:C7:DE:D7:C4:F7:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/22502d83-8eb0-3092-98c2-4b38d9e9a509.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 204.104.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:a0:70:88:c3:5a:4b:f5:f4:83:ec:69:7b:0d:56:31:d0:cb: b3:4b:86:a1:d5:07:6b:35:0d:e0:b9:c4:d6:5a:54:99:d9:ad: d9:64:9c:d0:4a:9a:d5:8d:a5:02:0d:4a:92:a4:1e:18:e1:a7: f9:58:d6:14:99:23:95:eb:96:40:e0:cb:b5:66:2c:80:e9:bd: 50:d4:db:00:e5:9c:2f:f8:bf:3f:1b:e0:61:e6:10:83:40:80: 56:7b:53:13:38:2b:dd:11:ed:cd:cc:de:21:1f:29:c5:20:29: 5b:b7:49:1f:72:f6:63:a4:f8:cf:f5:90:e9:90:e1:98:5e:55: fd:77:b1:1e:99:21:32:50:87:db:59:e8:2d:81:32:3f:dc:e4: 55:33:67:a1:44:32:c8:ae:63:67:21:6a:84:ef:27:69:f8:54: d8:cd:9d:ea:d8:78:06:91:7e:31:7c:c8:db:69:a2:b5:c1:6c: 70:d1:82:1f:c1:54:45:05:22:1b:80:fe:68:bb:7e:97:f2:50: be:06:43:2d:c4:0a:0d:a9:a1:33:e1:ce:7b:21:78:ae:bc:f4: 6d:ad:21:59:a8:53:c9:de:3c:21:f7:34:c3:fd:ba:34:cc:53: bb:e7:f2:29:b2:02:97:27:50:1a:97:b3:b3:4d:44:27:44:bf: b3:0a:82:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiq+2IswFXeBEIdrSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDEyNjAyMDAzOFoXDTI1MDQyNjAxMDAzOFowLzEtMCsGA1UEAxMk ZDViNjQ4NTYtZGJmYS00N2U0LTg4MDYtMTk1NDBhNjE5NGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+RurewRI3ywllzjGMpqUbOxRah7Ime73LJt +dzbXq/IvJZg1cpB9aeaHw3Gxypi56IBdeso5p3lGpXg5l7RY9E/e3XSbcghMEVy BUf9NAMIlod1VS8iZmz5gHxq2s5pGHROZmynIWyPTtmrd08+qtAcGvJydiV53vpr ETCmSc+c0UQcARr+q4pMINT0sRte8BWh2651CNY9Zwm3kuNZOz8X6MBENfxyHiJc 43ohEsZVWyaBhr55q+gS3kaSAMywdqsi3vI4lJYjQJlGxIk4KvMscQ4aCPqE9lIR gAheok1sV+2XqsoNLnRrG4oH08TuayJK13CcFiaVPrKU7D2VBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPP2s5ix+7T2WSRPEU13x97XxPdLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMjI1MDJkODMtOGViMC0z MDkyLTk4YzItNGIzOGQ5ZTlhNTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGjPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACmgcIjDWkv19IPsaXsNVjHQy7NLhqHVB2s1DeC5xNZaVJnZrdlknNBK mtWNpQINSpKkHhjhp/lY1hSZI5XrlkDgy7VmLIDpvVDU2wDlnC/4vz8b4GHmEINA gFZ7UxM4K90R7c3M3iEfKcUgKVu3SR9y9mOk+M/1kOmQ4ZheVf13sR6ZITJQh9tZ 6C2BMj/c5FUzZ6FEMsiuY2chaoTvJ2n4VNjNnerYeAaRfjF8yNtporXBbHDRgh/B VEUFIhuA/mi7fpfyUL4GQy3ECg2poTPhznsheK689G2tIVmoU8nePCH3NMP9ujTM U7vn8imyApcnUBqXs7NNRCdEv7MKgjg= -----END CERTIFICATE-----Generated at Sun Apr 6 05:28:40 2025 by rpki-client