$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/225967f5-4a5e-3c09-8cbc-de91c827c531.roa File: 225967f5-4a5e-3c09-8cbc-de91c827c531.roa (raw, json) Hash identifier: wX/ss+laGzCsvMQGWuklp3c9YbMq643oIta5hfs4KKQ= Subject key identifier: 1C:1B:0B:9D:95:67:81:C3:FB:82:C6:F7:1E:A5:6E:70:AD:C5:93:C9 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285848BE8624F8AFFF7AF020423800 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/225967f5-4a5e-3c09-8cbc-de91c827c531.roa Signing time: Sun 02 Feb 2025 02:00:39 +0000 ROA not before: Sun 02 Feb 2025 02:00:39 +0000 ROA not after: Sat 03 May 2025 01:00:39 +0000 asID: 203 IP address blocks: 207.37.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:be:86:24:f8:af:ff:7a:f0:20:42:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Feb 2 02:00:39 2025 GMT Not After : May 3 01:00:39 2025 GMT Subject: CN=d3376f0a-e090-4110-9b36-bb4748818b7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:11:02:f1:1b:c9:73:9d:f8:83:8d:72:bc:ec: 4c:a2:d9:2c:7b:88:57:f8:22:e4:82:d4:f2:4e:fe: 54:5c:a7:da:cb:a1:fd:95:75:1a:30:10:f6:2b:27: 32:1a:7d:7e:84:94:35:7e:73:43:b5:c8:e8:e7:28: df:db:e9:6b:66:bc:38:80:44:15:56:fe:4b:70:ff: 47:20:9b:92:a6:91:04:6b:4b:c1:ab:a0:84:85:74: 0b:eb:b7:cb:54:ca:c5:e5:67:fe:01:59:07:05:b4: d8:7c:ff:9f:45:0d:8d:35:95:ad:f2:b4:e1:b9:2e: 91:bd:9e:08:0d:19:2c:67:ef:1d:89:20:5e:73:bb: 53:5f:88:ec:9a:46:dc:8c:a1:dd:fd:ba:e6:f4:96: 6b:17:e1:85:31:83:b0:8d:a6:37:3c:e3:c0:eb:fb: 77:58:2e:4b:7e:db:61:5f:6d:f5:a3:80:3a:78:8a: 2f:90:54:e6:c8:85:b9:71:7a:24:58:75:a1:0f:1a: 6d:40:88:d1:bb:f4:93:c1:4b:aa:9d:a1:d8:46:91: 45:1b:7a:88:a0:23:22:f9:db:75:d9:d8:fe:8e:0d: e8:a9:76:de:5a:ca:c6:00:7d:5d:d8:d5:8a:17:29: 0c:a0:39:95:fe:31:cc:a7:2b:ad:45:c5:5d:10:02: f1:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:1B:0B:9D:95:67:81:C3:FB:82:C6:F7:1E:A5:6E:70:AD:C5:93:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/225967f5-4a5e-3c09-8cbc-de91c827c531.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 207.37.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:f8:32:35:86:45:63:c4:55:f4:26:c1:6a:cd:a1:b2:05:c2: 2b:3e:7a:17:ba:29:ef:78:13:4e:38:74:a6:d3:c7:99:a9:6f: fa:eb:2b:35:5f:d6:a1:86:fc:64:a2:b3:ba:6a:ab:06:69:c0: 20:a4:00:2d:bf:0e:9e:2a:e6:74:e3:39:31:af:0f:19:7f:2d: 14:bb:eb:06:a7:02:6f:fa:dd:11:73:5e:bb:92:26:c2:24:b8: 4a:c6:cc:1f:78:74:05:df:e3:0a:c5:eb:21:2c:46:4f:5e:43: 00:b8:a2:90:a9:e7:97:26:43:a1:af:be:c5:0c:7a:e4:0f:d6: 1b:f9:37:86:3a:38:a3:9f:fb:aa:e6:60:1c:cf:b1:4b:b0:7d: 65:b0:ec:6f:d8:42:b3:5e:0b:a9:d0:ed:e4:1a:2a:e1:15:ee: be:d6:6d:5f:ff:11:ed:50:73:b6:40:ab:04:dd:4f:dc:ce:07: 57:b8:10:b2:6b:45:a3:3f:11:5b:25:2f:ce:60:86:c2:a7:3a: 79:66:1a:ea:27:03:db:16:78:48:de:fa:bf:ed:59:bd:3c:70: 6b:ef:0f:01:f9:33:88:36:3b:8c:36:dc:c6:3f:ff:d6:cf:51: b9:7a:91:2c:3b:97:ae:e1:4b:b4:fe:d7:46:ff:ef:d3:dd:00: 7f:38:42:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi+hiT4r/968CBCOAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDIwMjAyMDAzOVoXDTI1MDUwMzAxMDAzOVowLzEtMCsGA1UEAxMk ZDMzNzZmMGEtZTA5MC00MTEwLTliMzYtYmI0NzQ4ODE4YjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hEC8RvJc534g41yvOxMotkse4hX+CLkgtTy Tv5UXKfay6H9lXUaMBD2KycyGn1+hJQ1fnNDtcjo5yjf2+lrZrw4gEQVVv5LcP9H IJuSppEEa0vBq6CEhXQL67fLVMrF5Wf+AVkHBbTYfP+fRQ2NNZWt8rThuS6RvZ4I DRksZ+8diSBec7tTX4jsmkbcjKHd/brm9JZrF+GFMYOwjaY3POPA6/t3WC5Lftth X231o4A6eIovkFTmyIW5cXokWHWhDxptQIjRu/STwUuqnaHYRpFFG3qIoCMi+dt1 2dj+jg3oqXbeWsrGAH1d2NWKFykMoDmV/jHMpyutRcVdEALxDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBwbC52VZ4HD+4LG9x6lbnCtxZPJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMjI1OTY3ZjUtNGE1ZS0z YzA5LThjYmMtZGU5MWM4MjdjNTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzyXwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEv4MjWGRWPEVfQmwWrNobIFwis+ehe6Ke94E044dKbTx5mpb/rrKzVf 1qGG/GSis7pqqwZpwCCkAC2/Dp4q5nTjOTGvDxl/LRS76wanAm/63RFzXruSJsIk uErGzB94dAXf4wrF6yEsRk9eQwC4opCp55cmQ6GvvsUMeuQP1hv5N4Y6OKOf+6rm YBzPsUuwfWWw7G/YQrNeC6nQ7eQaKuEV7r7WbV//Ee1Qc7ZAqwTdT9zOB1e4ELJr RaM/EVslL85ghsKnOnlmGuonA9sWeEje+r/tWb08cGvvDwH5M4g2O4w23MY//9bP Ubl6kSw7l67hS7T+10b/79PdAH84QlU= -----END CERTIFICATE-----Generated at Sun Feb 16 15:07:31 2025 by rpki-client