$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/242704e6-6aa0-3f71-a550-f92875418865.roa File: 242704e6-6aa0-3f71-a550-f92875418865.roa (raw, json) Hash identifier: oAhQme+sCtP97LM5FLeqQDuUiZtlCFWJUCasuj0C37g= Subject key identifier: 04:13:88:BC:55:1C:A3:14:9D:2B:77:DD:52:C3:10:45:7D:6E:E3:64 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285848EC96A0C42A21F6D1A286A9C0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/242704e6-6aa0-3f71-a550-f92875418865.roa Signing time: Tue 18 Feb 2025 14:00:52 +0000 ROA not before: Tue 18 Feb 2025 14:00:52 +0000 ROA not after: Mon 19 May 2025 13:00:52 +0000 asID: 203 IP address blocks: 206.164.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ec:96:a0:c4:2a:21:f6:d1:a2:86:a9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Feb 18 14:00:52 2025 GMT Not After : May 19 13:00:52 2025 GMT Subject: CN=cdd9d666-6e6c-48a2-8116-f191d0f15c9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:57:da:f0:48:56:6d:6e:60:91:33:53:00:ad: a5:e5:c4:2d:f3:c2:87:30:ff:06:d6:3b:cd:8b:78: 00:43:d0:f0:48:5d:46:4c:48:34:2b:ee:dd:31:85: 3b:01:b7:5b:d0:f1:56:03:a6:43:49:3e:93:2b:5a: a4:f0:3b:77:17:73:b2:e5:f8:cd:3d:13:62:47:c9: 40:44:46:f2:68:54:48:89:a6:0c:da:d6:14:54:1a: 9a:37:fd:34:92:cc:62:39:0f:12:c4:cd:89:1b:ba: 7b:a5:db:86:c0:4b:42:ce:d3:09:19:37:9c:30:88: 49:a7:4a:10:e1:ad:a2:d7:40:76:6c:de:81:89:02: 85:9d:59:b4:1e:12:a4:fb:d6:1d:7f:25:45:13:a2: 8a:e0:ff:0d:36:a1:b2:e7:f7:72:d8:23:2e:ff:1a: 66:ea:25:15:38:bb:b6:53:39:18:6a:51:62:8a:84: 70:15:c5:3f:92:ce:da:f8:7f:f3:28:23:58:de:a3: 88:1e:0c:95:13:58:b6:10:78:7c:ba:d9:47:ee:1b: 6c:8c:a4:fa:d6:93:fa:84:a3:53:8e:8a:3b:2b:2e: c6:eb:a4:f4:70:39:98:e9:6e:da:8e:ba:dc:ee:16: 50:34:64:09:dc:18:2b:fc:27:bd:00:76:f1:8f:e1: 3c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:13:88:BC:55:1C:A3:14:9D:2B:77:DD:52:C3:10:45:7D:6E:E3:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/242704e6-6aa0-3f71-a550-f92875418865.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 206.164.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:e0:0a:6e:c0:7d:d1:67:a2:39:b6:8d:ca:6f:0e:47:e7:e6: 9d:f5:2d:09:d4:0c:9d:0c:26:cb:78:6f:bc:5b:c4:2f:e4:51: 11:64:4b:bb:89:42:f0:46:e7:b9:c7:32:d4:54:99:d1:f1:6c: d8:2f:40:be:8a:ee:e0:d1:b4:b2:5b:b8:e9:0e:68:92:8b:b9: 8b:ff:8c:86:46:6d:6b:d7:38:00:e0:19:6b:ef:fa:0f:ba:6b: 59:86:e7:46:a5:31:fd:df:62:28:6e:0d:3b:c7:25:be:21:ef: 69:5b:2a:4e:bd:3c:9f:8a:e6:92:3c:79:54:13:fa:30:32:95: f7:50:02:38:a8:2f:ae:77:32:55:80:65:7e:0b:ca:08:5b:87: 03:da:f6:47:48:2f:87:88:ac:6e:0d:c9:9e:9d:83:06:85:4e: dc:d5:7b:48:0a:fa:93:ca:8c:21:17:37:35:03:36:d3:9f:8d: bc:34:e2:61:ec:47:b9:68:2f:8f:dd:cc:ec:7f:35:e4:53:27: 69:a8:bb:38:27:97:df:a5:c0:82:da:b1:80:af:53:cb:cf:b2: 18:08:cc:cb:4d:44:fd:e3:bd:a7:5f:91:e7:53:d1:de:31:de: 88:7f:56:0c:48:0b:29:a2:d4:84:2e:e5:c2:d8:16:2b:44:68: 36:98:e8:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjslqDEKiH20aKGqcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk Y2RkOWQ2NjYtNmU2Yy00OGEyLTgxMTYtZjE5MWQwZjE1YzlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFfa8EhWbW5gkTNTAK2l5cQt88KHMP8G1jvN i3gAQ9DwSF1GTEg0K+7dMYU7Abdb0PFWA6ZDST6TK1qk8Dt3F3Oy5fjNPRNiR8lA REbyaFRIiaYM2tYUVBqaN/00ksxiOQ8SxM2JG7p7pduGwEtCztMJGTecMIhJp0oQ 4a2i10B2bN6BiQKFnVm0HhKk+9YdfyVFE6KK4P8NNqGy5/dy2CMu/xpm6iUVOLu2 UzkYalFiioRwFcU/ks7a+H/zKCNY3qOIHgyVE1i2EHh8utlH7htsjKT61pP6hKNT joo7Ky7G66T0cDmY6W7ajrrc7hZQNGQJ3Bgr/Ce9AHbxj+E8uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAQTiLxVHKMUnSt33VLDEEV9buNkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMjQyNzA0ZTYtNmFhMC0z ZjcxLWE1NTAtZjkyODc1NDE4ODY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqTuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG7gCm7AfdFnojm2jcpvDkfn5p31LQnUDJ0MJst4b7xbxC/kURFkS7uJ QvBG57nHMtRUmdHxbNgvQL6K7uDRtLJbuOkOaJKLuYv/jIZGbWvXOADgGWvv+g+6 a1mG50alMf3fYihuDTvHJb4h72lbKk69PJ+K5pI8eVQT+jAylfdQAjioL653MlWA ZX4LyghbhwPa9kdIL4eIrG4NyZ6dgwaFTtzVe0gK+pPKjCEXNzUDNtOfjbw04mHs R7loL4/dzOx/NeRTJ2mouzgnl9+lwILasYCvU8vPshgIzMtNRP3jvadfkedT0d4x 3oh/VgxICymi1IQu5cLYFitEaDaY6Gw= -----END CERTIFICATE-----Generated at Fri Apr 11 00:19:32 2025 by rpki-client