$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2927ec75-e0f7-3d99-8770-bf93eaad6710.roa File: 2927ec75-e0f7-3d99-8770-bf93eaad6710.roa (raw, json) Hash identifier: poB5/ZVE8l1Aul+8ybG7O9WiMJhVQyh3CHNL6B1KdHo= Subject key identifier: 8C:90:10:BB:77:81:45:DE:B9:FD:38:4E:03:89:FD:94:9A:97:FF:BA Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285848EC96A622ED6EBD86DC64DD80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2927ec75-e0f7-3d99-8770-bf93eaad6710.roa Signing time: Tue 18 Feb 2025 14:00:52 +0000 ROA not before: Tue 18 Feb 2025 14:00:52 +0000 ROA not after: Mon 19 May 2025 13:00:52 +0000 asID: 3356 IP address blocks: 206.164.180.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ec:96:a6:22:ed:6e:bd:86:dc:64:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Feb 18 14:00:52 2025 GMT Not After : May 19 13:00:52 2025 GMT Subject: CN=588de9ab-8c3f-4dac-8848-4a7aaeeec88b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:b1:06:84:45:fe:6f:56:57:4b:2e:cd:a6:ac: 08:04:c9:b7:c6:90:42:f5:c4:8d:76:5a:18:d9:61: bd:fc:bd:62:20:12:1c:ce:ee:43:00:4e:96:5b:22: 51:a4:b7:6f:b9:54:6f:ad:52:26:8f:86:cc:f0:03: 94:4e:c3:89:90:3c:5c:00:cc:7c:87:b3:da:b9:8e: 16:a1:07:a6:c9:ba:bd:42:9e:16:5d:58:8c:59:99: 09:8c:18:76:d5:35:1b:55:1d:cb:8b:75:60:7b:2b: cf:8c:84:06:7d:b5:f7:d3:42:6e:c4:fb:8a:24:d4: b5:2d:39:d7:9a:d1:10:9f:0f:44:fa:e2:46:63:11: 09:1c:8a:4b:4e:26:41:5a:00:60:39:b9:ac:46:08: 9d:bb:89:af:03:eb:f3:e5:cd:a4:28:ab:43:70:33: 2a:33:20:42:13:89:40:f4:b0:e0:10:67:cd:63:2c: 00:75:c3:84:9b:ac:06:41:c8:68:2c:a5:08:a3:7c: 78:a1:54:1a:e2:08:d5:c5:73:67:29:02:0e:59:59: 45:8a:f8:5e:3e:88:4c:45:c6:73:69:b9:cc:e0:79: 82:af:3d:4a:d0:b6:e3:8d:08:81:29:36:bb:79:5b: 89:72:5a:25:35:70:04:95:0a:78:9e:aa:56:6d:7f: df:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:90:10:BB:77:81:45:DE:B9:FD:38:4E:03:89:FD:94:9A:97:FF:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2927ec75-e0f7-3d99-8770-bf93eaad6710.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 206.164.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:3c:41:e0:bb:c5:07:80:2a:aa:fc:af:9b:c5:b1:10:43:10: 8c:c6:ca:c4:48:b5:80:af:ad:24:ea:83:9d:cc:0c:49:4b:3d: 4b:04:b6:27:2c:91:4c:91:3d:1b:ab:b3:9e:56:93:b5:40:76: 47:cf:5d:0b:19:c2:33:9a:97:02:d0:f3:9c:16:f6:5f:a8:46: 19:8b:ce:db:36:97:68:2d:65:25:4b:47:34:6f:a5:e8:55:d1: 9e:72:33:a3:0d:3c:9d:78:b4:f9:46:db:06:07:5e:c8:07:62: 25:ef:28:af:59:12:59:35:dc:48:0a:f3:a4:39:f1:0c:d6:1a: 5b:3e:02:0e:42:6d:51:02:4c:e1:17:33:cf:ad:2b:dc:45:3f: 86:6a:97:6e:2a:ec:39:0b:42:ff:e0:4b:ea:41:51:16:3e:65: b3:b3:23:2b:1c:88:ea:cf:58:52:d2:7e:1f:27:c8:e3:d0:d8: b5:39:1f:c9:b3:ed:cb:cb:d4:42:73:5b:6a:f3:c7:d1:d7:3a: a5:78:02:5c:79:83:3b:26:57:36:b9:a5:3f:9a:e1:23:3f:33: b1:9d:3b:1e:5e:69:7a:ec:8d:22:af:cd:96:9a:75:45:df:87: 48:2e:a0:8a:63:78:2d:69:c5:ca:b0:e7:db:d5:1f:57:3c:f2: e6:81:f2:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjslqYi7W69htxk3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk NTg4ZGU5YWItOGMzZi00ZGFjLTg4NDgtNGE3YWFlZWVjODhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8LEGhEX+b1ZXSy7NpqwIBMm3xpBC9cSNdloY 2WG9/L1iIBIczu5DAE6WWyJRpLdvuVRvrVImj4bM8AOUTsOJkDxcAMx8h7PauY4W oQemybq9Qp4WXViMWZkJjBh21TUbVR3Li3VgeyvPjIQGfbX300JuxPuKJNS1LTnX mtEQnw9E+uJGYxEJHIpLTiZBWgBgObmsRgidu4mvA+vz5c2kKKtDcDMqMyBCE4lA 9LDgEGfNYywAdcOEm6wGQchoLKUIo3x4oVQa4gjVxXNnKQIOWVlFivhePohMRcZz abnM4HmCrz1K0LbjjQiBKTa7eVuJclolNXAElQp4nqpWbX/fXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIyQELt3gUXeuf04TgOJ/ZSal/+6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMjkyN2VjNzUtZTBmNy0z ZDk5LTg3NzAtYmY5M2VhYWQ2NzEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzqS0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJk8QeC7xQeAKqr8r5vFsRBDEIzGysRItYCvrSTqg53MDElLPUsEtics kUyRPRurs55Wk7VAdkfPXQsZwjOalwLQ85wW9l+oRhmLzts2l2gtZSVLRzRvpehV 0Z5yM6MNPJ14tPlG2wYHXsgHYiXvKK9ZElk13EgK86Q58QzWGls+Ag5CbVECTOEX M8+tK9xFP4Zql24q7DkLQv/gS+pBURY+ZbOzIysciOrPWFLSfh8nyOPQ2LU5H8mz 7cvL1EJzW2rzx9HXOqV4Alx5gzsmVza5pT+a4SM/M7GdOx5eaXrsjSKvzZaadUXf h0guoIpjeC1pxcqw59vVH1c88uaB8io= -----END CERTIFICATE-----Generated at Fri Mar 14 10:16:51 2025 by rpki-client