$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3dad62c5-50b1-3f51-ab0c-8ffbda531872.roa File: 3dad62c5-50b1-3f51-ab0c-8ffbda531872.roa (raw, json) Hash identifier: vfJ2vUiWo5JT1iA1LGeJyxjpjLQGMoc3FGWxfRiNNYs= Subject key identifier: 38:15:4F:73:97:E7:82:1C:DC:B7:4A:36:74:C7:60:2D:49:0E:68:60 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858486695BEFFD3AF1419DB46CAE0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3dad62c5-50b1-3f51-ab0c-8ffbda531872.roa Signing time: Wed 01 Jan 2025 14:00:53 +0000 ROA not before: Wed 01 Jan 2025 14:00:53 +0000 ROA not after: Tue 01 Apr 2025 13:00:53 +0000 asID: 203 IP address blocks: 206.164.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:66:95:be:ff:d3:af:14:19:db:46:ca:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jan 1 14:00:53 2025 GMT Not After : Apr 1 13:00:53 2025 GMT Subject: CN=0c246c9a-0305-40b9-80e5-b9672697869c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:9c:30:bd:36:a3:eb:c7:5c:4b:dc:42:06:5e: 83:e2:d7:fb:24:8b:d6:aa:ee:b3:c3:df:e4:88:c5: 15:81:cd:ec:dc:e0:7f:a2:5b:e5:9a:0d:15:50:aa: 19:fe:13:4d:4f:54:f3:5c:51:a9:91:ba:eb:fb:23: 49:08:05:47:ce:6d:9d:47:8f:8a:8e:10:58:c3:c3: 15:41:7b:1b:75:b2:5b:3b:6e:78:e0:89:cf:88:eb: 51:67:ab:4d:ad:0e:17:93:08:48:a1:9d:28:b0:ee: 6f:56:a5:20:7b:ac:9d:b9:5c:3d:81:78:72:6d:04: c3:c6:97:1e:28:96:72:59:3f:4a:af:bf:33:4d:6d: 42:0d:fc:85:69:a7:b7:7c:ca:88:b8:f0:b5:61:dc: 86:81:5d:6c:ca:40:79:3a:c5:0e:07:9e:87:2b:df: 3a:37:a2:a5:b4:d4:9b:85:c2:df:f9:f2:71:aa:c8: c3:4b:c0:15:b5:78:a4:00:dc:16:1f:ef:c0:f4:34: 0d:1a:b8:0d:ac:ac:2b:a0:23:04:f7:40:3c:e3:2a: 8d:6b:2d:fc:ad:fc:a7:75:4c:94:1c:7c:6d:6b:1c: cc:c4:0f:27:33:fb:49:6c:7f:70:70:cb:16:25:c9: 22:33:a5:9d:6e:80:fa:a8:1b:39:af:e4:94:8e:09: 38:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:15:4F:73:97:E7:82:1C:DC:B7:4A:36:74:C7:60:2D:49:0E:68:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3dad62c5-50b1-3f51-ab0c-8ffbda531872.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 206.164.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:00:0f:76:98:e7:32:56:73:57:ed:69:50:73:e8:d6:f9:e3: 75:df:c5:10:57:00:02:ff:d3:05:59:bd:ae:63:9c:17:b6:0d: 99:ff:3b:38:ef:5f:00:6d:27:d6:4c:ee:a7:94:38:3b:98:0e: 6c:d6:af:e9:8a:f4:bf:a8:b2:14:79:5f:ed:ad:06:33:b0:62: 41:a9:ef:52:e1:d6:0f:d6:5d:83:18:77:32:1b:93:5f:e2:3c: 98:83:20:13:c1:54:80:8a:b3:4c:90:ef:33:c6:dd:f8:c6:3e: 58:63:8c:82:e8:82:ec:e4:07:37:23:b5:4a:6a:d7:e4:6e:60: af:02:78:f4:72:50:73:e1:30:c1:cb:d5:36:ef:64:18:c8:47: 3e:8f:f1:ff:f1:4f:7b:f3:a4:0f:84:75:a1:71:af:71:4f:0f: 05:98:77:81:e2:30:55:63:ce:37:68:ce:ff:96:57:04:25:c2: 37:2f:13:dd:24:e9:22:c7:21:c8:a7:cb:33:b9:fe:24:d3:c0: 02:fd:6f:30:8e:d9:46:07:0f:fc:7b:f9:14:59:e2:cd:68:d5: 28:de:f6:40:db:c4:b2:92:dd:a5:db:97:d2:10:98:2c:38:5e: 27:30:a4:c0:79:94:f7:38:c0:06:78:e5:29:23:60:c8:da:bd: 31:83:5a:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhmlb7/068UGdtGyuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDEwMTE0MDA1M1oXDTI1MDQwMTEzMDA1M1owLzEtMCsGA1UEAxMk MGMyNDZjOWEtMDMwNS00MGI5LTgwZTUtYjk2NzI2OTc4NjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5wwvTaj68dcS9xCBl6D4tf7JIvWqu6zw9/k iMUVgc3s3OB/olvlmg0VUKoZ/hNNT1TzXFGpkbrr+yNJCAVHzm2dR4+KjhBYw8MV QXsbdbJbO2544InPiOtRZ6tNrQ4XkwhIoZ0osO5vVqUge6yduVw9gXhybQTDxpce KJZyWT9Kr78zTW1CDfyFaae3fMqIuPC1YdyGgV1sykB5OsUOB56HK986N6KltNSb hcLf+fJxqsjDS8AVtXikANwWH+/A9DQNGrgNrKwroCME90A84yqNay38rfyndUyU HHxtaxzMxA8nM/tJbH9wcMsWJckiM6WdboD6qBs5r+SUjgk4DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDgVT3OX54Ic3LdKNnTHYC1JDmhgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvM2RhZDYyYzUtNTBiMS0z ZjUxLWFiMGMtOGZmYmRhNTMxODcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzqT4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGEAD3aY5zJWc1ftaVBz6Nb543XfxRBXAAL/0wVZva5jnBe2DZn/Ozjv XwBtJ9ZM7qeUODuYDmzWr+mK9L+oshR5X+2tBjOwYkGp71Lh1g/WXYMYdzIbk1/i PJiDIBPBVICKs0yQ7zPG3fjGPlhjjILoguzkBzcjtUpq1+RuYK8CePRyUHPhMMHL 1TbvZBjIRz6P8f/xT3vzpA+EdaFxr3FPDwWYd4HiMFVjzjdozv+WVwQlwjcvE90k 6SLHIcinyzO5/iTTwAL9bzCO2UYHD/x7+RRZ4s1o1Sje9kDbxLKS3aXbl9IQmCw4 XicwpMB5lPc4wAZ45SkjYMjavTGDWho= -----END CERTIFICATE-----Generated at Sun Feb 16 15:30:30 2025 by rpki-client