$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/442a0666-40c5-3d37-ba95-519f9f3605ff.roa File: 442a0666-40c5-3d37-ba95-519f9f3605ff.roa (raw, json) Hash identifier: Oh9NaZuU3McMC/vmPPgOZ/NEPS1A9lX2/KBuiN4ZNJY= Subject key identifier: F0:71:DA:C7:89:C4:F7:8F:28:3C:CA:F5:6F:EE:55:1C:E9:A6:27:B6 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285849CBCFA237651EF9599FDB2840 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/442a0666-40c5-3d37-ba95-519f9f3605ff.roa Signing time: Fri 09 May 2025 13:01:00 +0000 ROA not before: Fri 09 May 2025 13:01:00 +0000 ROA not after: Thu 07 Aug 2025 13:01:00 +0000 asID: 203 IP address blocks: 206.164.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cb:cf:a2:37:65:1e:f9:59:9f:db:28:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: May 9 13:01:00 2025 GMT Not After : Aug 7 13:01:00 2025 GMT Subject: CN=b97dd43a-bca8-4e10-a8e7-81be82b42825 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:4b:45:8a:31:1b:3f:25:11:52:bc:63:70:fc: 84:a4:d5:78:7d:f1:2b:13:8a:0e:a4:74:c4:b2:14: b7:43:9d:29:4e:40:23:cd:d5:67:d5:1c:3a:0e:74: 20:b3:b6:69:0d:44:3b:e6:da:97:ac:b4:ee:c0:9e: e7:99:bf:0c:f2:81:ac:cc:39:25:fa:41:20:f8:95: 1e:9e:36:b3:45:e9:9d:e7:e4:47:05:9e:e4:7a:85: 69:04:fb:87:f5:7b:05:28:0e:c5:78:05:79:dd:5c: cc:96:c8:1d:2c:94:26:bf:ad:a5:d2:b6:a2:11:17: e0:83:ef:bc:9e:68:11:3c:ed:c3:07:bc:10:dd:01: a1:e9:e4:07:25:e5:0d:e1:c1:0e:56:26:b4:01:cd: c5:f1:6a:d6:59:f8:37:cb:29:08:a4:e5:4c:e4:41: fc:81:ce:be:db:54:24:58:bf:84:f7:2f:03:f6:e2: 2f:34:95:21:97:90:b8:c6:20:bb:6f:b0:9b:05:8c: eb:97:1c:1d:b8:38:54:3f:88:17:1c:ff:61:d2:ea: 45:8c:29:65:df:b8:e7:6e:ce:3b:30:af:14:c1:02: f9:20:63:10:c3:15:fa:58:f3:87:f9:01:d3:10:52: b3:83:35:10:45:7d:f1:16:c2:7c:55:b1:d3:1a:33: 0a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:71:DA:C7:89:C4:F7:8F:28:3C:CA:F5:6F:EE:55:1C:E9:A6:27:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/442a0666-40c5-3d37-ba95-519f9f3605ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 206.164.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:ba:a7:9f:6d:0a:e9:a5:8d:ae:a2:27:5a:f5:54:1a:4a:e6: 08:8a:ed:ec:c3:20:f2:f7:79:6b:75:7a:05:cf:5b:b3:45:76: e0:8e:04:f5:fc:5c:73:3a:b0:79:0c:84:44:8c:d0:9d:dd:4b: f0:21:2c:ec:47:6e:1e:94:cd:0d:6d:88:10:07:5d:dc:9d:b3: c3:9a:a0:04:59:4e:99:83:13:12:87:08:de:60:42:50:fd:5c: b2:ff:98:f7:40:a9:ff:ec:c7:eb:fb:76:fb:2e:2b:2b:ea:fe: 8d:ba:5d:95:60:90:e1:b9:93:64:4d:31:a7:5d:15:3e:70:9c: 89:97:45:14:96:44:98:5e:a9:5f:3a:e3:80:65:d5:87:f1:bf: 0d:99:bf:6b:6b:42:90:f0:e1:ac:65:ed:34:7a:31:89:e9:54: b9:54:da:4e:fb:13:89:ce:9f:17:03:e6:2a:00:82:59:2a:67: 70:eb:6c:e0:08:86:67:0c:3d:ad:82:db:9c:ad:69:91:a4:dc: 5c:ab:bf:19:2c:59:5b:08:b2:3c:83:f3:d4:64:a7:c6:93:01: c1:f7:78:6f:25:aa:c1:62:45:d7:56:46:1f:a8:0c:de:21:5b: d8:dc:06:46:3c:2c:a1:3c:42:9b:77:a3:9d:01:9b:73:fe:34: 67:3d:a3:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnLz6I3ZR75WZ/bKEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDUwOTEzMDEwMFoXDTI1MDgwNzEzMDEwMFowLzEtMCsGA1UEAxMk Yjk3ZGQ0M2EtYmNhOC00ZTEwLWE4ZTctODFiZTgyYjQyODI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUtFijEbPyURUrxjcPyEpNV4ffErE4oOpHTE shS3Q50pTkAjzdVn1Rw6DnQgs7ZpDUQ75tqXrLTuwJ7nmb8M8oGszDkl+kEg+JUe njazRemd5+RHBZ7keoVpBPuH9XsFKA7FeAV53VzMlsgdLJQmv62l0raiERfgg++8 nmgRPO3DB7wQ3QGh6eQHJeUN4cEOVia0Ac3F8WrWWfg3yykIpOVM5EH8gc6+21Qk WL+E9y8D9uIvNJUhl5C4xiC7b7CbBYzrlxwduDhUP4gXHP9h0upFjCll37jnbs47 MK8UwQL5IGMQwxX6WPOH+QHTEFKzgzUQRX3xFsJ8VbHTGjMKSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPBx2seJxPePKDzK9W/uVRzppie2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNDQyYTA2NjYtNDBjNS0z ZDM3LWJhOTUtNTE5ZjlmMzYwNWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzqTYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGi6p59tCumlja6iJ1r1VBpK5giK7ezDIPL3eWt1egXPW7NFduCOBPX8 XHM6sHkMhESM0J3dS/AhLOxHbh6UzQ1tiBAHXdyds8OaoARZTpmDExKHCN5gQlD9 XLL/mPdAqf/sx+v7dvsuKyvq/o26XZVgkOG5k2RNMaddFT5wnImXRRSWRJheqV86 44Bl1Yfxvw2Zv2trQpDw4axl7TR6MYnpVLlU2k77E4nOnxcD5ioAglkqZ3DrbOAI hmcMPa2C25ytaZGk3FyrvxksWVsIsjyD89Rkp8aTAcH3eG8lqsFiRddWRh+oDN4h W9jcBkY8LKE8Qpt3o50Bm3P+NGc9o+4= -----END CERTIFICATE-----Generated at Fri Jun 6 12:32:34 2025 by rpki-client