$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4dd0e681-9788-3d8f-b319-7b0dab1f4c76.roa File: 4dd0e681-9788-3d8f-b319-7b0dab1f4c76.roa (raw, json) Hash identifier: 4PKPEChBZkLd1uYH0ID6MBmbGRzmK1n6QQ8dtuUTBP0= Subject key identifier: 57:68:20:DF:45:DF:71:F7:39:D6:B9:04:12:A0:D5:D7:D3:63:03:78 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858494469470DF13FE63588381500 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4dd0e681-9788-3d8f-b319-7b0dab1f4c76.roa Signing time: Sat 22 Mar 2025 01:00:40 +0000 ROA not before: Sat 22 Mar 2025 01:00:40 +0000 ROA not after: Fri 20 Jun 2025 01:00:40 +0000 asID: 202 IP address blocks: 206.164.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:44:69:47:0d:f1:3f:e6:35:88:38:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 22 01:00:40 2025 GMT Not After : Jun 20 01:00:40 2025 GMT Subject: CN=03572b89-7883-446a-bfdc-fced9eed016b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:02:c2:ca:a4:0e:2e:8e:62:e9:80:5e:9d:df: f7:b8:a1:db:f7:36:1b:51:bf:fc:58:6d:ef:62:9f: 41:44:44:7c:3f:fe:f5:56:63:23:4e:9f:f1:00:1e: 53:e1:2f:ca:d3:ab:bc:82:e6:b9:13:52:47:cc:05: 34:88:b6:0d:19:f2:d4:1c:e6:6f:d7:50:49:d2:94: 7a:0a:0a:a9:ae:52:6d:45:e7:8f:95:bd:02:d1:df: 6e:f6:ed:7e:15:a1:ac:fc:c1:97:8d:25:dc:13:e2: 0b:e1:45:bd:0f:bd:28:22:8a:b5:39:41:03:f6:9d: 3b:02:a4:97:b8:51:ed:55:86:cc:ba:0f:5a:95:91: a6:64:a4:79:78:e8:f5:9f:40:db:17:aa:46:57:95: 89:0c:c0:85:ed:0a:22:b3:d1:ab:eb:e1:b3:c0:e9: 02:c4:e4:1f:46:dd:73:01:ff:31:37:92:c3:cd:00: 82:ca:4d:f2:a6:16:0f:6f:38:93:cc:e1:58:ec:20: 7a:45:2b:12:56:e2:38:4e:21:e6:08:61:c3:dc:7c: fc:1c:cb:fe:5b:b8:1a:60:95:5b:6e:d8:ab:a3:24: 7f:2c:b1:bf:f4:4a:e3:c8:15:78:8d:99:88:55:c5: ae:ad:d9:75:78:72:50:cd:97:89:51:cd:84:73:53: f5:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:68:20:DF:45:DF:71:F7:39:D6:B9:04:12:A0:D5:D7:D3:63:03:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4dd0e681-9788-3d8f-b319-7b0dab1f4c76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 206.164.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:11:b5:0b:65:c9:03:5f:98:bb:d8:ca:50:89:6a:dc:68:7d: 5f:78:6d:12:b3:18:37:5e:ae:2f:99:57:8d:79:4e:46:01:77: 25:34:7d:cb:13:d0:06:c4:a1:73:3d:fa:55:e4:41:bf:56:4d: 2b:3a:cd:4e:9a:51:49:ba:3f:ac:8a:14:e3:9b:a9:85:ff:c9: 44:aa:1e:f6:8e:65:84:e8:f5:31:a0:6c:66:2a:f4:b8:61:ac: 58:43:6b:ef:a9:f1:a0:af:39:e8:25:3a:29:3e:d2:31:ec:22: 71:23:c1:a2:75:45:5e:ef:a9:d6:e5:15:55:c6:70:a1:45:1e: b7:d4:94:0f:cd:09:94:02:9b:e7:a1:1a:e1:4a:a4:28:50:43: c2:0d:97:37:7c:3d:58:27:59:01:35:35:9f:e5:ef:97:98:07: c2:f8:9f:e7:1d:88:17:0e:9e:c3:5c:a6:fa:1c:46:3f:38:95: f0:54:06:94:77:32:99:ed:0d:9e:35:d1:a3:11:6b:2b:3c:2f: 18:e2:7e:e7:64:44:08:65:06:a8:52:c6:5d:5e:a8:d2:94:b1: a9:d9:c2:17:ae:48:8c:3e:c3:99:52:98:50:d2:bf:fa:28:44: d7:ca:37:de:b2:99:76:d9:9d:8b:c2:0e:79:25:68:6f:3f:29: 46:14:71:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElEaUcN8T/mNYg4FQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk MDM1NzJiODktNzg4My00NDZhLWJmZGMtZmNlZDllZWQwMTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiALCyqQOLo5i6YBend/3uKHb9zYbUb/8WG3v Yp9BRER8P/71VmMjTp/xAB5T4S/K06u8gua5E1JHzAU0iLYNGfLUHOZv11BJ0pR6 CgqprlJtReePlb0C0d9u9u1+FaGs/MGXjSXcE+IL4UW9D70oIoq1OUED9p07AqSX uFHtVYbMug9alZGmZKR5eOj1n0DbF6pGV5WJDMCF7Qois9Gr6+GzwOkCxOQfRt1z Af8xN5LDzQCCyk3yphYPbziTzOFY7CB6RSsSVuI4TiHmCGHD3Hz8HMv+W7gaYJVb btiroyR/LLG/9ErjyBV4jZmIVcWurdl1eHJQzZeJUc2Ec1P15wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFdoIN9F33H3Oda5BBKg1dfTYwN4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNGRkMGU2ODEtOTc4OC0z ZDhmLWIzMTktN2IwZGFiMWY0Yzc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqSKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE4RtQtlyQNfmLvYylCJatxofV94bRKzGDderi+ZV415TkYBdyU0fcsT 0AbEoXM9+lXkQb9WTSs6zU6aUUm6P6yKFOObqYX/yUSqHvaOZYTo9TGgbGYq9Lhh rFhDa++p8aCvOeglOik+0jHsInEjwaJ1RV7vqdblFVXGcKFFHrfUlA/NCZQCm+eh GuFKpChQQ8INlzd8PVgnWQE1NZ/l75eYB8L4n+cdiBcOnsNcpvocRj84lfBUBpR3 MpntDZ410aMRays8LxjifudkRAhlBqhSxl1eqNKUsanZwheuSIw+w5lSmFDSv/oo RNfKN96ymXbZnYvCDnklaG8/KUYUccc= -----END CERTIFICATE-----Generated at Sat Apr 5 16:47:59 2025 by rpki-client