$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4dfb17dc-a26d-3d49-938a-5666d92a2b4f.roa File: 4dfb17dc-a26d-3d49-938a-5666d92a2b4f.roa (raw, json) Hash identifier: sJIFG/FIEsarMVzOhHPgijBsAWaKTH7h7XIwzC7Mbkg= Subject key identifier: 99:B6:44:8D:2B:2E:5A:80:51:B8:64:0C:CD:08:7F:A6:74:79:A3:2B Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285848AAFB5FFD5059F4F9AC1B3680 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4dfb17dc-a26d-3d49-938a-5666d92a2b4f.roa Signing time: Sun 26 Jan 2025 02:00:38 +0000 ROA not before: Sun 26 Jan 2025 02:00:38 +0000 ROA not after: Sat 26 Apr 2025 01:00:38 +0000 asID: 3356 IP address blocks: 204.104.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:aa:fb:5f:fd:50:59:f4:f9:ac:1b:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jan 26 02:00:38 2025 GMT Not After : Apr 26 01:00:38 2025 GMT Subject: CN=1809ff39-0a26-4ce0-8cc2-6d0c2ef00e0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:32:bd:ab:89:ef:64:16:3b:77:b7:1a:0d:d8: a1:9f:b7:92:2d:57:d5:12:7b:d2:c8:f6:92:1f:21: 54:01:65:f1:08:ef:07:bc:5a:b1:1b:26:98:21:93: ee:52:73:b5:c3:c6:c2:b5:23:b8:9e:d7:68:0a:f7: 6e:96:8c:89:9c:72:de:67:7e:0c:b1:c6:46:d3:48: aa:3b:5d:36:2c:ec:d0:5d:0c:45:a9:9a:44:12:d5: 7d:73:dd:bf:cc:ce:86:ab:7e:f4:ac:f1:ed:cf:ba: e0:bb:8b:c6:df:57:43:fd:bb:af:44:84:33:d4:8d: 0d:21:b1:d7:37:ba:46:89:67:5a:7f:86:68:c8:68: 40:5c:55:7a:4f:7f:13:cc:e9:cc:08:db:df:61:73: 31:c4:01:97:58:4b:c0:63:6b:47:12:a4:7c:bd:99: 09:ee:42:4b:b9:61:35:a3:eb:a3:99:17:a8:bb:af: 9b:0b:c9:6a:09:04:83:ad:40:95:98:65:65:7e:89: f8:e2:41:63:4d:0f:41:a3:97:4c:9b:19:19:1c:09: 64:57:06:3e:de:14:4d:07:70:28:ef:d4:c2:d3:26: 43:59:0e:b3:0c:1d:0d:c8:d7:52:f2:d7:9c:56:78: 83:5f:ae:9c:cd:c8:ff:36:74:aa:9d:01:6c:6e:0c: a3:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:B6:44:8D:2B:2E:5A:80:51:B8:64:0C:CD:08:7F:A6:74:79:A3:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4dfb17dc-a26d-3d49-938a-5666d92a2b4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 204.104.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:47:d4:9b:52:68:fb:44:28:c3:de:c2:22:d5:8c:51:6c:d7: da:f1:8b:bd:b4:e1:71:db:79:8c:41:be:3d:19:a9:5f:83:3c: 60:77:5f:be:83:f1:b2:48:10:da:0d:e9:42:28:00:5e:4a:a1: 43:49:46:48:8f:e5:cf:c8:cd:61:34:b4:a5:f6:eb:05:d4:d5: 21:66:b2:67:2d:21:0a:d1:52:18:58:1c:5c:a0:ce:f1:be:75: 35:60:c9:3c:1d:87:86:3a:1c:22:ff:1a:af:a0:2d:be:f8:53: d2:8a:83:84:b8:3d:d9:84:9e:58:6a:52:99:45:71:ed:f8:3c: 45:36:c4:f5:d5:e1:4a:2d:7a:8e:11:7f:f8:4a:0f:da:29:36: 6b:0c:6f:15:28:cd:15:f3:90:d1:80:39:67:df:94:70:2e:75: 57:98:95:22:78:6c:50:9e:3d:2e:fc:fc:8f:bb:a3:f0:f6:af: 11:fe:10:08:f2:e4:4d:6f:c4:f9:39:98:1c:04:84:02:3a:62: 67:58:59:64:18:56:e5:f5:82:60:0d:a8:fb:ba:83:2b:0f:fa: 32:ec:99:a7:75:fd:0b:88:00:cc:0f:48:8e:f3:c9:bb:78:cd: 98:43:10:37:31:c1:d2:8f:d0:90:9a:6a:7b:97:6c:49:fa:c7: f0:b8:01:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiq+1/9UFn0+awbNoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDEyNjAyMDAzOFoXDTI1MDQyNjAxMDAzOFowLzEtMCsGA1UEAxMk MTgwOWZmMzktMGEyNi00Y2UwLThjYzItNmQwYzJlZjAwZTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzK9q4nvZBY7d7caDdihn7eSLVfVEnvSyPaS HyFUAWXxCO8HvFqxGyaYIZPuUnO1w8bCtSO4ntdoCvduloyJnHLeZ34MscZG00iq O102LOzQXQxFqZpEEtV9c92/zM6Gq370rPHtz7rgu4vG31dD/buvRIQz1I0NIbHX N7pGiWdaf4ZoyGhAXFV6T38TzOnMCNvfYXMxxAGXWEvAY2tHEqR8vZkJ7kJLuWE1 o+ujmReou6+bC8lqCQSDrUCVmGVlfon44kFjTQ9Bo5dMmxkZHAlkVwY+3hRNB3Ao 79TC0yZDWQ6zDB0NyNdS8tecVniDX66czcj/NnSqnQFsbgyjzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJm2RI0rLlqAUbhkDM0If6Z0eaMrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNGRmYjE3ZGMtYTI2ZC0z ZDQ5LTkzOGEtNTY2NmQ5MmEyYjRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGgQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAdH1JtSaPtEKMPewiLVjFFs19rxi7204XHbeYxBvj0ZqV+DPGB3X76D 8bJIENoN6UIoAF5KoUNJRkiP5c/IzWE0tKX26wXU1SFmsmctIQrRUhhYHFygzvG+ dTVgyTwdh4Y6HCL/Gq+gLb74U9KKg4S4PdmEnlhqUplFce34PEU2xPXV4Uoteo4R f/hKD9opNmsMbxUozRXzkNGAOWfflHAudVeYlSJ4bFCePS78/I+7o/D2rxH+EAjy 5E1vxPk5mBwEhAI6YmdYWWQYVuX1gmANqPu6gysP+jLsmad1/QuIAMwPSI7zybt4 zZhDEDcxwdKP0JCaanuXbEn6x/C4AYI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:10:19 2025 by rpki-client