$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4f91def5-8fb2-3eca-b2b6-f02c311b1869.roa File: 4f91def5-8fb2-3eca-b2b6-f02c311b1869.roa (raw, json) Hash identifier: DNoUptRNzIDDj1WrX+bYrpOH8Kmt85QEqFW248SUpGc= Subject key identifier: 07:21:5B:37:EC:35:BB:66:DC:58:19:6B:AA:B3:EC:37:A6:AA:BE:5F Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858491246CA4AE3DD725E7DF29380 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4f91def5-8fb2-3eca-b2b6-f02c311b1869.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 202 IP address blocks: 204.105.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:ca:4a:e3:dd:72:5e:7d:f2:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=cdbd992a-5877-4b18-b9b2-923c95781218 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ab:6c:9f:80:10:ad:61:a9:c0:94:4b:02:80: c9:3e:0e:20:ed:42:08:39:89:eb:7d:c4:54:65:c4: be:e9:85:fd:9f:8b:5e:93:7b:fd:05:eb:31:50:f9: be:2a:04:a3:2f:d3:41:4f:a6:05:ec:40:5c:3d:85: 2e:37:b5:b5:2e:73:39:66:2c:3b:6c:ed:eb:70:ef: 61:e0:f5:bb:b5:e9:67:e0:16:b3:82:f2:ae:30:e6: 89:17:96:69:69:d5:3c:4b:a9:36:c2:c8:e6:aa:7f: 5f:c0:53:d0:41:5c:cb:bb:f4:91:eb:3d:e4:ed:1a: 52:50:4e:e0:d4:c6:1d:99:1f:56:ca:1f:ab:ea:e7: 97:a3:e3:85:8d:71:96:89:be:a2:5d:72:d1:81:c8: 65:e4:76:06:ff:e2:4b:66:5c:70:16:b7:0c:9f:03: 07:9f:13:c6:0e:f1:2a:4d:d6:4a:e3:50:be:55:a4: ae:cf:23:7d:3d:f9:10:9f:4c:ca:fb:a2:76:07:54: b5:a8:e0:49:26:0c:8e:4c:2e:7a:b9:34:81:47:df: 1f:1a:c2:20:24:bc:7b:6f:c8:ed:05:44:43:72:01: 02:95:a8:10:94:98:9f:c2:8a:59:e2:09:e3:4a:d1: 50:09:a3:7b:cc:1a:4e:65:9a:99:df:ac:d0:c5:ed: b4:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:21:5B:37:EC:35:BB:66:DC:58:19:6B:AA:B3:EC:37:A6:AA:BE:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4f91def5-8fb2-3eca-b2b6-f02c311b1869.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 204.105.118.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:a8:14:14:89:7b:04:9c:62:b2:a4:46:cb:c2:47:e4:4d:31: 9b:b4:4c:79:99:3e:ba:4c:88:ac:3b:88:1a:9a:55:8b:9a:b0: a5:11:0d:0d:57:ac:9f:a2:8e:9f:a4:de:0c:29:fb:69:0e:bf: e5:d0:5d:cc:54:b4:88:9f:86:43:c3:86:9e:79:1e:76:be:e9: 20:ed:fe:c0:c6:16:54:a3:bb:ef:02:1c:9c:c6:e3:19:2a:21: d3:94:a0:39:37:70:9e:54:02:eb:8b:7c:04:a2:4e:1d:a3:b9: 7c:43:c6:c5:a2:7c:92:ea:78:6a:e0:c8:dd:da:90:10:01:c2: c2:fa:a4:81:10:97:e1:1f:22:0c:18:7c:26:8f:0c:03:b3:23: 53:2f:3e:97:55:35:ee:c6:8a:d8:c5:ea:71:06:fd:3d:01:8c: 09:e8:23:1e:4e:ba:cd:6b:8f:96:61:b8:85:63:f6:65:07:d8: 3f:dd:21:e3:10:ae:25:49:06:f5:f6:2e:76:54:a3:7f:9f:be: 08:ca:73:f8:f0:1e:57:75:b8:2a:fb:75:7a:ee:d0:8e:a8:e7: ca:72:a7:3e:94:bb:74:a5:de:ac:ca:94:cd:6e:d4:3e:17:3b: e7:0b:ad:c5:cd:af:12:64:8c:d2:c1:8a:e2:50:52:be:1d:10: ac:71:90:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRspK491yXn3yk4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk Y2RiZDk5MmEtNTg3Ny00YjE4LWI5YjItOTIzYzk1NzgxMjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAratsn4AQrWGpwJRLAoDJPg4g7UIIOYnrfcRU ZcS+6YX9n4tek3v9BesxUPm+KgSjL9NBT6YF7EBcPYUuN7W1LnM5Ziw7bO3rcO9h 4PW7teln4BazgvKuMOaJF5ZpadU8S6k2wsjmqn9fwFPQQVzLu/SR6z3k7RpSUE7g 1MYdmR9Wyh+r6ueXo+OFjXGWib6iXXLRgchl5HYG/+JLZlxwFrcMnwMHnxPGDvEq TdZK41C+VaSuzyN9PfkQn0zK+6J2B1S1qOBJJgyOTC56uTSBR98fGsIgJLx7b8jt BURDcgEClagQlJifwopZ4gnjStFQCaN7zBpOZZqZ36zQxe200wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAchWzfsNbtm3FgZa6qz7Demqr5fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNGY5MWRlZjUtOGZiMi0z ZWNhLWIyYjYtZjAyYzMxMWIxODY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGl2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJWoFBSJewScYrKkRsvCR+RNMZu0THmZPrpMiKw7iBqaVYuasKURDQ1X rJ+ijp+k3gwp+2kOv+XQXcxUtIifhkPDhp55Hna+6SDt/sDGFlSju+8CHJzG4xkq IdOUoDk3cJ5UAuuLfASiTh2juXxDxsWifJLqeGrgyN3akBABwsL6pIEQl+EfIgwY fCaPDAOzI1MvPpdVNe7GitjF6nEG/T0BjAnoIx5Ous1rj5ZhuIVj9mUH2D/dIeMQ riVJBvX2LnZUo3+fvgjKc/jwHld1uCr7dXru0I6o58pypz6Uu3Sl3qzKlM1u1D4X O+cLrcXNrxJkjNLBiuJQUr4dEKxxkME= -----END CERTIFICATE-----Generated at Fri Mar 14 11:21:37 2025 by rpki-client