$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/668cfb6c-3232-30b8-96de-de01a02876e4.roa File: 668cfb6c-3232-30b8-96de-de01a02876e4.roa (raw, json) Hash identifier: 3WmlwVJsZW6t34SVymM0FaV4pjqLqNP9yl+TFSJs+TE= Subject key identifier: FF:9C:6D:2B:7E:AC:69:C5:55:67:5D:7B:34:4E:31:8A:47:87:CD:03 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858492CAE92CE36B1CCBDBEB97E80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/668cfb6c-3232-30b8-96de-de01a02876e4.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 202 IP address blocks: 15.176.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:ae:92:ce:36:b1:cc:bd:be:b9:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=5b799932-036d-41e5-8f5f-40ee16f0baf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:bc:2e:e9:e9:c9:19:e5:06:ca:3d:26:ff:71: 89:b9:8e:e2:b0:3e:64:ae:d5:ee:11:34:97:bc:d4: 88:5a:4a:a6:1a:62:a5:f7:3c:0a:fb:94:0c:b7:97: 90:e3:4e:02:ff:dd:ec:60:b6:94:93:e8:e4:56:0a: 51:34:28:ed:ef:ec:84:9d:d5:63:c3:28:b1:06:b0: 8a:bf:c7:f6:8e:18:c7:1f:fc:35:42:2c:45:6b:83: ed:52:8d:44:27:52:ba:9e:38:2e:4f:e3:4f:de:30: e2:2a:e1:c5:69:d2:5e:e7:b6:f9:27:43:1d:13:2c: 5a:bd:f1:4e:d2:37:1d:21:3e:76:d5:39:ad:53:62: 8a:98:ed:a2:1f:d9:b8:0b:08:05:9f:c9:58:4c:3a: 33:bb:d8:3c:cc:4a:52:cd:5e:a5:f7:dd:76:14:ec: b0:a0:09:02:15:88:c1:07:43:30:27:25:ee:46:59: b5:5d:ad:0d:e1:80:a6:45:e4:b2:b0:ce:ab:b8:ca: 68:ed:fd:87:87:a0:5c:34:c8:a8:b1:47:3a:61:16: 8e:6a:2a:70:df:b9:cd:a2:5d:c1:15:a9:5c:68:f4: 52:f6:4f:05:78:0f:85:26:c5:7b:06:72:f6:d8:3d: fc:fd:8f:e0:0a:06:0f:36:a2:af:b0:59:f8:37:80: 9a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:9C:6D:2B:7E:AC:69:C5:55:67:5D:7B:34:4E:31:8A:47:87:CD:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/668cfb6c-3232-30b8-96de-de01a02876e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 15.176.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:83:0d:6a:9b:c2:1f:22:82:07:18:7d:85:42:85:bd:75:83: 1b:60:6d:7e:44:a4:4d:bc:c1:dd:d0:c4:82:d7:a3:6c:a2:66: a2:98:94:93:d2:5a:97:95:4f:9e:41:ea:f1:b3:03:2c:c3:70: 88:fd:9f:70:ea:29:c4:13:44:da:7e:1c:bf:99:86:a9:53:b4: 63:fe:9a:4b:83:cf:4f:a1:80:28:f5:fc:30:1b:92:6e:2a:3a: 2e:4a:67:9b:3c:fe:6d:6a:33:a7:a5:12:bb:68:dc:bb:74:3f: fa:3f:8b:12:36:bd:9a:88:5b:d5:67:a7:8f:42:43:8f:c8:c6: 59:1a:f4:e4:ab:fd:49:9b:72:20:37:ae:7c:95:ef:d5:8a:43: 4e:0d:88:6b:9e:e3:59:77:32:36:bd:cd:ac:5e:fd:30:34:e3: 1e:1f:1d:f7:b8:33:19:09:44:fb:de:ea:17:73:0d:32:f6:83: 66:14:6b:16:78:7f:58:93:4d:81:2a:d4:d9:1c:3a:e3:1d:0b: 0f:88:33:a7:98:74:97:a2:9c:ab:9d:a4:ef:72:49:bd:84:ff: 80:c6:c1:81:25:14:63:c7:da:a4:55:f3:76:9d:50:03:3c:49: 19:fd:b0:ef:eb:cf:35:3b:57:36:64:51:56:48:3f:30:c8:c8: 14:21:91:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksrpLONrHMvb65foAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk NWI3OTk5MzItMDM2ZC00MWU1LThmNWYtNDBlZTE2ZjBiYWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirwu6enJGeUGyj0m/3GJuY7isD5krtXuETSX vNSIWkqmGmKl9zwK+5QMt5eQ404C/93sYLaUk+jkVgpRNCjt7+yEndVjwyixBrCK v8f2jhjHH/w1QixFa4PtUo1EJ1K6njguT+NP3jDiKuHFadJe57b5J0MdEyxavfFO 0jcdIT521TmtU2KKmO2iH9m4CwgFn8lYTDozu9g8zEpSzV6l9912FOywoAkCFYjB B0MwJyXuRlm1Xa0N4YCmReSysM6ruMpo7f2Hh6BcNMiosUc6YRaOaipw37nNol3B FalcaPRS9k8FeA+FJsV7BnL22D38/Y/gCgYPNqKvsFn4N4CaxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP+cbSt+rGnFVWddezROMYpHh80DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNjY4Y2ZiNmMtMzIzMi0z MGI4LTk2ZGUtZGUwMWEwMjg3NmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQED7AgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADWDDWqbwh8iggcYfYVChb11gxtgbX5EpE28wd3QxILXo2yiZqKYlJPS WpeVT55B6vGzAyzDcIj9n3DqKcQTRNp+HL+ZhqlTtGP+mkuDz0+hgCj1/DAbkm4q Oi5KZ5s8/m1qM6elErto3Lt0P/o/ixI2vZqIW9Vnp49CQ4/Ixlka9OSr/UmbciA3 rnyV79WKQ04NiGue41l3Mja9zaxe/TA04x4fHfe4MxkJRPve6hdzDTL2g2YUaxZ4 f1iTTYEq1NkcOuMdCw+IM6eYdJeinKudpO9ySb2E/4DGwYElFGPH2qRV83adUAM8 SRn9sO/rzzU7VzZkUVZIPzDIyBQhkRA= -----END CERTIFICATE-----Generated at Fri Mar 14 11:02:34 2025 by rpki-client