$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8398fc74-0d9f-361c-b68f-d29f1e5bde97.roa File: 8398fc74-0d9f-361c-b68f-d29f1e5bde97.roa (raw, json) Hash identifier: 0qmmol55beOe72Ene7MGfSX52YWAoxaIf0HTQJVhuY0= Subject key identifier: C7:C0:BB:DA:FA:24:E4:4B:73:6D:AC:23:91:A5:93:33:BC:59:78:45 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285848EC96A057346DC27F830E7B80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8398fc74-0d9f-361c-b68f-d29f1e5bde97.roa Signing time: Tue 18 Feb 2025 14:00:52 +0000 ROA not before: Tue 18 Feb 2025 14:00:52 +0000 ROA not after: Mon 19 May 2025 13:00:52 +0000 asID: 3356 IP address blocks: 206.164.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ec:96:a0:57:34:6d:c2:7f:83:0e:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Feb 18 14:00:52 2025 GMT Not After : May 19 13:00:52 2025 GMT Subject: CN=275852a8-cc65-40d0-83e8-702a5dc066bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:39:e9:48:d6:bc:1a:13:44:0e:2d:49:c4:ef: 8e:46:f3:78:f1:f0:a3:dc:17:93:04:ab:66:f4:e0: a1:49:64:c0:0b:ba:b4:4c:b5:78:1c:02:3b:df:57: f2:06:c9:88:46:93:1e:9c:4c:47:de:68:f8:c3:f4: cd:ef:12:bc:8a:62:f4:3d:4e:7f:2b:ee:65:5a:7e: 24:01:5f:97:00:81:18:ad:f7:94:a8:b9:b9:45:a0: 8a:e7:d3:21:0f:81:00:93:80:1a:e4:15:cc:91:1f: eb:dd:93:53:ae:83:4e:28:c1:ca:f1:7f:5b:99:15: 57:f0:e0:83:1b:3f:d1:b9:f2:08:7d:b1:b2:f4:17: 27:0c:90:69:56:bc:40:7f:9b:35:7e:00:4e:6e:8e: 33:31:91:fc:0c:55:ac:59:16:2b:62:b2:c4:54:cf: 84:49:bb:48:b0:29:76:74:29:3e:38:bd:6c:7a:1b: 73:d1:43:cc:bf:94:df:36:a9:07:df:8c:59:7c:05: 3e:d8:31:33:13:b2:43:73:90:39:bd:74:c9:30:75: 14:56:c9:77:09:8b:79:d0:93:23:ea:e0:bd:fb:99: f0:4c:22:74:96:df:70:96:07:71:88:98:0c:73:d9: 2e:95:c6:ef:f0:90:29:54:07:69:1f:6b:44:a1:eb: c9:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:C0:BB:DA:FA:24:E4:4B:73:6D:AC:23:91:A5:93:33:BC:59:78:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8398fc74-0d9f-361c-b68f-d29f1e5bde97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 206.164.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:34:33:03:c1:7d:7d:4e:06:c7:b9:f6:a0:6d:46:4f:e3:a5: 2b:4a:98:e4:50:d5:d8:78:12:89:7e:32:48:51:aa:38:8e:23: 64:48:e2:ef:d0:fd:22:7a:22:ab:dd:09:3b:0a:c0:18:68:18: 17:63:32:55:57:da:7f:e6:32:a3:1f:5d:8b:dc:69:0d:4b:3d: 97:e9:f0:85:95:59:59:94:49:71:c7:8a:30:4f:fb:1e:8a:76: b7:9c:f0:a4:d7:a4:a1:6c:6c:29:e7:ad:14:73:dc:63:df:dd: dd:2c:f9:fa:44:72:7c:01:be:e6:de:53:c7:62:4d:99:f2:d0: 27:75:e9:cb:65:b5:cb:63:60:e9:14:13:d9:4f:66:78:ba:2a: 19:c1:14:ca:7f:cf:48:db:c3:51:c9:a2:8a:9e:70:8e:c6:ed: 39:30:4e:58:80:4f:a5:e6:ae:f3:a8:55:83:9a:ab:36:95:bf: ae:a4:f7:c0:63:0a:cd:99:12:77:4f:b4:60:42:91:7a:ee:80: 29:74:14:6e:77:d4:2f:a5:f4:66:31:e0:2e:8b:a2:06:5b:3b: 24:37:cf:f6:07:7e:7d:16:32:ad:64:d4:94:fa:75:c7:b3:27: 7d:d3:eb:22:94:b5:92:76:f3:19:09:be:d9:c2:15:7c:5c:0e: 70:d0:b0:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjslqBXNG3Cf4MOe4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk Mjc1ODUyYTgtY2M2NS00MGQwLTgzZTgtNzAyYTVkYzA2NmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0DnpSNa8GhNEDi1JxO+ORvN48fCj3BeTBKtm 9OChSWTAC7q0TLV4HAI731fyBsmIRpMenExH3mj4w/TN7xK8imL0PU5/K+5lWn4k AV+XAIEYrfeUqLm5RaCK59MhD4EAk4Aa5BXMkR/r3ZNTroNOKMHK8X9bmRVX8OCD Gz/RufIIfbGy9BcnDJBpVrxAf5s1fgBObo4zMZH8DFWsWRYrYrLEVM+ESbtIsCl2 dCk+OL1sehtz0UPMv5TfNqkH34xZfAU+2DEzE7JDc5A5vXTJMHUUVsl3CYt50JMj 6uC9+5nwTCJ0lt9wlgdxiJgMc9kulcbv8JApVAdpH2tEoevJCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMfAu9r6JORLc22sI5GlkzO8WXhFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvODM5OGZjNzQtMGQ5Zi0z NjFjLWI2OGYtZDI5ZjFlNWJkZTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzqTYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABU0MwPBfX1OBse59qBtRk/jpStKmORQ1dh4Eol+MkhRqjiOI2RI4u/Q /SJ6IqvdCTsKwBhoGBdjMlVX2n/mMqMfXYvcaQ1LPZfp8IWVWVmUSXHHijBP+x6K drec8KTXpKFsbCnnrRRz3GPf3d0s+fpEcnwBvubeU8diTZny0Cd16ctltctjYOkU E9lPZni6KhnBFMp/z0jbw1HJooqecI7G7TkwTliAT6XmrvOoVYOaqzaVv66k98Bj Cs2ZEndPtGBCkXrugCl0FG531C+l9GYx4C6LogZbOyQ3z/YHfn0WMq1k1JT6dcez J33T6yKUtZJ28xkJvtnCFXxcDnDQsA4= -----END CERTIFICATE-----Generated at Fri Mar 14 09:12:29 2025 by rpki-client