$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/970d6af1-143a-3945-80b6-a1b00c24f51b.roa File: 970d6af1-143a-3945-80b6-a1b00c24f51b.roa (raw, json) Hash identifier: ELHTSAVaT1EpIEmr/FTZdM45jPSlSz22bRWiwGy1P4o= Subject key identifier: 9A:AA:1C:7C:C2:73:E1:A6:20:D2:42:72:F3:B7:90:93:A7:E2:D2:63 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285848BE8621A24FBC142FDF941900 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/970d6af1-143a-3945-80b6-a1b00c24f51b.roa Signing time: Sun 02 Feb 2025 02:00:39 +0000 ROA not before: Sun 02 Feb 2025 02:00:39 +0000 ROA not after: Sat 03 May 2025 01:00:39 +0000 asID: 3360 IP address blocks: 204.230.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:be:86:21:a2:4f:bc:14:2f:df:94:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Feb 2 02:00:39 2025 GMT Not After : May 3 01:00:39 2025 GMT Subject: CN=7892d986-de60-42e6-a593-98423e087cea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:87:b2:a9:e2:e2:cf:85:8f:76:2c:ce:af:2f: 6c:fb:54:89:fe:b3:b1:ea:48:2d:fb:b0:89:6b:f2: 45:4d:5e:ec:3f:b2:fb:c6:f9:99:ca:47:47:18:e7: 8e:77:83:20:03:11:90:ec:22:1b:4d:6b:82:cc:a7: 09:f5:e8:40:46:e4:54:cd:8b:97:d4:7a:ee:1b:f7: 27:8b:f1:4e:63:b7:9d:46:5f:5e:73:5e:3a:66:01: a4:bd:61:ad:a4:fa:3e:3d:ad:bb:82:b5:cf:a0:db: 24:cd:09:94:fd:ce:55:67:6d:1c:1e:04:e0:e1:95: 7a:e7:06:fe:29:8a:ac:0b:32:5e:37:9a:2c:a3:b8: c7:8d:b6:4d:8f:97:f2:a7:e2:50:40:42:07:bc:e9: 88:a2:f9:5f:b9:7d:a8:39:95:55:9d:fa:b7:40:04: 9c:b4:19:80:88:1b:98:ca:cb:11:55:7a:82:f4:b7: 73:9e:7c:59:4f:c5:64:f6:b2:1f:f7:ce:4d:02:84: 50:44:93:61:1c:2e:40:dc:d8:17:0e:41:3b:f2:82: 9c:c4:9d:84:ac:91:30:d1:23:63:d1:91:73:2f:19: 3c:88:05:88:ad:d0:99:df:b1:91:7a:f4:f8:2a:e4: 69:98:16:90:d0:5e:17:b6:82:5e:fd:70:56:8e:d1: 48:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:AA:1C:7C:C2:73:E1:A6:20:D2:42:72:F3:B7:90:93:A7:E2:D2:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/970d6af1-143a-3945-80b6-a1b00c24f51b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 204.230.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:01:9b:69:ac:3f:c4:b4:44:ed:5b:bd:65:fb:6b:29:2f:b1: 08:3e:99:14:31:47:a0:9d:85:10:c4:73:c7:e0:cd:97:86:0e: 4a:70:d8:f0:9a:88:df:4c:25:78:e9:70:12:13:02:e9:c4:91: 77:0c:98:33:c2:f8:0c:16:b1:81:a5:70:1d:4e:7a:ca:7b:2b: 08:55:16:94:e1:34:ae:a5:15:6e:c6:01:a5:9d:28:ee:31:5c: 50:87:0b:8d:5a:96:59:21:45:76:00:91:ac:6b:93:34:aa:d5: 68:cd:62:72:17:7f:d4:ea:f6:d1:1c:0d:16:e1:d0:1b:84:29: a5:8c:88:e8:84:2e:f2:39:1c:a4:18:25:5d:2f:aa:09:1e:1a: d4:f0:95:a6:79:c8:0a:b9:ab:fb:08:ea:81:56:05:22:88:df: 90:0f:77:34:ad:75:83:91:c8:f4:09:87:90:e7:9e:45:ee:93: 0e:26:bb:02:ed:64:ca:20:93:91:e6:9a:c3:17:6c:09:01:6f: 03:a1:f7:ec:18:11:ea:fc:86:ca:41:c8:31:00:a4:ce:d8:71: 23:ee:c4:b7:50:6f:61:0d:f1:5a:dd:80:20:3d:5a:33:15:9b: d7:ac:45:cc:47:d7:7d:54:f4:6a:f8:07:2c:67:96:fd:82:70: 89:41:c5:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi+hiGiT7wUL9+UGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDIwMjAyMDAzOVoXDTI1MDUwMzAxMDAzOVowLzEtMCsGA1UEAxMk Nzg5MmQ5ODYtZGU2MC00MmU2LWE1OTMtOTg0MjNlMDg3Y2VhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4eyqeLiz4WPdizOry9s+1SJ/rOx6kgt+7CJ a/JFTV7sP7L7xvmZykdHGOeOd4MgAxGQ7CIbTWuCzKcJ9ehARuRUzYuX1HruG/cn i/FOY7edRl9ec146ZgGkvWGtpPo+Pa27grXPoNskzQmU/c5VZ20cHgTg4ZV65wb+ KYqsCzJeN5oso7jHjbZNj5fyp+JQQEIHvOmIovlfuX2oOZVVnfq3QASctBmAiBuY yssRVXqC9LdznnxZT8Vk9rIf985NAoRQRJNhHC5A3NgXDkE78oKcxJ2ErJEw0SNj 0ZFzLxk8iAWIrdCZ37GRevT4KuRpmBaQ0F4XtoJe/XBWjtFI/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJqqHHzCc+GmINJCcvO3kJOn4tJjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvOTcwZDZhZjEtMTQzYS0z OTQ1LTgwYjYtYTFiMDBjMjRmNTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzOYsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAEBm2msP8S0RO1bvWX7aykvsQg+mRQxR6CdhRDEc8fgzZeGDkpw2PCa iN9MJXjpcBITAunEkXcMmDPC+AwWsYGlcB1Oesp7KwhVFpThNK6lFW7GAaWdKO4x XFCHC41allkhRXYAkaxrkzSq1WjNYnIXf9Tq9tEcDRbh0BuEKaWMiOiELvI5HKQY JV0vqgkeGtTwlaZ5yAq5q/sI6oFWBSKI35APdzStdYORyPQJh5DnnkXukw4muwLt ZMogk5HmmsMXbAkBbwOh9+wYEer8hspByDEApM7YcSPuxLdQb2EN8VrdgCA9WjMV m9esRcxH131U9Gr4Byxnlv2CcIlBxaM= -----END CERTIFICATE-----Generated at Fri Mar 14 10:19:46 2025 by rpki-client