$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9ffc8689-0e5d-3f94-a494-7982284b3d8d.roa File: 9ffc8689-0e5d-3f94-a494-7982284b3d8d.roa (raw, json) Hash identifier: kJn8/UKRgcdHbNjOz4DffHRqulHG9k+xh3tXRQEA58c= Subject key identifier: 65:AB:B9:06:C4:B8:A8:F3:0C:58:A2:08:54:4D:C5:4D:60:85:83:FF Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285848EC96A5F5EB623E2C0174A160 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9ffc8689-0e5d-3f94-a494-7982284b3d8d.roa Signing time: Tue 18 Feb 2025 14:00:52 +0000 ROA not before: Tue 18 Feb 2025 14:00:52 +0000 ROA not after: Mon 19 May 2025 13:00:52 +0000 asID: 202 IP address blocks: 206.122.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ec:96:a5:f5:eb:62:3e:2c:01:74:a1:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Feb 18 14:00:52 2025 GMT Not After : May 19 13:00:52 2025 GMT Subject: CN=5ef58a76-1469-4299-876b-34137e72183c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:02:72:b6:7d:f8:49:b5:24:07:26:88:f5:db: e7:88:be:20:4d:03:be:18:dd:db:af:8c:9a:6a:85: ab:05:57:de:2e:2b:4a:ee:17:eb:d0:1e:02:da:7b: 27:ea:21:f5:d0:bb:0b:62:fb:f1:e7:35:fa:2b:23: a2:bb:d2:a1:f7:18:fe:da:ac:ba:9a:55:f8:c3:21: 8c:c6:19:cd:ad:3c:1c:95:a6:4e:aa:a1:6e:d3:0e: 8c:55:c3:83:52:a2:14:c8:3d:86:a3:37:5d:34:6e: 0a:13:ac:c1:05:51:de:cc:6d:eb:cd:78:5c:f7:d2: ba:26:73:60:44:ad:84:a3:c0:48:ce:ca:5e:00:82: e6:0a:92:44:db:98:7a:14:81:7b:16:26:7f:97:af: b6:d2:1b:39:2b:c3:08:36:15:78:db:cd:fe:87:19: c1:b5:e1:8c:de:1e:71:ee:a7:24:5b:97:44:56:a3: ff:c1:fd:d8:27:ff:be:cc:22:2d:0a:dc:8a:13:ee: b5:c8:bd:a7:ee:3d:dc:70:63:4b:91:f2:74:e7:94: e7:fd:b0:a1:76:5a:12:89:21:97:25:3a:4f:04:c9: d2:03:2b:a4:b3:3e:d0:bb:5e:8a:66:6b:70:bc:47: 80:06:4b:2f:9e:56:28:85:d6:93:c7:00:fa:b8:8d: ad:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:AB:B9:06:C4:B8:A8:F3:0C:58:A2:08:54:4D:C5:4D:60:85:83:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9ffc8689-0e5d-3f94-a494-7982284b3d8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 206.122.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:a6:b9:f3:86:f2:ea:63:0a:d4:38:ea:83:ec:95:34:20:01: e9:34:e1:e3:dd:ab:db:a2:56:58:dc:c7:86:df:aa:3b:ab:52: 7b:65:76:b5:38:a6:30:e8:6c:6d:17:ac:bc:10:a3:7c:08:d2: 49:2c:ce:54:be:22:f5:ef:a7:da:49:18:50:6d:27:5e:71:1f: 4d:73:d3:2b:78:68:9a:c0:06:6b:fb:64:14:2e:3e:ad:3b:4f: 12:b7:b9:c9:03:1d:fb:ef:90:e0:29:3e:ee:be:b6:1f:c1:08: ae:e4:b1:12:b6:74:ce:c2:73:81:ba:d5:98:d2:eb:79:8a:ca: 8c:61:52:b2:8d:28:29:4b:a6:d3:e9:55:09:ce:3f:96:4a:c8: f6:e2:85:a7:3c:a8:84:a9:17:6a:6d:c4:d3:13:ad:df:70:22: e6:10:da:16:3d:30:cc:3f:34:03:32:4b:58:f2:40:a8:4b:76: e1:17:93:18:54:e8:97:e7:d2:1f:68:d2:39:62:05:ce:6d:c6: af:04:b6:b6:d8:a8:d7:d3:e5:15:8e:ab:61:8e:94:f3:6e:6e: 2a:07:41:a5:56:7b:45:99:4f:46:c4:8c:41:a1:c3:bc:a5:93: 8b:49:24:6a:2c:2c:5f:ea:df:b6:71:5c:45:0a:04:ed:90:3f: f5:fa:49:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjslqX162I+LAF0oWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk NWVmNThhNzYtMTQ2OS00Mjk5LTg3NmItMzQxMzdlNzIxODNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQJytn34SbUkByaI9dvniL4gTQO+GN3br4ya aoWrBVfeLitK7hfr0B4C2nsn6iH10LsLYvvx5zX6KyOiu9Kh9xj+2qy6mlX4wyGM xhnNrTwclaZOqqFu0w6MVcODUqIUyD2GozddNG4KE6zBBVHezG3rzXhc99K6JnNg RK2Eo8BIzspeAILmCpJE25h6FIF7FiZ/l6+20hs5K8MINhV4283+hxnBteGM3h5x 7qckW5dEVqP/wf3YJ/++zCItCtyKE+61yL2n7j3ccGNLkfJ055Tn/bChdloSiSGX JTpPBMnSAyuksz7Qu16KZmtwvEeABksvnlYohdaTxwD6uI2trwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGWruQbEuKjzDFiiCFRNxU1ghYP/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvOWZmYzg2ODktMGU1ZC0z Zjk0LWE0OTQtNzk4MjI4NGIzZDhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAznpmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABamufOG8upjCtQ46oPslTQgAek04ePdq9uiVljcx4bfqjurUntldrU4 pjDobG0XrLwQo3wI0kkszlS+IvXvp9pJGFBtJ15xH01z0yt4aJrABmv7ZBQuPq07 TxK3uckDHfvvkOApPu6+th/BCK7ksRK2dM7Cc4G61ZjS63mKyoxhUrKNKClLptPp VQnOP5ZKyPbihac8qISpF2ptxNMTrd9wIuYQ2hY9MMw/NAMyS1jyQKhLduEXkxhU 6Jfn0h9o0jliBc5txq8EtrbYqNfT5RWOq2GOlPNubioHQaVWe0WZT0bEjEGhw7yl k4tJJGosLF/q37ZxXEUKBO2QP/X6SVA= -----END CERTIFICATE-----Generated at Sat Apr 5 16:45:26 2025 by rpki-client