$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a63fa03f-e96c-37f7-8bdc-6f67c9d76d26.roa File: a63fa03f-e96c-37f7-8bdc-6f67c9d76d26.roa (raw, json) Hash identifier: ofqQsVwrfFY503fv++y94a5mawDYR7QU6l+SFqADVJk= Subject key identifier: 82:3A:A2:59:23:77:F7:3A:C6:79:3A:22:94:C1:3F:80:42:EE:2D:C6 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285848BE86250CB300B53605433200 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a63fa03f-e96c-37f7-8bdc-6f67c9d76d26.roa Signing time: Sun 02 Feb 2025 02:00:39 +0000 ROA not before: Sun 02 Feb 2025 02:00:39 +0000 ROA not after: Sat 03 May 2025 01:00:39 +0000 asID: 2159 IP address blocks: 207.37.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:be:86:25:0c:b3:00:b5:36:05:43:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Feb 2 02:00:39 2025 GMT Not After : May 3 01:00:39 2025 GMT Subject: CN=2893e7ae-9af1-406d-86ad-f459161f6092 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d7:d1:9b:5b:45:0a:19:71:fa:bf:59:d8:21: 5e:ca:e6:dd:c1:f8:e2:97:33:1f:18:24:42:bc:c1: 7a:f6:6e:f3:a1:77:76:59:c8:21:4e:a2:36:44:85: 0f:b6:ee:10:62:7b:02:c8:9c:04:00:59:24:96:62: 8d:71:87:07:14:35:5c:a4:e0:c2:9f:dd:cf:fd:32: 40:e3:59:85:a6:1a:f9:a9:b0:20:17:13:4d:cb:94: db:6c:8c:2c:c0:30:cf:ff:14:c9:a4:dc:c7:74:3a: d1:0c:40:a7:4f:ef:46:05:92:49:91:6e:b5:fc:44: d2:1e:9d:da:2a:19:fd:1f:54:8c:3f:1b:85:c4:f6: 2d:0b:13:0b:aa:59:49:e4:56:33:5a:61:2e:06:af: 04:dc:9d:e7:c7:36:26:33:78:4b:d2:a8:2e:98:b0: ce:de:84:22:06:ab:aa:19:3b:f6:44:93:2b:e2:b3: 59:c7:f5:86:6c:c1:5e:99:0a:82:8c:5c:bb:ce:75: ce:bc:ff:42:22:bb:80:79:77:bd:51:65:17:b9:3a: 60:f2:05:d4:5c:0f:8a:7f:ff:9d:a7:5d:bd:89:a3: 93:69:2d:07:d7:43:4c:7f:60:9b:f7:d3:6a:42:c2: cf:b2:fe:cd:04:ac:25:fc:9c:b4:2e:9b:f1:b3:4b: 92:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:3A:A2:59:23:77:F7:3A:C6:79:3A:22:94:C1:3F:80:42:EE:2D:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a63fa03f-e96c-37f7-8bdc-6f67c9d76d26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 207.37.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:73:29:c3:a4:f4:68:32:05:8a:76:ad:4a:e5:02:ab:5a:c8: 4e:06:98:f5:6f:c0:79:41:a0:04:b4:5e:c4:6b:d2:30:ca:01: 7d:be:81:eb:c8:03:b7:e5:2b:c6:6b:27:ca:ae:99:fa:ed:32: f0:c7:57:24:c1:86:48:24:a5:b2:47:24:e6:3f:0b:28:a8:6a: 1f:ef:85:49:c3:d6:53:12:bb:f3:6f:38:c5:cc:94:7c:33:77: 91:e8:98:c3:83:d4:c3:5b:be:b8:51:66:36:d5:2f:3e:d9:db: eb:c2:2d:c0:78:ba:f9:bd:71:4b:db:5e:bb:a3:95:ce:2f:b6: 2c:b2:f7:37:6f:af:3d:19:9c:e7:34:62:7e:2f:59:e6:75:2e: f5:8f:a6:0c:f7:16:70:f1:74:28:62:1c:6b:df:5e:fb:63:4a: 4b:b4:b2:f0:a5:8f:9e:cd:0f:17:8c:9e:97:5d:f8:0e:72:88: 05:99:43:69:96:4d:4d:b8:62:6a:a6:dc:c2:4c:bd:07:21:cb: f0:d2:67:99:29:0a:6e:1d:f0:3b:bb:8c:0b:c5:bc:a9:ff:00: 27:67:84:12:48:cb:11:3c:3d:4f:06:97:18:94:90:19:c7:30: ac:4a:4b:a2:b4:bf:46:8a:02:d1:1e:98:d2:75:fd:ee:69:24: ab:12:2b:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi+hiUMswC1NgVDMgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDIwMjAyMDAzOVoXDTI1MDUwMzAxMDAzOVowLzEtMCsGA1UEAxMk Mjg5M2U3YWUtOWFmMS00MDZkLTg2YWQtZjQ1OTE2MWY2MDkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtfRm1tFChlx+r9Z2CFeyubdwfjilzMfGCRC vMF69m7zoXd2WcghTqI2RIUPtu4QYnsCyJwEAFkklmKNcYcHFDVcpODCn93P/TJA 41mFphr5qbAgFxNNy5TbbIwswDDP/xTJpNzHdDrRDECnT+9GBZJJkW61/ETSHp3a Khn9H1SMPxuFxPYtCxMLqllJ5FYzWmEuBq8E3J3nxzYmM3hL0qgumLDO3oQiBquq GTv2RJMr4rNZx/WGbMFemQqCjFy7znXOvP9CIruAeXe9UWUXuTpg8gXUXA+Kf/+d p129iaOTaS0H10NMf2Cb99NqQsLPsv7NBKwl/Jy0Lpvxs0uSdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFII6olkjd/c6xnk6IpTBP4BC7i3GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYTYzZmEwM2YtZTk2Yy0z N2Y3LThiZGMtNmY2N2M5ZDc2ZDI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzyX4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF5zKcOk9GgyBYp2rUrlAqtayE4GmPVvwHlBoAS0XsRr0jDKAX2+gevI A7flK8ZrJ8qumfrtMvDHVyTBhkgkpbJHJOY/Cyioah/vhUnD1lMSu/NvOMXMlHwz d5HomMOD1MNbvrhRZjbVLz7Z2+vCLcB4uvm9cUvbXrujlc4vtiyy9zdvrz0ZnOc0 Yn4vWeZ1LvWPpgz3FnDxdChiHGvfXvtjSku0svClj57NDxeMnpdd+A5yiAWZQ2mW TU24Ymqm3MJMvQchy/DSZ5kpCm4d8Du7jAvFvKn/ACdnhBJIyxE8PU8GlxiUkBnH MKxKS6K0v0aKAtEemNJ1/e5pJKsSK24= -----END CERTIFICATE-----Generated at Sat Apr 5 23:15:17 2025 by rpki-client