$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/acb98955-4a2b-3667-8035-d27e8de67b7a.roa File: acb98955-4a2b-3667-8035-d27e8de67b7a.roa (raw, json) Hash identifier: 45NWrupAx8IAb4L/9lIM5vUouuRtAneUooTzpGwpiWc= Subject key identifier: B3:A9:48:6A:B9:45:98:8B:1B:7C:F1:7F:D6:99:2C:84:02:B0:26:36 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584883E5C8AD3536F37946A2B580 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/acb98955-4a2b-3667-8035-d27e8de67b7a.roa Signing time: Sun 12 Jan 2025 02:00:38 +0000 ROA not before: Sun 12 Jan 2025 02:00:38 +0000 ROA not after: Sat 12 Apr 2025 01:00:38 +0000 asID: 202 IP address blocks: 170.30.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:83:e5:c8:ad:35:36:f3:79:46:a2:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jan 12 02:00:38 2025 GMT Not After : Apr 12 01:00:38 2025 GMT Subject: CN=9d9c0d33-ecfa-4524-a7c0-4e883bffd785 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:07:1d:45:c7:80:fc:03:16:c8:8a:3c:e3:b4: 07:b1:96:36:ea:48:f8:fb:1f:69:eb:17:21:2d:a6: 4c:69:a0:57:9d:7f:7e:3f:b1:87:b1:2b:fa:86:4b: 6a:78:f6:7b:28:57:97:03:cb:54:7d:47:fa:7b:77: 05:e5:2a:af:78:b5:c9:fc:1a:c1:d2:e7:aa:1d:d5: 6e:28:d3:c8:cd:49:54:47:5f:14:c8:17:8d:aa:a8: 57:5b:7c:7f:32:77:e3:23:af:70:55:00:b8:c0:6b: 11:db:24:20:7f:87:d2:83:af:0a:ad:a7:68:f1:5a: c7:36:72:96:77:7c:20:81:bb:83:be:c0:64:e7:f0: 4b:34:4d:6c:1f:0d:db:7d:0e:6c:33:6b:03:e0:61: 4f:ea:5f:eb:2f:0d:26:c9:14:9c:b1:4f:ff:e7:45: c0:ed:2a:ff:b9:c3:30:3d:26:2c:c9:c7:b4:cd:f3: ea:23:22:bd:85:3c:2b:87:7b:1c:d5:01:e8:f4:15: 1a:60:6f:86:8b:1b:90:45:63:6b:19:c6:e6:b0:59: 4b:e0:68:06:c9:b2:85:7d:d4:a1:80:2b:b7:ae:d2: 3b:64:6a:d8:d8:51:76:bb:55:16:2d:24:e6:d3:e8: d0:50:b5:d3:98:7f:ba:e8:14:18:23:f3:a2:7e:89: 78:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:A9:48:6A:B9:45:98:8B:1B:7C:F1:7F:D6:99:2C:84:02:B0:26:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/acb98955-4a2b-3667-8035-d27e8de67b7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 170.30.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:8d:89:b7:de:aa:05:5e:a7:55:29:06:7f:ea:53:2d:eb:fb: 07:87:77:fd:3b:60:72:02:52:6d:0f:b2:a9:5b:d3:e0:81:51: c2:7a:61:ce:46:97:63:c0:11:34:c0:d4:57:fa:11:92:82:11: 8b:89:ca:de:58:c8:3a:93:ac:76:ef:12:d8:b5:9a:e1:6a:fe: 29:ea:b7:36:65:7f:64:48:27:bf:01:6c:27:64:ad:d8:2b:4d: 6e:75:f9:40:20:09:02:1c:ea:16:aa:7a:ae:cb:0b:5c:a8:05: 20:f2:e5:8b:2b:43:3b:50:a2:60:f2:15:ac:8a:72:8c:ea:b3: 98:12:62:12:fd:c3:f0:0c:10:9e:ab:3e:07:52:ec:15:ad:69: 5d:66:6c:c3:a3:53:08:4b:6e:5e:c1:a0:87:2e:fb:76:1e:95: 7c:66:87:7f:ab:ed:8e:53:1e:c4:8c:c8:fe:37:54:dd:ce:49: 55:15:fb:51:c0:c6:d2:47:c0:81:8c:62:72:65:e6:48:bb:e4: eb:8a:c3:b1:a3:46:bd:67:9e:f4:21:54:ee:c9:4e:11:0d:1b: f8:c9:63:e5:e3:a2:dd:f2:bd:fd:b3:43:74:64:e7:ec:c3:70: 05:45:71:4d:85:9c:60:92:d5:3c:11:78:e1:e6:82:42:07:8e: 7f:f6:0e:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiD5citNTbzeUaitYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDExMjAyMDAzOFoXDTI1MDQxMjAxMDAzOFowLzEtMCsGA1UEAxMk OWQ5YzBkMzMtZWNmYS00NTI0LWE3YzAtNGU4ODNiZmZkNzg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAcdRceA/AMWyIo847QHsZY26kj4+x9p6xch LaZMaaBXnX9+P7GHsSv6hktqePZ7KFeXA8tUfUf6e3cF5SqveLXJ/BrB0ueqHdVu KNPIzUlUR18UyBeNqqhXW3x/MnfjI69wVQC4wGsR2yQgf4fSg68Krado8VrHNnKW d3wggbuDvsBk5/BLNE1sHw3bfQ5sM2sD4GFP6l/rLw0myRScsU//50XA7Sr/ucMw PSYsyce0zfPqIyK9hTwrh3sc1QHo9BUaYG+GixuQRWNrGcbmsFlL4GgGybKFfdSh gCu3rtI7ZGrY2FF2u1UWLSTm0+jQULXTmH+66BQYI/Oifol4vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLOpSGq5RZiLG3zxf9aZLIQCsCY2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYWNiOTg5NTUtNGEyYi0z NjY3LTgwMzUtZDI3ZThkZTY3YjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqh7cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmNibfeqgVep1UpBn/qUy3r+weHd/07YHICUm0Psqlb0+CBUcJ6Yc5G l2PAETTA1Ff6EZKCEYuJyt5YyDqTrHbvEti1muFq/inqtzZlf2RIJ78BbCdkrdgr TW51+UAgCQIc6haqeq7LC1yoBSDy5YsrQztQomDyFayKcozqs5gSYhL9w/AMEJ6r PgdS7BWtaV1mbMOjUwhLbl7BoIcu+3YelXxmh3+r7Y5THsSMyP43VN3OSVUV+1HA xtJHwIGMYnJl5ki75OuKw7GjRr1nnvQhVO7JThENG/jJY+Xjot3yvf2zQ3Rk5+zD cAVFcU2FnGCS1TwReOHmgkIHjn/2Dv0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:40:51 2025 by rpki-client