$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b1aeb070-e5ec-3e1b-bcaa-3ebfac768a7b.roa File: b1aeb070-e5ec-3e1b-bcaa-3ebfac768a7b.roa (raw, json) Hash identifier: 9jNHO8W+V/ZryLOiKS4pbmEkKN48vbg8ZmA8sqXZKtM= Subject key identifier: 31:5E:97:0B:7F:5C:FA:22:88:D4:A8:3C:0E:B3:7E:14:C6:4C:A1:30 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285848AAFB5D6E71DBA2BBAF49D620 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b1aeb070-e5ec-3e1b-bcaa-3ebfac768a7b.roa Signing time: Sun 26 Jan 2025 02:00:38 +0000 ROA not before: Sun 26 Jan 2025 02:00:38 +0000 ROA not after: Sat 26 Apr 2025 01:00:38 +0000 asID: 203 IP address blocks: 204.103.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:aa:fb:5d:6e:71:db:a2:bb:af:49:d6:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jan 26 02:00:38 2025 GMT Not After : Apr 26 01:00:38 2025 GMT Subject: CN=ee64e367-fa3a-4450-8045-261eeb451031 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:69:6b:77:5c:e3:d3:b6:84:39:68:42:ff:03: 31:cf:f9:12:66:d8:33:16:37:88:36:62:b5:d2:03: d5:38:90:3f:31:86:98:4c:92:ed:4c:af:88:b8:e2: 02:bb:b0:3a:83:79:9e:53:6b:b0:fa:23:e2:5c:48: 76:56:09:d9:4a:5e:45:f7:4a:3d:28:ec:b2:0e:b5: dd:39:5f:76:6f:58:7b:dc:d7:26:93:ed:04:42:eb: f9:77:53:55:17:1d:da:e2:08:14:6c:7f:6d:49:9b: d5:38:25:3d:16:74:4b:d0:bc:3a:b9:0f:d6:b6:c9: ac:47:16:4d:28:1d:75:2f:6f:f8:25:34:69:e8:a8: a7:8f:d0:b8:f2:0a:dc:12:49:8b:d9:0f:2d:0e:45: ae:d3:e7:ba:5d:d6:b9:1a:84:ee:99:d0:42:dc:bf: 7f:22:00:86:2a:ef:53:25:78:02:b2:0b:52:88:df: 4b:9a:7a:d4:a7:4c:9d:5f:0d:97:65:5d:63:87:06: 88:d3:d5:ae:15:84:94:bb:f3:b0:0f:9f:b3:cc:a9: 20:5a:86:37:92:d8:51:a7:62:75:f3:6a:40:9f:96: b9:a1:93:c9:da:14:57:95:c2:0c:f8:44:c2:98:26: a6:77:5f:55:cb:d2:18:c4:7b:76:6c:c4:1b:6d:9d: 11:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:5E:97:0B:7F:5C:FA:22:88:D4:A8:3C:0E:B3:7E:14:C6:4C:A1:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b1aeb070-e5ec-3e1b-bcaa-3ebfac768a7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 204.103.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:d1:30:65:37:de:b6:d5:66:a8:59:38:64:a9:3e:a2:22:c9: 89:12:ca:83:a9:15:2c:3b:85:9d:e7:e3:bb:91:13:16:6a:96: ea:d0:aa:db:33:b9:f5:40:c5:b8:83:13:bd:03:be:c9:fc:19: ae:5f:82:48:89:89:42:d8:5e:1b:5d:68:d6:0a:eb:c9:bc:04: d5:c4:86:f5:93:f8:62:e0:e2:22:97:9d:cd:1b:ee:08:eb:12: c4:06:15:21:fd:a4:2f:b7:e7:c6:1c:44:a1:6f:29:b5:9f:8c: f1:d8:c2:bf:70:37:9a:38:9b:e0:fa:28:ed:a2:b8:cb:5e:c1: 45:2e:13:75:e3:a2:73:29:56:69:83:82:aa:2b:bd:8b:98:3f: 30:48:f1:58:ff:96:bb:f3:48:dd:de:16:d9:01:8a:13:7a:87: 8e:93:26:77:a1:63:d7:af:91:a5:19:08:8e:d8:d4:bd:51:2d: cd:85:82:a1:ce:73:dc:00:ac:69:cd:2c:fd:12:ed:62:fe:de: f4:60:73:3d:8f:ff:b8:31:00:cd:30:4b:24:de:b1:fd:45:c3: 74:81:90:eb:6d:c9:16:74:13:2c:d0:0d:87:a3:49:7f:5a:02: e2:72:65:f8:ae:f6:31:0c:93:5a:89:29:d8:04:11:4e:cd:45: 75:bb:98:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiq+11ucduiu69J1iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDEyNjAyMDAzOFoXDTI1MDQyNjAxMDAzOFowLzEtMCsGA1UEAxMk ZWU2NGUzNjctZmEzYS00NDUwLTgwNDUtMjYxZWViNDUxMDMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWlrd1zj07aEOWhC/wMxz/kSZtgzFjeINmK1 0gPVOJA/MYaYTJLtTK+IuOICu7A6g3meU2uw+iPiXEh2VgnZSl5F90o9KOyyDrXd OV92b1h73Ncmk+0EQuv5d1NVFx3a4ggUbH9tSZvVOCU9FnRL0Lw6uQ/WtsmsRxZN KB11L2/4JTRp6Kinj9C48grcEkmL2Q8tDkWu0+e6Xda5GoTumdBC3L9/IgCGKu9T JXgCsgtSiN9LmnrUp0ydXw2XZV1jhwaI09WuFYSUu/OwD5+zzKkgWoY3kthRp2J1 82pAn5a5oZPJ2hRXlcIM+ETCmCamd19Vy9IYxHt2bMQbbZ0RGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDFelwt/XPoiiNSoPA6zfhTGTKEwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYjFhZWIwNzAtZTVlYy0z ZTFiLWJjYWEtM2ViZmFjNzY4YTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGfGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABjRMGU33rbVZqhZOGSpPqIiyYkSyoOpFSw7hZ3n47uRExZqlurQqtsz ufVAxbiDE70Dvsn8Ga5fgkiJiULYXhtdaNYK68m8BNXEhvWT+GLg4iKXnc0b7gjr EsQGFSH9pC+358YcRKFvKbWfjPHYwr9wN5o4m+D6KO2iuMtewUUuE3XjonMpVmmD gqorvYuYPzBI8Vj/lrvzSN3eFtkBihN6h46TJnehY9evkaUZCI7Y1L1RLc2FgqHO c9wArGnNLP0S7WL+3vRgcz2P/7gxAM0wSyTesf1Fw3SBkOttyRZ0EyzQDYejSX9a AuJyZfiu9jEMk1qJKdgEEU7NRXW7mFQ= -----END CERTIFICATE-----Generated at Sat Apr 5 23:21:16 2025 by rpki-client