$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b2787649-ec09-342d-aa10-75dcde0468bb.roa File: b2787649-ec09-342d-aa10-75dcde0468bb.roa (raw, json) Hash identifier: tdJ5ZnxwChgANuOff8aeF4YgOero3LHJovD/VGKObSg= Subject key identifier: 1F:71:E3:42:9A:70:A1:E7:9B:04:9C:7D:02:03:BB:39:AE:09:DA:93 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285848AAFB6B662D88A382AA40A200 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b2787649-ec09-342d-aa10-75dcde0468bb.roa Signing time: Sun 26 Jan 2025 02:00:38 +0000 ROA not before: Sun 26 Jan 2025 02:00:38 +0000 ROA not after: Sat 26 Apr 2025 01:00:38 +0000 asID: 3356 IP address blocks: 206.164.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:aa:fb:6b:66:2d:88:a3:82:aa:40:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jan 26 02:00:38 2025 GMT Not After : Apr 26 01:00:38 2025 GMT Subject: CN=90a896d3-215d-43ef-8273-3fc119305049 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:6f:b6:8a:ad:4c:c8:90:41:13:0b:f8:f6:d0: 62:58:61:87:3e:5a:d6:ec:20:e9:85:80:c3:bf:19: dd:fa:5a:0d:e9:dd:30:8d:c6:a0:f9:33:69:af:15: c5:6a:05:78:3c:82:3f:b2:9a:73:7f:24:89:80:bb: b6:f5:2d:d5:05:55:07:da:64:18:25:3f:b8:2d:5f: 3e:e9:ef:28:d3:10:64:bf:c8:df:dc:ab:93:09:a3: 28:ab:bc:c5:a6:84:bb:19:e3:e3:b7:2d:7f:54:1c: 82:e1:e3:3f:c7:33:30:63:8f:25:cf:73:13:48:00: c7:59:5a:91:96:33:18:dc:6a:99:f4:61:83:7c:a6: ae:01:70:1a:6b:5e:fb:d0:ac:bd:a4:54:f9:5f:ad: e2:8f:88:4d:2a:98:32:b5:28:c6:5d:91:5c:96:c5: 71:51:b7:4e:9e:c7:ad:bc:d8:7b:d1:31:04:45:c2: 55:f2:e8:c7:c3:0d:b0:d5:01:87:ef:6d:70:20:de: ca:c4:49:2e:e9:d1:f3:a7:da:38:cc:a3:e1:23:36: 75:31:86:a9:25:22:7c:60:ac:09:1e:a2:6f:5d:54: cb:a5:b7:16:2f:a6:0a:a4:a8:d6:93:a8:96:3f:f3: 68:69:84:7b:3b:02:21:c0:d4:22:07:8e:95:1b:7a: 4b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:71:E3:42:9A:70:A1:E7:9B:04:9C:7D:02:03:BB:39:AE:09:DA:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b2787649-ec09-342d-aa10-75dcde0468bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 206.164.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:62:03:44:59:06:b2:fe:48:0f:40:eb:90:12:f3:9b:3f:ea: ce:0e:48:8e:aa:dc:8e:06:04:d6:7c:2e:fe:f7:3d:69:8e:1e: b7:3a:53:03:7b:dc:06:62:ce:34:5d:83:72:77:4f:39:89:df: 2c:55:c6:02:78:79:49:6b:cf:0c:3e:5b:37:1a:5c:ac:dd:b4: 50:8e:44:91:e8:8c:0a:9f:de:e8:c8:9b:42:99:36:dc:8e:9e: 4a:5f:0f:32:27:16:d4:66:5b:ba:eb:67:c1:0b:c2:52:b4:73: 0d:1d:1b:2d:11:c3:e2:9e:88:6e:4a:b6:1e:80:0c:2a:8d:fb: a9:2b:66:25:d6:6c:17:38:2a:b5:a8:b7:5d:a9:34:59:51:7f: c4:11:04:20:f4:54:e4:ec:46:54:93:01:b3:3b:9e:b9:44:70: d0:e9:f5:8b:fb:11:46:ce:64:e2:19:25:d8:1e:3b:90:cd:72: 4f:c7:67:45:ae:da:8b:de:c1:4a:d6:6f:fa:b8:05:7e:0f:19: 36:05:20:06:c5:c8:9c:4b:34:dd:db:a4:38:26:a3:58:39:a6: 3b:eb:80:3e:39:47:32:cb:91:d6:95:af:ed:89:67:5c:42:f8: b3:67:93:10:d1:3b:e9:35:2c:38:d5:11:09:60:32:e5:2c:67: 19:23:74:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiq+2tmLYijgqpAogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDEyNjAyMDAzOFoXDTI1MDQyNjAxMDAzOFowLzEtMCsGA1UEAxMk OTBhODk2ZDMtMjE1ZC00M2VmLTgyNzMtM2ZjMTE5MzA1MDQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjm+2iq1MyJBBEwv49tBiWGGHPlrW7CDphYDD vxnd+loN6d0wjcag+TNprxXFagV4PII/sppzfySJgLu29S3VBVUH2mQYJT+4LV8+ 6e8o0xBkv8jf3KuTCaMoq7zFpoS7GePjty1/VByC4eM/xzMwY48lz3MTSADHWVqR ljMY3GqZ9GGDfKauAXAaa1770Ky9pFT5X63ij4hNKpgytSjGXZFclsVxUbdOnset vNh70TEERcJV8ujHww2w1QGH721wIN7KxEku6dHzp9o4zKPhIzZ1MYapJSJ8YKwJ HqJvXVTLpbcWL6YKpKjWk6iWP/NoaYR7OwIhwNQiB46VG3pLiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB9x40KacKHnmwScfQIDuzmuCdqTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYjI3ODc2NDktZWMwOS0z NDJkLWFhMTAtNzVkY2RlMDQ2OGJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqRrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAtiA0RZBrL+SA9A65AS85s/6s4OSI6q3I4GBNZ8Lv73PWmOHrc6UwN7 3AZizjRdg3J3TzmJ3yxVxgJ4eUlrzww+WzcaXKzdtFCORJHojAqf3ujIm0KZNtyO nkpfDzInFtRmW7rrZ8ELwlK0cw0dGy0Rw+KeiG5Kth6ADCqN+6krZiXWbBc4KrWo t12pNFlRf8QRBCD0VOTsRlSTAbM7nrlEcNDp9Yv7EUbOZOIZJdgeO5DNck/HZ0Wu 2ovewUrWb/q4BX4PGTYFIAbFyJxLNN3bpDgmo1g5pjvrgD45RzLLkdaVr+2JZ1xC +LNnkxDRO+k1LDjVEQlgMuUsZxkjdNg= -----END CERTIFICATE-----Generated at Sat Apr 5 13:14:58 2025 by rpki-client