$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b5d5bd03-8594-3733-b9a0-3c356b132ebb.roa File: b5d5bd03-8594-3733-b9a0-3c356b132ebb.roa (raw, json) Hash identifier: 8FPr7kabOPQw3CWoM4IaXTk71E9KglMkcvtvOyG5XU4= Subject key identifier: 2A:4E:69:55:1A:DF:77:22:F5:7C:0A:61:56:FE:95:BD:50:65:FB:4B Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285848AAFB60363830B3508224A4C0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b5d5bd03-8594-3733-b9a0-3c356b132ebb.roa Signing time: Sun 26 Jan 2025 02:00:38 +0000 ROA not before: Sun 26 Jan 2025 02:00:38 +0000 ROA not after: Sat 26 Apr 2025 01:00:38 +0000 asID: 3360 IP address blocks: 204.104.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:aa:fb:60:36:38:30:b3:50:82:24:a4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jan 26 02:00:38 2025 GMT Not After : Apr 26 01:00:38 2025 GMT Subject: CN=cf60c9ac-e4bf-46d3-a527-82f7a4319ab2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7d:e7:b9:89:08:17:eb:5f:12:d9:ab:0d:a1: 63:9d:e8:7f:74:bd:a5:1d:46:ea:8d:cb:af:2e:24: b7:1c:1f:c1:5f:50:0b:7f:f6:e9:8f:49:78:c8:e2: 23:d7:93:31:b6:78:a1:41:f8:58:db:b3:71:fe:67: f6:7d:4d:3d:c6:0b:64:95:2b:c9:55:3e:f7:0f:9f: b5:20:82:d9:04:33:a9:3c:dc:2a:31:e1:b1:c5:c8: bf:6a:b7:00:3c:0e:95:5a:a8:56:70:5a:d5:fe:54: 20:d7:04:ae:b5:01:6b:d1:8b:c1:da:14:94:4a:3b: bc:5d:ef:92:d3:1f:c2:bc:59:69:bc:e6:de:28:a6: 37:a1:10:20:84:08:08:aa:5c:d2:24:9d:c0:c6:ef: bb:73:5f:be:2d:1d:7a:a8:bc:83:8e:1b:77:5b:08: af:f2:2b:98:26:99:15:b1:68:15:55:97:28:8c:64: 9b:8c:83:69:de:44:3e:40:07:62:b2:11:de:5b:f2: 07:f1:5e:53:77:4c:c9:99:69:07:fe:05:72:05:20: 7b:da:43:e5:45:a6:37:a3:ab:b0:d1:90:2c:de:8a: 6c:8c:78:fd:5f:f8:64:1f:b4:33:f2:db:3d:62:b9: 7f:f0:1b:71:9b:70:9b:ed:a0:b4:e0:1c:61:0f:e0: e1:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:4E:69:55:1A:DF:77:22:F5:7C:0A:61:56:FE:95:BD:50:65:FB:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b5d5bd03-8594-3733-b9a0-3c356b132ebb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 204.104.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:e6:43:92:f1:72:73:d1:77:5b:95:3f:0d:03:98:15:30:a2: d8:5c:18:b9:01:60:90:a8:c7:2d:90:e6:7e:e6:7c:db:4c:30: f5:d0:8d:2a:b6:32:27:7b:82:da:33:ce:54:61:37:d0:45:ab: fe:09:5c:13:c6:f8:a9:1d:cb:0f:c9:7f:33:53:10:94:f0:db: a0:10:e3:82:0f:85:b7:5c:33:f2:60:76:ee:b1:0f:3c:41:2e: bf:ee:57:c0:e5:49:09:62:cf:9b:43:b7:84:bd:2c:96:bc:b0: 53:d7:27:d9:bd:1c:55:c9:ae:93:ae:23:46:1f:47:ef:d1:d9: 9d:c7:d1:36:7c:20:96:a2:6d:69:bb:19:12:7a:85:26:3b:1b: 32:a9:d9:ca:12:2c:50:12:dc:6a:54:37:2b:5d:00:69:62:fe: ac:c1:fa:e3:e9:2a:c0:79:19:ad:7a:04:48:17:d9:c9:3d:38: ed:d5:37:ed:6d:2c:0e:cc:d2:03:dd:cf:c5:12:1d:87:1f:a9: 30:3f:41:4b:2c:dd:3b:a8:c9:f1:bf:65:08:92:72:67:f3:e9: 20:f3:2b:fc:56:dc:95:19:ad:be:25:9d:68:52:6d:ca:62:3b: 15:1c:5d:f8:6f:66:52:3f:b2:07:ee:2e:2a:8b:d5:7d:38:40: 07:a8:0d:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiq+2A2ODCzUIIkpMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDEyNjAyMDAzOFoXDTI1MDQyNjAxMDAzOFowLzEtMCsGA1UEAxMk Y2Y2MGM5YWMtZTRiZi00NmQzLWE1MjctODJmN2E0MzE5YWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr33nuYkIF+tfEtmrDaFjneh/dL2lHUbqjcuv LiS3HB/BX1ALf/bpj0l4yOIj15MxtnihQfhY27Nx/mf2fU09xgtklSvJVT73D5+1 IILZBDOpPNwqMeGxxci/arcAPA6VWqhWcFrV/lQg1wSutQFr0YvB2hSUSju8Xe+S 0x/CvFlpvObeKKY3oRAghAgIqlzSJJ3Axu+7c1++LR16qLyDjht3Wwiv8iuYJpkV sWgVVZcojGSbjINp3kQ+QAdishHeW/IH8V5Td0zJmWkH/gVyBSB72kPlRaY3o6uw 0ZAs3opsjHj9X/hkH7Qz8ts9Yrl/8Btxm3Cb7aC04BxhD+DhXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCpOaVUa33ci9XwKYVb+lb1QZftLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYjVkNWJkMDMtODU5NC0z NzMzLWI5YTAtM2MzNTZiMTMyZWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGgRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEPmQ5LxcnPRd1uVPw0DmBUwothcGLkBYJCoxy2Q5n7mfNtMMPXQjSq2 Mid7gtozzlRhN9BFq/4JXBPG+Kkdyw/JfzNTEJTw26AQ44IPhbdcM/Jgdu6xDzxB Lr/uV8DlSQliz5tDt4S9LJa8sFPXJ9m9HFXJrpOuI0YfR+/R2Z3H0TZ8IJaibWm7 GRJ6hSY7GzKp2coSLFAS3GpUNytdAGli/qzB+uPpKsB5Ga16BEgX2ck9OO3VN+1t LA7M0gPdz8USHYcfqTA/QUss3TuoyfG/ZQiScmfz6SDzK/xW3JUZrb4lnWhSbcpi OxUcXfhvZlI/sgfuLiqL1X04QAeoDf0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:08:13 2025 by rpki-client