$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bfa20b7a-61f3-367d-b9e0-f4782802d8fb.roa File: bfa20b7a-61f3-367d-b9e0-f4782802d8fb.roa (raw, json) Hash identifier: KMRYJ60bjoqu8J6rOFZ2zjM0UmmEzMECv+Xhp0HMO+k= Subject key identifier: FE:54:4D:27:D0:7D:EB:7B:3E:A5:07:DE:88:9A:6A:DA:22:13:51:CC Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584832F01F4766B2C2F3274FD700 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bfa20b7a-61f3-367d-b9e0-f4782802d8fb.roa Signing time: Sat 14 Dec 2024 02:00:39 +0000 ROA not before: Sat 14 Dec 2024 02:00:39 +0000 ROA not after: Fri 14 Mar 2025 01:00:39 +0000 asID: 203 IP address blocks: 204.105.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:32:f0:1f:47:66:b2:c2:f3:27:4f:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Dec 14 02:00:39 2024 GMT Not After : Mar 14 01:00:39 2025 GMT Subject: CN=e3b66abb-495d-48d1-8e70-e78f19fe8642 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9b:f0:3d:4b:0f:b2:9f:47:22:db:0b:ac:b8: 83:96:dd:43:aa:55:ee:04:ff:59:7c:33:13:4f:e5: 05:85:0e:f1:9a:a7:da:17:8c:05:45:04:91:66:1f: 1b:fc:b8:f0:58:56:9c:93:14:1c:49:ed:9b:cc:1b: 73:8e:64:05:39:fa:b2:fc:2f:0b:b2:b9:fc:45:04: 74:32:a3:2d:5b:f0:73:72:d0:73:86:2e:5f:40:87: 17:39:c8:7f:6b:bd:aa:39:f5:1f:84:13:b5:de:db: b6:39:16:c8:a9:9b:30:0f:f7:7b:af:7a:b3:d2:0e: 7c:4f:49:07:dd:d8:7a:f8:b4:4c:35:ae:6a:24:5f: 02:15:63:90:a6:4e:41:cf:1d:c1:5c:15:e0:52:76: 02:cd:9e:58:72:e6:b3:8d:29:3b:fc:95:e0:1f:23: cc:1b:e7:15:a4:26:1c:f8:e3:b5:d0:89:54:2b:ed: 44:29:6c:5c:50:64:9c:a9:8d:bf:0c:1c:54:24:0a: ca:b5:35:9a:e0:69:ac:20:ea:d7:6e:37:59:dc:c4: 41:4a:30:07:8c:77:ca:01:59:79:28:9e:86:3c:1e: 8d:f2:2b:2e:54:e5:09:aa:fa:bd:9b:b1:1f:33:b3: 85:94:cf:e2:5c:9c:b9:e0:8f:40:b4:75:45:de:db: 2f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:54:4D:27:D0:7D:EB:7B:3E:A5:07:DE:88:9A:6A:DA:22:13:51:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bfa20b7a-61f3-367d-b9e0-f4782802d8fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 204.105.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:84:38:4c:dc:c5:d0:9a:e9:de:53:3b:1f:58:09:d9:06:72: 24:95:07:11:41:3a:51:a3:9e:7e:fe:5b:50:59:57:0b:13:40: 07:b4:f8:91:ac:a8:5a:2a:ec:6d:76:be:90:95:d1:4a:d7:35: ea:c0:5c:e8:5c:95:f6:7b:8f:72:78:b9:55:29:54:b9:24:10: 71:ec:3a:7e:85:d1:31:05:91:9c:28:cf:b7:5f:7b:f7:c6:e2: dc:fa:0e:b8:3a:b8:31:3c:78:ef:6d:d6:18:24:3e:f1:ba:cd: 6a:d1:e9:8d:02:c9:00:62:9d:70:c1:44:e5:4c:c9:f6:4e:c3: 96:f0:d4:e6:d1:cb:a0:fe:66:8e:b1:ef:2a:ad:d2:98:e7:76: 41:06:d2:e0:05:ed:a7:fb:35:e8:b1:48:66:70:95:8e:ad:dc: 42:c1:3d:3a:01:79:23:6b:88:ae:2f:3c:67:0e:20:74:70:16: 00:2e:a7:81:19:bb:ce:68:9b:0d:23:77:ff:bc:70:ed:e4:bc: b1:a4:52:0c:b5:db:d7:29:f3:59:68:cd:3a:29:67:b1:87:50: 75:91:ea:a1:72:f2:aa:71:e8:c0:64:a9:1a:8d:05:fc:24:17: e3:6c:85:60:13:83:b1:16:3f:f9:af:61:19:3f:e5:e7:c3:a0: dc:2f:c9:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgy8B9HZrLC8ydP1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI0MTIxNDAyMDAzOVoXDTI1MDMxNDAxMDAzOVowLzEtMCsGA1UEAxMk ZTNiNjZhYmItNDk1ZC00OGQxLThlNzAtZTc4ZjE5ZmU4NjQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJvwPUsPsp9HItsLrLiDlt1DqlXuBP9ZfDMT T+UFhQ7xmqfaF4wFRQSRZh8b/LjwWFackxQcSe2bzBtzjmQFOfqy/C8Lsrn8RQR0 MqMtW/BzctBzhi5fQIcXOch/a72qOfUfhBO13tu2ORbIqZswD/d7r3qz0g58T0kH 3dh6+LRMNa5qJF8CFWOQpk5Bzx3BXBXgUnYCzZ5YcuazjSk7/JXgHyPMG+cVpCYc +OO10IlUK+1EKWxcUGScqY2/DBxUJArKtTWa4GmsIOrXbjdZ3MRBSjAHjHfKAVl5 KJ6GPB6N8isuVOUJqvq9m7EfM7OFlM/iXJy54I9AtHVF3tsvzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP5UTSfQfet7PqUH3oiaatoiE1HMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYmZhMjBiN2EtNjFmMy0z NjdkLWI5ZTAtZjQ3ODI4MDJkOGZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGl1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI+EOEzcxdCa6d5TOx9YCdkGciSVBxFBOlGjnn7+W1BZVwsTQAe0+JGs qFoq7G12vpCV0UrXNerAXOhclfZ7j3J4uVUpVLkkEHHsOn6F0TEFkZwoz7dfe/fG 4tz6Drg6uDE8eO9t1hgkPvG6zWrR6Y0CyQBinXDBROVMyfZOw5bw1ObRy6D+Zo6x 7yqt0pjndkEG0uAF7af7NeixSGZwlY6t3ELBPToBeSNriK4vPGcOIHRwFgAup4EZ u85omw0jd/+8cO3kvLGkUgy129cp81lozTopZ7GHUHWR6qFy8qpx6MBkqRqNBfwk F+NshWATg7EWP/mvYRk/5efDoNwvyeA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:46:18 2025 by rpki-client