$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c11d8234-a111-33d7-8017-f104b7dbff09.roa File: c11d8234-a111-33d7-8017-f104b7dbff09.roa (raw, json) Hash identifier: XdOCfyaJGvolOYfIZLqP+lHNHI0jSAVA9sef36VIZmc= Subject key identifier: 25:BA:1D:0A:61:99:4B:D6:D9:AD:82:24:6B:5D:F3:77:D8:DD:FF:89 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584A698B29EC817AEFCDD6A2FD80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c11d8234-a111-33d7-8017-f104b7dbff09.roa Signing time: Sat 05 Jul 2025 01:00:50 +0000 ROA not before: Sat 05 Jul 2025 01:00:50 +0000 ROA not after: Fri 03 Oct 2025 01:00:50 +0000 asID: 3356 IP address blocks: 204.104.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 01 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:69:8b:29:ec:81:7a:ef:cd:d6:a2:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jul 5 01:00:50 2025 GMT Not After : Oct 3 01:00:50 2025 GMT Subject: CN=75d997bc-1d42-4444-9ba5-7acec9eef6c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:7b:90:e1:d7:71:73:4e:f2:da:7c:f7:e6:49: b1:fe:c1:40:67:e3:0d:e9:82:c4:2a:50:fb:14:53: a4:38:13:21:11:e6:66:c2:fa:cb:99:74:6c:20:b7: 02:5f:e6:a4:05:7d:0b:a6:0e:d3:2f:85:3c:f6:ca: 03:ba:83:51:55:23:3f:b3:18:77:c5:b7:77:58:f3: e8:cb:4a:f4:66:49:b0:40:d2:83:97:20:71:a9:04: 0f:e3:41:42:32:4d:b7:be:db:5f:27:9c:92:44:31: 3f:3e:ab:17:0f:a8:57:8f:cd:0e:9b:9e:68:e8:76: 19:0c:92:bd:8e:f8:0b:35:09:fa:7b:dd:ff:40:dd: af:e7:5d:26:b0:f4:3b:fc:53:c4:88:d7:b8:cc:0c: 50:50:a7:8e:71:78:6b:ef:4d:a2:79:25:83:fd:22: 96:a9:a5:b6:82:24:87:45:53:65:9b:19:a2:47:75: 37:a1:6e:73:79:85:85:93:33:ea:e8:ce:d9:2c:56: 08:03:c4:35:52:a0:fc:92:d5:eb:cf:dc:2c:03:61: 28:03:8a:1e:34:15:2b:a5:c5:e0:c4:37:80:34:7a: e1:67:a8:c1:2a:02:0e:71:26:5a:79:7a:fa:a0:e5: 33:b8:e3:2e:e4:99:a2:e2:28:c3:7d:fb:d5:cd:b6: cf:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:BA:1D:0A:61:99:4B:D6:D9:AD:82:24:6B:5D:F3:77:D8:DD:FF:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c11d8234-a111-33d7-8017-f104b7dbff09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 204.104.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:ec:53:be:a4:36:72:c0:57:57:17:9c:0f:98:84:69:94:90: dc:c9:cd:c5:aa:54:09:44:58:35:58:2f:21:86:a2:e2:17:3f: 06:ec:82:54:6c:9d:e8:4e:49:ee:d3:a4:7b:56:29:88:cd:4b: db:cf:91:cb:44:1a:30:52:1c:08:21:54:45:f8:ba:46:82:03: 49:88:b7:37:ab:55:12:d4:14:f6:bb:a5:12:71:26:2b:47:03: dc:51:70:5a:d7:fb:04:3b:28:3f:a0:01:23:02:c7:4f:09:51: 07:af:c5:f3:07:cd:64:ec:7a:b2:9a:21:df:92:e6:f5:72:3d: 62:ef:3b:29:06:39:7e:a2:85:38:8a:f3:95:41:e3:35:a5:24: de:0e:ea:a8:e6:fe:77:fa:00:72:fa:b9:f2:fb:46:72:5e:eb: 87:75:7b:66:c8:ce:be:55:27:74:2a:aa:fe:e1:e5:55:24:2e: d9:f0:6c:7f:13:5e:9e:38:25:61:79:f9:c7:ac:f5:d0:64:03: 3e:e7:d5:96:8d:26:3e:34:5b:67:ad:91:3a:3f:14:2c:8c:f8: 0b:10:f7:71:fa:fc:06:8a:22:8e:39:87:3b:9c:0e:ea:c9:09: b4:76:e1:1b:e7:9a:a7:2d:30:1f:d2:4d:5e:97:0b:35:c9:a0: 57:cf:5f:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEppiynsgXrvzdai/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDcwNTAxMDA1MFoXDTI1MTAwMzAxMDA1MFowLzEtMCsGA1UEAxMk NzVkOTk3YmMtMWQ0Mi00NDQ0LTliYTUtN2FjZWM5ZWVmNmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXuQ4ddxc07y2nz35kmx/sFAZ+MN6YLEKlD7 FFOkOBMhEeZmwvrLmXRsILcCX+akBX0Lpg7TL4U89soDuoNRVSM/sxh3xbd3WPPo y0r0ZkmwQNKDlyBxqQQP40FCMk23vttfJ5ySRDE/PqsXD6hXj80Om55o6HYZDJK9 jvgLNQn6e93/QN2v510msPQ7/FPEiNe4zAxQUKeOcXhr702ieSWD/SKWqaW2giSH RVNlmxmiR3U3oW5zeYWFkzPq6M7ZLFYIA8Q1UqD8ktXrz9wsA2EoA4oeNBUrpcXg xDeANHrhZ6jBKgIOcSZaeXr6oOUzuOMu5Jmi4ijDffvVzbbPYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCW6HQphmUvW2a2CJGtd83fY3f+JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYzExZDgyMzQtYTExMS0z M2Q3LTgwMTctZjEwNGI3ZGJmZjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGgMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAALsU76kNnLAV1cXnA+YhGmUkNzJzcWqVAlEWDVYLyGGouIXPwbsglRs nehOSe7TpHtWKYjNS9vPkctEGjBSHAghVEX4ukaCA0mItzerVRLUFPa7pRJxJitH A9xRcFrX+wQ7KD+gASMCx08JUQevxfMHzWTserKaId+S5vVyPWLvOykGOX6ihTiK 85VB4zWlJN4O6qjm/nf6AHL6ufL7RnJe64d1e2bIzr5VJ3Qqqv7h5VUkLtnwbH8T Xp44JWF5+ces9dBkAz7n1ZaNJj40W2etkTo/FCyM+AsQ93H6/AaKIo45hzucDurJ CbR24RvnmqctMB/STV6XCzXJoFfPX/s= -----END CERTIFICATE-----Generated at Wed Jul 30 23:46:36 2025 by rpki-client