$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/cb3d191d-90d0-3273-91ef-cd65b0535e75.roa File: cb3d191d-90d0-3273-91ef-cd65b0535e75.roa (raw, json) Hash identifier: RfkD3nE2Hvtj8Hki5WOxaRs8fjL9tOGTCDLnANewrV0= Subject key identifier: 82:1C:FD:A1:00:5E:29:EF:15:2E:9F:9D:66:2E:56:0C:48:C1:23:79 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285849631EC5F96CCE528447258D00 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/cb3d191d-90d0-3273-91ef-cd65b0535e75.roa Signing time: Wed 02 Apr 2025 01:00:46 +0000 ROA not before: Wed 02 Apr 2025 01:00:46 +0000 ROA not after: Tue 01 Jul 2025 01:00:46 +0000 asID: 3356 IP address blocks: 170.30.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:63:1e:c5:f9:6c:ce:52:84:47:25:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 2 01:00:46 2025 GMT Not After : Jul 1 01:00:46 2025 GMT Subject: CN=874b1b08-3662-4901-8880-f206612f5118 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:a6:98:82:20:7a:0a:67:6a:10:bf:51:df:25: 00:8f:48:1d:3b:ea:80:0d:3c:ec:47:57:66:14:03: 69:d9:a4:9b:13:ef:b8:84:ff:2c:5a:70:c7:33:ce: 3a:f2:05:fe:43:33:0e:0f:ae:5e:06:25:70:f0:0c: 20:4a:93:f3:d5:0a:be:87:a1:89:99:35:f2:54:60: a4:71:9c:3e:75:3f:16:fc:af:6e:77:8f:91:f9:fe: 3a:7b:66:58:53:21:8d:80:ae:2c:e5:9c:10:6b:09: ba:de:a6:06:57:7d:90:c2:c5:8b:ab:5d:2b:6f:8f: 0e:35:17:ee:67:25:e3:71:2f:23:80:7d:3b:fd:0d: dc:d3:2a:b9:bd:ba:8d:b6:ba:b8:4a:8b:35:40:8f: ea:91:4e:d0:9b:01:6d:a5:4c:5e:4f:38:98:27:5c: 56:a1:94:81:ad:e7:27:b1:29:2e:e5:fa:64:37:13: 5a:b3:66:6b:f1:4f:be:ed:8e:9d:79:3d:fa:3d:6d: cb:fc:0f:99:09:12:bb:39:83:97:a8:7c:e7:09:34: 69:a1:d1:66:1f:29:3e:d3:09:4c:1c:5c:fe:36:ea: 5f:60:b5:00:a3:55:cc:7c:04:51:d7:c9:f3:68:99: 00:83:a3:39:c2:56:c1:01:9f:a4:51:03:72:90:b5: 6a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:1C:FD:A1:00:5E:29:EF:15:2E:9F:9D:66:2E:56:0C:48:C1:23:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/cb3d191d-90d0-3273-91ef-cd65b0535e75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 170.30.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:1f:fd:18:1c:3b:78:02:12:ed:5f:b9:76:b7:0c:58:d0:a6: d3:a3:28:e6:9c:d5:c6:d9:60:48:db:aa:37:ea:f4:37:63:d7: c7:c6:de:61:10:dd:bc:46:d9:5c:13:b4:ab:1c:bc:e1:2e:be: f1:31:b8:39:b4:d5:77:99:1d:30:c2:e3:50:a3:6f:32:27:d8: 58:04:61:9c:3e:61:dc:64:99:8b:62:03:81:84:fa:6a:05:2c: 1b:80:80:89:d0:d3:db:44:56:c7:9a:df:ba:ee:a3:02:a0:61: 35:77:c8:7b:ca:c8:9f:05:e3:1a:a1:7f:03:0a:12:31:9d:c3: 48:c9:20:8a:7c:bb:2e:b4:6e:2a:ee:2f:c7:aa:29:07:a0:41: c0:50:d3:65:55:b7:55:79:3e:6c:ea:b4:0f:b7:3c:2d:96:ce: 5b:68:7d:a1:f6:62:0a:57:a2:8b:60:03:d4:9f:e9:9f:19:07: f9:f1:fd:35:68:3c:39:fb:5e:67:f3:f4:c7:fc:61:2d:7e:4f: a0:4e:bf:20:fd:41:d1:b2:d7:a1:bd:93:96:b1:b4:f0:22:19: ed:e7:da:f5:3a:2c:99:e7:02:41:76:85:4d:24:f6:c2:6e:42: f0:49:0c:91:a3:fb:bd:a6:7e:c3:d3:14:c2:68:78:40:53:2b: 66:6c:f0:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEljHsX5bM5ShEcljQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDQwMjAxMDA0NloXDTI1MDcwMTAxMDA0NlowLzEtMCsGA1UEAxMk ODc0YjFiMDgtMzY2Mi00OTAxLTg4ODAtZjIwNjYxMmY1MTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5KaYgiB6CmdqEL9R3yUAj0gdO+qADTzsR1dm FANp2aSbE++4hP8sWnDHM8468gX+QzMOD65eBiVw8AwgSpPz1Qq+h6GJmTXyVGCk cZw+dT8W/K9ud4+R+f46e2ZYUyGNgK4s5ZwQawm63qYGV32QwsWLq10rb48ONRfu ZyXjcS8jgH07/Q3c0yq5vbqNtrq4Sos1QI/qkU7QmwFtpUxeTziYJ1xWoZSBrecn sSku5fpkNxNas2Zr8U++7Y6deT36PW3L/A+ZCRK7OYOXqHznCTRpodFmHyk+0wlM HFz+NupfYLUAo1XMfARR18nzaJkAg6M5wlbBAZ+kUQNykLVqawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIIc/aEAXinvFS6fnWYuVgxIwSN5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvY2IzZDE5MWQtOTBkMC0z MjczLTkxZWYtY2Q2NWIwNTM1ZTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqh7cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD0f/RgcO3gCEu1fuXa3DFjQptOjKOac1cbZYEjbqjfq9Ddj18fG3mEQ 3bxG2VwTtKscvOEuvvExuDm01XeZHTDC41CjbzIn2FgEYZw+YdxkmYtiA4GE+moF LBuAgInQ09tEVsea37ruowKgYTV3yHvKyJ8F4xqhfwMKEjGdw0jJIIp8uy60biru L8eqKQegQcBQ02VVt1V5PmzqtA+3PC2WzltofaH2YgpXootgA9Sf6Z8ZB/nx/TVo PDn7Xmfz9Mf8YS1+T6BOvyD9QdGy16G9k5axtPAiGe3n2vU6LJnnAkF2hU0k9sJu QvBJDJGj+72mfsPTFMJoeEBTK2Zs8Mw= -----END CERTIFICATE-----Generated at Sat Apr 5 11:14:52 2025 by rpki-client