$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d15a19d2-8620-3f97-85f8-b739bf195797.roa File: d15a19d2-8620-3f97-85f8-b739bf195797.roa (raw, json) Hash identifier: J5D3QEPCHbPqH0Kt3SaCDG408qg3p0z1QpRptQ9BC6Y= Subject key identifier: B0:71:3B:DE:77:14:43:17:90:EF:6F:1C:EF:C0:40:F3:49:1A:C3:22 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285848EC969FB8ED78A14DE60C8800 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d15a19d2-8620-3f97-85f8-b739bf195797.roa Signing time: Tue 18 Feb 2025 14:00:52 +0000 ROA not before: Tue 18 Feb 2025 14:00:52 +0000 ROA not after: Mon 19 May 2025 13:00:52 +0000 asID: 202 IP address blocks: 204.103.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ec:96:9f:b8:ed:78:a1:4d:e6:0c:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Feb 18 14:00:52 2025 GMT Not After : May 19 13:00:52 2025 GMT Subject: CN=2e223914-c956-4c9d-a650-1cabd2fb38d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:1f:cc:77:75:d9:0d:9a:3e:d3:3e:49:77:a7: 3c:da:2e:0b:f5:b3:52:33:0b:42:5a:01:0e:40:ff: 7b:c1:6f:1d:bf:9f:1c:7e:0d:c6:e8:c2:75:0c:fb: f9:cc:be:e8:49:bd:fc:b3:8c:39:05:df:a3:bd:0d: d0:9c:67:89:a0:28:7e:6e:88:dc:dc:78:9a:00:e5: f4:bc:59:a6:ca:14:8a:bd:10:78:f7:dc:81:f9:20: db:ea:bf:01:d3:94:4f:b0:38:1f:54:73:f4:8d:3c: 30:32:6d:82:10:37:5e:ca:72:0b:3f:6a:2c:97:c0: 35:1f:7b:51:cf:74:83:8f:27:16:08:d5:30:e7:72: 0d:b3:80:48:d9:66:00:3e:64:90:9c:22:3f:b5:e6: c7:58:88:36:35:e5:2e:42:f8:91:0b:77:82:b3:b5: 4a:78:4b:12:2a:76:af:e6:48:c5:3e:a7:8b:5f:0c: 2e:42:b5:f7:59:05:8d:2f:b8:e6:db:21:ea:cd:28: 74:59:27:55:70:73:ea:b0:89:75:c0:9f:f5:db:38: fb:b7:3b:5f:1b:06:f1:65:8d:9e:7a:b0:ce:cc:96: 3e:1b:1d:e2:b8:6c:b7:6b:c2:04:10:be:e3:eb:ea: 75:da:37:54:c9:3f:cf:41:ef:6a:34:f2:fd:4f:88: fb:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:71:3B:DE:77:14:43:17:90:EF:6F:1C:EF:C0:40:F3:49:1A:C3:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d15a19d2-8620-3f97-85f8-b739bf195797.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 204.103.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:53:b6:bf:4a:f8:84:5d:74:f1:10:cf:9d:d4:fd:4d:48:af: df:c4:92:de:bf:0f:67:ab:e6:09:87:d6:d7:6b:44:53:87:e9: 35:d0:35:9b:a4:03:c7:e5:0f:0f:30:72:81:dc:8d:18:13:b8: a0:88:18:e2:5c:c2:5f:42:0f:27:ae:6b:e0:e7:77:b1:35:ba: 01:f4:b1:b2:6b:bd:9a:32:b3:5c:d5:9a:08:47:57:b9:f2:a8: 51:55:02:8c:b0:76:3b:4f:9e:80:c8:24:1e:3d:48:35:09:a6: e0:66:74:85:b0:55:73:0d:21:b8:44:c5:ca:98:15:18:67:55: 34:a2:c4:58:5c:05:23:09:f2:06:3b:a7:68:a1:b5:e8:38:80: 55:4d:5d:40:2b:62:b3:3e:a9:e0:57:83:73:02:fc:f5:82:c2: 2d:02:81:32:1c:6b:cb:c7:89:7a:08:8d:93:cb:30:b7:20:1e: 17:7a:a0:fa:8c:e1:ff:fc:71:d8:26:7d:1a:8a:c9:0d:4c:22: fd:cb:fd:a7:80:81:cc:a9:e0:a3:e8:a7:ad:1d:7e:3d:f8:6c: 77:08:65:ef:09:43:da:04:27:b9:80:4b:14:25:0a:b7:d2:17: 85:e5:36:64:72:9b:cc:3e:cf:0d:03:d2:7b:1c:09:fc:35:db: 08:33:d8:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjslp+47XihTeYMiAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk MmUyMjM5MTQtYzk1Ni00YzlkLWE2NTAtMWNhYmQyZmIzOGQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlx/Md3XZDZo+0z5Jd6c82i4L9bNSMwtCWgEO QP97wW8dv58cfg3G6MJ1DPv5zL7oSb38s4w5Bd+jvQ3QnGeJoCh+bojc3HiaAOX0 vFmmyhSKvRB499yB+SDb6r8B05RPsDgfVHP0jTwwMm2CEDdeynILP2osl8A1H3tR z3SDjycWCNUw53INs4BI2WYAPmSQnCI/tebHWIg2NeUuQviRC3eCs7VKeEsSKnav 5kjFPqeLXwwuQrX3WQWNL7jm2yHqzSh0WSdVcHPqsIl1wJ/12zj7tztfGwbxZY2e erDOzJY+Gx3iuGy3a8IEEL7j6+p12jdUyT/PQe9qNPL9T4j7/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLBxO953FEMXkO9vHO/AQPNJGsMiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZDE1YTE5ZDItODYyMC0z Zjk3LTg1ZjgtYjczOWJmMTk1Nzk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzGdwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADBTtr9K+IRddPEQz53U/U1Ir9/Ekt6/D2er5gmH1tdrRFOH6TXQNZuk A8flDw8wcoHcjRgTuKCIGOJcwl9CDyeua+Dnd7E1ugH0sbJrvZoys1zVmghHV7ny qFFVAoywdjtPnoDIJB49SDUJpuBmdIWwVXMNIbhExcqYFRhnVTSixFhcBSMJ8gY7 p2ihteg4gFVNXUArYrM+qeBXg3MC/PWCwi0CgTIca8vHiXoIjZPLMLcgHhd6oPqM 4f/8cdgmfRqKyQ1MIv3L/aeAgcyp4KPop60dfj34bHcIZe8JQ9oEJ7mASxQlCrfS F4XlNmRym8w+zw0D0nscCfw12wgz2IA= -----END CERTIFICATE-----Generated at Sat Apr 5 16:41:54 2025 by rpki-client