$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d665c16c-aafb-312c-9ec6-e661450e6510.roa File: d665c16c-aafb-312c-9ec6-e661450e6510.roa (raw, json) Hash identifier: Z6X/yyVaGxNA1EY+En8Yjx8gF9+rezeCGfSl7fPFcUw= Subject key identifier: 63:5F:A3:B6:2E:5B:67:73:AE:D0:AA:36:67:F8:AE:1D:81:4F:5D:72 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858491246CD3E8FFC1CFF5C9B9BB0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d665c16c-aafb-312c-9ec6-e661450e6510.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 202 IP address blocks: 206.164.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:cd:3e:8f:fc:1c:ff:5c:9b:9b:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=a79e7b00-9ad2-4e74-9d3d-3f91353f927f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:b9:c7:99:d6:1a:4f:35:a2:fa:52:63:f8:03: b8:0e:33:75:26:ce:89:47:dd:24:90:2f:54:f2:27: d5:96:38:88:16:c5:d4:40:97:47:01:9c:95:9d:cf: 96:bc:54:f0:d1:3b:5e:c0:c4:4f:25:e4:34:a6:b9: 6f:2f:68:1b:f6:b1:21:29:b1:0f:82:1f:57:c7:71: b2:65:3e:2f:85:58:04:03:05:fc:ab:95:e7:64:c5: 27:fb:c5:cd:c2:f1:7e:ff:e7:95:a6:6b:8e:2b:82: 19:d2:18:47:92:af:e2:e7:19:8f:2b:91:f3:a7:93: 45:7b:76:6b:71:2f:f5:ca:83:2a:24:17:cc:2c:05: d4:a3:e9:3c:a9:19:1f:9c:b7:a4:60:3e:7f:48:dc: 49:94:07:3b:e2:25:a7:38:2d:02:7d:82:4e:84:1b: 45:95:a5:df:ad:bb:7d:80:c9:3e:f6:74:e3:86:62: b2:71:fc:01:42:9b:93:b7:0b:e6:30:16:a3:8e:e5: ac:85:99:d5:e2:a4:3b:a4:39:76:e5:db:f8:63:06: ea:85:72:ac:02:d9:17:bb:dc:33:fd:1f:a8:e5:7e: 0b:83:b9:22:83:5c:b8:0d:08:d9:57:97:e6:36:d1: 4c:ae:98:b4:08:e6:d4:37:0f:f7:e0:40:32:c0:f5: b4:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:5F:A3:B6:2E:5B:67:73:AE:D0:AA:36:67:F8:AE:1D:81:4F:5D:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d665c16c-aafb-312c-9ec6-e661450e6510.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 206.164.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:95:b4:2d:8f:47:ea:49:fe:ef:d7:8b:53:8a:68:8f:53:7e: 47:91:24:67:9c:6d:7e:9b:ed:dd:69:fa:f9:a0:a8:c9:0d:2b: e7:4e:6d:d2:b4:8b:ff:1b:dd:84:e5:84:be:86:e9:c4:3a:be: ce:b7:33:c6:e7:3a:b0:c7:b1:0d:8a:d3:f4:12:d9:90:8a:97: 64:af:18:31:d7:df:eb:2e:73:20:af:f1:94:a5:35:52:0f:fe: af:e9:ab:9c:fa:92:6c:3d:d0:5f:48:c6:9a:26:1a:2e:af:78: fc:9d:6b:5a:6c:93:f5:4d:de:cc:c4:82:0d:49:dd:45:90:4f: 61:36:3b:59:e2:09:49:c2:10:7e:af:38:60:62:10:79:10:67: 0c:ab:74:a4:0f:c5:3a:29:ef:b0:d6:fa:23:26:b3:4c:46:72: 52:63:bd:95:41:b5:5d:b6:2b:7a:08:f5:a8:ca:6f:8a:bd:19: b7:06:de:bb:7a:7b:25:40:b6:8e:30:2a:7b:37:80:f2:74:1b: d6:eb:58:90:30:89:3c:db:ad:04:79:38:03:0e:b2:06:ef:ee: b9:b4:b2:cd:99:f1:d1:71:b0:51:28:78:b1:a8:18:8d:c1:b0: 9f:95:e7:5d:05:23:c9:d6:c8:0a:29:fa:22:65:e2:b8:c7:22: 18:0e:ef:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRs0+j/wc/1ybm7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk YTc5ZTdiMDAtOWFkMi00ZTc0LTlkM2QtM2Y5MTM1M2Y5MjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLnHmdYaTzWi+lJj+AO4DjN1Js6JR90kkC9U 8ifVljiIFsXUQJdHAZyVnc+WvFTw0TtewMRPJeQ0prlvL2gb9rEhKbEPgh9Xx3Gy ZT4vhVgEAwX8q5XnZMUn+8XNwvF+/+eVpmuOK4IZ0hhHkq/i5xmPK5Hzp5NFe3Zr cS/1yoMqJBfMLAXUo+k8qRkfnLekYD5/SNxJlAc74iWnOC0CfYJOhBtFlaXfrbt9 gMk+9nTjhmKycfwBQpuTtwvmMBajjuWshZnV4qQ7pDl25dv4YwbqhXKsAtkXu9wz /R+o5X4Lg7kig1y4DQjZV5fmNtFMrpi0CObUNw/34EAywPW0nwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGNfo7YuW2dzrtCqNmf4rh2BT11yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZDY2NWMxNmMtYWFmYi0z MTJjLTllYzYtZTY2MTQ1MGU2NTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzqSoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHKVtC2PR+pJ/u/Xi1OKaI9TfkeRJGecbX6b7d1p+vmgqMkNK+dObdK0 i/8b3YTlhL6G6cQ6vs63M8bnOrDHsQ2K0/QS2ZCKl2SvGDHX3+sucyCv8ZSlNVIP /q/pq5z6kmw90F9IxpomGi6vePyda1psk/VN3szEgg1J3UWQT2E2O1niCUnCEH6v OGBiEHkQZwyrdKQPxTop77DW+iMms0xGclJjvZVBtV22K3oI9ajKb4q9GbcG3rt6 eyVAto4wKns3gPJ0G9brWJAwiTzbrQR5OAMOsgbv7rm0ss2Z8dFxsFEoeLGoGI3B sJ+V510FI8nWyAop+iJl4rjHIhgO75g= -----END CERTIFICATE-----Generated at Fri Mar 14 10:08:55 2025 by rpki-client