$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/dc7aa3e6-78ec-3e6a-8a50-a808fb5cd232.roa File: dc7aa3e6-78ec-3e6a-8a50-a808fb5cd232.roa (raw, json) Hash identifier: /8URRf2Ctx6wq1Rg4dZjwbI4h6OlgQz6svkbQ8TQO/U= Subject key identifier: 8E:6B:17:C0:12:06:81:36:8C:20:43:5A:9E:A2:34:4C:3D:56:9D:03 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584A698B2B7019EEBD9FA47CC580 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/dc7aa3e6-78ec-3e6a-8a50-a808fb5cd232.roa Signing time: Sat 05 Jul 2025 01:00:50 +0000 ROA not before: Sat 05 Jul 2025 01:00:50 +0000 ROA not after: Fri 03 Oct 2025 01:00:50 +0000 asID: 3356 IP address blocks: 204.104.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 01 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:69:8b:2b:70:19:ee:bd:9f:a4:7c:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jul 5 01:00:50 2025 GMT Not After : Oct 3 01:00:50 2025 GMT Subject: CN=18e530d5-e4c1-41f0-9e78-d3f840ed0c52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:8d:8b:1a:ae:9c:dd:d2:03:c8:db:55:94:09: 7f:ae:f3:7d:9a:3f:c7:8a:d3:61:f6:f8:79:5c:79: c8:f8:bf:ff:58:1f:9d:d2:40:c1:74:23:39:d5:91: 85:13:9e:67:50:17:47:f8:4d:18:17:a5:5b:b3:e6: 06:a5:7c:c6:d4:db:cf:e6:26:e5:ce:7a:e8:20:7f: 7e:c3:63:3b:1f:09:12:eb:f3:ac:1e:f3:8c:75:d5: 7a:a0:70:a5:f9:3e:c0:8c:d9:6e:b4:03:3e:cb:ac: c5:3f:4a:bc:20:f9:f9:f9:ac:04:18:b3:8e:1c:ca: 6e:78:6a:0a:42:e4:d6:3e:02:f7:e7:da:cf:2b:eb: 4c:39:4d:19:57:c2:b9:3c:dc:42:9f:7b:51:de:07: 6d:16:36:b8:74:66:64:f4:3f:e4:02:e2:f1:b4:fe: 30:32:da:fb:2a:fe:e2:aa:0c:7f:39:d1:f1:7f:b9: ab:c7:93:09:66:e2:60:4a:58:56:c5:94:a0:a7:22: 6a:07:b3:c3:46:01:d2:87:95:81:42:bb:26:61:99: 9e:5c:d4:8b:d3:20:22:86:2d:ad:3b:8e:ec:89:d6: 00:ca:bd:7d:ce:b6:f7:5d:e8:85:c7:65:98:a2:99: 03:54:a3:51:b7:55:ee:d2:b6:ad:a3:52:6b:c7:8b: 39:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:6B:17:C0:12:06:81:36:8C:20:43:5A:9E:A2:34:4C:3D:56:9D:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/dc7aa3e6-78ec-3e6a-8a50-a808fb5cd232.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 204.104.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:92:f6:6e:2e:05:e4:7e:fe:8c:5b:93:98:8b:6d:3f:c2:91: 5f:0f:34:f4:bc:13:b3:91:b3:76:a4:29:80:6e:53:b7:2f:2a: b3:f6:da:be:ee:c4:a4:98:ae:40:2f:ff:15:99:21:49:3c:81: f6:bd:ba:35:7d:7a:eb:cc:95:fc:20:87:8d:db:f2:0d:b7:fd: 01:cc:60:0a:ea:c1:cd:8b:22:31:36:ff:a5:02:a3:6e:4f:4a: e8:02:79:aa:b3:08:7b:10:50:33:1f:83:30:8e:f5:48:6b:95: 05:85:a5:8e:2f:4a:a5:2e:0b:18:46:1d:b3:ef:98:54:95:de: 9b:7a:5e:d1:4c:8d:ed:19:66:50:11:2e:1e:9f:a2:f8:94:8c: a3:ed:e1:f0:77:1a:65:3a:91:5c:13:22:98:1d:5f:e0:ae:6f: 19:95:4e:bf:4d:41:7e:fa:02:80:de:38:8e:ed:dd:e8:3f:99: 8f:cf:cb:87:0e:2f:63:e1:78:f4:c9:fc:1f:25:10:fe:cb:bc: 30:6b:db:97:c9:16:ad:11:16:5d:ee:fd:88:31:f8:13:87:b3: 4a:f6:fc:f4:f8:4a:07:99:35:ca:b8:91:49:de:73:84:0a:16: 68:76:ab:c5:f9:f3:ee:b4:5d:cc:08:c5:ea:42:bc:4a:6d:13: 56:86:9f:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEppiytwGe69n6R8xYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDcwNTAxMDA1MFoXDTI1MTAwMzAxMDA1MFowLzEtMCsGA1UEAxMk MThlNTMwZDUtZTRjMS00MWYwLTllNzgtZDNmODQwZWQwYzUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyo2LGq6c3dIDyNtVlAl/rvN9mj/HitNh9vh5 XHnI+L//WB+d0kDBdCM51ZGFE55nUBdH+E0YF6Vbs+YGpXzG1NvP5iblznroIH9+ w2M7HwkS6/OsHvOMddV6oHCl+T7AjNlutAM+y6zFP0q8IPn5+awEGLOOHMpueGoK QuTWPgL359rPK+tMOU0ZV8K5PNxCn3tR3gdtFja4dGZk9D/kAuLxtP4wMtr7Kv7i qgx/OdHxf7mrx5MJZuJgSlhWxZSgpyJqB7PDRgHSh5WBQrsmYZmeXNSL0yAihi2t O47sidYAyr19zrb3XeiFx2WYopkDVKNRt1Xu0rato1Jrx4s5kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI5rF8ASBoE2jCBDWp6iNEw9Vp0DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZGM3YWEzZTYtNzhlYy0z ZTZhLThhNTAtYTgwOGZiNWNkMjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGgqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFOS9m4uBeR+/oxbk5iLbT/CkV8PNPS8E7ORs3akKYBuU7cvKrP22r7u xKSYrkAv/xWZIUk8gfa9ujV9euvMlfwgh43b8g23/QHMYArqwc2LIjE2/6UCo25P SugCeaqzCHsQUDMfgzCO9UhrlQWFpY4vSqUuCxhGHbPvmFSV3pt6XtFMje0ZZlAR Lh6foviUjKPt4fB3GmU6kVwTIpgdX+CubxmVTr9NQX76AoDeOI7t3eg/mY/Py4cO L2PhePTJ/B8lEP7LvDBr25fJFq0RFl3u/Ygx+BOHs0r2/PT4SgeZNcq4kUnec4QK Fmh2q8X58+60XcwIxepCvEptE1aGn8k= -----END CERTIFICATE-----Generated at Wed Jul 30 23:43:14 2025 by rpki-client