$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/eca21d03-9df3-3f4e-9952-027a3472894c.roa File: eca21d03-9df3-3f4e-9952-027a3472894c.roa (raw, json) Hash identifier: Q5KRX/BaPIMuJsr+E0fjASpidZYDqGeutec4jVY3m7c= Subject key identifier: 28:5F:A0:DF:7C:14:CB:9F:85:36:04:1A:35:EB:EA:38:EF:05:FC:44 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285848AAFB6AA8F647F8405B64B540 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/eca21d03-9df3-3f4e-9952-027a3472894c.roa Signing time: Sun 26 Jan 2025 02:00:38 +0000 ROA not before: Sun 26 Jan 2025 02:00:38 +0000 ROA not after: Sat 26 Apr 2025 01:00:38 +0000 asID: 203 IP address blocks: 206.164.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:aa:fb:6a:a8:f6:47:f8:40:5b:64:b5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jan 26 02:00:38 2025 GMT Not After : Apr 26 01:00:38 2025 GMT Subject: CN=3ec987a6-0227-46c5-bc05-0dd1c529af7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:59:4a:5a:25:ae:4e:42:66:8d:28:9c:e5:26: 43:54:51:28:88:ba:92:aa:d5:a8:b0:09:b3:de:8c: 8d:76:24:d9:28:1f:1d:ec:be:4b:da:7b:23:42:4e: 04:05:53:56:2a:2f:48:55:d7:38:f0:b0:72:de:10: c5:34:f2:5a:a0:02:4e:95:eb:dc:4d:76:11:12:0a: 5c:f6:0e:dc:43:ed:8e:dc:f6:28:69:4b:1f:46:b1: f2:d8:d7:e7:a1:f3:a1:af:dd:05:d2:31:30:2c:eb: 1e:58:70:b9:00:f7:dc:21:d0:2d:49:2c:02:39:5c: a3:b2:17:2b:4a:da:7b:de:13:f4:09:c6:5d:9f:d6: 45:d9:5f:8f:6a:99:1c:b7:c3:8c:af:0e:79:81:bd: b6:22:3c:6c:ea:85:e8:52:3b:e0:f8:00:c5:d8:87: 73:0c:97:6b:6a:f3:8c:5d:15:53:6f:3c:46:8a:6c: 53:11:b9:9f:34:ef:4c:86:37:76:12:f7:80:91:2e: b9:ca:3c:f6:7c:b7:3a:83:5b:4f:5a:2f:87:9d:e1: ea:f8:ac:66:d4:ac:c6:b4:24:3b:a8:3e:53:0b:6c: f8:ac:39:6a:e6:71:4d:db:98:ee:04:ec:1c:de:2a: 93:db:6f:ad:fa:8b:4d:45:2c:32:e7:9a:54:1f:a8: 2c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:5F:A0:DF:7C:14:CB:9F:85:36:04:1A:35:EB:EA:38:EF:05:FC:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/eca21d03-9df3-3f4e-9952-027a3472894c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 206.164.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:d1:f6:dd:b7:31:4a:16:4a:79:61:6e:89:61:d4:6e:31:46: 94:d7:fe:86:6e:45:71:29:62:91:2a:57:21:7b:8e:91:58:ea: 19:74:5c:12:16:17:54:cc:61:80:96:99:cf:47:4c:de:99:95: a0:26:24:dc:5a:f8:b9:ad:22:bc:65:ed:d1:fc:af:19:95:4e: 5e:af:99:69:40:3c:61:97:0f:70:46:f8:9b:a0:ed:88:9b:b4: fe:4b:86:17:31:47:c2:2f:66:fd:81:29:5d:c2:63:72:64:8e: a0:81:c1:55:39:66:18:b9:23:d1:6b:e5:43:0c:85:f4:ef:56: d8:61:b0:a0:fe:ef:18:23:59:0d:82:ce:7c:78:3b:5c:50:e1: 19:cd:a1:5c:9c:ce:af:bc:a4:53:5a:08:09:d4:55:9f:3b:b5: a7:40:c3:24:3e:2d:cc:4a:b9:d0:34:52:af:45:b6:fe:63:35: 3f:2b:ed:ba:08:cd:a0:d1:d8:56:9c:6a:fc:ce:c4:8d:33:cd: eb:02:e3:cd:0c:43:99:dc:2c:f8:49:2c:90:b0:61:53:05:7a: 0c:48:93:4d:fd:96:bb:e8:77:af:f4:6f:0a:72:a7:02:4a:fe: 1f:fc:cc:21:bc:1b:f4:50:11:b7:e4:12:c4:ef:51:63:8f:b7: 35:2f:1d:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiq+2qo9kf4QFtktUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDEyNjAyMDAzOFoXDTI1MDQyNjAxMDAzOFowLzEtMCsGA1UEAxMk M2VjOTg3YTYtMDIyNy00NmM1LWJjMDUtMGRkMWM1MjlhZjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFlKWiWuTkJmjSic5SZDVFEoiLqSqtWosAmz 3oyNdiTZKB8d7L5L2nsjQk4EBVNWKi9IVdc48LBy3hDFNPJaoAJOlevcTXYREgpc 9g7cQ+2O3PYoaUsfRrHy2NfnofOhr90F0jEwLOseWHC5APfcIdAtSSwCOVyjshcr Stp73hP0CcZdn9ZF2V+Papkct8OMrw55gb22Ijxs6oXoUjvg+ADF2IdzDJdravOM XRVTbzxGimxTEbmfNO9Mhjd2EveAkS65yjz2fLc6g1tPWi+HneHq+Kxm1KzGtCQ7 qD5TC2z4rDlq5nFN25juBOwc3iqT22+t+otNRSwy55pUH6gsNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFChfoN98FMufhTYEGjXr6jjvBfxEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZWNhMjFkMDMtOWRmMy0z ZjRlLTk5NTItMDI3YTM0NzI4OTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqRoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABPR9t23MUoWSnlhbolh1G4xRpTX/oZuRXEpYpEqVyF7jpFY6hl0XBIW F1TMYYCWmc9HTN6ZlaAmJNxa+LmtIrxl7dH8rxmVTl6vmWlAPGGXD3BG+Jug7Yib tP5LhhcxR8IvZv2BKV3CY3JkjqCBwVU5Zhi5I9Fr5UMMhfTvVthhsKD+7xgjWQ2C znx4O1xQ4RnNoVyczq+8pFNaCAnUVZ87tadAwyQ+LcxKudA0Uq9Ftv5jNT8r7boI zaDR2FacavzOxI0zzesC480MQ5ncLPhJLJCwYVMFegxIk039lrvod6/0bwpypwJK /h/8zCG8G/RQEbfkEsTvUWOPtzUvHac= -----END CERTIFICATE-----Generated at Sat Apr 5 23:23:22 2025 by rpki-client