$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f4eb41df-175b-30f1-85ee-de4719989ed1.roa File: f4eb41df-175b-30f1-85ee-de4719989ed1.roa (raw, json) Hash identifier: jDZLvbrCfz98sZ6QBBW8sPvbzH+2wybLtNSJWjpVtoQ= Subject key identifier: D8:DD:80:84:0C:6B:22:F1:B4:B3:6B:6C:50:C5:B4:EC:BB:AE:24:24 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285848AAFB5EF9ACDB026F3C8AA080 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f4eb41df-175b-30f1-85ee-de4719989ed1.roa Signing time: Sun 26 Jan 2025 02:00:38 +0000 ROA not before: Sun 26 Jan 2025 02:00:38 +0000 ROA not after: Sat 26 Apr 2025 01:00:38 +0000 asID: 3360 IP address blocks: 204.104.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:aa:fb:5e:f9:ac:db:02:6f:3c:8a:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jan 26 02:00:38 2025 GMT Not After : Apr 26 01:00:38 2025 GMT Subject: CN=349cb9d7-8b1c-46af-9b9e-8fb411091141 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a3:83:ba:de:98:f1:6e:6d:95:c1:cf:19:10: a2:7a:e9:e1:8b:9b:42:44:fb:a0:a5:31:0e:85:a5: 3f:01:a9:08:48:d1:ca:c1:ba:b3:cf:20:a3:3f:44: 8d:0e:5c:8a:d4:69:b1:fb:5b:51:db:f7:97:57:4d: a6:d7:fe:cd:47:9e:22:50:81:fc:81:de:a8:12:c5: 6a:3b:40:fe:36:3f:63:81:01:66:59:29:d1:5d:08: af:16:a1:95:6f:83:d2:f7:d8:ff:f1:58:46:e3:14: 2f:93:ea:ea:0c:51:d5:94:49:ff:eb:b5:ef:cd:ea: e8:ad:4a:54:55:ad:96:aa:b5:be:a2:48:1c:8b:bf: 72:9f:28:4b:04:31:83:97:9c:cf:15:5d:85:a6:c6: 04:0e:6b:ab:8a:cd:d8:55:86:45:4b:ef:d1:09:c4: 69:5e:25:a6:37:32:4d:ba:78:c1:19:3d:83:c4:87: c9:94:36:b4:0b:72:05:66:5e:67:ff:77:02:b2:03: 29:d5:4b:a9:f0:7c:4c:7a:5d:a3:10:22:f5:6a:2b: 00:82:78:cc:67:43:e9:c3:b4:ef:89:6c:97:b0:f4: 13:8d:e9:23:b9:fa:65:98:9e:e3:a3:ff:2d:17:1f: c4:6e:53:ce:66:c8:ef:37:2a:4c:fa:c2:80:5e:82: 91:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:DD:80:84:0C:6B:22:F1:B4:B3:6B:6C:50:C5:B4:EC:BB:AE:24:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f4eb41df-175b-30f1-85ee-de4719989ed1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 204.104.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:8a:aa:b1:35:d4:b9:a7:a4:36:c0:77:f4:85:25:8f:34:c1: 7e:f9:78:a0:74:79:56:1c:ae:dc:72:45:1b:fb:2f:6b:42:61: 98:f7:f6:dc:62:ce:9a:ba:b1:5f:ea:39:59:91:5f:d6:77:5b: 7d:e6:c6:55:08:fc:bb:b0:e4:a2:25:2b:dd:99:a2:6a:5a:57: eb:2c:99:13:98:45:d6:7e:32:02:4f:eb:66:3f:8f:51:f5:9a: 4f:e1:19:6a:0b:42:11:9f:f8:5f:22:f2:9a:f7:1f:dd:7c:94: e7:2b:36:e1:0d:df:99:8c:25:f6:a1:6b:4d:dd:e7:93:40:2e: 0c:41:7f:fd:90:14:f9:b5:24:26:58:b1:7d:9e:bf:ad:b9:3a: 62:25:fc:4c:cb:02:63:ab:7c:80:e5:5a:13:31:65:07:03:59: 03:94:88:86:94:f1:ea:c5:4c:b7:b9:6d:91:3c:dc:8a:2d:36: 63:7a:82:ef:4e:7f:73:90:59:98:2b:d8:d5:61:04:27:a7:02: e6:dc:0b:52:84:b8:19:2d:06:72:e4:bc:48:33:51:a7:ab:7a: 4b:a2:09:4e:66:9d:65:9e:6f:04:ee:54:55:01:4c:b2:a3:57: 2c:f2:01:dd:7b:2b:70:ea:e5:d4:b0:14:64:49:cb:b0:06:3c: 9c:fa:c2:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiq+175rNsCbzyKoIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDEyNjAyMDAzOFoXDTI1MDQyNjAxMDAzOFowLzEtMCsGA1UEAxMk MzQ5Y2I5ZDctOGIxYy00NmFmLTliOWUtOGZiNDExMDkxMTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKODut6Y8W5tlcHPGRCieunhi5tCRPugpTEO haU/AakISNHKwbqzzyCjP0SNDlyK1Gmx+1tR2/eXV02m1/7NR54iUIH8gd6oEsVq O0D+Nj9jgQFmWSnRXQivFqGVb4PS99j/8VhG4xQvk+rqDFHVlEn/67XvzerorUpU Va2WqrW+okgci79ynyhLBDGDl5zPFV2FpsYEDmuris3YVYZFS+/RCcRpXiWmNzJN unjBGT2DxIfJlDa0C3IFZl5n/3cCsgMp1Uup8HxMel2jECL1aisAgnjMZ0Ppw7Tv iWyXsPQTjekjufplmJ7jo/8tFx/EblPOZsjvNypM+sKAXoKR8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNjdgIQMayLxtLNrbFDFtOy7riQkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZjRlYjQxZGYtMTc1Yi0z MGYxLTg1ZWUtZGU0NzE5OTg5ZWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGgNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFaKqrE11LmnpDbAd/SFJY80wX75eKB0eVYcrtxyRRv7L2tCYZj39txi zpq6sV/qOVmRX9Z3W33mxlUI/Luw5KIlK92ZompaV+ssmROYRdZ+MgJP62Y/j1H1 mk/hGWoLQhGf+F8i8pr3H918lOcrNuEN35mMJfaha03d55NALgxBf/2QFPm1JCZY sX2ev625OmIl/EzLAmOrfIDlWhMxZQcDWQOUiIaU8erFTLe5bZE83IotNmN6gu9O f3OQWZgr2NVhBCenAubcC1KEuBktBnLkvEgzUaerekuiCU5mnWWebwTuVFUBTLKj VyzyAd17K3Dq5dSwFGRJy7AGPJz6wms= -----END CERTIFICATE-----Generated at Sun Feb 16 15:52:48 2025 by rpki-client