$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f71616a4-0bce-3a01-8839-fc59ebf049f7.roa File: f71616a4-0bce-3a01-8839-fc59ebf049f7.roa (raw, json) Hash identifier: xKEAifP5bmw2DLQXkgdw6bMWuYeb4X+XK/he5HZzIW0= Subject key identifier: 24:87:00:80:90:52:8D:D4:E3:A2:33:14:D9:0C:FA:92:61:42:22:92 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285849631EC56D8A539E04C4DD9700 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f71616a4-0bce-3a01-8839-fc59ebf049f7.roa Signing time: Wed 02 Apr 2025 01:00:46 +0000 ROA not before: Wed 02 Apr 2025 01:00:46 +0000 ROA not after: Tue 01 Jul 2025 01:00:46 +0000 asID: 3360 IP address blocks: 170.30.208.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:63:1e:c5:6d:8a:53:9e:04:c4:dd:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 2 01:00:46 2025 GMT Not After : Jul 1 01:00:46 2025 GMT Subject: CN=5ebf8e47-9aaf-4f56-8820-608960504570 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:3a:75:cb:4f:9b:c3:7e:8d:fc:b1:4a:00:5e: c9:9f:15:0a:14:d5:7b:a1:ad:8a:fd:f8:02:ac:44: c7:93:b7:15:89:00:de:59:57:c0:21:02:c9:3e:68: 70:ad:19:79:78:88:5f:47:58:9e:67:ca:b9:d7:e3: ab:ea:69:b0:fd:9b:3d:54:54:7b:3b:37:c8:43:90: cb:76:14:6a:6b:4c:d4:79:bf:37:3e:10:04:de:37: b8:0d:32:04:ef:bb:ae:d9:ef:ad:1d:48:09:43:de: b6:e6:05:42:90:7a:a3:0b:bd:9d:1e:88:26:49:eb: ff:5a:c7:db:ee:59:d9:3c:74:fc:43:41:bb:97:59: a8:07:24:94:f3:55:9d:a1:a4:e2:3e:bb:bb:cd:fc: 4f:b8:0a:5b:3f:2b:b2:ba:95:31:7b:a6:f1:db:8b: 9e:26:ef:25:44:8c:90:d2:12:51:09:86:c9:36:d7: 0b:c4:13:b9:b6:00:49:db:a6:a7:07:17:e3:f2:9c: 70:3a:5f:20:64:d9:44:38:64:2b:7f:6d:1a:58:59: d8:97:25:16:ca:04:7e:02:c7:59:63:bc:f3:a0:9f: 59:5a:f3:47:b5:cb:2c:fa:88:8e:30:8c:b3:d9:1a: 23:25:0b:b1:76:90:6f:f2:97:2d:87:3e:a0:70:f5: 46:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:87:00:80:90:52:8D:D4:E3:A2:33:14:D9:0C:FA:92:61:42:22:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f71616a4-0bce-3a01-8839-fc59ebf049f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 170.30.208.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:0e:2a:04:cc:96:42:f2:cd:c6:14:ef:66:fb:84:ed:db:50: 56:74:f6:27:10:12:14:65:ac:1a:91:cf:e7:e9:0f:7e:10:52: fe:ce:58:21:c6:32:74:97:79:c3:19:a1:a3:45:33:e7:73:64: d0:0c:1d:73:6e:d6:a1:ae:a1:e4:d9:54:6d:4e:a9:b9:5a:ff: 8f:15:bb:8a:a8:58:16:e2:96:74:d4:f7:10:01:67:8d:b7:db: d7:ed:55:1c:b7:6e:d4:bd:57:cc:25:f6:70:20:4b:6d:6f:99: 98:a5:32:bf:6e:da:83:65:34:9c:c0:d3:41:69:18:73:62:25: f2:97:da:6a:63:e8:3e:16:39:42:c2:b4:92:6b:25:04:9b:81: c1:61:00:2c:ea:9c:5f:9f:ec:31:ce:31:44:1a:4a:49:40:5b: 7c:2e:3b:c6:81:d2:30:3f:d7:e0:a6:7f:04:88:92:db:5e:1c: b0:f0:e1:18:2c:a3:b2:96:ed:22:ce:22:07:14:21:1c:90:d5: 29:1d:26:5c:0d:fd:82:9f:40:60:e2:b1:e3:52:b3:09:02:ac: ba:16:9e:82:6e:89:a6:35:49:74:98:73:82:01:97:28:51:3d: ff:92:e0:0f:e4:c2:b1:77:50:c0:b6:6a:91:d5:b9:81:71:1e: d3:4e:04:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEljHsVtilOeBMTdlwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDQwMjAxMDA0NloXDTI1MDcwMTAxMDA0NlowLzEtMCsGA1UEAxMk NWViZjhlNDctOWFhZi00ZjU2LTg4MjAtNjA4OTYwNTA0NTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTp1y0+bw36N/LFKAF7JnxUKFNV7oa2K/fgC rETHk7cViQDeWVfAIQLJPmhwrRl5eIhfR1ieZ8q51+Or6mmw/Zs9VFR7OzfIQ5DL dhRqa0zUeb83PhAE3je4DTIE77uu2e+tHUgJQ9625gVCkHqjC72dHogmSev/Wsfb 7lnZPHT8Q0G7l1moBySU81WdoaTiPru7zfxPuApbPyuyupUxe6bx24ueJu8lRIyQ 0hJRCYbJNtcLxBO5tgBJ26anBxfj8pxwOl8gZNlEOGQrf20aWFnYlyUWygR+AsdZ Y7zzoJ9ZWvNHtcss+oiOMIyz2RojJQuxdpBv8pcthz6gcPVGYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCSHAICQUo3U46IzFNkM+pJhQiKSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZjcxNjE2YTQtMGJjZS0z YTAxLTg4MzktZmM1OWViZjA0OWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqh7QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACIOKgTMlkLyzcYU72b7hO3bUFZ09icQEhRlrBqRz+fpD34QUv7OWCHG MnSXecMZoaNFM+dzZNAMHXNu1qGuoeTZVG1Oqbla/48Vu4qoWBbilnTU9xABZ423 29ftVRy3btS9V8wl9nAgS21vmZilMr9u2oNlNJzA00FpGHNiJfKX2mpj6D4WOULC tJJrJQSbgcFhACzqnF+f7DHOMUQaSklAW3wuO8aB0jA/1+CmfwSIktteHLDw4Rgs o7KW7SLOIgcUIRyQ1SkdJlwN/YKfQGDiseNSswkCrLoWnoJuiaY1SXSYc4IBlyhR Pf+S4A/kwrF3UMC2apHVuYFxHtNOBGg= -----END CERTIFICATE-----Generated at Sat Apr 5 21:19:20 2025 by rpki-client