$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f97a7a42-1c81-387b-9675-a7fc6822e791.roa File: f97a7a42-1c81-387b-9675-a7fc6822e791.roa (raw, json) Hash identifier: 8dSb1DEo8roM57WjM0UNkHIOwTMP2CFqC2J9GBQUopk= Subject key identifier: 48:54:EA:2F:08:5B:36:C7:E5:70:FD:2D:F3:21:69:B6:0C:35:64:89 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285848EC96A086E467E9E1B2413F40 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f97a7a42-1c81-387b-9675-a7fc6822e791.roa Signing time: Tue 18 Feb 2025 14:00:52 +0000 ROA not before: Tue 18 Feb 2025 14:00:52 +0000 ROA not after: Mon 19 May 2025 13:00:52 +0000 asID: 3360 IP address blocks: 206.164.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ec:96:a0:86:e4:67:e9:e1:b2:41:3f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Feb 18 14:00:52 2025 GMT Not After : May 19 13:00:52 2025 GMT Subject: CN=f75258db-cdc9-4c52-a8dd-56a9de49b0de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:b3:d5:b1:44:b3:c1:c2:c6:d4:6f:fb:40:98: 5e:c4:14:98:ad:04:21:49:21:c7:37:85:87:f3:2c: 30:34:66:f8:d9:9b:89:d4:60:3e:0b:81:69:9e:36: 5b:f0:b1:16:16:79:74:6e:fb:64:30:fb:e9:a7:32: a2:0f:94:91:2c:17:4f:f7:ce:cb:55:dd:7b:b1:73: 73:54:ee:33:c9:3a:af:de:4f:96:f2:b6:6e:8f:24: da:35:21:54:de:22:81:a9:69:56:3c:b3:4b:60:e2: 70:93:ad:d8:c4:b0:15:f4:05:cc:e4:3f:1d:ea:d3: 6c:47:3e:19:47:79:91:53:61:8c:68:ef:80:64:8e: 36:81:89:98:b2:4f:4e:9f:3e:6f:6c:23:7e:5c:9a: 1e:10:42:db:f9:dc:94:0b:1a:d6:a2:4d:ca:8a:2d: ba:a7:5c:3d:e9:7e:21:32:4e:14:ff:e6:5e:2e:a4: e8:2b:6d:19:a0:73:87:cb:41:2d:9b:0b:96:95:48: ad:8f:21:81:39:eb:aa:8d:cf:26:62:24:ba:35:e3: b8:8c:95:79:32:a3:ca:19:b4:e9:26:06:f5:7a:62: ab:a4:78:db:60:23:c6:d8:6a:95:2f:dd:2d:66:a6: a4:52:2c:4d:4d:9f:c9:ae:30:cc:bc:6c:2f:6d:d9: 01:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:54:EA:2F:08:5B:36:C7:E5:70:FD:2D:F3:21:69:B6:0C:35:64:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f97a7a42-1c81-387b-9675-a7fc6822e791.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 206.164.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:b5:82:fa:97:4e:a7:c1:30:ca:34:1d:bf:76:fc:ba:6a:ca: 5a:b1:de:8a:42:97:04:37:0e:1d:06:ba:00:31:3e:57:9f:c9: ab:1c:5c:e9:b8:f2:75:2d:9d:10:01:aa:4e:8c:d0:d6:9f:99: a2:68:7c:f1:22:60:8c:f3:4b:9d:b7:9b:32:18:20:03:54:b8: b9:b0:38:e0:1d:07:89:a8:0f:e4:9c:be:d2:cd:b3:c0:a5:4e: 68:9a:44:f4:06:a7:01:22:52:74:b5:6b:6b:48:81:93:20:7c: b4:e2:c6:fb:4a:56:87:fa:2c:17:35:43:45:2c:f0:e7:76:71: e4:09:8a:52:35:8b:02:d4:20:a8:f0:d7:6b:32:b7:3b:1a:dc: 4b:6e:89:3a:a5:d8:93:26:53:e6:48:07:b0:14:01:1d:26:64: d4:b7:61:81:7d:1d:0c:67:a1:fb:0d:10:60:a0:bb:19:50:5b: 5c:71:d4:61:57:49:77:40:aa:cc:be:a5:d7:2a:1a:1c:3a:29: 65:e6:b4:83:c7:09:db:bc:34:0b:5f:ba:8a:51:a1:d9:33:fa: b6:81:f2:ea:25:74:a3:ec:1e:67:98:90:a6:7e:56:8d:e3:89: 1e:51:98:d9:57:34:2c:6f:6a:65:7b:f9:a4:14:84:0c:cc:69: bd:bf:f5:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjslqCG5Gfp4bJBP0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk Zjc1MjU4ZGItY2RjOS00YzUyLWE4ZGQtNTZhOWRlNDliMGRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4bPVsUSzwcLG1G/7QJhexBSYrQQhSSHHN4WH 8ywwNGb42ZuJ1GA+C4FpnjZb8LEWFnl0bvtkMPvppzKiD5SRLBdP987LVd17sXNz VO4zyTqv3k+W8rZujyTaNSFU3iKBqWlWPLNLYOJwk63YxLAV9AXM5D8d6tNsRz4Z R3mRU2GMaO+AZI42gYmYsk9Onz5vbCN+XJoeEELb+dyUCxrWok3Kii26p1w96X4h Mk4U/+ZeLqToK20ZoHOHy0EtmwuWlUitjyGBOeuqjc8mYiS6NeO4jJV5MqPKGbTp Jgb1emKrpHjbYCPG2GqVL90tZqakUixNTZ/JrjDMvGwvbdkB/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEhU6i8IWzbH5XD9LfMhabYMNWSJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZjk3YTdhNDItMWM4MS0z ODdiLTk2NzUtYTdmYzY4MjJlNzkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqTuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEa1gvqXTqfBMMo0Hb92/Lpqylqx3opClwQ3Dh0GugAxPlefyascXOm4 8nUtnRABqk6M0NafmaJofPEiYIzzS523mzIYIANUuLmwOOAdB4moD+ScvtLNs8Cl TmiaRPQGpwEiUnS1a2tIgZMgfLTixvtKVof6LBc1Q0Us8Od2ceQJilI1iwLUIKjw 12sytzsa3EtuiTql2JMmU+ZIB7AUAR0mZNS3YYF9HQxnofsNEGCguxlQW1xx1GFX SXdAqsy+pdcqGhw6KWXmtIPHCdu8NAtfuopRodkz+raB8uoldKPsHmeYkKZ+Vo3j iR5RmNlXNCxvamV7+aQUhAzMab2/9VY= -----END CERTIFICATE-----Generated at Sat Apr 5 21:18:55 2025 by rpki-client