$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/124dedae-551c-33db-a1ce-a170056e3fb1.roa File: 124dedae-551c-33db-a1ce-a170056e3fb1.roa (raw, json) Hash identifier: k2VZhxtP2/xj6wYPWEK31yxU0rIk7OW7UYaKgUpnda4= Subject key identifier: 3B:BA:2B:33:52:05:E9:19:6D:23:03:D5:D1:EB:83:E2:92:04:D8:C3 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858498A346DC7EFF8377507DC9B00 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/124dedae-551c-33db-a1ce-a170056e3fb1.roa Signing time: Wed 16 Apr 2025 01:00:48 +0000 ROA not before: Wed 16 Apr 2025 01:00:48 +0000 ROA not after: Tue 15 Jul 2025 01:00:48 +0000 asID: 202 IP address blocks: 204.104.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8a:34:6d:c7:ef:f8:37:75:07:dc:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 16 01:00:48 2025 GMT Not After : Jul 15 01:00:48 2025 GMT Subject: CN=b052c2f1-9040-4570-b1d4-9e031fee491d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:1d:1b:28:42:4d:22:02:01:5a:99:bf:0f:bc: d2:16:45:05:ac:94:12:78:cb:e2:c7:41:77:ca:4b: 76:24:00:c7:96:28:e8:9e:f9:b0:7d:88:51:42:ea: 5b:27:54:8c:d1:c1:60:61:1a:98:a9:fe:f4:df:91: 70:20:9c:df:b5:81:5e:3c:fd:b2:4d:e8:ac:f7:fe: 2c:69:5f:ac:f7:d0:ec:b3:a2:fc:20:42:ab:96:ac: 62:a2:bc:59:ef:cd:cc:33:e8:a1:ea:f6:f4:2d:49: fa:a3:43:85:b8:21:a5:ee:5d:31:33:bb:35:6c:41: da:9f:9a:bd:f3:14:8e:cf:4a:72:07:00:0b:f6:f9: 23:57:72:18:50:ef:2a:3a:cd:ce:91:12:78:3f:0c: 40:d6:8b:50:87:b0:ca:ba:2b:ee:5a:ca:3c:6b:97: 11:42:6e:de:db:5c:c6:a2:6f:fb:58:84:89:23:a5: 23:6e:7e:4d:78:e0:08:2e:d5:57:09:64:5f:5c:1c: 0c:cc:e3:fe:39:01:53:3f:27:62:87:7c:62:34:94: 7d:14:b2:dc:8a:7f:e9:55:50:1e:9e:e9:da:e9:67: 1c:5e:7e:51:5d:46:3e:a4:97:71:e1:9c:ed:9a:43: 79:f9:0b:d6:56:ed:9c:ca:15:50:6a:49:2a:ef:95: c1:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:BA:2B:33:52:05:E9:19:6D:23:03:D5:D1:EB:83:E2:92:04:D8:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/124dedae-551c-33db-a1ce-a170056e3fb1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 204.104.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:08:ed:fb:ad:51:fb:f5:01:42:4a:b8:19:30:d6:e1:3f:56: b1:7d:51:93:6a:b4:2d:81:49:c3:8c:58:4f:a7:6d:79:e4:fb: c1:63:4a:8b:6c:91:55:45:cd:e8:c7:20:00:04:a6:5f:67:63: d2:f3:87:c7:b9:89:86:e3:f3:b3:48:6c:bf:a2:fa:d3:1f:52: 1a:2c:4a:d0:3f:57:72:8f:2a:48:3c:08:6d:8c:9e:c8:c3:65: 1a:65:c7:2c:6d:2b:da:44:68:4c:72:ef:4c:f8:b4:fb:95:78: 48:ec:49:5b:10:57:fa:3c:8e:6a:fc:1e:03:bb:80:a8:c1:4c: fa:cc:61:fe:5c:ba:32:c0:86:61:44:4a:38:28:90:5b:ba:61: 92:05:61:38:52:3e:f9:b4:b8:1f:a2:80:d1:71:91:24:a4:07: f8:8b:50:5f:5c:b7:ba:fd:df:2b:85:8d:c1:c4:45:93:fc:48: 59:45:01:c8:9f:b7:eb:b2:bc:19:76:1e:a8:20:45:42:4b:d8: 83:56:a9:d9:8c:a9:23:27:a2:2e:bb:75:78:e8:ff:64:4f:50: ec:e3:67:16:45:df:e6:27:56:b4:80:ed:95:cf:56:27:bb:ee: cb:47:e9:65:f2:01:4f:1b:31:35:84:93:6f:eb:66:ea:93:b1: 24:9e:04:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmKNG3H7/g3dQfcmwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDQxNjAxMDA0OFoXDTI1MDcxNTAxMDA0OFowLzEtMCsGA1UEAxMk YjA1MmMyZjEtOTA0MC00NTcwLWIxZDQtOWUwMzFmZWU0OTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnR0bKEJNIgIBWpm/D7zSFkUFrJQSeMvix0F3 ykt2JADHlijonvmwfYhRQupbJ1SM0cFgYRqYqf7035FwIJzftYFePP2yTeis9/4s aV+s99Dss6L8IEKrlqxiorxZ783MM+ih6vb0LUn6o0OFuCGl7l0xM7s1bEHan5q9 8xSOz0pyBwAL9vkjV3IYUO8qOs3OkRJ4PwxA1otQh7DKuivuWso8a5cRQm7e21zG om/7WISJI6Ujbn5NeOAILtVXCWRfXBwMzOP+OQFTPydih3xiNJR9FLLcin/pVVAe nuna6WccXn5RXUY+pJdx4ZztmkN5+QvWVu2cyhVQakkq75XB9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDu6KzNSBekZbSMD1dHrg+KSBNjDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMTI0ZGVkYWUtNTUxYy0z M2RiLWExY2UtYTE3MDA1NmUzZmIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGjHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADsI7futUfv1AUJKuBkw1uE/VrF9UZNqtC2BScOMWE+nbXnk+8FjSots kVVFzejHIAAEpl9nY9Lzh8e5iYbj87NIbL+i+tMfUhosStA/V3KPKkg8CG2MnsjD ZRplxyxtK9pEaExy70z4tPuVeEjsSVsQV/o8jmr8HgO7gKjBTPrMYf5cujLAhmFE SjgokFu6YZIFYThSPvm0uB+igNFxkSSkB/iLUF9ct7r93yuFjcHERZP8SFlFAcif t+uyvBl2HqggRUJL2INWqdmMqSMnoi67dXjo/2RPUOzjZxZF3+YnVrSA7ZXPVie7 7stH6WXyAU8bMTWEk2/rZuqTsSSeBFU= -----END CERTIFICATE-----Generated at Sat Apr 26 17:59:25 2025 by rpki-client