$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1e9edb22-4fb2-351f-939a-2fe7feb554f3.roa File: 1e9edb22-4fb2-351f-939a-2fe7feb554f3.roa (raw, json) Hash identifier: dsnSJheNXCOwFA/PqDbveJVR8k+DpkcsCfJESuqHfc0= Subject key identifier: 07:DD:C5:64:14:C2:A0:BE:E4:2F:B6:1F:AC:8D:6D:62:CE:A6:39:0F Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858499DBF36BCD0A669131ECFCB80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1e9edb22-4fb2-351f-939a-2fe7feb554f3.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 203 IP address blocks: 207.37.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:36:bc:d0:a6:69:13:1e:cf:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=3589d2e4-00ce-41a6-a76f-3c2eb2aa8522 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:81:71:bf:d5:3f:a7:63:6a:b0:f8:e6:f4:69: 64:e4:f6:f1:b9:30:8d:76:66:10:26:57:21:4d:f9: 0a:41:fb:08:b7:25:36:91:05:81:e9:f9:a2:54:d8: ca:22:08:4b:ce:de:e8:2b:4a:f4:aa:d5:9d:b7:02: b0:9a:fd:18:09:d0:df:52:6f:07:b4:0d:e2:cc:e6: d6:76:34:5b:48:6c:41:ee:52:20:90:68:59:34:4b: ee:1c:87:28:38:b9:b8:92:f1:26:cc:9b:6a:05:47: b0:b3:93:18:6f:63:57:e5:be:67:7b:05:7b:65:85: ab:a5:55:3e:53:cb:30:7f:bc:6e:e7:fa:91:54:ad: 44:bb:ce:ed:3f:6b:e2:cb:20:8f:07:e8:48:6c:a6: df:fa:d9:32:2a:a5:ea:2c:7f:02:22:4c:24:49:b3: 4f:ad:08:a2:19:b5:79:af:f2:32:70:a7:c6:ef:e7: 27:9f:fe:7a:a5:4d:71:6e:a1:68:36:7f:73:4e:28: b6:83:7e:f1:02:46:39:04:7d:30:1d:ef:b5:98:35: e9:65:0d:e2:ad:97:47:81:ef:48:fd:50:f2:f9:f2: dc:bf:dd:4b:41:bd:95:04:c5:df:ce:c3:ea:fd:4d: 75:0e:bb:7f:9b:94:6b:05:53:5e:d8:34:48:78:c6: d8:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:DD:C5:64:14:C2:A0:BE:E4:2F:B6:1F:AC:8D:6D:62:CE:A6:39:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1e9edb22-4fb2-351f-939a-2fe7feb554f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 207.37.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:ab:6e:76:25:3d:6a:8e:da:42:e9:ef:8f:e5:f1:4c:ee:14: 3e:ea:3b:5a:16:82:e4:32:f9:e5:a1:a2:8f:72:72:5c:37:35: 71:15:a5:e6:b2:e7:be:a2:d8:e0:a8:af:d4:38:56:d4:83:eb: bf:65:6f:0f:bd:55:8a:66:6f:ca:e5:b8:0b:1a:d5:a9:58:10: 02:56:96:4a:5c:cf:bc:91:cf:b4:fe:01:2f:27:e5:96:88:99: 1b:0c:2b:25:2f:24:cc:38:26:df:97:26:c7:24:63:f9:10:a1: 15:a0:0c:57:c7:98:c7:fe:9f:c5:bc:b7:a1:97:c8:bd:f4:65: 97:84:42:47:aa:64:33:fc:f6:b4:7c:11:33:46:74:4e:cc:9c: 19:f0:16:24:d0:25:bf:84:96:7b:13:0f:13:2e:c1:5c:58:44: 81:db:1a:6a:49:ff:db:0d:ba:df:a7:13:35:7b:e2:b5:27:79: 8f:f6:eb:52:fc:2e:4f:f4:f1:5c:05:41:d9:a8:bc:44:de:dd: ba:56:31:ca:a2:93:a4:68:5f:b6:f4:3f:5f:c9:80:e9:83:6d: c3:d7:48:04:7d:76:9e:b0:08:54:a2:49:2a:47:a2:e7:f6:9c: df:75:89:52:0b:f3:c5:d9:44:93:63:76:53:a0:e3:28:6d:6d: fc:94:cf:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdvza80KZpEx7Py4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk MzU4OWQyZTQtMDBjZS00MWE2LWE3NmYtM2MyZWIyYWE4NTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoFxv9U/p2NqsPjm9Glk5PbxuTCNdmYQJlch TfkKQfsItyU2kQWB6fmiVNjKIghLzt7oK0r0qtWdtwKwmv0YCdDfUm8HtA3izObW djRbSGxB7lIgkGhZNEvuHIcoOLm4kvEmzJtqBUews5MYb2NX5b5newV7ZYWrpVU+ U8swf7xu5/qRVK1Eu87tP2viyyCPB+hIbKbf+tkyKqXqLH8CIkwkSbNPrQiiGbV5 r/IycKfG7+cnn/56pU1xbqFoNn9zTii2g37xAkY5BH0wHe+1mDXpZQ3irZdHge9I /VDy+fLcv91LQb2VBMXfzsPq/U11Drt/m5RrBVNe2DRIeMbYgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAfdxWQUwqC+5C+2H6yNbWLOpjkPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMWU5ZWRiMjItNGZiMi0z NTFmLTkzOWEtMmZlN2ZlYjU1NGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzyXIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIarbnYlPWqO2kLp74/l8UzuFD7qO1oWguQy+eWhoo9yclw3NXEVpeay 576i2OCor9Q4VtSD679lbw+9VYpmb8rluAsa1alYEAJWlkpcz7yRz7T+AS8n5ZaI mRsMKyUvJMw4Jt+XJsckY/kQoRWgDFfHmMf+n8W8t6GXyL30ZZeEQkeqZDP89rR8 ETNGdE7MnBnwFiTQJb+ElnsTDxMuwVxYRIHbGmpJ/9sNut+nEzV74rUneY/261L8 Lk/08VwFQdmovETe3bpWMcqik6RoX7b0P1/JgOmDbcPXSAR9dp6wCFSiSSpHouf2 nN91iVIL88XZRJNjdlOg4yhtbfyUz/o= -----END CERTIFICATE-----Generated at Sat Apr 26 19:14:45 2025 by rpki-client