$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/22502d83-8eb0-3092-98c2-4b38d9e9a509.roa File: 22502d83-8eb0-3092-98c2-4b38d9e9a509.roa (raw, json) Hash identifier: 1CcUGM/LamTOOLdApZEcwKlyL9171wICznd095EAqNE= Subject key identifier: A7:30:C5:65:05:EE:BF:1D:E8:92:B2:65:1E:67:FC:EE:70:0F:20:0A Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858498A346E33CF213CC4E6EDCB00 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/22502d83-8eb0-3092-98c2-4b38d9e9a509.roa Signing time: Wed 16 Apr 2025 01:00:48 +0000 ROA not before: Wed 16 Apr 2025 01:00:48 +0000 ROA not after: Tue 15 Jul 2025 01:00:48 +0000 asID: 5714 IP address blocks: 204.104.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8a:34:6e:33:cf:21:3c:c4:e6:ed:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 16 01:00:48 2025 GMT Not After : Jul 15 01:00:48 2025 GMT Subject: CN=17e097dc-de0b-43c4-98b2-e29ec9e5a911 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3e:f9:db:68:d3:ea:a9:34:24:c4:05:61:eb: 2d:9a:f9:b9:ed:52:f1:57:12:1b:82:0c:5f:e9:d5: 5b:47:4f:8f:f5:7b:c1:70:0c:4d:96:75:c8:c2:dd: 2d:c1:02:7e:4d:ee:83:21:f7:3a:57:8c:b6:f6:ca: f9:56:09:22:2a:e8:2e:94:7a:30:28:8b:71:b3:82: 0c:90:b4:0a:c7:44:a2:04:24:23:f5:e4:fd:58:f6: 16:78:e2:da:61:60:2f:11:f7:34:ed:49:1b:70:b7: 79:94:93:c4:5c:f3:a8:51:41:c2:6e:04:21:c7:75: f0:6b:59:88:0d:dd:70:b9:78:03:db:b2:2e:0a:02: aa:f3:de:90:b3:19:1a:46:e2:15:09:c5:0a:ea:8d: d7:c2:01:10:3e:e8:fd:38:2c:9f:cf:d1:75:46:56: 2e:49:fe:ba:67:77:50:6e:51:3f:f6:8c:7e:90:82: f1:2a:96:13:b1:e5:97:f4:e5:1d:58:9a:fa:28:d4: 9b:3d:1d:21:48:5e:29:6a:6d:8f:f7:56:48:d3:7e: f2:58:66:24:38:f7:36:2a:fc:30:ed:aa:5f:82:3e: 58:3e:c0:13:a6:b0:4a:43:d7:a4:c5:c7:c0:fb:95: 61:38:f8:13:84:2b:1c:e8:a9:a4:67:34:ff:0e:98: 09:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:30:C5:65:05:EE:BF:1D:E8:92:B2:65:1E:67:FC:EE:70:0F:20:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/22502d83-8eb0-3092-98c2-4b38d9e9a509.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 204.104.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:b6:d6:ad:87:f0:ad:9c:7e:a1:e7:cd:ce:65:a3:3a:90:29: 26:a2:5e:f8:27:52:e4:b4:6e:61:f9:36:7b:51:c4:41:16:d8: 39:69:e4:a3:06:82:e3:6c:e4:5f:14:3f:a9:79:79:bf:4d:bb: bb:2c:5f:30:9a:82:4d:ce:b0:20:10:fc:51:10:27:b6:7a:d1: b2:35:22:9a:16:fa:7c:4b:55:0d:49:7c:b7:ff:26:0e:9f:c4: 38:44:d8:0c:ee:a6:07:fd:1b:e3:5a:e6:41:b7:e0:2f:cb:cf: 81:c7:1a:1c:aa:b2:2e:dd:a9:a1:17:ee:e4:60:ce:36:37:ef: 28:99:13:e8:2f:fc:23:a4:df:e6:e5:fc:75:d2:96:7e:04:fc: a5:14:03:ea:86:39:25:2e:8d:4b:0b:54:63:61:82:5c:a9:86: 3c:7a:53:09:ab:c2:81:56:6d:91:d4:44:5e:a0:b5:bc:df:c2: 7c:fa:59:0d:c6:cd:e8:bc:71:a7:32:39:87:3e:73:c8:bc:d9: 0a:82:85:a2:7b:38:f0:cf:f1:fc:87:ed:40:47:ac:85:47:a2: f9:00:d3:fe:b2:06:fb:16:26:57:68:c6:3c:13:a3:64:41:6a: 9d:42:0e:7d:6f:5d:ca:f3:39:06:df:49:ee:63:d5:fe:85:04: 5d:ec:f7:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmKNG4zzyE8xObtywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDQxNjAxMDA0OFoXDTI1MDcxNTAxMDA0OFowLzEtMCsGA1UEAxMk MTdlMDk3ZGMtZGUwYi00M2M0LTk4YjItZTI5ZWM5ZTVhOTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuz7522jT6qk0JMQFYestmvm57VLxVxIbggxf 6dVbR0+P9XvBcAxNlnXIwt0twQJ+Te6DIfc6V4y29sr5VgkiKugulHowKItxs4IM kLQKx0SiBCQj9eT9WPYWeOLaYWAvEfc07UkbcLd5lJPEXPOoUUHCbgQhx3Xwa1mI Dd1wuXgD27IuCgKq896QsxkaRuIVCcUK6o3XwgEQPuj9OCyfz9F1RlYuSf66Z3dQ blE/9ox+kILxKpYTseWX9OUdWJr6KNSbPR0hSF4pam2P91ZI037yWGYkOPc2Kvww 7apfgj5YPsATprBKQ9ekxcfA+5VhOPgThCsc6KmkZzT/DpgJuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKcwxWUF7r8d6JKyZR5n/O5wDyAKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMjI1MDJkODMtOGViMC0z MDkyLTk4YzItNGIzOGQ5ZTlhNTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGjPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIq21q2H8K2cfqHnzc5lozqQKSaiXvgnUuS0bmH5NntRxEEW2Dlp5KMG guNs5F8UP6l5eb9Nu7ssXzCagk3OsCAQ/FEQJ7Z60bI1IpoW+nxLVQ1JfLf/Jg6f xDhE2Azupgf9G+Na5kG34C/Lz4HHGhyqsi7dqaEX7uRgzjY37yiZE+gv/COk3+bl /HXSln4E/KUUA+qGOSUujUsLVGNhglyphjx6UwmrwoFWbZHURF6gtbzfwnz6WQ3G zei8cacyOYc+c8i82QqChaJ7OPDP8fyH7UBHrIVHovkA0/6yBvsWJldoxjwTo2RB ap1CDn1vXcrzOQbfSe5j1f6FBF3s9+k= -----END CERTIFICATE-----Generated at Sun Apr 27 04:08:05 2025 by rpki-client