$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/23fd3379-4d8b-33b5-847b-df215ef4f24e.roa File: 23fd3379-4d8b-33b5-847b-df215ef4f24e.roa (raw, json) Hash identifier: k+lHgE50f9y3+IkK6A3uEXkoGgd9Jmzg83qqaAvaV98= Subject key identifier: 12:72:48:68:30:C2:59:83:3B:25:BA:82:0F:92:72:87:50:5F:F0:9B Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285849CBCFA8958162A8ADE53579C0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/23fd3379-4d8b-33b5-847b-df215ef4f24e.roa Signing time: Fri 09 May 2025 13:01:00 +0000 ROA not before: Fri 09 May 2025 13:01:00 +0000 ROA not after: Thu 07 Aug 2025 13:01:00 +0000 asID: 202 IP address blocks: 206.164.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cb:cf:a8:95:81:62:a8:ad:e5:35:79:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: May 9 13:01:00 2025 GMT Not After : Aug 7 13:01:00 2025 GMT Subject: CN=8fc85bbd-6f53-4797-bacd-d227e00d0b96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b9:13:61:a7:ac:d2:39:49:66:38:fb:60:a9: fc:1d:c9:f0:49:99:e4:9a:79:5b:4f:95:c5:62:7c: 41:d9:3e:e0:6b:5c:24:ed:63:48:d9:92:aa:13:09: f6:4c:33:72:2d:e0:6e:41:4e:43:51:60:54:7b:a3: 53:db:1c:09:05:99:6a:a0:27:ae:47:82:50:2f:b8: 15:8e:2e:fb:a4:a5:f1:da:1d:bc:5d:c8:f7:5a:5a: c3:3b:53:39:0c:36:c2:47:3f:df:1e:76:e3:ce:a2: f1:57:62:22:2e:d4:40:57:72:55:32:1e:3c:a8:4e: 90:a3:2b:63:94:dd:8f:dc:1a:51:6c:df:07:1e:a0: fe:35:ad:ad:5d:89:64:45:d3:ee:03:ab:ea:e3:20: 4c:22:2d:5a:05:52:cb:51:66:23:02:08:e9:04:19: 73:55:af:78:f8:72:09:79:80:ad:26:32:f3:e3:a4: e0:2c:91:3b:fe:18:60:6a:41:00:c4:bb:d5:7a:48: 63:7f:36:6c:4a:cb:2e:22:d5:f5:dc:da:31:ff:7d: d3:33:d5:d6:b4:22:70:a3:63:81:4e:2f:8a:ad:c7: 26:93:79:f5:28:d4:33:80:4b:0d:9f:cd:d0:32:8c: ac:cb:65:f4:6b:9c:d0:53:63:2d:ec:8b:93:6d:eb: 09:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:72:48:68:30:C2:59:83:3B:25:BA:82:0F:92:72:87:50:5F:F0:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/23fd3379-4d8b-33b5-847b-df215ef4f24e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 206.164.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:1f:24:ee:7a:45:f9:8e:17:8a:41:c7:98:2b:e6:f6:15:49: 83:97:f1:ca:50:86:c4:bf:dc:9b:6a:fa:89:c2:ae:fb:1f:d5: 49:18:5d:4c:2f:e5:4d:de:3a:e9:e3:d1:35:a1:1b:c4:46:65: 37:47:10:d1:06:17:2d:03:7b:0d:85:a7:fe:c8:6b:36:01:bd: 10:18:73:ce:e7:cc:96:20:de:f0:53:59:01:9a:52:c9:73:a8: 25:11:76:20:e3:03:3b:05:29:a4:88:2b:10:de:72:ab:5c:91: 9b:22:e7:e8:77:a8:71:46:d7:bf:c6:97:57:91:b8:60:b5:5b: 51:0f:62:4d:fb:50:46:7c:9b:2c:2d:4e:70:28:50:9a:f1:b4: 97:5d:8c:6d:b2:b9:7c:76:c0:fe:68:1b:5a:32:22:d7:d7:52: 7a:05:d8:9f:db:82:6d:46:45:e7:39:b5:ca:78:49:03:fb:24: c3:ea:40:a1:ff:26:ea:75:b3:5e:63:ba:ed:6f:0e:77:ef:0b: bc:1f:60:7b:a2:b9:94:5a:44:e3:57:6b:5d:fa:67:fd:97:ac: 63:e0:75:87:42:89:d2:71:37:c0:1c:63:dd:2c:ec:9c:80:9e: 18:37:12:57:bb:7a:eb:d5:6b:cd:e4:e4:c8:63:c6:c3:5c:e5: 2d:0d:62:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnLz6iVgWKoreU1ecAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDUwOTEzMDEwMFoXDTI1MDgwNzEzMDEwMFowLzEtMCsGA1UEAxMk OGZjODViYmQtNmY1My00Nzk3LWJhY2QtZDIyN2UwMGQwYjk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA17kTYaes0jlJZjj7YKn8HcnwSZnkmnlbT5XF YnxB2T7ga1wk7WNI2ZKqEwn2TDNyLeBuQU5DUWBUe6NT2xwJBZlqoCeuR4JQL7gV ji77pKXx2h28Xcj3WlrDO1M5DDbCRz/fHnbjzqLxV2IiLtRAV3JVMh48qE6Qoytj lN2P3BpRbN8HHqD+Na2tXYlkRdPuA6vq4yBMIi1aBVLLUWYjAgjpBBlzVa94+HIJ eYCtJjLz46TgLJE7/hhgakEAxLvVekhjfzZsSssuItX13Nox/33TM9XWtCJwo2OB Ti+Krccmk3n1KNQzgEsNn83QMoysy2X0a5zQU2Mt7IuTbesJdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBJySGgwwlmDOyW6gg+ScodQX/CbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMjNmZDMzNzktNGQ4Yi0z M2I1LTg0N2ItZGYyMTVlZjRmMjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzqTUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABsfJO56RfmOF4pBx5gr5vYVSYOX8cpQhsS/3Jtq+onCrvsf1UkYXUwv 5U3eOunj0TWhG8RGZTdHENEGFy0Dew2Fp/7IazYBvRAYc87nzJYg3vBTWQGaUslz qCURdiDjAzsFKaSIKxDecqtckZsi5+h3qHFG17/Gl1eRuGC1W1EPYk37UEZ8mywt TnAoUJrxtJddjG2yuXx2wP5oG1oyItfXUnoF2J/bgm1GRec5tcp4SQP7JMPqQKH/ Jup1s15juu1vDnfvC7wfYHuiuZRaRONXa136Z/2XrGPgdYdCidJxN8AcY90s7JyA nhg3Ele7euvVa83k5MhjxsNc5S0NYkE= -----END CERTIFICATE-----Generated at Sun Jun 15 17:51:10 2025 by rpki-client