$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2bfcf175-64bb-34d3-a4fe-8bbfe2bf3eae.roa File: 2bfcf175-64bb-34d3-a4fe-8bbfe2bf3eae.roa (raw, json) Hash identifier: dnxPhujGO54V8PVPrNXrRaUhbZ0aK0zVI83pWXD5mWU= Subject key identifier: 68:87:02:9F:CF:EB:38:47:8D:11:83:9D:99:AA:8D:18:4C:DB:1A:A8 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285849CBCFA85A6DDE74AFDBB9A580 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2bfcf175-64bb-34d3-a4fe-8bbfe2bf3eae.roa Signing time: Fri 09 May 2025 13:01:00 +0000 ROA not before: Fri 09 May 2025 13:01:00 +0000 ROA not after: Thu 07 Aug 2025 13:01:00 +0000 asID: 202 IP address blocks: 206.164.180.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cb:cf:a8:5a:6d:de:74:af:db:b9:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: May 9 13:01:00 2025 GMT Not After : Aug 7 13:01:00 2025 GMT Subject: CN=72f1c175-cc1a-46c5-a4e1-994be9808be2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:92:20:98:24:0a:fb:7e:11:46:3a:a1:6d:92: 6a:70:48:a7:63:a1:1b:d5:af:37:ce:4d:46:53:81: bb:88:d7:de:47:10:99:f9:e9:cf:7f:09:e9:48:47: 9a:b9:86:eb:20:bc:60:e6:17:aa:81:b4:d0:5b:da: c1:8f:ef:68:05:05:f1:a3:01:ab:d3:83:22:78:2e: 6c:74:17:f9:98:a7:1c:29:ef:4d:7f:18:77:4e:3e: f3:14:f7:2b:11:27:37:06:22:56:62:53:f7:29:2f: 4c:17:cc:76:14:ef:a3:e5:78:f7:89:36:e5:dc:1a: b1:8e:0d:ca:a9:da:09:52:ea:0d:f6:3a:cf:cc:10: d0:48:cd:cc:6a:2e:c1:e4:1e:0a:51:9e:dd:50:d8: e2:85:22:2a:c5:c8:97:65:88:fe:51:02:59:02:7f: 13:89:6f:69:33:c1:d9:23:f2:34:ee:b0:d1:bc:19: b7:e3:b4:f7:8a:ec:96:91:93:0b:14:1c:33:61:bf: ea:70:0a:04:f6:dd:12:75:10:7b:ab:53:d9:72:7d: 66:6f:b1:dc:51:85:65:70:2c:2a:0a:4f:dd:bc:ee: 8a:50:39:92:e1:b2:a5:70:0d:9d:14:f0:e8:29:a5: ea:69:fc:24:f9:5a:81:74:b5:f2:fa:69:87:c5:dd: fb:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:87:02:9F:CF:EB:38:47:8D:11:83:9D:99:AA:8D:18:4C:DB:1A:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2bfcf175-64bb-34d3-a4fe-8bbfe2bf3eae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 206.164.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:36:a1:a4:3b:22:f5:ff:2b:50:41:15:37:07:49:f3:fa:8b: aa:b2:b1:79:90:80:bc:66:df:1d:8b:0a:18:dc:09:8e:dc:a2: ed:c8:c3:46:c8:01:91:b8:8f:5d:72:df:2d:51:ea:30:9c:ed: 42:fd:86:74:72:3c:7a:f0:cc:c7:5c:20:76:ab:7e:ef:02:35: 85:01:5f:15:da:51:3b:f6:ac:a7:d8:1f:41:dc:9b:d8:0c:3c: c7:2c:6c:7d:08:ff:b7:da:82:24:60:fb:d7:8e:d8:b9:14:1e: 9a:32:50:23:01:d8:8a:9f:b5:87:e9:15:09:11:35:fb:e3:3b: 2a:88:2f:c6:02:81:f4:c1:6e:2b:1e:f4:68:4a:36:3b:fa:ec: e6:c3:fe:81:ec:c8:6b:6f:d4:1f:be:d5:b2:67:31:0e:1e:4a: 09:41:b2:50:b5:05:c6:46:21:69:b0:9e:31:e7:79:da:34:8c: 2b:75:22:55:ee:c7:ec:17:bf:bf:41:e3:2b:25:ae:64:47:e6: e7:73:9f:e1:53:fb:a5:3c:05:e2:c1:4f:94:4d:13:a8:7b:fd: 08:d3:4f:bb:cd:8c:88:07:af:46:ab:3b:eb:98:ca:21:4a:ba: 8a:37:ec:fa:67:0c:06:b6:e4:a5:89:81:09:36:95:82:89:59: 04:b0:b3:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnLz6habd50r9u5pYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDUwOTEzMDEwMFoXDTI1MDgwNzEzMDEwMFowLzEtMCsGA1UEAxMk NzJmMWMxNzUtY2MxYS00NmM1LWE0ZTEtOTk0YmU5ODA4YmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZIgmCQK+34RRjqhbZJqcEinY6Eb1a83zk1G U4G7iNfeRxCZ+enPfwnpSEeauYbrILxg5heqgbTQW9rBj+9oBQXxowGr04MieC5s dBf5mKccKe9Nfxh3Tj7zFPcrESc3BiJWYlP3KS9MF8x2FO+j5Xj3iTbl3Bqxjg3K qdoJUuoN9jrPzBDQSM3Mai7B5B4KUZ7dUNjihSIqxciXZYj+UQJZAn8TiW9pM8HZ I/I07rDRvBm347T3iuyWkZMLFBwzYb/qcAoE9t0SdRB7q1PZcn1mb7HcUYVlcCwq Ck/dvO6KUDmS4bKlcA2dFPDoKaXqafwk+VqBdLXy+mmHxd378wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGiHAp/P6zhHjRGDnZmqjRhM2xqoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMmJmY2YxNzUtNjRiYi0z NGQzLWE0ZmUtOGJiZmUyYmYzZWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzqS0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFo2oaQ7IvX/K1BBFTcHSfP6i6qysXmQgLxm3x2LChjcCY7cou3Iw0bI AZG4j11y3y1R6jCc7UL9hnRyPHrwzMdcIHarfu8CNYUBXxXaUTv2rKfYH0Hcm9gM PMcsbH0I/7fagiRg+9eO2LkUHpoyUCMB2IqftYfpFQkRNfvjOyqIL8YCgfTBbise 9GhKNjv67ObD/oHsyGtv1B++1bJnMQ4eSglBslC1BcZGIWmwnjHnedo0jCt1IlXu x+wXv79B4yslrmRH5udzn+FT+6U8BeLBT5RNE6h7/QjTT7vNjIgHr0arO+uYyiFK uoo37PpnDAa25KWJgQk2lYKJWQSwsyU= -----END CERTIFICATE-----Generated at Sun Jun 15 17:44:59 2025 by rpki-client