$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3d1ee24b-0660-396f-99a4-2e009e6a52fc.roa File: 3d1ee24b-0660-396f-99a4-2e009e6a52fc.roa (raw, json) Hash identifier: s5tHfn5E0tXVe7tVdFBinFRScXInCUfIMLOEnQMLRyk= Subject key identifier: 08:C6:37:E9:E8:C8:ED:5C:E0:D1:85:9C:B7:02:98:59:D1:09:08:07 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285849998F398E3CED2EA1777018E0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3d1ee24b-0660-396f-99a4-2e009e6a52fc.roa Signing time: Mon 21 Apr 2025 13:00:59 +0000 ROA not before: Mon 21 Apr 2025 13:00:59 +0000 ROA not after: Sun 20 Jul 2025 13:00:59 +0000 asID: 3360 IP address blocks: 170.30.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:99:8f:39:8e:3c:ed:2e:a1:77:70:18:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 21 13:00:59 2025 GMT Not After : Jul 20 13:00:59 2025 GMT Subject: CN=f8c8f7a9-1b37-4a42-a6c7-7dee561ea1b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:58:12:82:68:8d:8c:c3:a0:e6:88:4c:47:1d: 12:d3:a9:a2:52:e2:57:67:80:dd:bd:0a:62:14:46: 7f:12:50:4c:30:8c:fd:5c:52:43:fc:84:23:b8:05: de:ae:8b:3d:d3:69:c2:ef:d9:da:d0:cb:a6:59:4a: 97:d7:bb:c0:55:71:fd:4e:e4:43:c8:fc:10:99:ca: ee:3a:6a:ee:17:7b:1a:a5:4a:88:ab:b1:52:59:be: b2:96:05:0f:f9:29:f8:24:c4:be:27:a7:28:75:25: ef:f1:09:59:5f:b0:ec:0f:18:b5:4f:b5:56:d7:5a: 84:de:25:62:17:11:2f:cb:11:2e:aa:43:c2:30:1d: e2:6c:0c:6e:63:80:76:a0:3f:18:8d:eb:91:3e:7d: 75:8d:c9:e1:01:e6:59:98:83:89:15:14:66:cc:72: c2:40:94:7f:92:5b:be:76:a6:d4:15:0b:d4:4a:53: 1d:b8:ed:c0:09:e6:31:a7:2c:13:f4:ec:75:10:9f: 04:e4:52:23:ea:20:06:c8:2f:b3:8a:33:2b:ce:74: 90:d7:c8:6f:cf:60:85:9c:d3:2e:62:35:23:fe:93: a6:f8:65:ce:a0:2d:0a:1a:47:10:6f:c1:b6:2d:33: 80:ae:67:a7:e4:1e:75:d1:9e:eb:2b:94:89:b3:a0: e9:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:C6:37:E9:E8:C8:ED:5C:E0:D1:85:9C:B7:02:98:59:D1:09:08:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3d1ee24b-0660-396f-99a4-2e009e6a52fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 170.30.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:23:0b:ca:ba:e4:58:92:4b:d0:59:00:e0:1c:30:ab:f9:e3: 52:67:7d:cc:53:a8:66:48:d6:80:23:78:fe:27:17:ff:4f:3b: 76:db:3d:de:aa:7f:26:34:e5:21:3a:c6:11:20:91:c0:83:40: 50:87:e3:58:46:e2:42:37:dd:1d:72:d7:0c:03:d4:d0:45:86: a4:96:10:20:1b:44:1b:6d:94:c5:6e:67:9e:9b:d3:1c:ef:54: bc:bd:98:4c:80:c5:fc:3b:50:ab:57:ac:a0:2e:ae:cd:77:e0: cb:82:3c:4d:75:e1:75:60:36:d1:08:a2:d9:f2:55:04:64:3a: 04:8f:cf:04:95:db:3a:5e:f8:d2:15:54:bd:9f:4a:09:ed:f2: 34:8c:5d:c1:45:a5:9c:dd:dc:28:7f:4d:2b:a7:6e:59:c3:77: 6a:9a:29:84:6b:20:67:ba:f1:cb:79:d7:eb:7e:21:8d:4b:f5: 4c:7d:10:ff:7d:d1:10:a2:ca:80:0e:b1:3e:4b:5e:f0:36:8c: 8f:90:6a:22:51:e6:b9:16:b7:a2:70:a2:f3:95:1c:4c:37:44: 3a:ff:44:ff:40:ec:6f:ae:40:e2:9c:cf:bc:0f:83:fe:10:84: 28:bd:72:f4:3f:59:b4:79:62:c4:23:1a:a6:6a:a0:93:2e:84: 10:03:01:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmZjzmOPO0uoXdwGOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDQyMTEzMDA1OVoXDTI1MDcyMDEzMDA1OVowLzEtMCsGA1UEAxMk ZjhjOGY3YTktMWIzNy00YTQyLWE2YzctN2RlZTU2MWVhMWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFgSgmiNjMOg5ohMRx0S06miUuJXZ4DdvQpi FEZ/ElBMMIz9XFJD/IQjuAXeros902nC79na0MumWUqX17vAVXH9TuRDyPwQmcru OmruF3sapUqIq7FSWb6ylgUP+Sn4JMS+J6codSXv8QlZX7DsDxi1T7VW11qE3iVi FxEvyxEuqkPCMB3ibAxuY4B2oD8YjeuRPn11jcnhAeZZmIOJFRRmzHLCQJR/klu+ dqbUFQvUSlMduO3ACeYxpywT9Ox1EJ8E5FIj6iAGyC+zijMrznSQ18hvz2CFnNMu YjUj/pOm+GXOoC0KGkcQb8G2LTOArmen5B510Z7rK5SJs6DpAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAjGN+noyO1c4NGFnLcCmFnRCQgHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvM2QxZWUyNGItMDY2MC0z OTZmLTk5YTQtMmUwMDllNmE1MmZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqh7HMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGkjC8q65FiSS9BZAOAcMKv541JnfcxTqGZI1oAjeP4nF/9PO3bbPd6q fyY05SE6xhEgkcCDQFCH41hG4kI33R1y1wwD1NBFhqSWECAbRBttlMVuZ56b0xzv VLy9mEyAxfw7UKtXrKAurs134MuCPE114XVgNtEIotnyVQRkOgSPzwSV2zpe+NIV VL2fSgnt8jSMXcFFpZzd3Ch/TSunblnDd2qaKYRrIGe68ct51+t+IY1L9Ux9EP99 0RCiyoAOsT5LXvA2jI+QaiJR5rkWt6JwovOVHEw3RDr/RP9A7G+uQOKcz7wPg/4Q hCi9cvQ/WbR5YsQjGqZqoJMuhBADASA= -----END CERTIFICATE-----Generated at Sun Apr 27 00:16:31 2025 by rpki-client