$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3d929172-8490-3bed-abfb-0c8f19e1c302.roa File: 3d929172-8490-3bed-abfb-0c8f19e1c302.roa (raw, json) Hash identifier: guFux/qVI+YoMUOzn6l3Sdt1KhK5n/1MRKRDl0y0vBE= Subject key identifier: 57:A5:80:F6:C0:25:06:1F:68:67:F5:E9:E4:B1:17:61:75:0F:FE:EF Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858498A34753ECFF76186CCFDAFE0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3d929172-8490-3bed-abfb-0c8f19e1c302.roa Signing time: Wed 16 Apr 2025 01:00:48 +0000 ROA not before: Wed 16 Apr 2025 01:00:48 +0000 ROA not after: Tue 15 Jul 2025 01:00:48 +0000 asID: 3360 IP address blocks: 206.164.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8a:34:75:3e:cf:f7:61:86:cc:fd:af:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 16 01:00:48 2025 GMT Not After : Jul 15 01:00:48 2025 GMT Subject: CN=c43d4d90-5126-47c8-a4ec-974c662f27fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:42:f9:42:5d:55:7e:89:10:38:e2:9e:74:89: 2c:71:e6:b9:d8:2b:a2:b6:97:4d:02:e7:be:6e:63: f5:47:c4:7c:13:6b:e2:84:a8:30:b2:a5:82:d4:ab: 40:a4:d9:a4:18:c9:dd:f7:0b:e4:a7:ca:5e:02:80: c5:3f:32:e8:c6:b1:2a:af:46:73:d0:c7:45:7f:96: f3:2f:b8:a1:79:e6:17:a4:30:47:64:d3:5e:c2:eb: ed:7c:a9:1c:0b:16:ef:8b:9f:e7:50:94:a6:4a:0b: e1:1c:ce:cd:f3:16:2e:c0:25:15:35:44:64:39:7a: 6e:51:ed:df:c0:d1:5c:9b:2c:63:46:46:75:04:24: 23:29:33:e6:f3:af:08:a2:b0:6c:c3:53:71:bc:be: 3e:db:39:2e:d6:ed:15:8a:88:83:72:e1:de:63:e9: cd:f1:09:62:25:d4:df:e1:d0:86:63:d7:3a:52:43: fc:87:d0:8e:36:89:8a:22:ae:ee:12:68:bd:a0:44: 39:40:03:cf:10:27:ce:77:28:e7:8e:8f:ce:97:0d: fa:35:9b:6b:72:10:b6:91:d3:ca:94:48:69:dd:6f: 03:89:7e:69:47:e3:34:07:61:79:70:7d:65:6d:4c: e6:4e:8d:48:38:2d:08:48:68:71:80:cd:89:9d:e2: 19:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:A5:80:F6:C0:25:06:1F:68:67:F5:E9:E4:B1:17:61:75:0F:FE:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3d929172-8490-3bed-abfb-0c8f19e1c302.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 206.164.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:c8:43:50:17:ef:ce:ad:71:f2:3a:e5:7b:3d:21:17:0f:6c: 40:9f:78:e4:e3:f8:4f:cd:de:6f:4a:58:10:5e:38:9d:62:ff: 0e:f1:63:79:20:93:e9:95:b5:72:98:ed:a3:f2:9b:d8:ca:91: 88:6d:fb:1d:8f:21:fd:d5:14:2c:b4:50:7a:95:fa:6f:fa:31: 0a:60:4b:fc:1a:16:00:6e:b8:08:5e:52:31:ee:ab:ae:3e:d0: e5:80:4f:f5:ba:3d:0d:af:ea:17:f2:9c:a1:54:38:ad:8e:3d: 1a:6e:15:16:20:fa:cf:70:fc:05:ed:9f:d7:c3:b6:24:7f:ea: 70:43:76:04:c9:bb:35:6b:55:98:fb:19:83:e4:d4:09:ad:43: cc:1f:35:2d:35:f1:8c:3d:e9:8b:1d:16:8e:30:65:ef:9a:18: a9:d2:ba:24:c3:34:d1:2b:09:73:5c:10:09:44:14:8b:ec:86: 76:04:91:bb:c5:19:d4:04:fa:23:9e:ad:ae:7a:2a:a9:af:60: 00:58:88:83:36:1e:5e:be:3a:a0:ae:57:57:0f:9e:c1:ff:ad: 37:e0:a5:b4:f2:a2:af:50:5e:f8:05:06:42:1a:d2:4d:0c:a0: 20:cf:49:b3:05:9f:90:62:93:a0:c2:d1:be:8a:99:50:41:ed: 4d:7b:2f:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmKNHU+z/dhhsz9r+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDQxNjAxMDA0OFoXDTI1MDcxNTAxMDA0OFowLzEtMCsGA1UEAxMk YzQzZDRkOTAtNTEyNi00N2M4LWE0ZWMtOTc0YzY2MmYyN2ZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1EL5Ql1VfokQOOKedIkscea52CuitpdNAue+ bmP1R8R8E2vihKgwsqWC1KtApNmkGMnd9wvkp8peAoDFPzLoxrEqr0Zz0MdFf5bz L7iheeYXpDBHZNNewuvtfKkcCxbvi5/nUJSmSgvhHM7N8xYuwCUVNURkOXpuUe3f wNFcmyxjRkZ1BCQjKTPm868IorBsw1NxvL4+2zku1u0VioiDcuHeY+nN8QliJdTf 4dCGY9c6UkP8h9CONomKIq7uEmi9oEQ5QAPPECfOdyjnjo/Olw36NZtrchC2kdPK lEhp3W8DiX5pR+M0B2F5cH1lbUzmTo1IOC0ISGhxgM2JneIZ+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFelgPbAJQYfaGf16eSxF2F1D/7vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvM2Q5MjkxNzItODQ5MC0z YmVkLWFiZmItMGM4ZjE5ZTFjMzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqRoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFPIQ1AX786tcfI65Xs9IRcPbECfeOTj+E/N3m9KWBBeOJ1i/w7xY3kg k+mVtXKY7aPym9jKkYht+x2PIf3VFCy0UHqV+m/6MQpgS/waFgBuuAheUjHuq64+ 0OWAT/W6PQ2v6hfynKFUOK2OPRpuFRYg+s9w/AXtn9fDtiR/6nBDdgTJuzVrVZj7 GYPk1AmtQ8wfNS018Yw96YsdFo4wZe+aGKnSuiTDNNErCXNcEAlEFIvshnYEkbvF GdQE+iOera56KqmvYABYiIM2Hl6+OqCuV1cPnsH/rTfgpbTyoq9QXvgFBkIa0k0M oCDPSbMFn5Bik6DC0b6KmVBB7U17L/g= -----END CERTIFICATE-----Generated at Sun Apr 27 09:38:00 2025 by rpki-client