$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/41406812-46d2-3c09-b19b-b7ddb047c224.roa File: 41406812-46d2-3c09-b19b-b7ddb047c224.roa (raw, json) Hash identifier: 2KmsBhCXNl6AVJyjVHIBq7PKHG2wyV6/A3pvWjoLuh0= Subject key identifier: 4C:73:CE:9C:53:4B:87:A7:C2:80:E9:9F:FB:26:54:E8:B4:C2:95:27 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285849631EC672D37F70659E628AC0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/41406812-46d2-3c09-b19b-b7ddb047c224.roa Signing time: Wed 02 Apr 2025 01:00:46 +0000 ROA not before: Wed 02 Apr 2025 01:00:46 +0000 ROA not after: Tue 01 Jul 2025 01:00:46 +0000 asID: 203 IP address blocks: 170.30.224.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:63:1e:c6:72:d3:7f:70:65:9e:62:8a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 2 01:00:46 2025 GMT Not After : Jul 1 01:00:46 2025 GMT Subject: CN=f5c77634-4073-4d91-8864-2a0defb0b17b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:4c:16:f2:4a:e5:7c:ca:f2:bb:a0:21:d6:12: 87:38:f2:a1:02:bf:8e:ff:0c:73:21:84:82:cf:41: 3e:70:cc:3d:05:3f:d4:dc:69:1d:04:97:8b:f6:6d: fe:bb:65:d6:49:fd:70:e2:1a:9f:76:c8:cd:c2:2f: 73:75:1f:2c:ef:cb:47:57:5b:e2:af:a3:bb:55:88: af:15:c2:15:48:5c:b0:fb:9a:1b:02:fd:1e:f4:3c: 08:f6:77:01:5c:54:16:bd:d1:31:84:98:cd:f7:04: 89:fe:3a:b9:09:2d:72:0b:d7:01:1d:9d:4c:9d:fe: a9:04:87:07:35:f1:64:54:69:9a:a8:75:91:1c:75: 73:45:3b:d0:2a:da:51:a8:43:02:86:25:4d:c5:20: 0c:36:4b:74:a0:08:e4:03:fb:a3:ca:e5:4c:fe:f8: 37:e5:a1:d6:2b:98:d8:4f:fe:a3:29:c5:64:a0:8b: c6:d5:05:f4:91:d5:a7:10:9f:35:26:e3:91:04:c7: c1:ba:0f:2d:18:2c:77:f4:f0:b4:fd:c4:51:86:5c: 5f:cf:25:26:4d:6b:ed:5d:d4:0d:ae:0d:66:cc:9f: 0b:f2:d0:64:e6:ce:69:69:74:d7:4c:5a:20:4d:61: c3:04:d5:5d:24:64:df:10:7f:b7:7c:93:db:e0:a5: 2a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:73:CE:9C:53:4B:87:A7:C2:80:E9:9F:FB:26:54:E8:B4:C2:95:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/41406812-46d2-3c09-b19b-b7ddb047c224.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 170.30.224.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:1f:ee:3e:c3:ce:50:3d:f4:9c:e6:01:99:c0:96:95:1a:4f: 62:ad:b9:ec:7e:ec:d8:97:fa:c7:0a:6b:ea:0b:39:5b:db:5e: 98:1d:75:41:17:95:1d:61:a2:d1:03:46:f6:60:b6:ef:4a:58: 17:73:af:0e:ac:fd:3e:df:5b:43:0e:f6:37:50:b5:c9:cc:fe: 5e:f4:5f:33:a8:2c:0f:a9:2f:06:22:da:72:96:91:0b:08:29: 93:08:2b:38:37:e5:1d:0b:73:50:ce:03:fc:f3:b1:17:db:38: 18:93:9d:c3:2d:6f:37:ec:ca:cb:3c:30:c4:37:47:14:a5:f0: fa:c4:83:bb:76:46:28:7c:de:05:1e:16:3c:f5:53:00:44:1b: de:72:fc:cd:ca:69:f1:ef:c4:d5:f0:21:ad:94:7e:13:1c:29: 84:56:0b:b7:0f:8e:61:ba:75:32:3a:78:85:f4:fe:e0:e8:d9: af:07:7c:ac:2a:90:82:d5:08:e5:1f:c9:00:ec:d0:a6:af:62: aa:31:d4:ff:a3:84:19:0c:8f:e7:5d:4a:be:d5:0c:86:71:fd: 9a:0a:1e:9a:9d:8d:81:5d:26:0d:cc:2d:64:33:0e:b6:d5:e5: 3e:19:d5:23:54:c0:3b:e8:c6:f3:41:1a:69:8d:91:62:f0:fa: 3a:10:b2:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEljHsZy039wZZ5iisAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDQwMjAxMDA0NloXDTI1MDcwMTAxMDA0NlowLzEtMCsGA1UEAxMk ZjVjNzc2MzQtNDA3My00ZDkxLTg4NjQtMmEwZGVmYjBiMTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEwW8krlfMryu6Ah1hKHOPKhAr+O/wxzIYSC z0E+cMw9BT/U3GkdBJeL9m3+u2XWSf1w4hqfdsjNwi9zdR8s78tHV1vir6O7VYiv FcIVSFyw+5obAv0e9DwI9ncBXFQWvdExhJjN9wSJ/jq5CS1yC9cBHZ1Mnf6pBIcH NfFkVGmaqHWRHHVzRTvQKtpRqEMChiVNxSAMNkt0oAjkA/ujyuVM/vg35aHWK5jY T/6jKcVkoIvG1QX0kdWnEJ81JuORBMfBug8tGCx39PC0/cRRhlxfzyUmTWvtXdQN rg1mzJ8L8tBk5s5paXTXTFogTWHDBNVdJGTfEH+3fJPb4KUqAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFExzzpxTS4enwoDpn/smVOi0wpUnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNDE0MDY4MTItNDZkMi0z YzA5LWIxOWItYjdkZGIwNDdjMjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqh7gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGAf7j7DzlA99JzmAZnAlpUaT2Ktuex+7NiX+scKa+oLOVvbXpgddUEX lR1hotEDRvZgtu9KWBdzrw6s/T7fW0MO9jdQtcnM/l70XzOoLA+pLwYi2nKWkQsI KZMIKzg35R0Lc1DOA/zzsRfbOBiTncMtbzfsyss8MMQ3RxSl8PrEg7t2Rih83gUe Fjz1UwBEG95y/M3KafHvxNXwIa2UfhMcKYRWC7cPjmG6dTI6eIX0/uDo2a8HfKwq kILVCOUfyQDs0KavYqox1P+jhBkMj+ddSr7VDIZx/ZoKHpqdjYFdJg3MLWQzDrbV 5T4Z1SNUwDvoxvNBGmmNkWLw+joQsgA= -----END CERTIFICATE-----Generated at Sat Apr 26 19:28:57 2025 by rpki-client