$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4e28bed8-a4dc-3ce0-a256-7a50b77655c3.roa File: 4e28bed8-a4dc-3ce0-a256-7a50b77655c3.roa (raw, json) Hash identifier: VmR09JCLYwe9xazn1V4qZrn0AM2wj48MV0In8nlmRfU= Subject key identifier: C0:37:06:CC:5B:D8:C0:4D:BF:35:17:47:F6:DC:8F:E6:5F:2A:00:37 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858498A346B7D6003D45623536F80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4e28bed8-a4dc-3ce0-a256-7a50b77655c3.roa Signing time: Wed 16 Apr 2025 01:00:48 +0000 ROA not before: Wed 16 Apr 2025 01:00:48 +0000 ROA not after: Tue 15 Jul 2025 01:00:48 +0000 asID: 3356 IP address blocks: 204.104.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8a:34:6b:7d:60:03:d4:56:23:53:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 16 01:00:48 2025 GMT Not After : Jul 15 01:00:48 2025 GMT Subject: CN=94851d00-ba1c-4251-a37f-1dc51fd81aca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:21:59:ce:2c:58:7a:9c:22:d0:d1:66:27:b1: 92:58:fc:86:57:94:fe:ed:f8:94:5f:ae:f0:dc:cf: 2f:3f:10:4d:5b:72:99:67:44:3b:36:f4:c3:cf:ba: 1a:68:23:9d:a2:18:f0:a0:dc:40:4f:16:92:73:ce: 8e:10:a3:e3:d2:32:58:a5:fb:89:3b:e1:27:b3:06: 86:16:af:8a:f2:cf:85:d6:b2:5f:86:b2:74:f4:ef: 31:cc:bf:49:90:7e:0b:06:64:28:12:6b:ed:32:fe: d8:53:a7:fc:6e:84:d6:a7:cb:21:cb:7d:ec:52:b9: 51:d0:fd:f5:2b:12:20:53:00:c0:74:46:dc:52:38: 31:51:49:90:b5:97:b7:02:c8:91:9d:37:18:46:6a: 86:2a:a7:54:fd:64:c8:a0:d6:66:4b:c7:47:78:81: b7:bf:47:c4:69:64:6f:a3:24:99:d9:18:74:b3:fe: ee:72:43:16:07:2f:a6:f1:e5:eb:d0:37:78:0a:06: 76:4a:f0:52:8d:ac:4a:91:cc:cd:77:5e:71:9b:f7: 2e:4a:ef:fd:2f:2c:7d:6e:1f:d2:f0:23:66:11:f3: a3:4f:0a:41:9f:36:6b:6b:ef:d1:8a:2e:0d:b4:43: 4e:af:6d:b2:ec:d3:6a:39:1e:95:21:9e:d6:28:4d: 1b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:37:06:CC:5B:D8:C0:4D:BF:35:17:47:F6:DC:8F:E6:5F:2A:00:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4e28bed8-a4dc-3ce0-a256-7a50b77655c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 204.104.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:f1:62:28:64:bc:f5:4e:5f:1e:67:ca:c8:33:f6:9b:aa:d1: e2:bb:bc:46:a8:5c:03:11:1a:85:f6:43:81:8e:b5:47:7a:93: 35:b1:80:6a:da:42:ba:f8:92:ff:3f:34:0d:85:fc:d7:b7:0d: 82:58:20:1a:ef:f1:f0:66:27:e4:6f:04:dc:17:e2:7b:98:83: 43:9e:2b:60:4e:c1:e3:b0:50:84:0e:f1:d6:49:e0:e7:fe:15: b1:af:30:11:90:d7:9e:5c:61:2c:33:31:1b:fc:ac:f8:20:78: b5:74:1e:0a:bc:42:15:00:b8:e0:d3:07:e7:30:99:d3:11:24: 67:db:02:df:00:e6:da:ee:51:a4:7f:a0:c1:a3:e8:8a:e8:96: c9:0e:3f:29:22:be:3c:8d:77:36:c6:3d:45:de:86:79:55:ae: bf:2b:ed:1b:93:50:7c:ee:05:d7:95:ce:d9:b2:f9:04:01:e0: 13:9b:40:d5:c8:d7:67:fd:74:ab:64:51:04:c9:1d:f0:4d:91: d0:a2:ac:ce:d4:8f:40:7c:dd:f0:3c:a7:1c:f8:1a:2a:28:54: 7f:5b:ef:a2:b5:3d:60:38:59:c3:e6:76:bf:b1:3a:bf:f9:df: ed:51:26:b8:84:11:47:fe:2b:02:a5:19:82:f8:d7:09:91:64: 28:5a:c3:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmKNGt9YAPUViNTb4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDQxNjAxMDA0OFoXDTI1MDcxNTAxMDA0OFowLzEtMCsGA1UEAxMk OTQ4NTFkMDAtYmExYy00MjUxLWEzN2YtMWRjNTFmZDgxYWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6CFZzixYepwi0NFmJ7GSWPyGV5T+7fiUX67w 3M8vPxBNW3KZZ0Q7NvTDz7oaaCOdohjwoNxATxaSc86OEKPj0jJYpfuJO+EnswaG Fq+K8s+F1rJfhrJ09O8xzL9JkH4LBmQoEmvtMv7YU6f8boTWp8shy33sUrlR0P31 KxIgUwDAdEbcUjgxUUmQtZe3AsiRnTcYRmqGKqdU/WTIoNZmS8dHeIG3v0fEaWRv oySZ2Rh0s/7uckMWBy+m8eXr0Dd4CgZ2SvBSjaxKkczNd15xm/cuSu/9Lyx9bh/S 8CNmEfOjTwpBnzZra+/Rii4NtENOr22y7NNqOR6VIZ7WKE0b9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMA3Bsxb2MBNvzUXR/bcj+ZfKgA3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNGUyOGJlZDgtYTRkYy0z Y2UwLWEyNTYtN2E1MGI3NzY1NWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGgOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACDxYihkvPVOXx5nysgz9puq0eK7vEaoXAMRGoX2Q4GOtUd6kzWxgGra Qrr4kv8/NA2F/Ne3DYJYIBrv8fBmJ+RvBNwX4nuYg0OeK2BOweOwUIQO8dZJ4Of+ FbGvMBGQ155cYSwzMRv8rPggeLV0Hgq8QhUAuODTB+cwmdMRJGfbAt8A5truUaR/ oMGj6IrolskOPykivjyNdzbGPUXehnlVrr8r7RuTUHzuBdeVztmy+QQB4BObQNXI 12f9dKtkUQTJHfBNkdCirM7Uj0B83fA8pxz4GiooVH9b76K1PWA4WcPmdr+xOr/5 3+1RJriEEUf+KwKlGYL41wmRZChawyM= -----END CERTIFICATE-----Generated at Sat Apr 26 19:18:21 2025 by rpki-client