$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4f22bf10-13cb-3e9c-b7b5-d012989b4585.roa File: 4f22bf10-13cb-3e9c-b7b5-d012989b4585.roa (raw, json) Hash identifier: ncRcaZs5FxBYkeM86OvQeuENyGm3BWUMnr3Qz6Ood9I= Subject key identifier: A9:65:8F:67:31:43:89:8E:50:97:DD:60:00:33:86:6D:30:A5:A4:F2 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858499AF483DD403882F54FCB3280 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4f22bf10-13cb-3e9c-b7b5-d012989b4585.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 3356 IP address blocks: 207.37.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:83:dd:40:38:82:f5:4f:cb:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=228da109-165e-40a5-a9b7-4ec393b1e250 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:47:1f:93:0a:42:fa:e2:34:07:6a:0b:1a:1c: f8:b1:fc:f2:79:d3:80:d1:76:18:81:cc:97:83:b3: 05:21:54:ac:68:36:2f:dd:54:80:74:e9:cf:20:61: bb:88:32:50:e7:cc:cf:2e:44:99:b0:76:b7:b9:f2: 75:81:ff:6b:27:b4:90:ab:5a:94:72:39:23:1d:ca: 9e:4e:93:da:fa:5b:b5:12:29:6a:58:b6:77:a6:2a: e6:c8:62:88:3d:8e:2e:fc:97:39:b3:cf:59:df:59: df:3f:7d:64:3f:2c:c4:fb:3c:66:cc:86:3a:a7:d8: 5b:78:80:c8:64:65:35:9d:fc:62:52:a4:77:f1:bb: a6:71:73:af:8f:8c:13:56:bb:c6:20:a0:d5:48:41: d5:fa:ba:a1:42:14:39:b3:ec:68:d8:12:53:ac:dc: ac:84:86:e6:eb:53:e8:69:e4:d9:29:61:a6:1e:0b: c5:c6:4d:9e:81:01:58:cb:ce:81:48:f0:27:81:c5: dc:49:02:72:18:9c:39:89:c1:2e:33:89:30:e5:17: 24:2e:33:29:73:ac:80:24:79:4a:36:fc:e2:a7:b0: ba:e9:4b:f7:bd:58:a2:4e:9c:14:c8:54:d9:d0:a6: 77:09:f8:9b:4e:45:08:b9:15:fc:79:a9:3b:0b:97: 43:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:65:8F:67:31:43:89:8E:50:97:DD:60:00:33:86:6D:30:A5:A4:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4f22bf10-13cb-3e9c-b7b5-d012989b4585.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 207.37.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:f0:90:20:04:b9:c5:dc:d9:13:c9:cc:9d:97:7b:c0:b4:b4: 80:26:90:e6:57:ca:14:41:d5:77:89:83:b4:4c:e4:67:6d:7b: 3f:25:66:d9:a1:8b:03:05:56:ff:fc:82:77:39:eb:00:fe:68: 4e:ce:d1:11:bb:fa:f0:6a:5b:33:9e:30:6e:6d:39:85:d3:b9: fb:5c:0e:52:f0:db:b0:7a:fe:68:a5:fa:26:82:75:10:2b:67: dd:d7:40:47:42:c6:6e:43:7f:e4:88:4a:94:1f:6f:85:13:9f: fc:ad:34:56:92:a6:f1:54:7e:84:b8:82:e4:aa:f9:f5:58:5d: 5c:20:8a:13:e7:64:6d:8a:ee:85:75:e3:bf:53:d1:0b:46:54: 75:52:98:d5:0a:b5:c9:53:1d:7a:58:70:21:5f:60:46:66:57: 2f:34:2c:d4:6e:39:01:9a:7c:de:aa:3a:cb:2a:6a:02:2c:d9: 6c:d1:43:c6:46:0d:b2:96:37:f4:d6:b0:4e:3d:1b:cc:0a:b2: 4e:27:47:4e:7b:21:05:2e:4b:d4:8d:08:a5:1a:de:09:9c:20: 4b:10:c1:74:5c:60:3e:e8:71:86:fb:e6:5e:d8:bb:9c:4d:a9: a3:42:0c:92:6e:6a:57:bc:d7:f7:ea:bf:3d:71:d4:d8:96:6c: e6:98:fb:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9IPdQDiC9U/LMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk MjI4ZGExMDktMTY1ZS00MGE1LWE5YjctNGVjMzkzYjFlMjUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEcfkwpC+uI0B2oLGhz4sfzyedOA0XYYgcyX g7MFIVSsaDYv3VSAdOnPIGG7iDJQ58zPLkSZsHa3ufJ1gf9rJ7SQq1qUcjkjHcqe TpPa+lu1EilqWLZ3pirmyGKIPY4u/Jc5s89Z31nfP31kPyzE+zxmzIY6p9hbeIDI ZGU1nfxiUqR38bumcXOvj4wTVrvGIKDVSEHV+rqhQhQ5s+xo2BJTrNyshIbm61Po aeTZKWGmHgvFxk2egQFYy86BSPAngcXcSQJyGJw5icEuM4kw5RckLjMpc6yAJHlK Nvzip7C66Uv3vViiTpwUyFTZ0KZ3CfibTkUIuRX8eak7C5dD3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKllj2cxQ4mOUJfdYAAzhm0wpaTyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNGYyMmJmMTAtMTNjYi0z ZTljLWI3YjUtZDAxMjk4OWI0NTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzyUhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADwkCAEucXc2RPJzJ2Xe8C0tIAmkOZXyhRB1XeJg7RM5Gdtez8lZtmh iwMFVv/8gnc56wD+aE7O0RG7+vBqWzOeMG5tOYXTuftcDlLw27B6/mil+iaCdRAr Z93XQEdCxm5Df+SISpQfb4UTn/ytNFaSpvFUfoS4guSq+fVYXVwgihPnZG2K7oV1 479T0QtGVHVSmNUKtclTHXpYcCFfYEZmVy80LNRuOQGafN6qOssqagIs2WzRQ8ZG DbKWN/TWsE49G8wKsk4nR057IQUuS9SNCKUa3gmcIEsQwXRcYD7ocYb75l7Yu5xN qaNCDJJuale81/fqvz1x1NiWbOaY+3A= -----END CERTIFICATE-----Generated at Sun Apr 27 11:23:59 2025 by rpki-client