$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/509ef354-e4e1-396a-91d8-c29280fad097.roa File: 509ef354-e4e1-396a-91d8-c29280fad097.roa (raw, json) Hash identifier: 6akIaqLyX35mR4yNdQk/ZMft0jth2iv3eVTRYOUJxGs= Subject key identifier: D4:DC:CD:22:5F:79:4B:B6:F7:36:9A:A4:3D:FD:11:18:74:19:E9:C0 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285849631EC650B2C99A41B6162F00 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/509ef354-e4e1-396a-91d8-c29280fad097.roa Signing time: Wed 02 Apr 2025 01:00:46 +0000 ROA not before: Wed 02 Apr 2025 01:00:46 +0000 ROA not after: Tue 01 Jul 2025 01:00:46 +0000 asID: 3356 IP address blocks: 170.30.224.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:63:1e:c6:50:b2:c9:9a:41:b6:16:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 2 01:00:46 2025 GMT Not After : Jul 1 01:00:46 2025 GMT Subject: CN=29d454e3-1d04-4d11-9f8a-4433a7f3bcc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:bb:d3:2e:0c:00:a6:59:2b:c2:f4:66:60:e9: fd:37:39:e4:76:59:89:4c:f8:54:b9:d6:26:37:6a: 13:90:19:2f:c2:7f:54:d6:0c:d1:e1:da:ab:6b:da: 44:64:e3:cb:ab:53:b6:b3:fc:a8:28:35:f5:9c:11: ec:d3:44:25:f6:99:01:f8:97:4b:0e:d2:f4:20:44: b4:13:64:49:1a:ed:7f:05:95:35:2f:63:88:ba:1c: 62:be:0c:76:1c:c0:22:6c:ef:71:58:d2:8a:4b:7d: 62:b6:42:19:c4:18:e3:55:7c:cb:e0:8c:f6:94:13: 8a:ea:c3:f0:e6:02:b6:4d:c1:e2:7d:0a:2d:65:97: a2:06:97:7e:e0:55:c0:bb:2f:64:dd:43:d1:df:9d: cb:9e:72:08:8d:82:df:fc:ec:d3:08:8a:c8:af:b0: ff:62:79:23:69:75:49:56:6b:49:41:ca:01:4b:3b: 18:b0:35:82:8a:7f:64:d4:92:46:d2:66:b0:ca:03: 91:82:3b:94:42:f0:23:58:21:4a:e3:c7:a2:b2:91: 17:37:50:01:a1:60:ac:63:41:3b:68:7e:0b:5a:f8: 9b:27:ce:0e:5c:4d:67:a4:a6:90:f3:d4:88:0b:93: 7f:46:bc:8e:e4:99:88:17:71:ff:33:0c:92:bb:96: e4:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:DC:CD:22:5F:79:4B:B6:F7:36:9A:A4:3D:FD:11:18:74:19:E9:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/509ef354-e4e1-396a-91d8-c29280fad097.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 170.30.224.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:ee:30:0e:e5:63:7a:ea:48:8f:97:cf:d8:ec:b6:99:71:a7: 09:82:90:75:c0:24:4b:20:a5:ba:06:93:4d:de:37:4d:1b:af: 45:29:bf:f3:9e:de:e8:81:36:4a:c6:8f:a7:ee:cb:f0:cb:d1: cc:dd:34:3e:cf:8e:4d:6e:36:59:7b:a1:c3:e1:aa:3a:7c:fa: 6f:9e:3d:43:a8:eb:f1:7d:70:48:2f:14:0e:c2:e0:b6:b5:b2: b3:a7:4a:43:15:6a:63:a4:a2:55:05:7a:8f:8f:61:db:21:67: 79:b6:fb:38:14:fb:e9:74:8e:7e:57:fe:f5:07:a3:68:d4:8c: f6:94:5a:c2:a2:04:2d:1b:44:cb:22:65:87:ef:f4:84:25:74: d0:2c:92:1f:fc:0f:26:b4:86:28:84:ed:d2:36:ba:fa:8a:86: 73:00:a9:f0:a3:66:d1:d3:ef:9e:c6:e0:29:cf:19:eb:09:fd: 5b:2e:fa:24:a9:83:9d:8a:9c:29:ff:70:ad:42:92:9c:fe:74: 6a:62:ce:a0:23:80:a9:09:81:13:3d:b9:a0:62:88:fb:a1:28: 65:40:b5:5a:1f:d7:7e:fa:3b:39:2b:f3:21:06:c2:2d:bd:85: d7:ff:66:ed:a4:17:11:00:ff:50:35:1a:9a:69:92:7a:68:3c: 62:bb:d4:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEljHsZQssmaQbYWLwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDQwMjAxMDA0NloXDTI1MDcwMTAxMDA0NlowLzEtMCsGA1UEAxMk MjlkNDU0ZTMtMWQwNC00ZDExLTlmOGEtNDQzM2E3ZjNiY2MyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrvTLgwAplkrwvRmYOn9NznkdlmJTPhUudYm N2oTkBkvwn9U1gzR4dqra9pEZOPLq1O2s/yoKDX1nBHs00Ql9pkB+JdLDtL0IES0 E2RJGu1/BZU1L2OIuhxivgx2HMAibO9xWNKKS31itkIZxBjjVXzL4Iz2lBOK6sPw 5gK2TcHifQotZZeiBpd+4FXAuy9k3UPR353LnnIIjYLf/OzTCIrIr7D/YnkjaXVJ VmtJQcoBSzsYsDWCin9k1JJG0mawygORgjuUQvAjWCFK48eispEXN1ABoWCsY0E7 aH4LWvibJ84OXE1npKaQ89SIC5N/RryO5JmIF3H/MwySu5bksQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNTczSJfeUu29zaapD39ERh0GenAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNTA5ZWYzNTQtZTRlMS0z OTZhLTkxZDgtYzI5MjgwZmFkMDk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqh7gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJzuMA7lY3rqSI+Xz9jstplxpwmCkHXAJEsgpboGk03eN00br0Upv/Oe 3uiBNkrGj6fuy/DL0czdND7Pjk1uNll7ocPhqjp8+m+ePUOo6/F9cEgvFA7C4La1 srOnSkMVamOkolUFeo+PYdshZ3m2+zgU++l0jn5X/vUHo2jUjPaUWsKiBC0bRMsi ZYfv9IQldNAskh/8Dya0hiiE7dI2uvqKhnMAqfCjZtHT757G4CnPGesJ/Vsu+iSp g52KnCn/cK1Ckpz+dGpizqAjgKkJgRM9uaBiiPuhKGVAtVof1376Ozkr8yEGwi29 hdf/Zu2kFxEA/1A1GpppknpoPGK71IQ= -----END CERTIFICATE-----Generated at Sat Apr 26 16:26:49 2025 by rpki-client