$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/58d2f53d-aba9-37ee-9713-311fc4d4cf90.roa File: 58d2f53d-aba9-37ee-9713-311fc4d4cf90.roa (raw, json) Hash identifier: HJTYQ25VsfCmDlG5Ga2wNxCA8mTd6dIi7lOIwdVoTXc= Subject key identifier: 40:C3:DC:85:DC:A8:A2:48:8F:2E:6C:63:F1:87:8D:D7:F2:DE:DD:E2 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858499DBF356DC1C074ECB57155A0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/58d2f53d-aba9-37ee-9713-311fc4d4cf90.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 3356 IP address blocks: 205.239.158.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:35:6d:c1:c0:74:ec:b5:71:55:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=a638aadf-29c8-4bbe-9992-34104d92aa20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0f:f0:c3:cb:68:87:a0:2e:9b:bf:05:66:12: fd:a9:b0:2a:47:1f:52:20:75:4b:a1:c1:8d:42:27: e7:69:43:4d:b4:82:4b:6f:3a:2f:4d:03:e3:e7:40: f4:61:c6:8c:51:12:fe:24:96:41:d2:66:f1:cd:64: ae:7a:a1:3a:85:61:bc:99:cc:99:e3:47:f3:17:84: fb:89:54:b3:4a:55:b7:8e:98:5e:3d:c3:bf:5c:e0: b4:85:10:86:5b:81:44:bc:68:27:76:1a:f6:f9:be: cc:72:ec:b9:2d:a9:b0:ee:ca:21:dc:b3:6c:e7:74: b5:21:4e:b9:fb:42:88:b8:7d:dd:6f:21:75:d6:4c: e0:7b:fc:c9:81:d1:59:e1:82:15:61:e2:f4:8e:6e: 6e:bb:18:56:cd:15:51:88:f8:36:87:7f:cc:70:6c: 86:81:f2:f6:a7:db:e0:9e:bb:62:17:22:69:1c:69: a0:21:cc:28:74:01:5f:c9:92:63:fa:64:d8:97:77: 19:e2:00:76:5b:7d:77:69:5e:fe:91:7e:65:7a:c3: 8e:f0:41:17:6a:ad:ef:79:c4:c0:0a:23:cc:37:d0: 11:e0:04:8b:f4:ca:e0:77:0a:7f:7b:cd:e4:a5:d8: fd:11:88:79:ec:63:c0:a2:aa:11:84:c3:b8:22:07: 1e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:C3:DC:85:DC:A8:A2:48:8F:2E:6C:63:F1:87:8D:D7:F2:DE:DD:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/58d2f53d-aba9-37ee-9713-311fc4d4cf90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 205.239.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:af:87:87:e7:11:51:9c:db:d3:80:e0:ea:5a:b9:49:bb:1f: e2:6f:f5:a2:e4:83:e5:fa:1f:b8:50:c4:29:16:d1:64:05:6f: 00:dd:78:39:fd:4b:fd:2b:78:0d:dc:f3:e8:51:d2:6c:c5:ad: 40:ef:99:cc:8b:08:a3:53:07:e5:4c:98:3a:e7:29:c3:4d:23: 09:a7:fb:6b:cb:b3:91:16:66:7b:f7:30:9a:b6:67:41:96:4e: 24:8d:d3:dd:c9:dc:a0:e0:1c:91:db:30:2d:5d:fd:a0:a3:4c: 54:a7:49:16:ca:fa:15:77:db:ad:94:f6:2e:8a:44:56:83:82: f4:4c:4e:d4:99:0c:c5:55:4a:11:90:89:3a:18:9a:a0:89:fa: f1:52:84:22:a5:1a:b9:f6:06:b7:35:df:04:41:d5:39:b2:ab: d9:13:ca:2e:68:1b:e7:82:6d:a7:f5:db:77:52:de:fc:b8:86: 00:fc:89:ad:6f:29:d8:eb:db:c7:87:42:e5:57:e9:0d:6a:c6: e8:47:c4:bb:f2:7b:41:9f:6e:04:cb:68:a7:2d:b6:1b:16:1d: 51:42:05:8c:6b:39:37:2d:69:a1:f5:8b:f6:54:69:07:5d:a1: 9a:2f:17:f5:24:ea:84:10:c0:45:61:89:68:4e:81:43:d7:57: e7:44:58:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdvzVtwcB07LVxVaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk YTYzOGFhZGYtMjljOC00YmJlLTk5OTItMzQxMDRkOTJhYTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuA/ww8toh6Aum78FZhL9qbAqRx9SIHVLocGN QifnaUNNtIJLbzovTQPj50D0YcaMURL+JJZB0mbxzWSueqE6hWG8mcyZ40fzF4T7 iVSzSlW3jphePcO/XOC0hRCGW4FEvGgndhr2+b7Mcuy5Lamw7soh3LNs53S1IU65 +0KIuH3dbyF11kzge/zJgdFZ4YIVYeL0jm5uuxhWzRVRiPg2h3/McGyGgfL2p9vg nrtiFyJpHGmgIcwodAFfyZJj+mTYl3cZ4gB2W313aV7+kX5lesOO8EEXaq3vecTA CiPMN9AR4ASL9Mrgdwp/e83kpdj9EYh57GPAoqoRhMO4IgceywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEDD3IXcqKJIjy5sY/GHjdfy3t3iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNThkMmY1M2QtYWJhOS0z N2VlLTk3MTMtMzExZmM0ZDRjZjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBze+eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFmvh4fnEVGc29OA4OpauUm7H+Jv9aLkg+X6H7hQxCkW0WQFbwDdeDn9 S/0reA3c8+hR0mzFrUDvmcyLCKNTB+VMmDrnKcNNIwmn+2vLs5EWZnv3MJq2Z0GW TiSN093J3KDgHJHbMC1d/aCjTFSnSRbK+hV3262U9i6KRFaDgvRMTtSZDMVVShGQ iToYmqCJ+vFShCKlGrn2Brc13wRB1Tmyq9kTyi5oG+eCbaf123dS3vy4hgD8ia1v Kdjr28eHQuVX6Q1qxuhHxLvye0GfbgTLaKctthsWHVFCBYxrOTctaaH1i/ZUaQdd oZovF/Uk6oQQwEVhiWhOgUPXV+dEWDk= -----END CERTIFICATE-----Generated at Sat Apr 26 19:20:45 2025 by rpki-client