$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6afa0bde-43f6-3473-8d53-f2d3ac9bc38e.roa File: 6afa0bde-43f6-3473-8d53-f2d3ac9bc38e.roa (raw, json) Hash identifier: CECbpjqm8EqRHBWu60pfJL8+Yi7SDk2m/NfmWY2jWJU= Subject key identifier: A0:4A:7A:59:E9:0D:4E:24:D5:37:3E:8E:54:B1:5C:74:B2:11:07:A3 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858498A346EA6BEAB149530FA2400 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6afa0bde-43f6-3473-8d53-f2d3ac9bc38e.roa Signing time: Wed 16 Apr 2025 01:00:48 +0000 ROA not before: Wed 16 Apr 2025 01:00:48 +0000 ROA not after: Tue 15 Jul 2025 01:00:48 +0000 asID: 3356 IP address blocks: 204.104.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8a:34:6e:a6:be:ab:14:95:30:fa:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 16 01:00:48 2025 GMT Not After : Jul 15 01:00:48 2025 GMT Subject: CN=8a0fe935-7697-4593-a1c1-9a6d6462e1ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:15:f9:1c:4a:b0:0b:83:c8:40:7e:0d:f4:1f: ff:13:38:80:81:9b:ab:cd:22:1f:9e:7c:1a:0a:0f: f1:d6:ef:6b:8b:8b:b3:e0:88:1c:48:34:85:7c:ec: e8:d5:e5:9f:63:a5:7e:f4:ea:bf:8d:57:6e:e3:2b: 84:64:0e:dd:ed:2c:23:22:ae:8c:a7:6c:bb:7c:9b: 88:03:14:ee:6b:6c:11:af:bd:9c:36:59:9c:bb:83: 5c:6e:e7:ac:a8:52:2a:06:68:ad:9c:6b:47:92:ad: 41:0e:0f:46:41:0e:14:dc:fc:9f:ce:82:c7:f2:f4: 7e:10:a3:da:ff:1e:d5:d2:a2:bd:71:ce:70:ad:58: 5d:73:65:50:e1:37:0e:98:75:4a:a7:2a:5f:d4:c7: 28:5c:d9:e4:18:cf:12:f4:21:64:1e:d4:78:49:73: 85:56:89:60:5e:45:2d:fb:7c:b3:4b:e7:52:86:1f: c3:92:c1:e2:9f:92:c2:6a:09:33:65:c0:ae:0f:3c: 6b:7e:6f:a4:c9:16:46:56:f7:d0:56:01:f6:86:ae: 00:fb:28:bc:07:2e:96:19:70:c1:57:59:1c:33:4e: 99:c7:fb:43:bb:39:17:56:aa:7a:55:b3:e3:c1:a9: 62:bc:ef:bf:33:44:a2:58:8a:48:88:59:e0:f3:79: f8:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:4A:7A:59:E9:0D:4E:24:D5:37:3E:8E:54:B1:5C:74:B2:11:07:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6afa0bde-43f6-3473-8d53-f2d3ac9bc38e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 204.104.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:c0:0c:d3:1d:3d:1d:7f:09:23:61:28:77:05:f3:58:76:a1: 52:e5:33:c3:72:f3:6c:6a:dc:43:57:38:d4:c9:82:3e:4a:5a: 3b:c9:12:f2:3a:54:96:d8:81:a6:96:67:5c:d2:ec:4a:b6:8e: 1a:19:5e:7d:1e:c9:43:0c:99:1b:fa:78:31:a0:e9:0d:e2:11: 3b:af:97:28:43:88:c3:3f:12:dd:21:ae:d3:3b:7b:cf:85:e6: aa:b9:c0:c2:b1:e3:b5:7a:9c:18:37:dd:90:08:1b:63:0c:7c: 2e:1f:e9:70:a2:d3:9d:ad:95:e3:15:0d:b5:c1:d2:b6:e2:7c: f0:ad:d3:08:91:b2:07:e6:74:c0:30:07:24:39:57:e3:28:55: bd:56:cf:7e:79:c6:11:a3:65:c8:99:58:9c:9e:c1:36:b5:1c: 22:37:4d:3d:5c:db:52:40:6d:e3:ea:13:21:2f:6b:da:66:89: ff:87:bd:77:a9:64:1d:cc:b7:2e:30:dd:f3:42:47:e6:28:80: 9f:f9:3e:3e:e2:12:9a:74:71:d3:95:0e:be:a9:e3:27:55:f4: 11:03:1e:07:d5:42:7e:ee:6b:6f:ea:f7:1c:1f:49:bc:d8:bc: 7d:c3:3e:b0:bd:23:eb:de:2d:4c:63:8a:cc:b7:d1:05:c8:f2: 63:20:be:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmKNG6mvqsUlTD6JAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDQxNjAxMDA0OFoXDTI1MDcxNTAxMDA0OFowLzEtMCsGA1UEAxMk OGEwZmU5MzUtNzY5Ny00NTkzLWExYzEtOWE2ZDY0NjJlMWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhX5HEqwC4PIQH4N9B//EziAgZurzSIfnnwa Cg/x1u9ri4uz4IgcSDSFfOzo1eWfY6V+9Oq/jVdu4yuEZA7d7SwjIq6Mp2y7fJuI AxTua2wRr72cNlmcu4NcbuesqFIqBmitnGtHkq1BDg9GQQ4U3PyfzoLH8vR+EKPa /x7V0qK9cc5wrVhdc2VQ4TcOmHVKpypf1McoXNnkGM8S9CFkHtR4SXOFVolgXkUt +3yzS+dShh/DksHin5LCagkzZcCuDzxrfm+kyRZGVvfQVgH2hq4A+yi8By6WGXDB V1kcM06Zx/tDuzkXVqp6VbPjwalivO+/M0SiWIpIiFng83n46QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKBKelnpDU4k1Tc+jlSxXHSyEQejMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNmFmYTBiZGUtNDNmNi0z NDczLThkNTMtZjJkM2FjOWJjMzhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGjQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFfADNMdPR1/CSNhKHcF81h2oVLlM8Ny82xq3ENXONTJgj5KWjvJEvI6 VJbYgaaWZ1zS7Eq2jhoZXn0eyUMMmRv6eDGg6Q3iETuvlyhDiMM/Et0hrtM7e8+F 5qq5wMKx47V6nBg33ZAIG2MMfC4f6XCi052tleMVDbXB0rbifPCt0wiRsgfmdMAw ByQ5V+MoVb1Wz355xhGjZciZWJyewTa1HCI3TT1c21JAbePqEyEva9pmif+HvXep ZB3Mty4w3fNCR+YogJ/5Pj7iEpp0cdOVDr6p4ydV9BEDHgfVQn7ua2/q9xwfSbzY vH3DPrC9I+veLUxjisy30QXI8mMgvkY= -----END CERTIFICATE-----Generated at Sat Apr 26 16:20:30 2025 by rpki-client