$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/7faa02f1-f29e-300a-a671-5db0b0d8a04a.roa File: 7faa02f1-f29e-300a-a671-5db0b0d8a04a.roa (raw, json) Hash identifier: dP6XAZe2K7MzYUSY4G2/ezHpJscl0Ci7hJfFvF1BtQk= Subject key identifier: DB:EC:02:6D:77:19:72:E2:39:1B:65:F9:F9:5E:F2:0B:FA:FC:B3:78 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285849F17FD76C5B061AD6C3A03A40 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/7faa02f1-f29e-300a-a671-5db0b0d8a04a.roa Signing time: Fri 23 May 2025 01:00:49 +0000 ROA not before: Fri 23 May 2025 01:00:49 +0000 ROA not after: Thu 21 Aug 2025 01:00:49 +0000 asID: 202 IP address blocks: 205.191.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:7f:d7:6c:5b:06:1a:d6:c3:a0:3a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: May 23 01:00:49 2025 GMT Not After : Aug 21 01:00:49 2025 GMT Subject: CN=a44ceafb-a7c6-4fde-be96-4befc280dcbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:13:bb:3e:ac:a7:06:7c:c9:35:42:0d:18:d9: a2:0f:bb:dc:d8:e0:6f:0f:25:d5:1e:cf:ef:be:54: e2:cb:d8:7e:ee:c1:bd:ba:88:62:14:c8:e8:a8:ec: 22:57:51:32:5a:b5:ac:a4:43:a6:f6:8d:81:b4:62: 03:99:ee:89:0f:53:be:87:81:aa:6a:61:65:83:4e: 6c:1c:8f:6c:12:84:b3:b6:a6:51:12:75:77:08:69: 57:3e:b2:cc:55:ab:11:48:ca:13:26:59:26:c0:46: 83:1d:50:80:90:d6:4e:75:aa:00:3f:61:19:f4:88: 16:7d:5b:7e:67:f7:b2:fc:b3:7e:61:ad:34:70:bb: be:de:70:85:49:eb:64:f7:b9:e6:f7:72:19:b7:62: 60:a2:77:e2:b6:df:86:28:0a:e8:c2:88:1a:82:25: cb:e5:b5:56:f4:53:ba:9a:1e:b4:90:70:1d:c3:e2: f1:e1:7a:92:16:2c:76:38:05:7d:37:f3:b8:05:74: 84:10:e9:16:67:d4:ac:30:19:6b:15:4e:1d:f2:7b: 6f:35:fd:43:ab:8f:6e:5b:62:c3:c1:f6:8d:51:44: 4d:4b:38:20:55:39:7f:3f:47:ac:21:ec:0c:dc:93: 03:cb:7c:b3:f0:05:f2:49:a0:a4:5a:60:8b:f7:f6: 82:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:EC:02:6D:77:19:72:E2:39:1B:65:F9:F9:5E:F2:0B:FA:FC:B3:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/7faa02f1-f29e-300a-a671-5db0b0d8a04a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 205.191.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:ec:84:2d:70:e0:5d:ca:ca:ba:66:00:09:ea:25:a7:28:b8: 83:66:8d:c7:74:65:d6:df:fc:87:d4:23:26:42:c5:54:1e:30: 47:e2:7e:96:46:26:f5:ea:81:c2:67:3d:11:ee:ca:31:6c:d9: 48:a6:eb:20:14:d2:26:29:a1:b6:69:2e:b6:16:ed:07:20:02: 09:2f:64:0e:8a:2a:07:64:3f:15:a3:6d:f6:8b:74:db:2d:16: 48:ac:57:e0:d8:02:17:8c:54:4f:19:15:a9:c1:b1:ab:c5:a1: fe:45:cf:1b:12:03:8a:05:6e:11:cf:5e:ae:36:33:68:30:1e: 56:19:c1:b7:a1:35:8d:c6:b7:5c:95:67:3e:21:86:e4:6b:09: 53:f9:60:b4:23:0b:41:3e:56:ef:6e:67:be:05:8f:81:74:cb: 52:c3:a4:ec:ad:e4:10:44:fe:bd:81:3d:30:9f:73:6c:12:6c: e9:57:da:9d:95:bf:39:42:c6:8a:8b:69:70:bf:40:37:62:23: b7:dc:e6:43:db:15:27:6c:94:de:89:bf:57:3a:63:aa:47:22: 18:82:7b:d6:94:bd:cc:c7:e5:df:2f:76:38:10:0d:dc:22:c4: 89:3b:e3:cc:7d:67:fd:53:d0:25:e2:91:b3:fc:07:ab:e8:d4: d4:15:71:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxf9dsWwYa1sOgOkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk YTQ0Y2VhZmItYTdjNi00ZmRlLWJlOTYtNGJlZmMyODBkY2JkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRO7PqynBnzJNUINGNmiD7vc2OBvDyXVHs/v vlTiy9h+7sG9uohiFMjoqOwiV1EyWrWspEOm9o2BtGIDme6JD1O+h4GqamFlg05s HI9sEoSztqZREnV3CGlXPrLMVasRSMoTJlkmwEaDHVCAkNZOdaoAP2EZ9IgWfVt+ Z/ey/LN+Ya00cLu+3nCFSetk97nm93IZt2Jgonfitt+GKArowogagiXL5bVW9FO6 mh60kHAdw+Lx4XqSFix2OAV9N/O4BXSEEOkWZ9SsMBlrFU4d8ntvNf1Dq49uW2LD wfaNUURNSzggVTl/P0esIewM3JMDy3yz8AXySaCkWmCL9/aCkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNvsAm13GXLiORtl+fle8gv6/LN4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvN2ZhYTAyZjEtZjI5ZS0z MDBhLWE2NzEtNWRiMGIwZDhhMDRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzb8oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrshC1w4F3KyrpmAAnqJacouINmjcd0Zdbf/IfUIyZCxVQeMEfifpZG JvXqgcJnPRHuyjFs2Uim6yAU0iYpobZpLrYW7QcgAgkvZA6KKgdkPxWjbfaLdNst FkisV+DYAheMVE8ZFanBsavFof5FzxsSA4oFbhHPXq42M2gwHlYZwbehNY3Gt1yV Zz4hhuRrCVP5YLQjC0E+Vu9uZ74Fj4F0y1LDpOyt5BBE/r2BPTCfc2wSbOlX2p2V vzlCxoqLaXC/QDdiI7fc5kPbFSdslN6Jv1c6Y6pHIhiCe9aUvczH5d8vdjgQDdwi xIk748x9Z/1T0CXikbP8B6vo1NQVcV8= -----END CERTIFICATE-----Generated at Sun Jun 15 17:13:20 2025 by rpki-client