$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8064774b-fe5d-3ceb-b2bd-7f072d0d3c83.roa File: 8064774b-fe5d-3ceb-b2bd-7f072d0d3c83.roa (raw, json) Hash identifier: wnNOxJC3aarCNGq7VS3FcBYpgMQyW+29pPQ3ZIe9kC8= Subject key identifier: 8A:AA:8E:A9:7F:41:08:8D:76:FF:33:4C:76:A7:24:29:23:71:3B:04 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285849631EC61CA3E27AD183608680 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8064774b-fe5d-3ceb-b2bd-7f072d0d3c83.roa Signing time: Wed 02 Apr 2025 01:00:46 +0000 ROA not before: Wed 02 Apr 2025 01:00:46 +0000 ROA not after: Tue 01 Jul 2025 01:00:46 +0000 asID: 203 IP address blocks: 170.30.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:63:1e:c6:1c:a3:e2:7a:d1:83:60:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 2 01:00:46 2025 GMT Not After : Jul 1 01:00:46 2025 GMT Subject: CN=9ea05c4d-1989-452e-912f-927bd6242fe8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:eb:61:1f:76:53:ae:7c:e2:60:b9:42:4f:0d: 05:66:d4:0c:22:72:40:6f:86:b9:2a:1d:3f:6e:04: f9:19:18:d9:ae:0f:d0:04:67:9b:60:33:4c:d6:34: e7:d3:d1:1c:26:6a:b0:6e:c1:63:92:18:b6:5f:99: 7e:f6:b7:67:42:cb:c7:78:ac:8b:61:fb:66:0d:8a: 2f:77:b5:1e:41:be:34:e7:2e:72:ca:17:a3:89:c6: 4d:0b:ec:e9:14:c6:db:31:ab:dd:ed:c6:05:b7:7c: ee:d8:10:a1:65:cd:1c:66:06:4d:c8:e4:09:73:95: bb:35:a4:cf:5d:0b:ca:b8:ee:e6:21:66:65:7f:61: 89:9d:e7:d5:09:40:51:c6:14:f7:88:5b:31:fd:29: bf:f0:35:6e:85:dd:8d:ba:f3:ad:84:85:67:fa:95: 9e:30:24:ef:41:51:1d:93:6b:75:27:05:e4:ca:54: 16:09:9e:09:de:39:41:e6:e3:68:e0:9e:37:35:8d: 11:c2:3b:f3:53:cc:a8:fe:8c:e6:ac:9f:25:27:3e: 30:b5:d4:d9:2b:7e:f7:9e:0b:9d:f7:70:76:53:4c: 14:e3:bd:80:9d:ad:02:53:89:94:e9:13:64:21:fa: dc:35:38:de:36:c0:3d:25:13:4d:40:0e:2f:42:c9: da:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:AA:8E:A9:7F:41:08:8D:76:FF:33:4C:76:A7:24:29:23:71:3B:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8064774b-fe5d-3ceb-b2bd-7f072d0d3c83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 170.30.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:7b:2d:f2:f3:26:03:59:09:eb:48:a0:fe:1a:d2:c1:aa:39: 46:38:57:ca:40:4a:30:db:57:9c:6d:85:9c:45:e3:70:88:1a: 99:56:95:c3:0f:0f:b8:93:22:9f:ef:a0:52:e4:21:fc:b6:ed: ba:35:2f:11:6d:d3:ed:b6:e7:75:a2:4e:e8:96:f6:b8:30:f5: d7:f7:67:47:4f:b9:d9:03:89:ba:ed:60:17:e0:07:38:d4:95: 0e:dc:a6:1e:5f:bc:98:8e:11:22:01:2f:4d:7d:67:d5:8b:4a: 6f:ed:a7:31:fa:90:5c:4b:87:15:3b:82:64:ff:10:bf:0d:f3: eb:7f:e1:da:f9:86:db:a7:9b:da:64:c5:70:51:6b:c7:67:71: ca:6d:0f:30:25:0b:e9:50:c9:2c:64:c1:69:81:ce:de:4b:a7: a0:b1:33:30:fb:e2:0d:19:75:4b:8d:32:92:8e:cb:05:82:e5: 80:ad:e7:df:5c:c2:b4:b8:12:66:00:4a:98:c4:c0:71:1d:87: 51:a4:8b:8b:f7:d6:1e:46:de:1a:60:35:07:8d:01:f4:3b:e3: 05:1c:82:16:59:0c:b1:16:0a:d8:58:46:a1:65:fb:42:67:f8: a1:2d:63:ec:ed:25:81:d9:14:14:a9:dd:a5:07:9d:c1:78:1e: 3a:4b:f7:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEljHsYco+J60YNghoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDQwMjAxMDA0NloXDTI1MDcwMTAxMDA0NlowLzEtMCsGA1UEAxMk OWVhMDVjNGQtMTk4OS00NTJlLTkxMmYtOTI3YmQ2MjQyZmU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOthH3ZTrnziYLlCTw0FZtQMInJAb4a5Kh0/ bgT5GRjZrg/QBGebYDNM1jTn09EcJmqwbsFjkhi2X5l+9rdnQsvHeKyLYftmDYov d7UeQb405y5yyhejicZNC+zpFMbbMavd7cYFt3zu2BChZc0cZgZNyOQJc5W7NaTP XQvKuO7mIWZlf2GJnefVCUBRxhT3iFsx/Sm/8DVuhd2NuvOthIVn+pWeMCTvQVEd k2t1JwXkylQWCZ4J3jlB5uNo4J43NY0RwjvzU8yo/ozmrJ8lJz4wtdTZK373ngud 93B2U0wU472Ana0CU4mU6RNkIfrcNTjeNsA9JRNNQA4vQsnaFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIqqjql/QQiNdv8zTHanJCkjcTsEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvODA2NDc3NGItZmU1ZC0z Y2ViLWIyYmQtN2YwNzJkMGQzYzgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqh7cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGB7LfLzJgNZCetIoP4a0sGqOUY4V8pASjDbV5xthZxF43CIGplWlcMP D7iTIp/voFLkIfy27bo1LxFt0+2253WiTuiW9rgw9df3Z0dPudkDibrtYBfgBzjU lQ7cph5fvJiOESIBL019Z9WLSm/tpzH6kFxLhxU7gmT/EL8N8+t/4dr5htunm9pk xXBRa8dnccptDzAlC+lQySxkwWmBzt5Lp6CxMzD74g0ZdUuNMpKOywWC5YCt599c wrS4EmYASpjEwHEdh1Gki4v31h5G3hpgNQeNAfQ74wUcghZZDLEWCthYRqFl+0Jn +KEtY+ztJYHZFBSp3aUHncF4HjpL90U= -----END CERTIFICATE-----Generated at Sat Apr 26 19:26:19 2025 by rpki-client