$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/843b1e5e-e2ac-3a59-9b60-32f66c34a3b1.roa File: 843b1e5e-e2ac-3a59-9b60-32f66c34a3b1.roa (raw, json) Hash identifier: 7xc81NCpCii/KCRSu9aXv6+mVbc4IJeWF1uZGslAs9c= Subject key identifier: B3:2F:34:FE:79:7E:26:C7:05:6B:26:E2:4A:DB:BA:D7:6B:7C:ED:84 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285849F17FD795012946E563BB0DA0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/843b1e5e-e2ac-3a59-9b60-32f66c34a3b1.roa Signing time: Fri 23 May 2025 01:00:49 +0000 ROA not before: Fri 23 May 2025 01:00:49 +0000 ROA not after: Thu 21 Aug 2025 01:00:49 +0000 asID: 3360 IP address blocks: 206.164.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:7f:d7:95:01:29:46:e5:63:bb:0d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: May 23 01:00:49 2025 GMT Not After : Aug 21 01:00:49 2025 GMT Subject: CN=1d6e1adc-bf33-41c7-8acb-942a3d119f12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8d:a1:5e:5b:5c:e5:a2:b4:7b:8d:e5:48:c4: c7:2a:51:32:60:c0:72:d5:7f:68:de:87:86:01:64: d0:93:8e:85:1e:29:66:4a:85:a7:bd:65:12:fa:bc: b7:e5:b9:2b:fa:b1:02:78:cb:37:4b:cb:4c:70:54: a5:63:f4:45:33:72:9b:b3:01:78:1c:f2:a1:2a:6f: 81:26:90:e6:b0:82:9c:e3:b9:3c:b9:bc:94:f8:be: a4:bf:d6:6c:9d:12:c2:f1:ff:a0:05:32:a3:d1:ab: ef:cb:e3:3b:58:2c:23:c3:3c:37:bb:ca:66:89:e8: 79:b8:8a:14:38:80:d0:3d:42:3c:4e:29:33:26:f9: 5d:1d:ea:9f:00:88:7c:9e:de:ea:c7:3e:64:3e:d5: fc:2f:62:df:3f:86:2a:09:be:ab:b4:7f:c1:95:25: 6c:1a:57:02:3a:f4:1b:2b:9e:a9:f8:26:34:71:66: 70:37:5b:ac:e8:66:07:71:a9:42:21:c5:f4:76:85: cd:b5:1e:a0:60:9c:9c:bc:fd:30:68:bc:c3:fd:55: b6:62:d0:0b:41:57:74:34:68:32:14:5d:d2:e5:90: 7f:d1:42:30:a4:18:28:29:2e:d0:77:c5:51:25:e0: f6:09:a9:60:80:a3:0c:80:06:bc:a8:2f:be:5f:32: 32:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:2F:34:FE:79:7E:26:C7:05:6B:26:E2:4A:DB:BA:D7:6B:7C:ED:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/843b1e5e-e2ac-3a59-9b60-32f66c34a3b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 206.164.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:e4:3d:b0:98:7f:ac:35:71:94:a4:04:2b:57:b9:72:78:4c: 45:f4:31:28:97:e1:48:4b:41:01:40:82:e6:cc:09:47:5b:d7: 3e:25:1c:0a:8d:17:99:1f:aa:5b:6a:cf:f3:16:d9:b9:7e:ca: d2:9a:8e:da:3d:7f:3c:17:ae:c1:33:36:c5:dd:c6:6d:ee:48: c5:82:52:53:1a:b5:e6:96:9f:67:98:d7:20:96:39:08:a7:0d: af:68:76:d3:d8:48:59:70:de:92:be:44:00:2a:77:9e:ad:e4: a1:b8:a0:73:5d:87:45:22:6a:7f:34:6d:a7:30:84:5d:a2:73: 3e:f8:a5:18:fa:de:b2:35:ee:22:7b:a8:02:7d:1d:81:25:b7: c3:aa:1f:78:20:42:97:fc:e1:93:11:53:db:1e:5c:7e:f9:01: b8:fb:1c:35:b7:98:a4:63:a0:52:35:9d:4d:27:28:4b:89:25: 70:dc:a9:99:e6:08:8a:9b:23:a4:2b:6b:59:78:67:d4:29:83: 9c:b6:23:2c:be:31:d0:52:64:57:95:23:e3:28:d9:c8:16:b7: 04:d6:ab:02:a9:12:4f:39:ca:c3:53:8e:d3:9b:70:71:13:59: 03:13:be:e3:75:4f:13:61:42:96:9e:cf:3d:34:d6:6e:c6:ab: 06:03:57:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxf9eVASlG5WO7DaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk MWQ2ZTFhZGMtYmYzMy00MWM3LThhY2ItOTQyYTNkMTE5ZjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx42hXltc5aK0e43lSMTHKlEyYMBy1X9o3oeG AWTQk46FHilmSoWnvWUS+ry35bkr+rECeMs3S8tMcFSlY/RFM3KbswF4HPKhKm+B JpDmsIKc47k8ubyU+L6kv9ZsnRLC8f+gBTKj0avvy+M7WCwjwzw3u8pmieh5uIoU OIDQPUI8TikzJvldHeqfAIh8nt7qxz5kPtX8L2LfP4YqCb6rtH/BlSVsGlcCOvQb K56p+CY0cWZwN1us6GYHcalCIcX0doXNtR6gYJycvP0waLzD/VW2YtALQVd0NGgy FF3S5ZB/0UIwpBgoKS7Qd8VRJeD2CalggKMMgAa8qC++XzIy2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLMvNP55fibHBWsm4krbutdrfO2EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvODQzYjFlNWUtZTJhYy0z YTU5LTliNjAtMzJmNjZjMzRhM2IxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzqSoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGHkPbCYf6w1cZSkBCtXuXJ4TEX0MSiX4UhLQQFAgubMCUdb1z4lHAqN F5kfqltqz/MW2bl+ytKajto9fzwXrsEzNsXdxm3uSMWCUlMateaWn2eY1yCWOQin Da9odtPYSFlw3pK+RAAqd56t5KG4oHNdh0Uian80bacwhF2icz74pRj63rI17iJ7 qAJ9HYElt8OqH3ggQpf84ZMRU9seXH75Abj7HDW3mKRjoFI1nU0nKEuJJXDcqZnm CIqbI6Qra1l4Z9Qpg5y2Iyy+MdBSZFeVI+Mo2cgWtwTWqwKpEk85ysNTjtObcHET WQMTvuN1TxNhQpaezz001m7GqwYDV0I= -----END CERTIFICATE-----Generated at Sun Jun 15 18:01:17 2025 by rpki-client