$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/855c86c4-8a3f-3138-957a-46a5e78472a4.roa File: 855c86c4-8a3f-3138-957a-46a5e78472a4.roa (raw, json) Hash identifier: RSPy7voZTaVh0RYh2w8/lHICTgOhzT/0kZiShN6cWKA= Subject key identifier: 62:92:19:B4:E1:D6:F6:97:C3:20:22:75:53:D9:30:EC:86:FA:AE:17 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858499DBF3755AB1975338042D080 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/855c86c4-8a3f-3138-957a-46a5e78472a4.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 3356 IP address blocks: 207.37.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:37:55:ab:19:75:33:80:42:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=b9f4a4e5-71dd-4d67-b66d-06ef3f935846 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:13:2a:f0:49:b5:9f:ec:2a:a8:0e:4d:d6:f9: ae:65:fe:96:57:99:2b:b1:f1:e1:28:76:7c:f9:c5: 2b:0f:37:aa:a7:a9:0a:da:4d:45:80:d1:71:3e:01: 0d:c7:27:c0:39:be:8f:d8:da:d8:25:e7:8c:84:7a: e8:75:3e:02:7d:7f:ad:95:67:e2:4d:dd:e9:6c:c9: d1:5d:40:d0:fb:5e:d7:f5:71:52:5f:24:15:5b:f4: 29:c4:12:c7:5a:59:c3:08:9a:ef:13:5c:3b:91:26: 3b:23:6c:f9:fa:d7:83:50:ab:f8:58:54:48:20:f7: 48:56:8a:4b:f6:f5:b9:12:83:16:ed:21:eb:4b:b3: 39:00:c1:30:40:4e:b4:60:59:62:9b:85:1f:ef:f4: 1e:c0:c0:23:ae:45:40:5e:d6:30:2a:5f:4c:19:f6: 77:d0:0c:d5:a5:db:d5:ea:40:f7:b3:f6:66:e4:d4: 23:1e:38:3a:2a:3f:20:ed:ad:8a:77:c6:9d:51:cf: f5:a7:f0:9c:7f:6f:14:ac:f4:8b:3b:5a:83:13:4f: 6f:25:22:46:25:d5:ae:40:63:ed:d2:9f:6a:3e:b6: 86:a7:a0:ee:74:e6:ac:f3:f9:d1:53:c8:40:fa:53: e7:0d:10:2b:fc:78:15:6e:9f:fa:2e:ed:38:e8:cf: 61:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:92:19:B4:E1:D6:F6:97:C3:20:22:75:53:D9:30:EC:86:FA:AE:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/855c86c4-8a3f-3138-957a-46a5e78472a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 207.37.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:db:4c:38:5e:e6:7b:1d:be:81:78:d4:ba:9a:98:96:55:b6: a1:08:01:e0:ae:21:06:37:45:5a:f9:37:86:f6:d9:66:f7:40: ab:7b:30:55:b3:a7:f3:79:f9:2b:59:e4:67:ae:91:70:25:d0: fe:34:2b:8e:8d:12:ae:fa:de:d1:d0:24:5a:46:fc:50:58:06: 15:3a:3d:c1:04:b8:80:5a:77:b2:4d:03:ef:2e:56:e0:41:ea: b2:84:8d:ef:09:3b:1e:e9:20:7f:41:7b:5e:e8:4d:08:f7:2f: 7d:c1:9a:45:f0:f1:ac:57:d5:3c:8d:35:4d:7f:e5:8b:37:87: f0:90:81:44:e8:88:23:d6:58:ea:e2:4a:7a:21:9a:30:04:c7: e7:b4:72:c3:23:52:e0:36:45:cc:81:bb:6a:a3:72:c0:63:fd: a7:50:ea:df:6d:74:75:ff:16:b2:b0:df:d4:31:ed:35:87:09: 05:3b:e6:e6:e9:ce:80:e4:6a:9a:de:84:dc:34:81:af:7d:ae: 42:07:ad:d4:a1:6d:d1:c9:43:68:f2:bf:d0:22:02:32:26:de: 1e:f5:fe:2d:19:62:dc:9f:a9:45:c2:b4:28:bf:23:47:9e:f6: a6:83:14:5d:cf:77:15:fa:c2:ee:8c:7f:3c:fa:bb:da:f3:de: 34:19:32:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdvzdVqxl1M4BC0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk YjlmNGE0ZTUtNzFkZC00ZDY3LWI2NmQtMDZlZjNmOTM1ODQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxMq8Em1n+wqqA5N1vmuZf6WV5krsfHhKHZ8 +cUrDzeqp6kK2k1FgNFxPgENxyfAOb6P2NrYJeeMhHrodT4CfX+tlWfiTd3pbMnR XUDQ+17X9XFSXyQVW/QpxBLHWlnDCJrvE1w7kSY7I2z5+teDUKv4WFRIIPdIVopL 9vW5EoMW7SHrS7M5AMEwQE60YFlim4Uf7/QewMAjrkVAXtYwKl9MGfZ30AzVpdvV 6kD3s/Zm5NQjHjg6Kj8g7a2Kd8adUc/1p/Ccf28UrPSLO1qDE09vJSJGJdWuQGPt 0p9qPraGp6DudOas8/nRU8hA+lPnDRAr/HgVbp/6Lu046M9hdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGKSGbTh1vaXwyAidVPZMOyG+q4XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvODU1Yzg2YzQtOGEzZi0z MTM4LTk1N2EtNDZhNWU3ODQ3MmE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzyX4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJTbTDhe5nsdvoF41LqamJZVtqEIAeCuIQY3RVr5N4b22Wb3QKt7MFWz p/N5+StZ5GeukXAl0P40K46NEq763tHQJFpG/FBYBhU6PcEEuIBad7JNA+8uVuBB 6rKEje8JOx7pIH9Be17oTQj3L33BmkXw8axX1TyNNU1/5Ys3h/CQgUToiCPWWOri SnohmjAEx+e0csMjUuA2RcyBu2qjcsBj/adQ6t9tdHX/FrKw39Qx7TWHCQU75ubp zoDkaprehNw0ga99rkIHrdShbdHJQ2jyv9AiAjIm3h71/i0ZYtyfqUXCtCi/I0ee 9qaDFF3PdxX6wu6Mfzz6u9rz3jQZMqE= -----END CERTIFICATE-----Generated at Sat Apr 26 16:27:07 2025 by rpki-client