$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8bfb1cc7-1d2d-376d-a07f-316d567550c8.roa File: 8bfb1cc7-1d2d-376d-a07f-316d567550c8.roa (raw, json) Hash identifier: JGG0IeFdkIqEFz2exKO8HQfxZVpiZGMWMx3p1bHl/jM= Subject key identifier: A6:17:C2:B3:A7:44:05:13:74:C8:21:37:5F:5F:D5:E5:63:8B:15:12 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858499AF483C07EDC5806558F18A0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8bfb1cc7-1d2d-376d-a07f-316d567550c8.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 2158 IP address blocks: 207.37.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:83:c0:7e:dc:58:06:55:8f:18:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=87d1d379-11d0-42c9-be16-ba4ca7315d6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:51:84:cb:e8:7e:eb:94:3c:cc:c6:d1:74:c1: a6:ba:7a:00:b0:94:b1:77:77:1c:8e:86:02:98:23: 80:37:c7:5f:8d:93:be:b6:d1:77:65:8e:d2:c0:23: 15:e5:f7:18:a4:65:04:47:ae:fb:a9:df:e4:b2:fc: 19:2b:7b:4c:4b:59:09:22:8e:f2:53:51:c7:22:cd: 54:9c:53:d1:0a:98:52:9e:7a:95:6c:c1:ba:50:08: 88:6e:7f:7f:15:34:7e:5c:ff:fe:3e:56:7f:ac:41: c6:96:54:40:f5:c8:56:1f:f7:f0:52:a8:27:e2:8e: 73:e9:30:69:02:ba:13:11:66:b7:74:77:ef:81:4e: ae:fc:45:76:fa:c3:53:a8:bb:ed:65:c8:28:a3:e3: de:cc:8c:24:aa:14:11:a1:ee:90:3f:a0:02:93:26: d1:a7:6e:d9:76:a4:9d:69:fc:62:ad:94:2c:88:87: 65:92:8f:1b:2b:61:49:2f:36:2b:d8:0c:4f:d4:58: 9e:05:80:79:db:bf:73:91:68:6f:d7:89:4f:78:3f: 8c:15:dc:b5:7f:5b:11:32:2c:03:be:58:ce:ae:6d: ac:47:9e:49:64:c9:2d:2f:3d:e8:e6:65:90:63:36: 37:1b:5d:57:a2:fd:13:a6:91:9a:40:00:9e:da:e3: e6:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:17:C2:B3:A7:44:05:13:74:C8:21:37:5F:5F:D5:E5:63:8B:15:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8bfb1cc7-1d2d-376d-a07f-316d567550c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 207.37.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:ec:06:50:d4:12:50:e0:7e:cd:b6:42:79:c5:f8:21:2c:1c: 09:60:68:61:55:cd:02:ab:8c:a9:4c:69:e6:54:a1:ed:97:64: 89:66:8c:17:2b:99:3d:68:f2:62:84:c6:52:eb:7f:29:e0:61: df:40:59:bd:96:1b:75:f3:f0:dc:e3:f6:7e:89:25:43:83:10: a4:e4:88:07:24:6f:63:0f:df:d1:e1:ff:24:79:eb:ef:b8:ee: 54:b5:94:3d:ae:8d:92:4b:5e:ee:ff:a6:40:a1:79:56:d6:9e: 85:7e:09:5d:e8:48:23:8f:a0:14:c5:ae:be:e4:3c:82:d4:a9: 51:9a:61:5d:39:05:d0:1a:1a:4e:9d:e8:61:5d:55:81:d9:d3: f8:83:27:51:9f:87:c4:da:95:cf:2b:e1:fc:c0:38:e1:96:c1: 16:4f:9f:e8:41:bb:30:42:c9:70:39:d4:c1:85:f6:ec:46:8a: e7:dc:23:1e:57:58:c3:1c:04:01:85:fb:06:65:e8:46:59:73: 3d:47:79:8e:bc:f3:2c:ab:96:5e:ae:f2:79:69:50:cf:63:76: af:c4:fb:06:0e:7b:43:89:50:63:47:8a:80:5a:5b:09:65:02: 85:12:e5:46:33:2a:a5:53:93:fd:41:35:e5:4c:05:00:12:b7: 59:53:8d:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9IPAftxYBlWPGKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk ODdkMWQzNzktMTFkMC00MmM5LWJlMTYtYmE0Y2E3MzE1ZDZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlGEy+h+65Q8zMbRdMGmunoAsJSxd3ccjoYC mCOAN8dfjZO+ttF3ZY7SwCMV5fcYpGUER677qd/ksvwZK3tMS1kJIo7yU1HHIs1U nFPRCphSnnqVbMG6UAiIbn9/FTR+XP/+PlZ/rEHGllRA9chWH/fwUqgn4o5z6TBp AroTEWa3dHfvgU6u/EV2+sNTqLvtZcgoo+PezIwkqhQRoe6QP6ACkybRp27ZdqSd afxirZQsiIdlko8bK2FJLzYr2AxP1FieBYB5279zkWhv14lPeD+MFdy1f1sRMiwD vljOrm2sR55JZMktLz3o5mWQYzY3G11Xov0TppGaQACe2uPmSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKYXwrOnRAUTdMghN19f1eVjixUSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvOGJmYjFjYzctMWQyZC0z NzZkLWEwN2YtMzE2ZDU2NzU1MGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzyUhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJbsBlDUElDgfs22QnnF+CEsHAlgaGFVzQKrjKlMaeZUoe2XZIlmjBcr mT1o8mKExlLrfyngYd9AWb2WG3Xz8Nzj9n6JJUODEKTkiAckb2MP39Hh/yR56++4 7lS1lD2ujZJLXu7/pkCheVbWnoV+CV3oSCOPoBTFrr7kPILUqVGaYV05BdAaGk6d 6GFdVYHZ0/iDJ1Gfh8Talc8r4fzAOOGWwRZPn+hBuzBCyXA51MGF9uxGiufcIx5X WMMcBAGF+wZl6EZZcz1HeY688yyrll6u8nlpUM9jdq/E+wYOe0OJUGNHioBaWwll AoUS5UYzKqVTk/1BNeVMBQASt1lTjfc= -----END CERTIFICATE-----Generated at Sun Apr 27 00:15:32 2025 by rpki-client