$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bcf6f989-824a-304b-bf25-619305571b9a.roa File: bcf6f989-824a-304b-bf25-619305571b9a.roa (raw, json) Hash identifier: iDFtE8cfSFFKhPD1wy5DSCDgNFQ1yfqpy1wS1/vQCpc= Subject key identifier: 33:02:A0:80:4E:17:AC:33:70:E9:B2:9C:FF:DC:11:6D:9D:A3:BA:3A Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858499DBF369EFCCE6F17754D7D00 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bcf6f989-824a-304b-bf25-619305571b9a.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 3356 IP address blocks: 207.37.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:36:9e:fc:ce:6f:17:75:4d:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=1a7cd2c0-9ac1-41da-aac0-0fb193838c16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:81:10:78:c2:1c:d8:4d:1e:2a:63:7c:0d:2c: 82:aa:ec:f6:d1:57:09:f6:d2:ad:10:90:a8:bc:b3: d5:3b:9b:56:cc:52:97:54:94:78:84:e8:03:d9:17: 4f:38:f8:c7:67:d1:3b:07:7b:bc:a1:ef:d7:f9:2e: e1:7e:6f:fc:34:4f:e4:9d:e7:38:80:6f:4d:78:7c: 25:cd:4d:8f:0c:05:d4:bf:62:87:cc:43:bb:b9:93: 10:be:4a:04:c3:bd:59:ad:00:6f:30:52:b3:1b:fd: 53:bd:8c:2a:6d:1f:ed:a0:20:54:95:3f:50:67:67: b1:eb:2a:cd:c9:12:c4:0f:bf:ce:dd:46:5a:7f:1b: 7b:31:b9:a6:2c:95:9c:05:f7:66:04:63:38:08:cd: ea:bd:3c:af:39:8f:97:a8:3f:ec:e5:ec:5d:0f:07: 67:da:b2:2e:7e:0e:37:96:fd:c4:e3:d2:a4:cd:08: 7e:4a:9e:49:f4:43:91:60:96:90:51:a5:56:83:ab: cb:2b:39:38:0f:eb:d3:42:f1:f2:a6:63:ee:24:c6: 0c:6b:a6:b6:6a:5b:66:90:d5:eb:8f:00:3f:4a:c2: 5c:0b:38:14:24:d7:a8:49:e6:6f:50:e6:b9:39:81: 90:19:94:bc:e9:13:2e:70:04:2c:30:4c:bd:3e:85: ca:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:02:A0:80:4E:17:AC:33:70:E9:B2:9C:FF:DC:11:6D:9D:A3:BA:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bcf6f989-824a-304b-bf25-619305571b9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 207.37.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:94:15:de:a6:05:66:94:26:3c:cd:9c:f7:8e:88:6f:44:d8: 73:86:90:55:2c:22:05:9c:c3:d8:2f:bb:81:e6:03:5a:49:75: dc:30:7a:a1:bc:a2:47:16:19:d7:f3:13:1f:22:68:79:0d:b1: 81:e1:28:df:b4:85:6f:c8:30:60:3c:16:51:a2:dd:81:9a:0c: fb:e7:2b:bd:de:f7:2c:16:a7:83:dc:de:ce:9f:02:33:93:30: cb:9d:69:73:e1:a6:67:e1:02:48:9b:5a:e2:e7:c4:f9:1c:60: 81:e0:c4:b6:e0:4a:26:f5:d5:84:de:9a:de:01:9a:22:bd:0b: b0:d2:e9:ba:b0:60:08:21:91:ca:e8:32:00:7a:7f:26:65:57: 6c:c4:18:a4:13:7c:50:b8:47:ff:38:23:2f:fa:c6:01:e8:5c: a1:76:76:ab:27:0a:7b:76:9f:0e:bb:c1:d5:38:bd:17:90:aa: 87:2a:f2:ab:4c:11:08:63:4b:04:a0:fb:03:a2:69:fe:2f:ba: 93:3e:f9:da:ac:04:28:db:24:9d:50:29:93:51:31:59:2b:24: 0f:c5:d6:a4:81:19:70:64:ce:c5:99:ee:1a:ba:0f:89:ab:79: 8a:fa:dc:01:a5:53:78:0b:3e:15:ff:9d:4b:8a:ce:37:53:37: 54:04:ec:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdvzae/M5vF3VNfQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk MWE3Y2QyYzAtOWFjMS00MWRhLWFhYzAtMGZiMTkzODM4YzE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYEQeMIc2E0eKmN8DSyCquz20VcJ9tKtEJCo vLPVO5tWzFKXVJR4hOgD2RdPOPjHZ9E7B3u8oe/X+S7hfm/8NE/knec4gG9NeHwl zU2PDAXUv2KHzEO7uZMQvkoEw71ZrQBvMFKzG/1TvYwqbR/toCBUlT9QZ2ex6yrN yRLED7/O3UZafxt7MbmmLJWcBfdmBGM4CM3qvTyvOY+XqD/s5exdDwdn2rIufg43 lv3E49KkzQh+Sp5J9EORYJaQUaVWg6vLKzk4D+vTQvHypmPuJMYMa6a2altmkNXr jwA/SsJcCzgUJNeoSeZvUOa5OYGQGZS86RMucAQsMEy9PoXKZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDMCoIBOF6wzcOmynP/cEW2do7o6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYmNmNmY5ODktODI0YS0z MDRiLWJmMjUtNjE5MzA1NTcxYjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzyXIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEmUFd6mBWaUJjzNnPeOiG9E2HOGkFUsIgWcw9gvu4HmA1pJddwweqG8 okcWGdfzEx8iaHkNsYHhKN+0hW/IMGA8FlGi3YGaDPvnK73e9ywWp4Pc3s6fAjOT MMudaXPhpmfhAkibWuLnxPkcYIHgxLbgSib11YTemt4BmiK9C7DS6bqwYAghkcro MgB6fyZlV2zEGKQTfFC4R/84Iy/6xgHoXKF2dqsnCnt2nw67wdU4vReQqocq8qtM EQhjSwSg+wOiaf4vupM++dqsBCjbJJ1QKZNRMVkrJA/F1qSBGXBkzsWZ7hq6D4mr eYr63AGlU3gLPhX/nUuKzjdTN1QE7Po= -----END CERTIFICATE-----Generated at Sat Apr 26 16:35:49 2025 by rpki-client