$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bfce70a6-ea5e-3841-b180-fedb11670175.roa File: bfce70a6-ea5e-3841-b180-fedb11670175.roa (raw, json) Hash identifier: 5wmRcJ8dLongkrmKpWA2iYjk19nkD8d4BSZDvZLZ9co= Subject key identifier: 2A:4C:17:4C:E6:E8:AB:87:13:08:26:D5:70:32:B4:44:D7:29:7C:81 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285849F17FD786F37DBC04A98B3900 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bfce70a6-ea5e-3841-b180-fedb11670175.roa Signing time: Fri 23 May 2025 01:00:49 +0000 ROA not before: Fri 23 May 2025 01:00:49 +0000 ROA not after: Thu 21 Aug 2025 01:00:49 +0000 asID: 3356 IP address blocks: 206.164.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:7f:d7:86:f3:7d:bc:04:a9:8b:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: May 23 01:00:49 2025 GMT Not After : Aug 21 01:00:49 2025 GMT Subject: CN=1f707480-1387-40df-b831-7d506900f2b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7a:30:00:67:04:02:1d:8b:a4:5e:ba:e1:4c: 54:8e:d0:1e:3a:90:23:03:c4:8c:46:c0:cc:58:bb: 2e:78:c2:88:2e:f3:a4:e3:94:c7:c4:c6:b6:60:b7: b0:04:fe:8d:2b:0c:f2:2a:4b:25:82:c0:31:c3:dd: 26:d4:16:34:24:69:e6:e3:35:b0:4b:11:fe:1c:65: b6:01:fa:fe:b8:40:57:68:71:9f:31:e7:7e:dc:ee: eb:f3:bb:d2:a6:90:2f:0a:73:d0:18:05:3d:ca:17: 3b:5a:66:ce:ab:aa:7f:db:e4:e1:bf:ac:37:78:33: 1b:2f:f6:a8:8c:75:3a:87:9b:a3:e4:15:a5:0f:54: 6a:c9:1b:4f:18:bf:f0:e9:51:a2:b0:51:09:8c:ed: 73:84:65:ad:05:0b:15:8e:9f:03:37:5d:3a:9b:ad: 9c:a3:3a:27:b1:5c:bf:17:c7:06:3d:7a:40:fd:38: 1f:86:0d:27:6b:16:c9:12:fd:64:72:2d:4c:b1:80: b4:82:8a:a7:2f:22:6b:11:8e:89:6d:0c:f5:73:ef: 31:d2:89:83:cf:91:bc:62:09:ab:ca:67:2a:39:b3: f0:88:65:e5:d1:88:ab:f7:6d:45:63:30:cd:37:fd: 36:12:28:36:11:af:56:f7:90:f1:78:74:cd:fb:8d: c5:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:4C:17:4C:E6:E8:AB:87:13:08:26:D5:70:32:B4:44:D7:29:7C:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bfce70a6-ea5e-3841-b180-fedb11670175.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 206.164.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:f5:ff:3d:96:b5:43:d4:8c:43:cc:f5:06:2b:39:92:04:91: 55:71:f6:85:1f:1b:77:97:60:15:b2:71:01:6f:5c:1f:03:f9: 4b:f6:6f:b1:8b:08:5e:59:f7:1d:3c:da:a4:bd:ac:0d:81:e5: bf:fc:0f:de:75:68:57:48:b7:4a:6b:1f:de:49:82:9a:70:7a: c4:81:44:7f:ce:e3:1d:5d:14:49:dc:12:16:fd:e8:3e:d0:4e: 56:00:3c:20:35:3b:dd:95:e6:25:16:fc:92:5d:01:f1:fc:0c: 9f:0a:55:b6:36:c4:ef:67:be:cd:0c:21:67:e4:e4:cc:31:75: 3b:d6:f8:a5:33:df:02:2f:99:19:5d:8e:7e:b3:15:4e:d9:7c: 1b:85:41:78:3b:e1:30:03:a0:b6:1b:2d:00:90:e2:bd:b1:19: f5:64:b5:21:6e:7a:51:69:c4:18:2c:b4:32:58:f6:5d:b0:9a: a7:90:48:9e:f0:b2:52:57:0b:e1:20:fc:ac:51:f9:20:5a:63: d0:75:b9:20:ad:62:2b:96:89:4f:4a:18:9a:25:f4:92:17:a3: f3:aa:03:fd:30:96:16:87:ac:ee:bc:e4:e9:a5:bb:3f:da:52: eb:42:b8:0d:08:10:b6:b8:67:f4:81:b7:5d:00:34:f8:fe:53: 4d:01:b6:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxf9eG8328BKmLOQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk MWY3MDc0ODAtMTM4Ny00MGRmLWI4MzEtN2Q1MDY5MDBmMmI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3owAGcEAh2LpF664UxUjtAeOpAjA8SMRsDM WLsueMKILvOk45THxMa2YLewBP6NKwzyKkslgsAxw90m1BY0JGnm4zWwSxH+HGW2 Afr+uEBXaHGfMed+3O7r87vSppAvCnPQGAU9yhc7WmbOq6p/2+Thv6w3eDMbL/ao jHU6h5uj5BWlD1RqyRtPGL/w6VGisFEJjO1zhGWtBQsVjp8DN106m62cozonsVy/ F8cGPXpA/Tgfhg0naxbJEv1kci1MsYC0goqnLyJrEY6JbQz1c+8x0omDz5G8Ygmr ymcqObPwiGXl0Yir921FYzDNN/02Eig2Ea9W95DxeHTN+43FmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCpMF0zm6KuHEwgm1XAytETXKXyBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYmZjZTcwYTYtZWE1ZS0z ODQxLWIxODAtZmVkYjExNjcwMTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzqSoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA/1/z2WtUPUjEPM9QYrOZIEkVVx9oUfG3eXYBWycQFvXB8D+Uv2b7GL CF5Z9x082qS9rA2B5b/8D951aFdIt0prH95JgppwesSBRH/O4x1dFEncEhb96D7Q TlYAPCA1O92V5iUW/JJdAfH8DJ8KVbY2xO9nvs0MIWfk5MwxdTvW+KUz3wIvmRld jn6zFU7ZfBuFQXg74TADoLYbLQCQ4r2xGfVktSFuelFpxBgstDJY9l2wmqeQSJ7w slJXC+Eg/KxR+SBaY9B1uSCtYiuWiU9KGJol9JIXo/OqA/0wlhaHrO685Omluz/a UutCuA0IELa4Z/SBt10ANPj+U00Bttc= -----END CERTIFICATE-----Generated at Tue Jun 17 14:57:54 2025 by rpki-client