$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c86bb04b-3de9-3441-be9f-90b51051f16f.roa File: c86bb04b-3de9-3441-be9f-90b51051f16f.roa (raw, json) Hash identifier: jAWjo89xpw2Da6+F58JRTU6tg2Cg9YArN1BP7IT76MA= Subject key identifier: 5F:F9:C3:5A:20:96:D5:53:0B:B4:B4:E2:9D:0D:E4:0B:72:7D:44:6F Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285849F17FD75E479F2334487A5C80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c86bb04b-3de9-3441-be9f-90b51051f16f.roa Signing time: Fri 23 May 2025 01:00:49 +0000 ROA not before: Fri 23 May 2025 01:00:49 +0000 ROA not after: Thu 21 Aug 2025 01:00:49 +0000 asID: 3360 IP address blocks: 205.191.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:7f:d7:5e:47:9f:23:34:48:7a:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: May 23 01:00:49 2025 GMT Not After : Aug 21 01:00:49 2025 GMT Subject: CN=3ca91255-990d-44ca-9e6a-bcc9131a7b87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:05:af:e7:27:67:21:a6:a6:be:1b:9f:31:37: 21:4b:f7:05:33:00:29:c6:9c:17:06:8b:d7:bb:42: d4:9f:ff:30:c0:91:eb:b3:0e:74:1b:84:2a:19:0f: 9f:0e:e5:4b:fa:41:52:3a:e8:c6:8c:0e:04:8a:de: 06:61:d4:07:c7:93:e5:be:75:a8:23:d0:7d:04:ed: f1:f2:80:75:04:f2:32:8a:26:b7:30:ff:5e:be:43: ae:91:c2:83:28:07:f4:17:15:e5:58:af:db:67:0d: 7b:d8:bf:8b:aa:d3:7e:50:7f:2d:93:6f:77:b9:03: d0:54:b7:e9:7a:ba:eb:98:fb:b8:c1:bd:cf:a5:3c: f7:39:69:19:98:8f:9b:9c:b2:39:e4:88:9f:1d:3b: aa:dd:33:d8:22:fe:0e:88:ea:4c:59:1d:5a:cf:e5: 16:2c:46:6d:57:eb:97:ab:1e:1c:9f:53:d9:93:06: 0d:08:43:d7:2c:66:16:a9:20:cc:07:f6:c5:df:11: 4a:0a:18:45:3e:e9:e1:4c:f6:c0:66:66:92:47:ae: 1a:a8:1a:c9:ad:ce:4c:c1:cd:67:38:68:a3:16:00: f2:1b:18:77:8f:b5:d0:b1:a3:69:a1:12:c3:15:36: 19:f4:94:f9:27:16:2d:90:77:28:4f:ac:99:b2:cc: ab:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:F9:C3:5A:20:96:D5:53:0B:B4:B4:E2:9D:0D:E4:0B:72:7D:44:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c86bb04b-3de9-3441-be9f-90b51051f16f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 205.191.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:73:47:a4:0e:30:16:20:91:02:f1:5e:e9:af:97:ec:bc:48: 7f:89:8e:63:7c:47:2e:fb:ee:0d:2f:9f:49:47:58:3d:30:e0: 24:df:af:3e:34:e1:22:8d:91:89:6e:42:46:bf:95:41:08:be: b3:9f:c5:60:5b:02:11:ff:3b:4e:3c:68:d0:86:1f:aa:cf:0e: 93:8d:35:72:0e:3b:c4:69:30:b4:0f:8c:3f:00:51:47:17:50: d3:fe:96:1b:cd:c2:56:37:90:e0:c2:24:53:8f:b4:e1:95:96: ca:28:09:0f:77:ae:2b:f4:63:95:2b:e0:a3:b6:23:4f:ea:fd: 79:7d:a7:79:74:13:31:92:53:1f:92:47:dc:00:e2:66:ab:4c: c8:c9:fb:51:a6:a3:d9:d6:90:57:5b:20:0d:d5:eb:6c:06:c0: ea:6e:9d:7b:81:a9:ed:6f:da:af:c3:91:e1:83:7d:39:09:93: 91:d1:5c:2a:a8:18:2b:36:43:4b:17:b4:0e:d9:7b:85:2b:7d: b8:bd:d1:91:19:76:42:e2:52:d0:a6:25:b2:a3:2f:da:5e:63: 41:b4:90:02:e4:85:f4:e6:27:e5:72:1a:dc:56:89:63:5e:c8: 41:18:4e:01:c6:3a:a8:0d:8c:c6:cd:02:c6:25:c2:c9:96:98: db:dd:9c:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxf9deR58jNEh6XIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk M2NhOTEyNTUtOTkwZC00NGNhLTllNmEtYmNjOTEzMWE3Yjg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQWv5ydnIaamvhufMTchS/cFMwApxpwXBovX u0LUn/8wwJHrsw50G4QqGQ+fDuVL+kFSOujGjA4Eit4GYdQHx5PlvnWoI9B9BO3x 8oB1BPIyiia3MP9evkOukcKDKAf0FxXlWK/bZw172L+LqtN+UH8tk293uQPQVLfp errrmPu4wb3PpTz3OWkZmI+bnLI55IifHTuq3TPYIv4OiOpMWR1az+UWLEZtV+uX qx4cn1PZkwYNCEPXLGYWqSDMB/bF3xFKChhFPunhTPbAZmaSR64aqBrJrc5Mwc1n OGijFgDyGxh3j7XQsaNpoRLDFTYZ9JT5JxYtkHcoT6yZssyrrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF/5w1ogltVTC7S04p0N5AtyfURvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYzg2YmIwNGItM2RlOS0z NDQxLWJlOWYtOTBiNTEwNTFmMTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzb8oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABRzR6QOMBYgkQLxXumvl+y8SH+JjmN8Ry777g0vn0lHWD0w4CTfrz40 4SKNkYluQka/lUEIvrOfxWBbAhH/O048aNCGH6rPDpONNXIOO8RpMLQPjD8AUUcX UNP+lhvNwlY3kODCJFOPtOGVlsooCQ93riv0Y5Ur4KO2I0/q/Xl9p3l0EzGSUx+S R9wA4marTMjJ+1Gmo9nWkFdbIA3V62wGwOpunXuBqe1v2q/DkeGDfTkJk5HRXCqo GCs2Q0sXtA7Ze4Urfbi90ZEZdkLiUtCmJbKjL9peY0G0kALkhfTmJ+VyGtxWiWNe yEEYTgHGOqgNjMbNAsYlwsmWmNvdnPQ= -----END CERTIFICATE-----Generated at Sun Jun 15 16:00:20 2025 by rpki-client