$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d20fa90b-4fff-3cd8-af23-dde52f5fe0c7.roa File: d20fa90b-4fff-3cd8-af23-dde52f5fe0c7.roa (raw, json) Hash identifier: jw4yclmw49S3ISLEEUgmDU9VFwN1pOpL0heYQJyN9V8= Subject key identifier: 8F:2F:C5:28:6A:22:CC:7E:43:05:5A:8E:12:E1:B4:57:0E:3F:A7:FC Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858494733E80D08859A67A0EB3C80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d20fa90b-4fff-3cd8-af23-dde52f5fe0c7.roa Signing time: Sun 23 Mar 2025 01:00:39 +0000 ROA not before: Sun 23 Mar 2025 01:00:39 +0000 ROA not after: Sat 21 Jun 2025 01:00:39 +0000 asID: 3356 IP address blocks: 204.103.46.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:47:33:e8:0d:08:85:9a:67:a0:eb:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 23 01:00:39 2025 GMT Not After : Jun 21 01:00:39 2025 GMT Subject: CN=5cb47ad4-4a41-4a69-b461-202ad0246a14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e8:86:2e:a0:3f:3d:c4:59:3e:bf:9c:b2:55: 5d:8d:ba:c6:d7:9b:b6:a6:7b:5d:ae:58:5e:a5:bf: 98:bf:61:0e:83:c5:48:41:3b:b2:ec:f3:56:f2:17: c2:ae:d7:f1:cd:73:ac:37:e4:a2:9b:d6:52:8e:6c: 7c:55:d5:cd:dc:96:ab:b6:ba:cf:99:c7:95:f3:33: aa:00:a1:84:7f:54:96:b4:41:62:bb:fa:e8:8c:b6: 1c:94:06:86:21:f9:62:8a:d9:2d:c4:19:52:d0:5d: f1:3a:0a:95:80:07:94:c0:d0:92:0d:89:56:70:1a: 41:96:e8:37:24:d6:47:98:54:dc:1c:2b:08:db:54: d9:3c:a9:b0:ae:58:ea:af:68:8a:6d:5d:06:91:e0: 98:51:85:fc:6d:cd:cf:94:cc:ab:da:da:7e:a5:18: e7:c6:9a:72:87:06:95:5c:73:92:3d:b6:b7:b8:30: 42:34:0a:31:a4:88:4d:eb:8f:13:f3:da:a8:45:fc: 32:0f:6c:f1:40:19:79:dc:4a:da:32:42:64:9b:81: 50:77:67:8e:b5:f0:ae:d8:d0:3c:c6:94:ba:8e:11: 3d:af:10:e9:89:95:18:35:bd:3e:ac:f2:9d:23:90: 66:fd:81:1c:6c:f3:9a:2a:9c:52:91:4b:4a:f7:6a: 4e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:2F:C5:28:6A:22:CC:7E:43:05:5A:8E:12:E1:B4:57:0E:3F:A7:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d20fa90b-4fff-3cd8-af23-dde52f5fe0c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 204.103.46.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:f8:65:57:35:ed:6d:c5:00:dc:60:1c:99:12:f2:80:fa:63: 20:97:83:8f:44:ee:fc:04:d3:01:3a:95:cf:4b:f2:7c:74:11: 35:a7:d7:c6:7d:4a:1a:0d:7d:61:f9:9b:64:12:03:ac:85:16: f8:a2:33:90:6a:69:35:25:05:4f:e1:6f:8a:ea:f6:5c:5c:9f: d9:b2:ed:1b:e8:86:9d:21:2f:a1:26:50:2c:fc:6f:d9:66:7f: bd:79:56:73:09:46:23:b6:9d:f5:ec:26:cd:45:4b:d7:93:b7: ed:95:71:60:30:22:a1:ed:49:9f:79:d1:a6:dd:72:8b:39:3c: 99:ff:16:ef:fd:a2:a8:51:6f:30:ea:24:7a:41:6f:dc:97:e7: 3f:9d:bb:67:02:84:95:3c:03:c1:90:21:38:03:ba:f4:32:09: 18:19:81:60:a7:55:ad:7d:a8:8c:a3:36:e2:9c:6e:43:96:3d: 9d:ad:10:9c:e6:7a:f4:f0:e8:89:ee:be:69:8b:7a:66:06:ec: 48:15:e8:92:9c:84:dc:4b:1b:c6:32:9a:88:47:b1:5b:a1:1e: cb:68:b4:0c:8c:c0:e6:76:34:81:c7:04:a7:d6:f4:0a:e2:29: aa:51:95:2f:0a:99:b1:ec:f1:ff:c4:61:40:25:84:09:16:3d: 14:c1:79:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElHM+gNCIWaZ6DrPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDMyMzAxMDAzOVoXDTI1MDYyMTAxMDAzOVowLzEtMCsGA1UEAxMk NWNiNDdhZDQtNGE0MS00YTY5LWI0NjEtMjAyYWQwMjQ2YTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuiGLqA/PcRZPr+cslVdjbrG15u2pntdrlhe pb+Yv2EOg8VIQTuy7PNW8hfCrtfxzXOsN+Sim9ZSjmx8VdXN3JartrrPmceV8zOq AKGEf1SWtEFiu/rojLYclAaGIfliitktxBlS0F3xOgqVgAeUwNCSDYlWcBpBlug3 JNZHmFTcHCsI21TZPKmwrljqr2iKbV0GkeCYUYX8bc3PlMyr2tp+pRjnxppyhwaV XHOSPba3uDBCNAoxpIhN648T89qoRfwyD2zxQBl53EraMkJkm4FQd2eOtfCu2NA8 xpS6jhE9rxDpiZUYNb0+rPKdI5Bm/YEcbPOaKpxSkUtK92pOXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI8vxShqIsx+QwVajhLhtFcOP6f8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZDIwZmE5MGItNGZmZi0z Y2Q4LWFmMjMtZGRlNTJmNWZlMGM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzGcuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEr4ZVc17W3FANxgHJkS8oD6YyCXg49E7vwE0wE6lc9L8nx0ETWn18Z9 ShoNfWH5m2QSA6yFFviiM5BqaTUlBU/hb4rq9lxcn9my7Rvohp0hL6EmUCz8b9lm f715VnMJRiO2nfXsJs1FS9eTt+2VcWAwIqHtSZ950abdcos5PJn/Fu/9oqhRbzDq JHpBb9yX5z+du2cChJU8A8GQITgDuvQyCRgZgWCnVa19qIyjNuKcbkOWPZ2tEJzm evTw6InuvmmLemYG7EgV6JKchNxLG8YymohHsVuhHstotAyMwOZ2NIHHBKfW9Ari KapRlS8KmbHs8f/EYUAlhAkWPRTBeZs= -----END CERTIFICATE-----Generated at Sat Apr 26 16:08:14 2025 by rpki-client