$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f318fbf6-7490-3465-b99c-a0a53aaa75e2.roa File: f318fbf6-7490-3465-b99c-a0a53aaa75e2.roa (raw, json) Hash identifier: f+ivYX7J6kkX1HWekfOFITS2RM/RqTPkhfVS04Rn9GY= Subject key identifier: 4A:9C:CE:23:E8:A4:E5:FB:92:26:47:0D:4C:3A:98:BC:43:08:EB:29 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285849998F39AC17695A62171E9200 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f318fbf6-7490-3465-b99c-a0a53aaa75e2.roa Signing time: Mon 21 Apr 2025 13:00:59 +0000 ROA not before: Mon 21 Apr 2025 13:00:59 +0000 ROA not after: Sun 20 Jul 2025 13:00:59 +0000 asID: 3356 IP address blocks: 170.30.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:99:8f:39:ac:17:69:5a:62:17:1e:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 21 13:00:59 2025 GMT Not After : Jul 20 13:00:59 2025 GMT Subject: CN=3f94c7af-3f17-43ff-9926-9360e660d01c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7b:0e:ad:d2:b1:0b:6d:21:e3:f7:08:c9:aa: ee:76:f4:2b:a6:e5:5c:d4:18:5c:ae:db:39:6a:61: 34:43:ff:a4:d1:4d:f5:41:47:74:ac:d1:51:04:a0: 09:90:ec:ca:8d:1d:71:e5:0f:00:65:92:a2:2e:e4: 01:70:f7:64:fb:c2:7e:52:16:97:c9:f2:c7:2d:3a: eb:b8:e2:c4:d1:43:b6:08:8f:b0:6b:6c:51:4c:fd: d4:07:dd:d0:a8:ca:cd:33:89:bb:b9:e4:4a:a3:8f: 70:cb:c7:12:a4:3f:cd:e0:1f:2a:ba:28:d6:3d:f3: 88:4c:ac:1b:c5:ac:76:77:8d:11:82:da:d3:08:43: cb:e7:32:5b:d4:f6:ae:3e:24:87:b0:a1:83:21:7f: 1e:3f:05:5c:2f:c2:d4:4a:88:d0:5e:75:8d:e0:0b: be:96:ed:d4:3e:c1:6e:a2:bd:e0:a2:09:20:41:fe: f1:df:e2:4a:12:40:88:aa:8e:9a:c5:47:80:1e:18: 53:d4:eb:e8:09:4a:65:e3:48:c7:ba:f3:2d:37:f8: fd:6e:81:2b:12:1a:0b:19:2c:da:0c:8d:24:6c:9d: be:33:a9:1c:c8:f7:cb:a9:6a:f9:26:7e:08:0a:65: 8b:4e:74:31:4d:41:e2:a4:cf:0d:e2:88:92:e5:59: 14:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:9C:CE:23:E8:A4:E5:FB:92:26:47:0D:4C:3A:98:BC:43:08:EB:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f318fbf6-7490-3465-b99c-a0a53aaa75e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 170.30.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:69:14:aa:8c:1c:e5:46:41:73:39:75:a9:f8:50:b9:c7:e7: 90:6d:bb:c8:93:1c:05:c2:b3:e3:7f:25:08:ae:ae:ee:73:05: 90:00:96:19:d6:14:44:82:99:2e:5c:54:eb:66:42:3d:0f:ea: 24:c6:47:03:e1:dd:f5:14:bd:7e:d3:e6:75:1a:a8:9b:de:63: 46:12:18:38:1e:0f:c8:80:44:af:ce:e5:2c:69:b5:cb:f8:31: 0d:38:81:d5:8f:4f:7d:15:8b:bc:98:5c:bd:f3:1f:6f:1e:a1: f3:4d:3a:cc:76:45:1b:5e:06:d7:c6:ec:76:51:ec:01:d9:55: 44:ee:0f:0c:59:4d:93:e4:81:be:5a:72:3c:68:b7:eb:d0:5a: 68:b2:be:cb:19:6c:03:1a:7b:a5:5b:4b:22:c7:e0:2d:7c:1b: 59:0f:25:42:66:d1:96:1c:30:79:81:4b:85:1a:54:86:fe:01: 61:fe:05:db:78:f9:15:f0:46:b9:80:24:fe:9e:aa:d1:11:79: 34:3b:5a:af:a9:f8:46:6f:fe:b8:9a:17:5c:08:95:d5:c2:67: 07:df:b7:85:c6:cd:2e:da:91:cf:8a:39:6e:69:20:b2:25:91: 88:fc:ca:89:fd:cb:52:d0:c0:64:8e:3a:b0:fd:77:03:31:5b: 66:f4:91:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmZjzmsF2laYhcekgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDQyMTEzMDA1OVoXDTI1MDcyMDEzMDA1OVowLzEtMCsGA1UEAxMk M2Y5NGM3YWYtM2YxNy00M2ZmLTk5MjYtOTM2MGU2NjBkMDFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHsOrdKxC20h4/cIyarudvQrpuVc1Bhcrts5 amE0Q/+k0U31QUd0rNFRBKAJkOzKjR1x5Q8AZZKiLuQBcPdk+8J+UhaXyfLHLTrr uOLE0UO2CI+wa2xRTP3UB93QqMrNM4m7ueRKo49wy8cSpD/N4B8quijWPfOITKwb xax2d40RgtrTCEPL5zJb1PauPiSHsKGDIX8ePwVcL8LUSojQXnWN4Au+lu3UPsFu or3gogkgQf7x3+JKEkCIqo6axUeAHhhT1OvoCUpl40jHuvMtN/j9boErEhoLGSza DI0kbJ2+M6kcyPfLqWr5Jn4ICmWLTnQxTUHipM8N4oiS5VkUkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEqcziPopOX7kiZHDUw6mLxDCOspMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZjMxOGZiZjYtNzQ5MC0z NDY1LWI5OWMtYTBhNTNhYWE3NWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqh7HMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABtpFKqMHOVGQXM5dan4ULnH55Btu8iTHAXCs+N/JQiuru5zBZAAlhnW FESCmS5cVOtmQj0P6iTGRwPh3fUUvX7T5nUaqJveY0YSGDgeD8iARK/O5Sxptcv4 MQ04gdWPT30Vi7yYXL3zH28eofNNOsx2RRteBtfG7HZR7AHZVUTuDwxZTZPkgb5a cjxot+vQWmiyvssZbAMae6VbSyLH4C18G1kPJUJm0ZYcMHmBS4UaVIb+AWH+Bdt4 +RXwRrmAJP6eqtEReTQ7Wq+p+EZv/riaF1wIldXCZwfft4XGzS7akc+KOW5pILIl kYj8yon9y1LQwGSOOrD9dwMxW2b0kQw= -----END CERTIFICATE-----Generated at Sat Apr 26 16:05:10 2025 by rpki-client