$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f9e8e46e-d99e-35f3-b34a-daf0f06387c4.roa File: f9e8e46e-d99e-35f3-b34a-daf0f06387c4.roa (raw, json) Hash identifier: BX40KFsxy8l4Bmg7gwNCd/+1gZNpkUoK/9gQXm+K+2Q= Subject key identifier: BE:D7:E2:7A:81:CA:7B:0D:A4:D3:77:98:97:75:02:44:00:27:1C:95 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285849631EC593781004E0E293DE20 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f9e8e46e-d99e-35f3-b34a-daf0f06387c4.roa Signing time: Wed 02 Apr 2025 01:00:46 +0000 ROA not before: Wed 02 Apr 2025 01:00:46 +0000 ROA not after: Tue 01 Jul 2025 01:00:46 +0000 asID: 202 IP address blocks: 170.30.208.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:63:1e:c5:93:78:10:04:e0:e2:93:de:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 2 01:00:46 2025 GMT Not After : Jul 1 01:00:46 2025 GMT Subject: CN=f3c628c8-64db-4e88-afc8-ed0edb94fe1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:53:31:0e:dc:30:6b:43:39:1a:77:4f:c1:84: 2b:41:5b:2d:5e:1d:63:a7:02:ed:5d:b7:f3:65:a1: 66:22:3a:46:2f:a3:55:86:6c:75:d9:87:29:39:80: ef:63:83:b9:a6:ed:19:41:50:dc:3f:51:1e:5c:ce: ca:f1:a8:bd:08:36:19:d6:a3:c0:77:d0:f1:29:8b: e4:c3:3f:94:23:bf:9c:d6:ac:a9:e5:d2:d9:f4:5a: cf:f1:58:03:0a:1d:ad:1e:1c:d5:dc:06:ff:2e:bb: 48:f6:a0:57:ee:71:9a:65:6d:8e:81:cc:91:c6:3a: f9:2e:00:7e:ab:42:01:f5:96:24:8c:07:7c:64:9e: 68:70:43:29:fe:ca:93:85:0b:f0:d3:36:3e:de:80: b6:00:56:59:e7:42:09:4c:8b:64:8a:f8:0a:ca:e1: 4e:8d:2c:d9:40:12:e1:8d:42:29:14:ad:b9:53:19: 29:a5:a1:d1:b0:9d:82:3f:2d:cc:ad:af:67:75:8a: 78:49:44:77:e1:7b:f1:77:5b:62:69:2b:9c:83:d8: 64:7a:22:25:6d:88:5d:97:91:8b:b1:85:c4:d3:ba: 21:be:4d:12:cb:19:24:99:b0:23:c0:d8:a1:10:7f: 7a:4d:40:af:d7:d4:5d:37:b3:5d:40:5e:ee:9d:bd: 8f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:D7:E2:7A:81:CA:7B:0D:A4:D3:77:98:97:75:02:44:00:27:1C:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f9e8e46e-d99e-35f3-b34a-daf0f06387c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 170.30.208.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:7c:cd:98:d2:6c:1e:fd:a1:c2:d4:df:ee:2b:54:37:8a:36: 9a:ff:8c:bd:cb:94:12:fd:51:c1:a3:67:3d:3d:b3:ac:5e:30: 26:2d:a6:a0:0b:de:9c:2d:97:37:29:7d:c1:78:82:ce:8c:20: 21:f1:6a:4c:f0:6f:d1:fe:51:a0:c4:68:9d:3b:39:d8:2b:52: 40:59:16:5c:74:61:de:21:ef:97:01:07:a6:d9:1c:d7:48:da: 35:3a:8c:93:3c:2d:d3:c8:ab:4e:17:98:c1:d0:b6:56:82:08: 61:30:7c:58:69:e1:22:e4:71:90:06:34:3c:e5:d3:a3:08:de: ff:8d:96:60:73:98:0c:f4:49:5e:f5:d5:e1:67:30:1e:01:07: 85:85:10:9f:bf:e4:95:13:33:b9:30:67:3a:e9:d5:23:fd:97: 3f:82:74:1b:49:48:60:90:81:1a:18:d0:d7:2c:b4:ae:ab:88: 84:98:7d:07:18:e3:f1:2a:9c:71:82:d5:25:f0:ef:0b:60:e3: 80:ea:12:e0:f0:ec:6c:64:9d:a6:47:f0:6c:3a:ac:01:02:b4: 59:2d:73:db:02:cb:50:98:1f:60:ff:52:73:ee:f5:3b:27:43: f2:fb:1c:eb:7a:be:40:80:d4:80:d1:97:11:03:90:e4:f3:55: a1:69:aa:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEljHsWTeBAE4OKT3iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDQwMjAxMDA0NloXDTI1MDcwMTAxMDA0NlowLzEtMCsGA1UEAxMk ZjNjNjI4YzgtNjRkYi00ZTg4LWFmYzgtZWQwZWRiOTRmZTFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1MxDtwwa0M5GndPwYQrQVstXh1jpwLtXbfz ZaFmIjpGL6NVhmx12YcpOYDvY4O5pu0ZQVDcP1EeXM7K8ai9CDYZ1qPAd9DxKYvk wz+UI7+c1qyp5dLZ9FrP8VgDCh2tHhzV3Ab/LrtI9qBX7nGaZW2OgcyRxjr5LgB+ q0IB9ZYkjAd8ZJ5ocEMp/sqThQvw0zY+3oC2AFZZ50IJTItkivgKyuFOjSzZQBLh jUIpFK25UxkppaHRsJ2CPy3Mra9ndYp4SUR34Xvxd1tiaSucg9hkeiIlbYhdl5GL sYXE07ohvk0SyxkkmbAjwNihEH96TUCv19RdN7NdQF7unb2P9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL7X4nqBynsNpNN3mJd1AkQAJxyVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZjllOGU0NmUtZDk5ZS0z NWYzLWIzNGEtZGFmMGYwNjM4N2M0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqh7QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ18zZjSbB79ocLU3+4rVDeKNpr/jL3LlBL9UcGjZz09s6xeMCYtpqAL 3pwtlzcpfcF4gs6MICHxakzwb9H+UaDEaJ07OdgrUkBZFlx0Yd4h75cBB6bZHNdI 2jU6jJM8LdPIq04XmMHQtlaCCGEwfFhp4SLkcZAGNDzl06MI3v+NlmBzmAz0SV71 1eFnMB4BB4WFEJ+/5JUTM7kwZzrp1SP9lz+CdBtJSGCQgRoY0NcstK6riISYfQcY 4/EqnHGC1SXw7wtg44DqEuDw7GxknaZH8Gw6rAECtFktc9sCy1CYH2D/UnPu9Tsn Q/L7HOt6vkCA1IDRlxEDkOTzVaFpqgA= -----END CERTIFICATE-----Generated at Sat Apr 26 19:16:58 2025 by rpki-client