$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ff52eb5b-3f24-3e24-9cd9-bfac8fe65e2f.roa File: ff52eb5b-3f24-3e24-9cd9-bfac8fe65e2f.roa (raw, json) Hash identifier: s3klPB4RqtZvB42MmoD5e0OqjBltH6JqKQYbZGCMHeU= Subject key identifier: DF:08:AB:B8:72:E1:AF:D9:AB:5B:E7:E0:6B:61:59:11:A3:45:7F:4B Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858498CFF1A9F924012FCBD10E600 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ff52eb5b-3f24-3e24-9cd9-bfac8fe65e2f.roa Signing time: Thu 17 Apr 2025 01:00:45 +0000 ROA not before: Thu 17 Apr 2025 01:00:45 +0000 ROA not after: Wed 16 Jul 2025 01:00:45 +0000 asID: 202 IP address blocks: 216.240.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:ff:1a:9f:92:40:12:fc:bd:10:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 17 01:00:45 2025 GMT Not After : Jul 16 01:00:45 2025 GMT Subject: CN=24f694a4-c3f3-494f-9777-2810789c52ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:a8:28:31:13:af:2e:ff:3d:08:3e:64:14:05: 9c:b7:9c:21:7e:f4:98:58:06:99:bd:94:98:1a:ed: 9c:1e:00:93:f2:30:6b:f2:25:47:07:13:4f:b0:b5: bb:a0:17:7d:23:bd:ad:cc:33:7f:1c:db:ec:37:09: cd:bb:4f:80:c6:4b:16:c0:13:40:d5:da:af:75:30: bd:0b:d3:08:a1:e5:e7:ed:5d:fe:bf:36:3c:ab:9a: 61:3d:36:a1:d5:a4:51:94:4e:2d:42:85:21:3e:03: 4f:fb:bd:f0:73:01:f8:2c:d9:25:9c:74:cf:ef:d7: 90:73:48:d7:bf:5d:d3:99:b9:39:98:d2:0b:8f:98: 7a:d3:de:ca:69:3e:23:73:f7:31:18:63:2a:0f:5f: 9a:4d:db:d8:70:61:28:76:b6:70:d1:94:80:60:e5: d2:29:fd:a2:14:72:68:df:3f:35:8e:a0:fb:3a:c0: 21:23:39:0a:41:00:89:99:8e:56:ea:90:fa:7f:33: d0:04:14:f5:15:da:c7:de:18:1b:a9:81:9a:9b:e1: 8c:11:3e:e7:52:92:35:ec:6e:3f:cd:8d:5e:a7:e0: a8:ef:25:54:de:29:78:74:a1:8f:80:ed:05:fb:13: 09:ae:8f:4d:61:ae:2e:3c:b0:11:53:5b:f2:bb:83: a4:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:08:AB:B8:72:E1:AF:D9:AB:5B:E7:E0:6B:61:59:11:A3:45:7F:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ff52eb5b-3f24-3e24-9cd9-bfac8fe65e2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 216.240.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:31:33:81:75:df:a5:c6:b9:a2:f7:f6:68:56:49:00:c0:aa: 83:34:ed:52:a8:b5:f6:b5:cf:2f:b6:71:d9:a1:ac:9b:cc:2c: 73:9a:40:78:b6:79:d5:5d:29:cf:41:54:e5:17:8a:4a:38:2d: 4b:02:75:30:ad:cb:8c:97:44:9f:2a:21:0d:65:eb:c5:50:03: c7:28:ff:f6:58:c6:bc:6a:64:6a:d3:fb:ad:54:8e:f8:8c:90: 4e:b0:c8:6f:b2:a1:17:7e:bb:23:da:19:01:8f:2b:4f:8f:87: cf:71:9a:51:92:fe:96:07:98:79:64:d1:fb:5c:3a:43:99:64: 7c:7d:74:47:be:2e:4c:63:f9:23:1f:d0:4f:e9:f7:dc:e0:e1: 8d:ef:b9:6f:cf:03:f6:fa:2e:86:41:07:85:10:17:6f:43:b5: c0:b9:37:3e:31:b3:74:15:bc:92:6b:d9:4e:5b:b7:9a:f1:84: d4:a7:cc:13:55:e9:f5:b4:10:41:49:55:f9:83:81:f2:0a:ba: bc:56:0a:e0:4a:5a:66:35:91:40:da:3d:26:78:01:63:ed:d0: c1:1d:74:d2:bc:13:36:3f:ec:6c:50:fd:7f:db:89:0f:69:9e: 96:90:f8:c0:94:23:c7:17:f1:92:f5:74:86:43:7a:7d:2a:3d: 03:e7:25:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmM/xqfkkAS/L0Q5gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk MjRmNjk0YTQtYzNmMy00OTRmLTk3NzctMjgxMDc4OWM1MmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqgoMROvLv89CD5kFAWct5whfvSYWAaZvZSY Gu2cHgCT8jBr8iVHBxNPsLW7oBd9I72tzDN/HNvsNwnNu0+AxksWwBNA1dqvdTC9 C9MIoeXn7V3+vzY8q5phPTah1aRRlE4tQoUhPgNP+73wcwH4LNklnHTP79eQc0jX v13Tmbk5mNILj5h6097KaT4jc/cxGGMqD1+aTdvYcGEodrZw0ZSAYOXSKf2iFHJo 3z81jqD7OsAhIzkKQQCJmY5W6pD6fzPQBBT1FdrH3hgbqYGam+GMET7nUpI17G4/ zY1ep+Co7yVU3il4dKGPgO0F+xMJro9NYa4uPLARU1vyu4OkvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN8Iq7hy4a/Zq1vn4GthWRGjRX9LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZmY1MmViNWItM2YyNC0z ZTI0LTljZDktYmZhYzhmZTY1ZTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2PDAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJQxM4F136XGuaL39mhWSQDAqoM07VKotfa1zy+2cdmhrJvMLHOaQHi2 edVdKc9BVOUXiko4LUsCdTCty4yXRJ8qIQ1l68VQA8co//ZYxrxqZGrT+61UjviM kE6wyG+yoRd+uyPaGQGPK0+Ph89xmlGS/pYHmHlk0ftcOkOZZHx9dEe+Lkxj+SMf 0E/p99zg4Y3vuW/PA/b6LoZBB4UQF29DtcC5Nz4xs3QVvJJr2U5bt5rxhNSnzBNV 6fW0EEFJVfmDgfIKurxWCuBKWmY1kUDaPSZ4AWPt0MEddNK8EzY/7GxQ/X/biQ9p npaQ+MCUI8cX8ZL1dIZDen0qPQPnJS8= -----END CERTIFICATE-----Generated at Sat Apr 26 19:05:53 2025 by rpki-client