$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0ed25788-6756-3792-8936-e294bf809692.roa File: 0ed25788-6756-3792-8936-e294bf809692.roa (raw, json) Hash identifier: 9EVLlTOjQIXSLjEf/yRpRpxJbVwa4csTsPXBuEv6RRc= Subject key identifier: 2B:8F:7A:5E:18:D4:1B:EE:BE:6E:B6:C7:42:B8:D2:DB:29:CB:F3:78 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584A4275833A97F52CF6F6CC9580 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0ed25788-6756-3792-8936-e294bf809692.roa Signing time: Sat 21 Jun 2025 01:00:48 +0000 ROA not before: Sat 21 Jun 2025 01:00:48 +0000 ROA not after: Fri 19 Sep 2025 01:00:48 +0000 asID: 3360 IP address blocks: 170.30.214.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:42:75:83:3a:97:f5:2c:f6:f6:cc:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jun 21 01:00:48 2025 GMT Not After : Sep 19 01:00:48 2025 GMT Subject: CN=f495ce89-b73d-49ab-bca9-eeb9e4ac778e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:84:c0:6c:a3:e4:a6:d6:f0:bd:95:d1:b1:ba: 32:39:10:61:be:7e:4b:d2:3d:03:2d:9c:34:e4:ed: f5:99:3e:09:cc:d6:b7:74:db:3b:11:81:05:67:07: 9f:47:1e:86:f7:60:09:07:c0:57:3c:e1:9c:4c:fd: 92:ad:bd:b3:bc:67:4a:97:a5:66:e0:d5:a0:d0:d8: a3:3e:92:cb:10:f6:d1:a9:06:05:5e:fe:2c:24:82: 87:e1:c8:ad:b2:87:32:65:22:73:fc:5b:54:b1:54: f2:d3:67:34:8e:f4:6d:f8:df:29:57:c3:d3:0e:33: 7f:6f:0c:ad:86:e9:39:db:18:56:1a:ab:09:1c:9c: 58:26:08:5f:00:da:bc:b7:6d:ca:13:54:ae:a6:56: 0d:a0:d3:ed:54:e7:c9:9e:e7:86:09:37:31:38:38: 16:6c:1c:17:70:81:61:1b:b1:9d:cd:dc:99:1e:12: bb:66:4b:10:93:57:10:e4:bf:42:b5:12:3e:0d:01: a5:f4:b0:a1:55:d6:87:0e:f4:d3:48:54:db:36:53: 57:37:07:0f:4a:df:e6:42:55:30:2d:4f:9b:a5:a4: f2:a1:de:ba:a6:bf:f3:92:2a:2d:92:68:64:85:b4: b5:53:7d:07:aa:f0:89:b1:57:08:a9:d5:a6:b5:8c: c4:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:8F:7A:5E:18:D4:1B:EE:BE:6E:B6:C7:42:B8:D2:DB:29:CB:F3:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0ed25788-6756-3792-8936-e294bf809692.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 170.30.214.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:8c:00:74:40:7b:c9:50:84:f7:fc:3f:6e:76:e3:73:54:b9: b0:6a:28:0f:a6:37:cf:db:4f:13:11:8e:f7:64:ba:89:ad:31: 0d:0a:39:fc:ee:de:e9:78:89:91:b6:0e:96:0f:19:28:05:73: 6a:89:f5:63:41:7d:9d:a2:bb:68:8b:64:df:88:d6:40:bf:15: ef:07:b4:7a:1f:cd:64:46:f5:49:42:1b:0f:5e:91:b6:43:4a: bc:d4:59:5a:e1:39:c6:09:70:4c:93:82:59:52:bb:a6:82:2d: ff:42:9a:21:c8:f7:26:cc:fc:12:ed:f4:5f:eb:ed:ae:df:7d: 6a:6a:05:12:e3:32:7c:78:c9:5b:b4:0d:29:a4:f2:b0:38:54: 22:11:7a:e5:3e:ee:6a:b7:78:e1:c2:a5:eb:ec:1f:a3:58:fe: 7d:41:14:07:8c:95:d1:b8:ee:65:ce:f4:45:91:72:7f:73:dc: 86:67:6f:65:fe:8d:50:e9:7b:b4:aa:ff:09:70:82:3b:f7:4d: ec:9b:a4:ab:e6:4a:0e:bf:26:f4:32:d9:87:e7:4b:26:f8:0f: df:c4:1f:6b:21:f0:2f:f6:f7:17:17:b8:f3:18:9a:95:e3:4a: ba:4e:9f:b3:fe:37:26:75:9e:3a:7f:9d:ad:5d:bb:44:c6:54: 06:80:4d:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpCdYM6l/Us9vbMlYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDYyMTAxMDA0OFoXDTI1MDkxOTAxMDA0OFowLzEtMCsGA1UEAxMk ZjQ5NWNlODktYjczZC00OWFiLWJjYTktZWViOWU0YWM3NzhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwITAbKPkptbwvZXRsboyORBhvn5L0j0DLZw0 5O31mT4JzNa3dNs7EYEFZwefRx6G92AJB8BXPOGcTP2Srb2zvGdKl6Vm4NWg0Nij PpLLEPbRqQYFXv4sJIKH4citsocyZSJz/FtUsVTy02c0jvRt+N8pV8PTDjN/bwyt huk52xhWGqsJHJxYJghfANq8t23KE1SuplYNoNPtVOfJnueGCTcxODgWbBwXcIFh G7GdzdyZHhK7ZksQk1cQ5L9CtRI+DQGl9LChVdaHDvTTSFTbNlNXNwcPSt/mQlUw LU+bpaTyod66pr/zkiotkmhkhbS1U30HqvCJsVcIqdWmtYzEBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCuPel4Y1Bvuvm62x0K40tspy/N4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMGVkMjU3ODgtNjc1Ni0z NzkyLTg5MzYtZTI5NGJmODA5NjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqh7WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFSMAHRAe8lQhPf8P25243NUubBqKA+mN8/bTxMRjvdkuomtMQ0KOfzu 3ul4iZG2DpYPGSgFc2qJ9WNBfZ2iu2iLZN+I1kC/Fe8HtHofzWRG9UlCGw9ekbZD SrzUWVrhOcYJcEyTgllSu6aCLf9CmiHI9ybM/BLt9F/r7a7ffWpqBRLjMnx4yVu0 DSmk8rA4VCIReuU+7mq3eOHCpevsH6NY/n1BFAeMldG47mXO9EWRcn9z3IZnb2X+ jVDpe7Sq/wlwgjv3TeybpKvmSg6/JvQy2YfnSyb4D9/EH2sh8C/29xcXuPMYmpXj SrpOn7P+NyZ1njp/na1du0TGVAaATbw= -----END CERTIFICATE-----Generated at Thu Jul 3 01:19:07 2025 by rpki-client