$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1bd9c3e1-67f1-3265-936e-81197290f1fc.roa File: 1bd9c3e1-67f1-3265-936e-81197290f1fc.roa (raw, json) Hash identifier: ODxhges2SkPwbxpgyNWteq55avnUuebxZMXIq5zWhCs= Subject key identifier: 79:4D:BE:44:3E:FD:A9:21:68:54:F4:8F:F5:29:FA:29:12:C0:A0:33 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285849CBCFA7EB49743C207C56EF80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1bd9c3e1-67f1-3265-936e-81197290f1fc.roa Signing time: Fri 09 May 2025 13:01:00 +0000 ROA not before: Fri 09 May 2025 13:01:00 +0000 ROA not after: Thu 07 Aug 2025 13:01:00 +0000 asID: 203 IP address blocks: 199.42.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cb:cf:a7:eb:49:74:3c:20:7c:56:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: May 9 13:01:00 2025 GMT Not After : Aug 7 13:01:00 2025 GMT Subject: CN=d49da36a-8af4-4503-9420-3a703770bcab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:18:f3:a0:bc:c1:f1:2c:97:b3:d1:6a:ca:23: da:5a:e2:23:f6:b4:b7:f8:bd:6a:8a:7d:1b:57:0b: 4c:be:e6:27:de:22:5d:f0:9f:b7:4c:ab:3b:36:46: f8:2b:7f:cb:a7:93:83:a2:ab:f7:fa:7c:19:6c:30: 0b:e8:4e:8d:94:d8:16:16:cf:24:af:17:62:ac:59: 84:8b:1d:80:d9:24:ea:c7:5a:4c:f3:1b:a8:1b:64: d2:26:26:70:3f:70:c6:3a:89:47:2c:3a:67:4a:aa: f7:b6:ec:1e:38:36:4d:20:05:8c:8c:ce:c8:f0:b2: 8e:44:a2:ef:eb:a2:e4:cf:a0:f7:70:e0:a3:c6:49: cd:6e:0f:da:50:70:87:47:ae:b6:b9:d3:56:6f:59: 1d:94:79:7c:cf:1a:92:6e:eb:75:f4:95:09:6f:89: ce:ec:a7:4f:37:29:3c:5f:96:26:34:94:7a:f4:5e: 19:a1:af:8d:20:34:cc:d7:de:2c:84:fb:3c:8c:58: 09:93:be:6c:de:68:e2:82:bd:f1:b1:ef:dd:45:75: d0:56:ad:fe:99:88:1f:5d:31:d8:48:e3:00:4d:d0: e2:d7:f2:e2:8f:48:35:5c:8b:7b:12:6e:61:2b:3a: ef:25:ad:b3:b5:ff:1b:0f:2d:0f:d6:1f:4f:ad:2e: b3:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:4D:BE:44:3E:FD:A9:21:68:54:F4:8F:F5:29:FA:29:12:C0:A0:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1bd9c3e1-67f1-3265-936e-81197290f1fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 199.42.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:68:5c:a3:ec:13:69:d0:ff:3e:ff:e5:69:88:ce:9b:d7:3b: 69:ec:93:1b:b2:10:5a:e8:04:91:a6:45:83:32:b8:96:a5:42: 8d:29:78:83:68:64:83:33:bf:76:8b:b0:7f:48:e2:e1:da:67: 7e:0b:61:33:fe:63:3e:04:30:54:35:c3:f0:7e:1f:8e:fb:1b: 46:c1:d6:9a:4d:a7:23:9f:91:da:09:5c:f6:8f:dc:0b:cb:a7: 05:dd:dc:82:59:36:a9:b4:7f:ae:85:57:1e:5e:e1:d8:20:8d: 6e:c7:61:ee:2b:39:2d:6e:d3:57:1b:25:89:3e:9f:d7:aa:4f: 65:b5:6c:86:1c:fd:b3:98:5b:bb:44:d3:f2:16:62:6f:63:28: 22:7e:47:e7:ac:80:4e:6a:85:00:71:26:cc:33:9d:6b:45:9b: 32:1c:6e:c1:03:93:fa:0e:f3:0b:88:19:99:ca:af:0c:eb:15: 55:b5:5a:ef:e8:9a:74:2e:d8:75:35:51:cb:1f:e0:54:70:3d: 57:63:55:dc:56:1f:2d:95:0a:b2:d6:96:5a:7f:ca:28:ba:5e: 4a:ef:cb:dd:0f:5e:f1:d8:a3:93:bb:18:d9:f8:fd:7e:50:e1: 5b:52:ec:f5:df:55:7e:98:47:cb:24:dd:69:c8:ed:38:ef:96: 72:04:89:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnLz6frSXQ8IHxW74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDUwOTEzMDEwMFoXDTI1MDgwNzEzMDEwMFowLzEtMCsGA1UEAxMk ZDQ5ZGEzNmEtOGFmNC00NTAzLTk0MjAtM2E3MDM3NzBiY2FiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRjzoLzB8SyXs9FqyiPaWuIj9rS3+L1qin0b VwtMvuYn3iJd8J+3TKs7Nkb4K3/Lp5ODoqv3+nwZbDAL6E6NlNgWFs8krxdirFmE ix2A2STqx1pM8xuoG2TSJiZwP3DGOolHLDpnSqr3tuweODZNIAWMjM7I8LKORKLv 66Lkz6D3cOCjxknNbg/aUHCHR662udNWb1kdlHl8zxqSbut19JUJb4nO7KdPNyk8 X5YmNJR69F4Zoa+NIDTM194shPs8jFgJk75s3mjigr3xse/dRXXQVq3+mYgfXTHY SOMATdDi1/Lij0g1XIt7Em5hKzrvJa2ztf8bDy0P1h9PrS6zQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHlNvkQ+/akhaFT0j/Up+ikSwKAzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMWJkOWMzZTEtNjdmMS0z MjY1LTkzNmUtODExOTcyOTBmMWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxyoMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABloXKPsE2nQ/z7/5WmIzpvXO2nskxuyEFroBJGmRYMyuJalQo0peINo ZIMzv3aLsH9I4uHaZ34LYTP+Yz4EMFQ1w/B+H477G0bB1ppNpyOfkdoJXPaP3AvL pwXd3IJZNqm0f66FVx5e4dggjW7HYe4rOS1u01cbJYk+n9eqT2W1bIYc/bOYW7tE 0/IWYm9jKCJ+R+esgE5qhQBxJswznWtFmzIcbsEDk/oO8wuIGZnKrwzrFVW1Wu/o mnQu2HU1Ucsf4FRwPVdjVdxWHy2VCrLWllp/yii6Xkrvy90PXvHYo5O7GNn4/X5Q 4VtS7PXfVX6YR8sk3WnI7TjvlnIEib8= -----END CERTIFICATE-----Generated at Sun May 11 13:40:27 2025 by rpki-client