$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1c0e56cc-4290-3170-97ce-2db09c484b14.roa File: 1c0e56cc-4290-3170-97ce-2db09c484b14.roa (raw, json) Hash identifier: jJsgcD2aAhRYMqVNQnFk0J11EY6rgRZmKFz0fIirFNQ= Subject key identifier: 10:98:0A:E9:FF:59:3C:69:88:E2:93:6A:AB:45:3D:6C:41:C4:A3:0A Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858498A346DF8B6DA92D1F1C37E80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1c0e56cc-4290-3170-97ce-2db09c484b14.roa Signing time: Wed 16 Apr 2025 01:00:48 +0000 ROA not before: Wed 16 Apr 2025 01:00:48 +0000 ROA not after: Tue 15 Jul 2025 01:00:48 +0000 asID: 3360 IP address blocks: 204.104.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8a:34:6d:f8:b6:da:92:d1:f1:c3:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 16 01:00:48 2025 GMT Not After : Jul 15 01:00:48 2025 GMT Subject: CN=c1d20678-92ba-4e7b-aeb6-b893d31a3d04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:41:f8:3d:8b:c4:69:73:ba:23:32:88:37:ab: 38:8e:b5:6e:87:ad:81:12:4e:16:02:15:d4:52:f0: a4:ad:2a:e9:6e:c3:c3:3f:cd:73:00:a5:ea:10:2a: 8d:47:59:59:b9:d8:46:14:7f:b0:11:50:01:2e:2d: 1d:97:00:34:1f:7a:e0:90:59:31:16:7b:ef:35:02: f9:fb:bc:d1:46:13:bb:bc:a6:08:3b:23:91:72:d4: d0:57:a1:ec:c6:93:95:0a:a3:ee:b1:1c:12:7d:70: a4:53:54:94:9f:fe:61:42:79:1e:b7:55:9c:bd:de: 90:ef:78:40:22:85:85:88:85:85:07:67:11:56:6f: 64:62:ab:30:a8:a5:4f:4f:90:b5:36:3f:f0:68:fb: 35:38:3d:e8:b1:af:42:59:77:97:d6:e6:a4:28:ae: 94:65:4d:89:ad:ff:d2:e9:12:b1:6d:de:be:36:51: 47:e4:a0:ee:0b:a4:ad:db:da:7f:55:88:2d:f8:b1: 74:65:08:f2:3b:09:74:15:ed:06:4b:a4:06:c9:e4: 47:60:38:3a:e9:0a:df:06:7e:22:99:80:5f:00:c5: 3a:96:5b:1f:e2:b2:80:b7:bc:4e:a2:64:2d:9c:3c: 81:4b:8a:09:4d:6e:40:70:45:24:0d:e3:00:f6:02: d9:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:98:0A:E9:FF:59:3C:69:88:E2:93:6A:AB:45:3D:6C:41:C4:A3:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1c0e56cc-4290-3170-97ce-2db09c484b14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 204.104.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:f2:f0:46:c1:88:b7:d7:94:6f:98:aa:14:80:1c:48:45:68: 14:4b:4b:d4:ce:e4:32:62:cb:6e:f5:fb:3f:a5:53:0b:9a:59: 49:20:6a:34:86:68:8a:44:14:15:7f:22:ca:28:cd:a6:ec:2b: b1:c8:13:c3:6a:65:f9:21:2d:54:57:58:23:b4:79:db:76:68: 28:1a:e4:68:dd:50:d2:a9:ac:5e:46:be:c0:06:09:60:14:af: da:f9:c5:d4:b2:7e:e0:2d:10:d4:30:1f:0d:0d:28:60:2d:23: a1:af:8f:6e:d7:48:59:15:b5:04:eb:f4:28:44:eb:9c:31:43: e8:5b:73:28:dc:4d:b7:01:6b:15:a3:68:9e:f0:79:a5:55:8c: 44:b8:a5:1e:dd:ae:13:b9:c6:db:2d:61:37:fd:e9:58:d6:6e: 22:75:ad:f9:d8:14:11:50:87:4e:98:02:86:81:c7:6a:f4:17: da:3e:05:56:8f:22:2c:a0:b7:26:77:a4:ec:b4:e3:da:5e:e1: 94:6d:97:73:61:15:06:ed:4a:e1:73:20:ec:c9:73:a5:c5:3b: a1:a1:9d:13:40:1d:a5:c1:30:a0:fc:f2:e2:35:78:2f:0f:02: c4:ab:18:74:af:a7:65:cd:53:54:d4:84:9f:44:47:d5:f5:3c: a0:59:3f:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmKNG34ttqS0fHDfoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDQxNjAxMDA0OFoXDTI1MDcxNTAxMDA0OFowLzEtMCsGA1UEAxMk YzFkMjA2NzgtOTJiYS00ZTdiLWFlYjYtYjg5M2QzMWEzZDA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUH4PYvEaXO6IzKIN6s4jrVuh62BEk4WAhXU UvCkrSrpbsPDP81zAKXqECqNR1lZudhGFH+wEVABLi0dlwA0H3rgkFkxFnvvNQL5 +7zRRhO7vKYIOyORctTQV6HsxpOVCqPusRwSfXCkU1SUn/5hQnket1Wcvd6Q73hA IoWFiIWFB2cRVm9kYqswqKVPT5C1Nj/waPs1OD3osa9CWXeX1uakKK6UZU2Jrf/S 6RKxbd6+NlFH5KDuC6St29p/VYgt+LF0ZQjyOwl0Fe0GS6QGyeRHYDg66QrfBn4i mYBfAMU6llsf4rKAt7xOomQtnDyBS4oJTW5AcEUkDeMA9gLZLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBCYCun/WTxpiOKTaqtFPWxBxKMKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMWMwZTU2Y2MtNDI5MC0z MTcwLTk3Y2UtMmRiMDljNDg0YjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGjOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABjy8EbBiLfXlG+YqhSAHEhFaBRLS9TO5DJiy271+z+lUwuaWUkgajSG aIpEFBV/IsoozabsK7HIE8NqZfkhLVRXWCO0edt2aCga5GjdUNKprF5GvsAGCWAU r9r5xdSyfuAtENQwHw0NKGAtI6Gvj27XSFkVtQTr9ChE65wxQ+hbcyjcTbcBaxWj aJ7weaVVjES4pR7drhO5xtstYTf96VjWbiJ1rfnYFBFQh06YAoaBx2r0F9o+BVaP IiygtyZ3pOy049pe4ZRtl3NhFQbtSuFzIOzJc6XFO6GhnRNAHaXBMKD88uI1eC8P AsSrGHSvp2XNU1TUhJ9ER9X1PKBZP5Y= -----END CERTIFICATE-----Generated at Sun May 11 04:00:17 2025 by rpki-client