$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/242704e6-6aa0-3f71-a550-f92875418865.roa File: 242704e6-6aa0-3f71-a550-f92875418865.roa (raw, json) Hash identifier: FLcGuTfrk68PVWCLrLjxtCP5nYEtSsQ/CbbVH9anL7w= Subject key identifier: 85:19:74:E8:C3:34:F3:21:8A:37:83:CD:60:B8:D7:FA:3E:5F:1F:72 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285849CBCFA26F3E923C18E52FBC40 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/242704e6-6aa0-3f71-a550-f92875418865.roa Signing time: Fri 09 May 2025 13:01:00 +0000 ROA not before: Fri 09 May 2025 13:01:00 +0000 ROA not after: Thu 07 Aug 2025 13:01:00 +0000 asID: 203 IP address blocks: 206.164.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cb:cf:a2:6f:3e:92:3c:18:e5:2f:bc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: May 9 13:01:00 2025 GMT Not After : Aug 7 13:01:00 2025 GMT Subject: CN=5a830e92-c253-4eb8-a9b4-ef0b72d8a195 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:06:86:74:46:63:15:f2:1c:b1:47:a6:6f:89: 4a:56:8a:04:2d:fe:ba:e6:bf:46:d5:47:3c:8a:69: 32:ae:b5:e1:99:ab:35:4b:b2:9b:c4:9c:d5:db:13: c3:e8:b6:7f:25:d9:a4:3e:7d:38:1e:df:99:74:ab: be:99:af:11:98:c0:0b:49:26:32:6b:86:25:bc:22: 72:f4:5e:83:d3:2c:90:73:65:ce:9f:ee:8d:b9:8f: 77:92:c1:62:a8:83:ec:1d:63:5d:27:6e:69:2f:28: 6e:00:39:01:8f:d7:1c:1a:6e:2a:5c:86:23:b4:6d: 73:d9:03:f1:cd:bd:f3:f4:76:78:4b:13:0e:5b:92: b0:ef:80:40:91:72:73:93:cc:d1:db:04:0e:9f:0a: 11:83:80:a0:bc:e0:f9:16:1d:40:89:3a:e1:c5:8e: e8:13:fe:7d:8d:d5:52:f7:54:67:94:ca:73:ce:03: 09:ba:c1:26:ec:03:b6:31:9d:2d:40:80:cb:9d:b2: 01:76:06:21:36:a0:36:ae:6a:2e:72:2c:c6:61:27: 1a:53:43:c9:b3:fa:e6:34:90:a4:45:71:c1:96:f1: dc:c7:e6:3d:d8:a3:73:76:c7:85:a8:12:c9:1a:25: a9:84:88:ac:83:9c:bf:db:23:5f:ab:c8:92:68:a5: 5b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:19:74:E8:C3:34:F3:21:8A:37:83:CD:60:B8:D7:FA:3E:5F:1F:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/242704e6-6aa0-3f71-a550-f92875418865.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 206.164.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:44:79:5f:09:39:53:0b:c6:4c:71:40:b9:7b:dd:88:40:52: 98:87:70:75:22:0f:b8:08:55:3d:59:fc:0b:02:47:d4:12:51: 65:c4:9e:a9:60:cc:30:a6:8b:90:9c:03:80:52:26:56:8d:fb: 02:95:37:e5:4a:5a:2b:8b:1f:88:b8:46:e5:2f:98:3b:7a:d5: 06:e1:10:ca:71:b7:49:84:bc:f1:31:ec:f6:f7:d4:4c:54:48: e3:f2:c7:f6:9d:48:4d:ae:8b:1c:7d:5c:ab:9e:44:5b:54:bf: c8:5e:de:66:b0:24:b2:1f:4b:e0:5d:d4:3f:c1:ef:2f:c2:16: 22:21:3d:ed:5c:e1:19:5f:b1:82:35:fe:93:0e:cc:15:e0:da: fd:f6:2c:c6:8e:1b:70:fd:b8:96:19:83:8f:40:38:ae:a4:ee: dc:13:4b:b5:7b:e0:48:81:f8:eb:19:d3:d2:d0:13:46:8e:10: d5:94:41:86:30:e9:dc:2e:ad:75:30:a0:83:29:7d:81:cc:be: 6e:29:65:25:70:8d:21:8b:8b:a6:c2:6a:1f:0d:cb:e5:e3:0c: 89:09:6a:80:64:ac:c2:a6:89:44:34:67:83:da:69:69:e9:7e: a7:b0:e0:80:f6:b0:cd:74:77:8e:68:5d:e0:15:b3:4e:32:52: a0:23:e6:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnLz6JvPpI8GOUvvEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDUwOTEzMDEwMFoXDTI1MDgwNzEzMDEwMFowLzEtMCsGA1UEAxMk NWE4MzBlOTItYzI1My00ZWI4LWE5YjQtZWYwYjcyZDhhMTk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwaGdEZjFfIcsUemb4lKVooELf665r9G1Uc8 imkyrrXhmas1S7KbxJzV2xPD6LZ/JdmkPn04Ht+ZdKu+ma8RmMALSSYya4YlvCJy 9F6D0yyQc2XOn+6NuY93ksFiqIPsHWNdJ25pLyhuADkBj9ccGm4qXIYjtG1z2QPx zb3z9HZ4SxMOW5Kw74BAkXJzk8zR2wQOnwoRg4CgvOD5Fh1AiTrhxY7oE/59jdVS 91RnlMpzzgMJusEm7AO2MZ0tQIDLnbIBdgYhNqA2rmoucizGYScaU0PJs/rmNJCk RXHBlvHcx+Y92KNzdseFqBLJGiWphIisg5y/2yNfq8iSaKVbaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIUZdOjDNPMhijeDzWC41/o+Xx9yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMjQyNzA0ZTYtNmFhMC0z ZjcxLWE1NTAtZjkyODc1NDE4ODY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqTuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJEeV8JOVMLxkxxQLl73YhAUpiHcHUiD7gIVT1Z/AsCR9QSUWXEnqlg zDCmi5CcA4BSJlaN+wKVN+VKWiuLH4i4RuUvmDt61QbhEMpxt0mEvPEx7Pb31ExU SOPyx/adSE2uixx9XKueRFtUv8he3mawJLIfS+Bd1D/B7y/CFiIhPe1c4RlfsYI1 /pMOzBXg2v32LMaOG3D9uJYZg49AOK6k7twTS7V74EiB+OsZ09LQE0aOENWUQYYw 6dwurXUwoIMpfYHMvm4pZSVwjSGLi6bCah8Ny+XjDIkJaoBkrMKmiUQ0Z4PaaWnp fqew4ID2sM10d45oXeAVs04yUqAj5oE= -----END CERTIFICATE-----Generated at Mon May 12 22:59:10 2025 by rpki-client