$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/38af7f86-7c7b-3de3-a063-278249ef1fed.roa File: 38af7f86-7c7b-3de3-a063-278249ef1fed.roa (raw, json) Hash identifier: OJjjmFV2X8yIiXXmOa0iNJ0W80OEwKN+V/M2fLHM46A= Subject key identifier: E2:9D:9D:BA:F5:12:DD:22:50:EC:7C:E9:24:3A:71:87:7A:6D:94:65 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584A4275832571F2B6021FC1EF00 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/38af7f86-7c7b-3de3-a063-278249ef1fed.roa Signing time: Sat 21 Jun 2025 01:00:48 +0000 ROA not before: Sat 21 Jun 2025 01:00:48 +0000 ROA not after: Fri 19 Sep 2025 01:00:48 +0000 asID: 3356 IP address blocks: 170.30.214.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:42:75:83:25:71:f2:b6:02:1f:c1:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jun 21 01:00:48 2025 GMT Not After : Sep 19 01:00:48 2025 GMT Subject: CN=5723a6c7-469c-49fc-86f7-36866f9c731c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:7b:2a:bb:95:e5:b0:de:79:bd:27:1f:24:90: 1b:5d:11:e2:fc:db:20:b0:55:c9:ba:40:2a:82:f1: 67:f4:53:75:82:8e:b0:72:cf:02:c5:ac:41:f7:c1: 4f:fd:0b:11:10:52:91:97:65:cd:72:d5:c6:dd:a7: 02:93:d1:65:77:4a:07:35:4c:5c:d5:eb:7c:d2:a3: 0a:ed:cb:40:d4:b1:e3:6b:e0:75:1f:a9:67:c0:2b: 08:c0:0b:2c:36:8c:67:5e:85:71:b8:5a:b5:26:1e: ee:57:cf:c5:9b:9e:10:c2:35:70:c9:9a:b9:3c:ad: f0:22:c4:c0:c3:a2:13:ec:e2:a5:b1:26:44:04:89: db:95:5d:cb:59:e9:25:9b:a5:3e:46:7c:6e:8e:58: 4d:a1:77:02:f4:91:03:01:48:7b:88:28:6c:b4:05: 92:a6:36:25:1c:ef:90:4e:8c:2c:a1:73:59:91:be: d9:f5:d4:32:7b:e5:e6:76:3e:f2:be:a2:ab:1f:b8: 9b:e4:24:d9:fa:8e:bd:22:75:e5:f8:09:98:ee:ba: e0:8e:f5:bb:27:4f:7e:9f:33:21:3c:ab:4b:60:47: c2:30:cd:45:ed:72:0b:c1:0f:8f:0b:24:a0:00:22: bb:6f:3f:38:b3:f7:05:23:e5:0f:29:93:e3:65:28: 04:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:9D:9D:BA:F5:12:DD:22:50:EC:7C:E9:24:3A:71:87:7A:6D:94:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/38af7f86-7c7b-3de3-a063-278249ef1fed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 170.30.214.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:f0:be:c2:63:39:d4:38:e4:44:22:3f:f4:ca:be:08:98:c2: a0:a9:69:a8:98:35:5e:7c:98:39:4f:5a:ac:f5:7e:dd:5f:cf: b1:dc:3a:db:c4:d2:17:60:f7:9a:41:87:f7:05:f1:de:ea:e7: 70:55:1c:81:8b:1a:e2:3c:bb:d4:06:08:0e:40:71:e4:64:44: 08:ce:e7:50:53:ba:ea:d5:ed:c0:4d:e1:be:c6:9b:96:b7:65: ba:79:44:37:57:bd:a1:e1:34:8e:55:b2:3b:21:57:a6:45:c9: df:cc:83:60:89:a2:38:ba:be:df:46:77:32:f4:c1:20:fd:09: e5:ff:b4:bc:56:f1:ac:5f:f4:90:57:52:df:8d:58:13:7c:3f: 11:ff:68:f4:06:0f:1e:fc:a6:97:38:f6:bf:9c:b6:5f:ea:95: 2f:3b:5d:7a:27:92:9f:94:54:dc:a8:e0:e6:83:3b:5c:fd:fa: 34:f7:40:a0:43:b9:8e:0f:37:0d:1c:4f:2f:20:38:7b:a6:4d: 82:18:a0:cd:91:d4:dd:c4:cb:cb:3b:69:c9:6d:d6:3d:2b:b0: 12:70:fa:89:d7:10:98:59:9c:b3:4f:d5:8e:ab:eb:a6:79:9f: 23:ea:ed:9a:aa:15:6b:2b:ac:aa:07:ea:15:e4:83:77:89:2e: 9b:9e:5a:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpCdYMlcfK2Ah/B7wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDYyMTAxMDA0OFoXDTI1MDkxOTAxMDA0OFowLzEtMCsGA1UEAxMk NTcyM2E2YzctNDY5Yy00OWZjLTg2ZjctMzY4NjZmOWM3MzFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nsqu5XlsN55vScfJJAbXRHi/NsgsFXJukAq gvFn9FN1go6wcs8CxaxB98FP/QsREFKRl2XNctXG3acCk9Fld0oHNUxc1et80qMK 7ctA1LHja+B1H6lnwCsIwAssNoxnXoVxuFq1Jh7uV8/Fm54QwjVwyZq5PK3wIsTA w6IT7OKlsSZEBInblV3LWeklm6U+RnxujlhNoXcC9JEDAUh7iChstAWSpjYlHO+Q TowsoXNZkb7Z9dQye+Xmdj7yvqKrH7ib5CTZ+o69InXl+AmY7rrgjvW7J09+nzMh PKtLYEfCMM1F7XILwQ+PCySgACK7bz84s/cFI+UPKZPjZSgEfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOKdnbr1Et0iUOx86SQ6cYd6bZRlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMzhhZjdmODYtN2M3Yi0z ZGUzLWEwNjMtMjc4MjQ5ZWYxZmVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqh7WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAETwvsJjOdQ45EQiP/TKvgiYwqCpaaiYNV58mDlPWqz1ft1fz7HcOtvE 0hdg95pBh/cF8d7q53BVHIGLGuI8u9QGCA5AceRkRAjO51BTuurV7cBN4b7Gm5a3 Zbp5RDdXvaHhNI5VsjshV6ZFyd/Mg2CJoji6vt9GdzL0wSD9CeX/tLxW8axf9JBX Ut+NWBN8PxH/aPQGDx78ppc49r+ctl/qlS87XXonkp+UVNyo4OaDO1z9+jT3QKBD uY4PNw0cTy8gOHumTYIYoM2R1N3Ey8s7aclt1j0rsBJw+onXEJhZnLNP1Y6r66Z5 nyPq7ZqqFWsrrKoH6hXkg3eJLpueWvk= -----END CERTIFICATE-----Generated at Sun Jun 29 09:03:43 2025 by rpki-client