$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/509ef354-e4e1-396a-91d8-c29280fad097.roa File: 509ef354-e4e1-396a-91d8-c29280fad097.roa (raw, json) Hash identifier: LcMF2DCFVJU7501UFDgecDJLncCsD5WCHePDmv71VAE= Subject key identifier: A6:B0:4C:41:0F:F3:90:63:C3:56:E4:92:08:06:C4:58:C0:92:41:74 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584A42758857345789301A8E5F00 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/509ef354-e4e1-396a-91d8-c29280fad097.roa Signing time: Sat 21 Jun 2025 01:00:48 +0000 ROA not before: Sat 21 Jun 2025 01:00:48 +0000 ROA not after: Fri 19 Sep 2025 01:00:48 +0000 asID: 3356 IP address blocks: 170.30.224.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:42:75:88:57:34:57:89:30:1a:8e:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jun 21 01:00:48 2025 GMT Not After : Sep 19 01:00:48 2025 GMT Subject: CN=efe6fbed-5f59-4e05-9a00-be6f5a4bc367 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6a:a0:10:15:64:be:0f:c1:66:b4:98:88:7d: b5:cc:1d:2d:d7:c5:00:24:1a:19:b1:67:a9:ea:31: 68:55:0d:58:75:8b:ba:dd:75:dd:35:29:f9:27:dc: aa:f8:02:a6:cd:14:fd:0e:f8:8c:51:17:28:12:48: c3:2f:cd:2a:ca:a4:5d:6a:cb:15:5f:78:d7:22:50: c3:f2:c5:da:95:5e:fd:3b:30:4b:b1:4d:ad:c0:a5: 83:bf:f1:53:f6:3e:cc:89:87:98:70:05:98:c0:cd: cd:1f:78:15:68:75:7d:86:c9:63:56:de:36:36:11: 29:98:1a:0b:3d:24:94:12:b8:e2:8d:ee:e6:79:86: 50:ec:1f:11:77:40:3a:79:a4:9f:1b:12:d8:34:df: eb:20:d9:a0:7a:73:15:72:ad:98:e4:97:fc:39:80: ca:85:1a:d8:62:7e:84:8d:64:50:85:6d:77:53:5c: 4c:7f:c8:25:48:28:7b:cb:a9:9f:f7:5b:3e:7e:32: 76:7d:a9:d0:44:ee:8e:8a:f6:84:37:09:c3:df:01: c3:a8:82:f5:36:ac:71:31:c7:1b:cc:5c:f9:db:db: ca:74:4a:be:ce:4f:6e:4d:0d:9c:1f:35:83:b5:cb: 46:a7:1a:28:5f:4e:cf:27:51:88:2c:92:24:18:e4: 4c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:B0:4C:41:0F:F3:90:63:C3:56:E4:92:08:06:C4:58:C0:92:41:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/509ef354-e4e1-396a-91d8-c29280fad097.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 170.30.224.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:3e:b8:0d:52:e9:23:2c:33:22:52:71:04:1f:6c:8f:45:ba: 5e:f3:38:10:de:f6:db:92:37:6b:5f:ca:5f:27:22:13:21:4a: 77:25:9b:ce:98:89:1c:84:54:8b:49:ce:3d:90:9c:b3:aa:c1: 2f:84:55:f0:47:d4:43:c1:22:96:45:0c:44:c5:6c:79:0f:c8: c6:01:b1:36:c2:eb:5c:03:c7:5f:75:e0:eb:7c:0c:d0:6f:fe: a3:85:74:d7:9f:31:1c:dc:ba:68:24:45:66:3f:d1:2b:d5:64: 8b:aa:61:6d:80:00:e9:35:db:af:76:d8:e2:fa:df:48:a3:da: 22:b4:90:10:2a:e2:34:f7:f7:36:02:6a:f0:fe:6d:dc:a3:08: c0:da:34:9b:cd:c1:a5:fb:19:06:58:9a:88:33:ed:c2:57:7e: 1d:80:b2:fa:90:0f:3e:6e:1d:61:ca:f7:1d:12:83:dc:88:54: 7c:5c:ed:61:fc:fa:ab:29:b4:c6:46:87:1c:e9:9b:77:4f:8b: 3d:9d:ff:e9:a8:dd:3f:73:f5:a1:26:4b:dc:5a:a2:33:87:5a: df:e4:21:48:e9:57:3a:d7:22:ae:f7:3f:af:1d:42:7a:a5:b8: 85:06:bc:b9:71:2a:b8:1a:af:cc:7e:2a:81:70:8c:e3:e9:e7: d1:ab:bf:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpCdYhXNFeJMBqOXwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDYyMTAxMDA0OFoXDTI1MDkxOTAxMDA0OFowLzEtMCsGA1UEAxMk ZWZlNmZiZWQtNWY1OS00ZTA1LTlhMDAtYmU2ZjVhNGJjMzY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGqgEBVkvg/BZrSYiH21zB0t18UAJBoZsWep 6jFoVQ1YdYu63XXdNSn5J9yq+AKmzRT9DviMURcoEkjDL80qyqRdassVX3jXIlDD 8sXalV79OzBLsU2twKWDv/FT9j7MiYeYcAWYwM3NH3gVaHV9hsljVt42NhEpmBoL PSSUErjije7meYZQ7B8Rd0A6eaSfGxLYNN/rINmgenMVcq2Y5Jf8OYDKhRrYYn6E jWRQhW13U1xMf8glSCh7y6mf91s+fjJ2fanQRO6OivaENwnD3wHDqIL1NqxxMccb zFz529vKdEq+zk9uTQ2cHzWDtctGpxooX07PJ1GILJIkGORMDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKawTEEP85Bjw1bkkggGxFjAkkF0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNTA5ZWYzNTQtZTRlMS0z OTZhLTkxZDgtYzI5MjgwZmFkMDk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqh7gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHc+uA1S6SMsMyJScQQfbI9Ful7zOBDe9tuSN2tfyl8nIhMhSnclm86Y iRyEVItJzj2QnLOqwS+EVfBH1EPBIpZFDETFbHkPyMYBsTbC61wDx1914Ot8DNBv /qOFdNefMRzcumgkRWY/0SvVZIuqYW2AAOk126922OL630ij2iK0kBAq4jT39zYC avD+bdyjCMDaNJvNwaX7GQZYmogz7cJXfh2AsvqQDz5uHWHK9x0Sg9yIVHxc7WH8 +qsptMZGhxzpm3dPiz2d/+mo3T9z9aEmS9xaojOHWt/kIUjpVzrXIq73P68dQnql uIUGvLlxKrgar8x+KoFwjOPp59GrvwA= -----END CERTIFICATE-----Generated at Tue Jul 1 13:22:52 2025 by rpki-client