$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/54fa30f9-30ac-3ec6-a2fe-9d30984ad118.roa File: 54fa30f9-30ac-3ec6-a2fe-9d30984ad118.roa (raw, json) Hash identifier: mfsJcahg9fLID8z69K7pm6x41z1YOoLghu7/5JvR4mc= Subject key identifier: BD:5E:42:C6:C7:AF:DC:35:FC:38:BF:DD:48:67:48:0F:AF:DD:70:5D Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285849DD4C5AFB6ED6F27BCD412500 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/54fa30f9-30ac-3ec6-a2fe-9d30984ad118.roa Signing time: Thu 15 May 2025 19:21:19 +0000 ROA not before: Thu 15 May 2025 19:21:19 +0000 ROA not after: Wed 13 Aug 2025 19:21:19 +0000 asID: 203 IP address blocks: 206.164.196.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dd:4c:5a:fb:6e:d6:f2:7b:cd:41:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: May 15 19:21:19 2025 GMT Not After : Aug 13 19:21:19 2025 GMT Subject: CN=d5f04498-3d2e-472c-b82f-0d8e2921f7d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:03:28:18:29:d3:7d:2c:57:69:8c:e4:98:18: e7:10:6c:65:3d:6d:e3:f1:b3:53:26:8e:a1:98:c6: b2:e1:04:8b:0e:34:d6:9c:84:40:f5:14:1b:cc:52: 05:f1:de:5a:c9:dc:ff:cc:aa:4b:dd:d4:0f:00:9c: b1:bb:be:e4:67:60:68:ab:ab:a7:de:ac:9f:97:33: 6b:86:49:25:7d:7b:46:46:32:f0:83:03:10:9b:1d: 2d:cf:5f:7d:e2:2e:26:af:06:c2:8b:87:f7:56:b2: 83:b0:e9:77:20:25:1b:1b:07:7f:ce:9f:cb:06:0c: b6:2f:4b:cf:78:98:c7:96:08:fc:8b:1f:a9:23:9c: 3e:18:23:cf:78:9b:93:48:72:92:99:70:b6:8b:91: b2:79:bf:fa:3f:79:8f:e1:59:75:40:cb:69:e8:e4: c1:24:3b:06:12:b9:b2:90:b0:ac:e2:21:67:fc:35: 19:f7:10:60:4e:7e:a7:2a:73:18:a9:5d:4d:3e:56: 1a:fc:fa:53:da:e4:1b:bd:c1:f2:1e:5d:8f:d5:d4: 46:bb:c7:17:2e:92:e7:db:00:0a:56:db:7f:43:10: 01:37:a1:f2:d1:3c:6b:10:6b:b7:40:8b:18:5e:31: a2:f0:1d:ff:f5:30:0d:94:6a:67:93:3c:20:b6:54: 98:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:5E:42:C6:C7:AF:DC:35:FC:38:BF:DD:48:67:48:0F:AF:DD:70:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/54fa30f9-30ac-3ec6-a2fe-9d30984ad118.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 206.164.196.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:7f:3c:4b:4e:a4:10:93:d5:fe:23:58:ed:e5:7b:a2:65:90: 03:ad:98:70:7d:33:23:0a:de:2a:80:29:e6:90:a8:d8:4a:40: d9:2d:93:2d:65:db:b1:37:55:ac:82:85:1a:7e:8d:5c:e8:3e: 3d:00:5d:00:56:de:26:85:99:4f:d8:48:b9:d2:7a:2e:5e:a5: 82:17:1d:f3:88:3b:d2:b2:49:23:cd:85:e3:54:7c:43:67:a8: c1:88:c2:56:1d:0b:fc:48:04:e1:1f:ee:6d:b2:86:34:3e:e2: 95:a7:94:5f:55:38:65:a7:26:4e:89:52:87:b2:83:07:c9:6c: bd:d4:69:e1:f1:e7:05:0e:6c:eb:89:53:3a:f7:41:36:7f:ce: a3:3d:01:ee:11:f8:51:3a:1c:99:ee:3c:2c:c1:d9:40:2d:ea: fb:a4:45:61:29:2d:51:e6:12:d4:d6:90:f9:26:7c:fb:6a:53: 12:33:f6:7a:a0:35:44:49:b7:ec:f8:17:05:90:21:f0:a1:69: ef:a0:84:20:83:7a:1c:14:15:e4:14:b8:4f:19:89:2f:bb:c8: 05:60:08:53:08:8d:05:17:99:a9:cf:21:8f:82:d5:fd:fa:f3: fd:65:e4:45:89:48:3c:5e:21:a3:7c:c0:34:c8:83:58:7e:5e: f0:8b:fe:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEndTFr7btbye81BJQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDUxNTE5MjExOVoXDTI1MDgxMzE5MjExOVowLzEtMCsGA1UEAxMk ZDVmMDQ0OTgtM2QyZS00NzJjLWI4MmYtMGQ4ZTI5MjFmN2Q3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAMoGCnTfSxXaYzkmBjnEGxlPW3j8bNTJo6h mMay4QSLDjTWnIRA9RQbzFIF8d5aydz/zKpL3dQPAJyxu77kZ2Boq6un3qyflzNr hkklfXtGRjLwgwMQmx0tz1994i4mrwbCi4f3VrKDsOl3ICUbGwd/zp/LBgy2L0vP eJjHlgj8ix+pI5w+GCPPeJuTSHKSmXC2i5Gyeb/6P3mP4Vl1QMtp6OTBJDsGErmy kLCs4iFn/DUZ9xBgTn6nKnMYqV1NPlYa/PpT2uQbvcHyHl2P1dRGu8cXLpLn2wAK Vtt/QxABN6Hy0TxrEGu3QIsYXjGi8B3/9TANlGpnkzwgtlSYFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL1eQsbHr9w1/Di/3UhnSA+v3XBdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNTRmYTMwZjktMzBhYy0z ZWM2LWEyZmUtOWQzMDk4NGFkMTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzqTEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFF/PEtOpBCT1f4jWO3le6JlkAOtmHB9MyMK3iqAKeaQqNhKQNktky1l 27E3VayChRp+jVzoPj0AXQBW3iaFmU/YSLnSei5epYIXHfOIO9KySSPNheNUfENn qMGIwlYdC/xIBOEf7m2yhjQ+4pWnlF9VOGWnJk6JUoeygwfJbL3UaeHx5wUObOuJ Uzr3QTZ/zqM9Ae4R+FE6HJnuPCzB2UAt6vukRWEpLVHmEtTWkPkmfPtqUxIz9nqg NURJt+z4FwWQIfChae+ghCCDehwUFeQUuE8ZiS+7yAVgCFMIjQUXmanPIY+C1f36 8/1l5EWJSDxeIaN8wDTIg1h+XvCL/sg= -----END CERTIFICATE-----Generated at Tue Jul 1 03:29:31 2025 by rpki-client