$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/7251d355-a2aa-369d-8288-406833bb3e39.roa File: 7251d355-a2aa-369d-8288-406833bb3e39.roa (raw, json) Hash identifier: XirhLsiYVqAcxH6C5aLlnGmWQAHqnusBtJUTFRudutE= Subject key identifier: 39:38:4E:36:8C:35:C8:E4:AC:D4:BD:4A:5E:94:72:E2:00:E5:BB:BB Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285849CBCFA7BE4637B3B733B31D80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/7251d355-a2aa-369d-8288-406833bb3e39.roa Signing time: Fri 09 May 2025 13:01:00 +0000 ROA not before: Fri 09 May 2025 13:01:00 +0000 ROA not after: Thu 07 Aug 2025 13:01:00 +0000 asID: 3360 IP address blocks: 199.42.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cb:cf:a7:be:46:37:b3:b7:33:b3:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: May 9 13:01:00 2025 GMT Not After : Aug 7 13:01:00 2025 GMT Subject: CN=fe934ab8-b4bd-4aa4-99a7-40edb19bf58b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:f2:ed:08:4f:3e:68:77:44:b5:bc:10:b0:33: 5c:4b:84:93:7f:71:b5:c5:f3:fc:d1:57:00:47:58: e5:9d:03:d4:be:c7:c3:ef:21:c2:7d:18:37:73:52: 31:f2:70:7f:96:a8:ae:d1:99:18:85:fe:cc:5a:e7: b4:f0:a5:f1:82:5d:0e:58:3f:76:95:d4:fe:e7:59: 6f:b1:9c:8e:b3:0e:ff:de:61:33:45:94:13:b8:10: 4f:c0:f5:9c:6c:d6:f8:5b:50:15:0d:fc:d0:b8:ba: a8:df:d3:1f:e0:c7:fb:55:2b:9c:5a:50:01:ee:31: 1a:cc:25:7b:1b:8c:69:46:3c:c8:e5:1f:06:14:f9: 96:48:63:42:c2:b4:2d:d7:fa:99:bb:a1:42:a1:98: f4:ef:17:2c:5f:12:ee:05:da:3a:77:cd:88:18:a8: 88:3b:ce:6a:b9:96:ca:55:57:01:e9:c7:09:32:fd: 59:2d:be:d8:f6:6e:9f:7b:bc:ab:12:26:9d:09:12: 26:e7:59:8e:90:36:2f:b0:a9:29:8d:ee:84:01:03: 0f:3f:2a:c0:d2:2a:70:c3:9a:f6:55:14:bf:0f:a2: 93:e1:22:08:ad:5f:0f:e9:53:5f:ba:9d:91:9f:5e: e0:36:17:c2:4a:ba:12:74:ba:05:aa:17:c7:d6:78: 31:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:38:4E:36:8C:35:C8:E4:AC:D4:BD:4A:5E:94:72:E2:00:E5:BB:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/7251d355-a2aa-369d-8288-406833bb3e39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 199.42.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:cd:b6:77:77:e7:5a:90:f6:0d:48:3f:48:eb:66:be:4e:b7: 13:ef:c7:68:ea:f3:a9:fd:74:01:fb:53:b2:3f:68:b3:a6:9d: bc:ef:57:2f:33:ec:2b:e9:19:ab:b7:4b:99:e4:b6:f7:d4:e5: 1c:f5:cc:b3:8d:71:46:e6:8e:a5:23:10:b1:50:ad:cd:fd:1e: c5:15:80:80:1b:17:10:4d:3d:5a:fb:5f:95:aa:9b:07:bf:53: 9d:7b:4f:f9:1c:db:cd:e1:07:8b:60:f2:15:3c:c8:0a:48:35: e5:ec:7f:5f:46:10:13:6c:6f:37:c9:8e:42:0a:0f:99:0b:78: 1f:ef:f1:d9:e5:61:8d:9b:f7:fe:b8:99:dc:da:4a:4a:b5:59: 84:ad:56:e4:33:9b:92:fd:71:d4:2f:b4:cd:85:ca:e8:8d:6e: 36:7f:34:96:c2:66:1c:dd:8b:b8:46:28:13:22:a9:6e:f4:1d: 0f:26:c3:68:84:45:da:74:de:fc:06:22:1a:2b:b6:6d:28:23: 31:6b:5e:60:12:75:9d:99:74:03:93:ef:61:ac:7c:14:b5:e6: 9a:67:0c:b6:e5:26:d0:08:ce:09:94:af:d0:e3:08:64:7c:4a: a7:08:79:4d:b2:f1:65:88:05:c0:b5:1c:93:2f:eb:f1:a5:d1: 7b:33:f1:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnLz6e+RjeztzOzHYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDUwOTEzMDEwMFoXDTI1MDgwNzEzMDEwMFowLzEtMCsGA1UEAxMk ZmU5MzRhYjgtYjRiZC00YWE0LTk5YTctNDBlZGIxOWJmNThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5/LtCE8+aHdEtbwQsDNcS4STf3G1xfP80VcA R1jlnQPUvsfD7yHCfRg3c1Ix8nB/lqiu0ZkYhf7MWue08KXxgl0OWD92ldT+51lv sZyOsw7/3mEzRZQTuBBPwPWcbNb4W1AVDfzQuLqo39Mf4Mf7VSucWlAB7jEazCV7 G4xpRjzI5R8GFPmWSGNCwrQt1/qZu6FCoZj07xcsXxLuBdo6d82IGKiIO85quZbK VVcB6ccJMv1ZLb7Y9m6fe7yrEiadCRIm51mOkDYvsKkpje6EAQMPPyrA0ipww5r2 VRS/D6KT4SIIrV8P6VNfup2Rn17gNhfCSroSdLoFqhfH1ngxWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDk4TjaMNcjkrNS9Sl6UcuIA5bu7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNzI1MWQzNTUtYTJhYS0z NjlkLTgyODgtNDA2ODMzYmIzZTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxyoMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGfNtnd351qQ9g1IP0jrZr5OtxPvx2jq86n9dAH7U7I/aLOmnbzvVy8z 7CvpGau3S5nktvfU5Rz1zLONcUbmjqUjELFQrc39HsUVgIAbFxBNPVr7X5Wqmwe/ U517T/kc283hB4tg8hU8yApINeXsf19GEBNsbzfJjkIKD5kLeB/v8dnlYY2b9/64 mdzaSkq1WYStVuQzm5L9cdQvtM2FyuiNbjZ/NJbCZhzdi7hGKBMiqW70HQ8mw2iE Rdp03vwGIhortm0oIzFrXmASdZ2ZdAOT72GsfBS15ppnDLblJtAIzgmUr9DjCGR8 SqcIeU2y8WWIBcC1HJMv6/Gl0Xsz8VE= -----END CERTIFICATE-----Generated at Tue May 13 08:34:35 2025 by rpki-client