$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8024ee8a-a496-3386-9d6b-fcf7e7f4f752.roa File: 8024ee8a-a496-3386-9d6b-fcf7e7f4f752.roa (raw, json) Hash identifier: OCmkfcvQQWhm1my+2oa5TOLCyI/4owZ9y2h9azXytrE= Subject key identifier: 49:18:BA:DE:85:6C:AD:E1:D7:40:4C:8B:33:51:40:61:74:F2:6D:53 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285849CBCFA8AE6CF015748B6331A0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8024ee8a-a496-3386-9d6b-fcf7e7f4f752.roa Signing time: Fri 09 May 2025 13:01:00 +0000 ROA not before: Fri 09 May 2025 13:01:00 +0000 ROA not after: Thu 07 Aug 2025 13:01:00 +0000 asID: 203 IP address blocks: 206.164.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cb:cf:a8:ae:6c:f0:15:74:8b:63:31:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: May 9 13:01:00 2025 GMT Not After : Aug 7 13:01:00 2025 GMT Subject: CN=014d6dd9-2d32-4777-b2d6-919b2f7009c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:8c:98:0c:e0:cb:c8:48:b7:19:a4:e1:43:44: c7:2a:08:f2:a0:bc:07:37:80:35:4d:01:9e:8e:48: 38:a4:b9:68:50:30:12:ba:4e:36:a9:4f:07:a0:d0: 48:18:29:7c:31:25:db:06:c0:05:7d:6f:48:59:cb: 0e:25:1f:01:61:7f:f6:01:67:c8:e8:e0:a1:bf:51: 2e:bc:a8:02:cb:2d:c3:a8:c7:3f:46:50:3d:16:b7: aa:11:46:11:d7:c9:c5:ce:89:71:37:49:c1:4c:a8: bf:6d:4c:55:ec:e4:c6:67:f5:9a:b7:e8:d0:3d:74: 6e:08:5d:61:b5:fa:50:54:a0:3c:9e:ae:57:41:e0: 09:c9:7d:53:9f:bf:65:a4:f9:5f:a2:cc:df:01:eb: 41:ba:4e:b4:e6:16:8e:1b:f6:72:34:32:05:94:c6: 81:fb:a9:9c:fa:8c:38:68:7f:b7:ee:9f:d3:47:ff: 6a:2a:71:fd:89:f4:bb:60:fc:d4:b1:2d:1c:49:63: 00:58:59:15:c1:48:cc:21:bf:ad:e8:31:8e:21:c4: c9:e0:8a:b3:98:12:ac:e8:47:6f:a8:b0:e1:59:4b: d3:a5:5e:8b:30:4d:e7:3e:f1:7e:31:25:a5:47:5d: 1f:a7:1c:e3:f7:9e:6b:f4:80:84:de:eb:95:52:b4: a7:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:18:BA:DE:85:6C:AD:E1:D7:40:4C:8B:33:51:40:61:74:F2:6D:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8024ee8a-a496-3386-9d6b-fcf7e7f4f752.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 206.164.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:15:b7:dc:61:dc:88:e3:aa:76:e4:af:d5:b8:b3:e5:bf:85: 33:e2:61:a1:60:d7:d1:b4:c6:ec:32:c9:32:55:0c:ee:70:05: c5:29:2d:32:cf:f1:1a:95:d9:cf:1b:f6:33:a5:dc:b1:88:c1: c3:46:d3:05:76:48:c5:4d:85:a3:28:2e:6e:6d:10:07:d8:a8: 1e:42:df:dd:f8:8a:47:c8:30:a6:1e:2b:a5:89:f6:71:dd:58: 4e:e7:86:c7:08:ac:b1:11:3e:19:19:1e:f2:69:20:f7:cd:6e: 08:46:27:8f:33:0a:d5:da:8e:27:5d:fe:90:52:0b:00:b9:3f: 1a:af:76:87:ee:f2:24:3b:37:87:2d:32:62:d0:31:35:c0:b8: a6:20:d5:4b:88:73:04:56:96:81:68:4c:71:54:f8:2b:69:10: 95:f2:24:05:22:54:78:91:63:40:65:fa:79:67:28:e0:33:e3: 85:c5:25:71:b3:a0:ed:72:ba:fa:da:03:55:d5:02:33:ba:39: 51:eb:c8:10:4c:bc:06:ad:a0:a1:0c:60:2e:22:18:6c:08:43: 46:05:34:a5:02:7d:f4:68:0e:ac:fa:4e:49:fc:7b:ae:de:a4: e2:9a:fd:25:63:cd:b0:3d:9f:e7:e0:bc:b7:33:07:a8:9d:e9: 37:f2:56:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnLz6iubPAVdItjMaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDUwOTEzMDEwMFoXDTI1MDgwNzEzMDEwMFowLzEtMCsGA1UEAxMk MDE0ZDZkZDktMmQzMi00Nzc3LWIyZDYtOTE5YjJmNzAwOWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4yYDODLyEi3GaThQ0THKgjyoLwHN4A1TQGe jkg4pLloUDASuk42qU8HoNBIGCl8MSXbBsAFfW9IWcsOJR8BYX/2AWfI6OChv1Eu vKgCyy3DqMc/RlA9FreqEUYR18nFzolxN0nBTKi/bUxV7OTGZ/Wat+jQPXRuCF1h tfpQVKA8nq5XQeAJyX1Tn79lpPlfoszfAetBuk605haOG/ZyNDIFlMaB+6mc+ow4 aH+37p/TR/9qKnH9ifS7YPzUsS0cSWMAWFkVwUjMIb+t6DGOIcTJ4IqzmBKs6Edv qLDhWUvTpV6LME3nPvF+MSWlR10fpxzj955r9ICE3uuVUrSnlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEkYut6FbK3h10BMizNRQGF08m1TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvODAyNGVlOGEtYTQ5Ni0z Mzg2LTlkNmItZmNmN2U3ZjRmNzUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzqTUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFkVt9xh3Ijjqnbkr9W4s+W/hTPiYaFg19G0xuwyyTJVDO5wBcUpLTLP 8RqV2c8b9jOl3LGIwcNG0wV2SMVNhaMoLm5tEAfYqB5C3934ikfIMKYeK6WJ9nHd WE7nhscIrLERPhkZHvJpIPfNbghGJ48zCtXajidd/pBSCwC5Pxqvdofu8iQ7N4ct MmLQMTXAuKYg1UuIcwRWloFoTHFU+CtpEJXyJAUiVHiRY0Bl+nlnKOAz44XFJXGz oO1yuvraA1XVAjO6OVHryBBMvAatoKEMYC4iGGwIQ0YFNKUCffRoDqz6Tkn8e67e pOKa/SVjzbA9n+fgvLczB6id6TfyVsQ= -----END CERTIFICATE-----Generated at Sun May 11 15:31:17 2025 by rpki-client