$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a2a94c3d-031f-3a3b-8848-b2c438f461dc.roa File: a2a94c3d-031f-3a3b-8848-b2c438f461dc.roa (raw, json) Hash identifier: B9qRnMZzP1o7zMJyloyeV/MMtd5bQ1FBtf7nTyyLQcY= Subject key identifier: 35:EF:F3:5C:C1:AB:02:FC:D8:6C:81:C7:6B:FD:9D:D5:5B:F8:F5:EA Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858499DBF357E929054D37396D0C0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a2a94c3d-031f-3a3b-8848-b2c438f461dc.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 202 IP address blocks: 205.239.158.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:35:7e:92:90:54:d3:73:96:d0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=475a41e5-1c7b-48d3-a77e-4991fdbec7e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:50:d2:d5:fe:0d:25:52:25:13:ff:63:4a:e3: 53:ab:22:ea:64:8c:51:32:a5:64:e3:82:51:af:08: cc:7a:5b:92:6b:08:bf:9d:c3:ec:14:6a:e2:fd:8a: e1:21:9a:c1:06:8e:45:4b:88:d8:c5:f2:d9:2c:43: ea:0b:0a:3e:4f:29:10:cb:a2:69:b5:57:68:ea:ab: a9:42:25:92:ec:fc:45:42:04:e7:44:e2:45:41:95: 8f:f8:39:65:2e:b7:84:d7:e7:59:33:27:0a:e7:29: 31:f6:1a:68:c2:2e:ff:a5:a5:77:44:58:a7:9b:24: a2:2a:66:1c:44:ba:48:a4:4f:d8:f5:2d:e3:6f:ef: 46:70:20:86:42:59:c3:5f:8d:f1:6b:df:16:67:76: 99:a0:f8:11:e1:6e:81:64:d2:ec:e9:37:8d:9e:f3: 55:e8:3a:45:ed:06:4e:7b:8d:46:24:ad:e8:6a:63: 4b:73:3b:e3:31:b6:8f:5f:e1:e9:fa:c4:7e:40:cc: e4:0c:97:f3:0b:60:5a:00:72:f6:24:73:0b:7f:a3: 75:9c:49:7e:4f:f2:7d:7a:a3:94:b6:33:cf:9d:d2: 7b:c1:c7:10:93:92:6e:17:56:a4:96:cf:32:89:55: e5:ec:92:a4:cd:89:ac:a7:9c:05:7a:dd:ab:fe:8b: 6f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:EF:F3:5C:C1:AB:02:FC:D8:6C:81:C7:6B:FD:9D:D5:5B:F8:F5:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a2a94c3d-031f-3a3b-8848-b2c438f461dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 205.239.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:d6:71:89:ce:10:56:3c:71:ac:05:9b:65:3e:8f:7d:4b:0f: 26:9f:25:65:a4:52:6e:e4:98:94:6d:53:53:58:fd:d1:29:86: 90:29:c8:20:02:2c:c5:eb:27:73:6b:89:5f:7d:53:44:f9:d4: 5c:4e:e0:6d:26:ed:15:23:3b:95:c5:11:0b:fb:bf:fb:aa:28: fe:83:f4:19:2d:7b:55:f9:d0:37:12:16:48:b0:22:1f:2c:92: c5:d8:8c:ae:6e:36:3e:6b:04:b6:dd:9c:8a:05:3c:38:14:78: d0:b3:0c:50:9f:59:e9:84:5b:8c:34:69:09:c6:3c:8b:1a:28: ca:f3:02:b1:c3:99:da:a1:47:e2:49:f3:b0:1c:86:be:46:cd: 14:c1:dd:70:0c:39:26:99:22:33:31:5e:a2:05:0f:82:3b:c5: 53:7c:3d:31:84:a3:68:53:a5:af:fe:d0:fe:a9:5a:39:11:24: 3e:c4:f8:a0:d0:58:a0:77:16:29:d0:f6:3b:21:b9:91:11:5c: 6b:d4:f1:cc:09:cb:ab:d5:6b:e8:4d:bb:bd:f7:60:c3:e2:b7: dd:ea:d0:a2:7c:70:15:c0:ac:90:13:01:e6:a2:30:6c:11:f7: 90:18:f0:b6:fa:1f:41:a2:eb:2c:50:6c:18:ba:bb:22:3b:21: e9:ea:fe:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdvzV+kpBU03OW0MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk NDc1YTQxZTUtMWM3Yi00OGQzLWE3N2UtNDk5MWZkYmVjN2U3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglDS1f4NJVIlE/9jSuNTqyLqZIxRMqVk44JR rwjMeluSawi/ncPsFGri/YrhIZrBBo5FS4jYxfLZLEPqCwo+TykQy6JptVdo6qup QiWS7PxFQgTnROJFQZWP+DllLreE1+dZMycK5ykx9hpowi7/paV3RFinmySiKmYc RLpIpE/Y9S3jb+9GcCCGQlnDX43xa98WZ3aZoPgR4W6BZNLs6TeNnvNV6DpF7QZO e41GJK3oamNLczvjMbaPX+Hp+sR+QMzkDJfzC2BaAHL2JHMLf6N1nEl+T/J9eqOU tjPPndJ7wccQk5JuF1akls8yiVXl7JKkzYmsp5wFet2r/otvrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDXv81zBqwL82GyBx2v9ndVb+PXqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYTJhOTRjM2QtMDMxZi0z YTNiLTg4NDgtYjJjNDM4ZjQ2MWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBze+eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABDWcYnOEFY8cawFm2U+j31LDyafJWWkUm7kmJRtU1NY/dEphpApyCAC LMXrJ3NriV99U0T51FxO4G0m7RUjO5XFEQv7v/uqKP6D9Bkte1X50DcSFkiwIh8s ksXYjK5uNj5rBLbdnIoFPDgUeNCzDFCfWemEW4w0aQnGPIsaKMrzArHDmdqhR+JJ 87Achr5GzRTB3XAMOSaZIjMxXqIFD4I7xVN8PTGEo2hTpa/+0P6pWjkRJD7E+KDQ WKB3FinQ9jshuZERXGvU8cwJy6vVa+hNu733YMPit93q0KJ8cBXArJATAeaiMGwR 95AY8Lb6H0Gi6yxQbBi6uyI7Ienq/to= -----END CERTIFICATE-----Generated at Fri May 9 09:25:47 2025 by rpki-client