$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f08d7eb0-95ca-3fd0-81c9-69f7fa5f9587.roa File: f08d7eb0-95ca-3fd0-81c9-69f7fa5f9587.roa (raw, json) Hash identifier: /UKlpzyRUXr/HI4KglhPdJIXcD8DZCRrfidPEZ69vEE= Subject key identifier: DB:F1:07:23:BC:82:DF:EE:31:7A:84:51:0C:1A:EB:5F:ED:F4:F0:46 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584A427588B7220B1236C94E68A0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f08d7eb0-95ca-3fd0-81c9-69f7fa5f9587.roa Signing time: Sat 21 Jun 2025 01:00:48 +0000 ROA not before: Sat 21 Jun 2025 01:00:48 +0000 ROA not after: Fri 19 Sep 2025 01:00:48 +0000 asID: 3360 IP address blocks: 170.30.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:42:75:88:b7:22:0b:12:36:c9:4e:68:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jun 21 01:00:48 2025 GMT Not After : Sep 19 01:00:48 2025 GMT Subject: CN=98a6fbf6-0036-406a-b851-aa6d2df093dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:69:bb:a6:76:b3:f2:c3:14:b1:86:21:20:b1: 79:96:ef:60:b4:ca:86:67:12:e2:0f:c9:a9:3e:b8: d2:e0:de:75:7d:31:12:97:c5:c3:07:8c:c5:8b:a8: 01:ab:82:8e:a7:fb:ea:ea:4a:56:bf:50:cb:db:01: 8e:72:2a:c2:28:ff:2b:12:37:15:7c:05:b4:3a:e2: df:30:fe:f6:39:3d:eb:e6:28:2d:44:90:89:88:bb: 79:f2:45:de:40:b3:11:76:07:99:ea:7b:77:47:a7: a4:fa:6e:f9:e3:d7:bb:37:40:98:0e:85:7b:f6:8f: 4c:46:8c:a0:62:3d:01:ae:67:95:5b:1d:cb:87:8a: 10:0c:39:a3:85:7e:be:4e:a7:f3:2f:b8:1e:0d:f3: e8:7e:6c:9e:97:6f:2e:bf:eb:ce:fb:dc:f2:79:9a: be:92:b8:40:c4:0e:bd:c7:f8:75:8a:16:bc:8f:15: 22:59:52:51:89:13:60:1e:3a:2a:27:98:e7:94:10: a7:ce:41:82:88:33:31:6c:41:b5:70:29:b0:63:f1: 78:19:0c:e1:e9:f2:2d:1d:f1:db:f8:cf:bc:60:b7: 51:a0:59:09:17:10:d6:64:c0:c5:4c:25:01:02:95: 42:fc:08:d0:c1:28:f8:fd:5f:2e:b1:54:45:8e:ce: 56:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:F1:07:23:BC:82:DF:EE:31:7A:84:51:0C:1A:EB:5F:ED:F4:F0:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f08d7eb0-95ca-3fd0-81c9-69f7fa5f9587.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 170.30.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:5d:e2:3f:3e:87:76:cf:0f:5c:84:71:be:aa:94:18:a6:a4: a7:57:de:c0:18:06:10:8b:07:82:d9:96:7c:eb:98:18:2d:64: c0:52:6f:5f:7f:5f:d1:b7:02:04:15:50:ed:a3:bd:35:9a:1b: 4f:88:4d:f4:9e:d6:d1:00:7b:9a:cf:d2:5b:fa:d7:3b:b1:6e: 5f:6e:32:98:f5:b9:06:df:47:df:77:cc:65:7e:7d:c7:95:5c: 6a:a4:ef:e5:53:e1:d7:15:b1:8b:c3:f9:27:9c:69:a4:f1:b6: da:b9:79:67:4e:07:77:e5:a2:69:b5:5a:48:46:d4:80:54:f2: 5b:2b:cc:13:38:1f:11:b6:06:3d:6d:02:4b:f7:09:3c:46:2f: b7:f6:f4:b7:43:11:e3:27:77:2b:85:d8:b5:45:1f:1d:46:f0: 97:34:fc:c3:5f:6d:98:be:4c:19:4e:e8:b9:a2:47:7b:cb:55: f8:56:90:0c:45:e4:2c:a5:ab:30:52:27:21:99:c7:ab:f3:42: de:23:a2:7b:57:26:c7:a0:f2:b7:b8:9c:d8:39:d3:5e:6b:70: 7f:69:e6:31:8a:56:75:a0:0d:44:27:d3:1b:c7:af:ae:d0:cb: c7:8a:45:df:e2:a8:b5:76:77:b1:ab:f2:12:4d:44:08:bc:d2: ed:f6:93:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpCdYi3IgsSNslOaKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDYyMTAxMDA0OFoXDTI1MDkxOTAxMDA0OFowLzEtMCsGA1UEAxMk OThhNmZiZjYtMDAzNi00MDZhLWI4NTEtYWE2ZDJkZjA5M2RkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2m7pnaz8sMUsYYhILF5lu9gtMqGZxLiD8mp PrjS4N51fTESl8XDB4zFi6gBq4KOp/vq6kpWv1DL2wGOcirCKP8rEjcVfAW0OuLf MP72OT3r5igtRJCJiLt58kXeQLMRdgeZ6nt3R6ek+m7549e7N0CYDoV79o9MRoyg Yj0BrmeVWx3Lh4oQDDmjhX6+TqfzL7geDfPofmyel28uv+vO+9zyeZq+krhAxA69 x/h1iha8jxUiWVJRiRNgHjoqJ5jnlBCnzkGCiDMxbEG1cCmwY/F4GQzh6fItHfHb +M+8YLdRoFkJFxDWZMDFTCUBApVC/AjQwSj4/V8usVRFjs5WPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNvxByO8gt/uMXqEUQwa61/t9PBGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZjA4ZDdlYjAtOTVjYS0z ZmQwLTgxYzktNjlmN2ZhNWY5NTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqh7wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFVd4j8+h3bPD1yEcb6qlBimpKdX3sAYBhCLB4LZlnzrmBgtZMBSb19/ X9G3AgQVUO2jvTWaG0+ITfSe1tEAe5rP0lv61zuxbl9uMpj1uQbfR993zGV+fceV XGqk7+VT4dcVsYvD+SecaaTxttq5eWdOB3flomm1WkhG1IBU8lsrzBM4HxG2Bj1t Akv3CTxGL7f29LdDEeMndyuF2LVFHx1G8Jc0/MNfbZi+TBlO6LmiR3vLVfhWkAxF 5CylqzBSJyGZx6vzQt4jontXJseg8re4nNg5015rcH9p5jGKVnWgDUQn0xvHr67Q y8eKRd/iqLV2d7Gr8hJNRAi80u32k/Y= -----END CERTIFICATE-----Generated at Mon Jun 30 15:50:40 2025 by rpki-client