$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/025b099e-2056-3082-9d73-75d92962953c.roa File: 025b099e-2056-3082-9d73-75d92962953c.roa (raw, json) Hash identifier: ie1Nlzi+x0BWhi6owPpekpfol4YJJRRY2vcwqDnAEtc= Subject key identifier: BE:5E:0E:EC:96:D6:FE:59:3B:39:3F:55:C1:A4:FF:F2:C9:57:C5:BF Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858452C1D420B0BD9FEF45071DE40 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/025b099e-2056-3082-9d73-75d92962953c.roa Signing time: Mon 11 Mar 2024 13:00:31 +0000 ROA not before: Mon 11 Mar 2024 13:00:31 +0000 ROA not after: Sun 09 Jun 2024 13:00:31 +0000 asID: 132121 IP address blocks: 168.87.88.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:2c:1d:42:0b:0b:d9:fe:f4:50:71:de:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 11 13:00:31 2024 GMT Not After : Jun 9 13:00:31 2024 GMT Subject: CN=7a42eb98-fc4f-4023-824e-40cd941571ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:91:f9:29:73:fe:0d:81:cf:ec:f9:08:11:30: c7:7d:42:d6:15:35:a6:7b:2b:47:d9:26:ad:12:e8: 32:12:68:01:ec:83:ec:d7:bb:74:5f:ee:6c:21:61: 2b:76:ff:32:54:ac:7e:0f:cd:c0:ea:60:f4:f7:5b: 06:94:d4:9d:5e:e6:d1:e9:f0:f1:a4:d7:d9:44:e0: 11:79:09:bb:89:7b:f6:73:c3:33:41:3c:53:d1:3b: 89:e4:7a:c5:d0:d1:8c:28:0a:95:f8:d7:e6:b9:cb: 2f:4b:15:a6:7c:d6:f9:0a:1a:0e:4a:1c:65:19:16: a8:02:88:f4:54:8a:cd:3b:34:ff:61:c5:01:f1:d9: 74:bd:c1:32:5a:4d:c4:9e:74:6d:15:76:e2:e2:c2: fe:46:1f:c7:5e:8e:5a:f1:3f:6c:41:a8:dd:7b:d6: a9:83:4e:1e:4c:c0:f7:e6:54:2f:37:47:a0:68:2c: 04:70:dd:56:73:5c:87:67:09:fa:f7:77:42:44:bc: c9:f0:aa:69:ca:28:c0:e7:04:e5:1a:f8:c3:97:a4: e3:a0:66:50:60:60:cc:31:ef:20:46:1d:69:96:61: fd:1b:aa:7c:16:05:0d:67:a8:f9:e6:6c:bc:b9:3b: 41:cb:0e:3a:b1:99:db:f8:71:15:01:3a:fb:29:f8: 62:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:5E:0E:EC:96:D6:FE:59:3B:39:3F:55:C1:A4:FF:F2:C9:57:C5:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/025b099e-2056-3082-9d73-75d92962953c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:ec:04:3b:e5:8a:9e:99:91:ea:32:09:15:4a:68:45:78:5f: 0b:53:2a:2d:9a:c2:6f:9e:db:7d:25:4b:dc:35:b2:e0:80:46: 89:a4:c0:b1:9d:56:35:40:a3:8a:11:2b:c9:07:8f:a0:9b:4e: af:34:02:c7:f3:ab:81:84:e6:ec:c5:df:5f:88:d9:f5:ba:eb: 8a:1d:e8:ad:bd:ea:ee:97:1f:ae:a0:45:cb:ad:34:26:ed:1f: 54:d5:0a:c1:b7:21:ca:aa:18:42:fd:51:22:c5:11:18:1b:a5: 77:52:08:bb:ec:8e:4b:d5:7c:bb:b8:51:f2:5f:14:ad:3c:9f: 02:82:5d:7c:dc:ad:ff:8c:ec:c2:0f:85:25:a5:d0:be:26:5e: 0e:06:fb:01:f1:a2:85:b2:0b:e0:34:bc:13:35:8e:47:d0:a2: a8:fb:a6:14:26:e4:42:1a:a1:0e:bc:8f:40:27:8f:a9:4f:c5: ca:b9:39:ce:6b:4b:58:b7:e1:c8:69:cd:d6:0b:cc:fc:e6:c1: 23:3b:bd:82:c4:d2:4f:60:c3:e3:c1:f5:a4:8d:10:af:dd:e1: 6b:cb:28:96:90:98:48:a5:d0:7f:d0:2b:f8:d2:f1:94:24:42: 36:6e:17:e0:ba:9e:97:74:ba:f8:c8:db:3a:70:f9:0c:3a:be: 7c:84:66:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUsHUILC9n+9FBx3kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI0MDMxMTEzMDAzMVoXDTI0MDYwOTEzMDAzMVowLzEtMCsGA1UEAxMk N2E0MmViOTgtZmM0Zi00MDIzLTgyNGUtNDBjZDk0MTU3MWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5H5KXP+DYHP7PkIETDHfULWFTWmeytH2Sat EugyEmgB7IPs17t0X+5sIWErdv8yVKx+D83A6mD091sGlNSdXubR6fDxpNfZROAR eQm7iXv2c8MzQTxT0TuJ5HrF0NGMKAqV+NfmucsvSxWmfNb5ChoOShxlGRaoAoj0 VIrNOzT/YcUB8dl0vcEyWk3EnnRtFXbi4sL+Rh/HXo5a8T9sQajde9apg04eTMD3 5lQvN0egaCwEcN1Wc1yHZwn693dCRLzJ8KppyijA5wTlGvjDl6TjoGZQYGDMMe8g Rh1plmH9G6p8FgUNZ6j55my8uTtByw46sZnb+HEVATr7KfhiewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL5eDuyW1v5ZOzk/VcGk//LJV8W/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMDI1YjA5OWUtMjA1Ni0z MDgyLTlkNzMtNzVkOTI5NjI5NTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqFdYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABjsBDvlip6ZkeoyCRVKaEV4XwtTKi2awm+e230lS9w1suCARomkwLGd VjVAo4oRK8kHj6CbTq80Asfzq4GE5uzF31+I2fW664od6K296u6XH66gRcutNCbt H1TVCsG3IcqqGEL9USLFERgbpXdSCLvsjkvVfLu4UfJfFK08nwKCXXzcrf+M7MIP hSWl0L4mXg4G+wHxooWyC+A0vBM1jkfQoqj7phQm5EIaoQ68j0Anj6lPxcq5Oc5r S1i34chpzdYLzPzmwSM7vYLE0k9gw+PB9aSNEK/d4WvLKJaQmEil0H/QK/jS8ZQk QjZuF+C6npd0uvjI2zpw+Qw6vnyEZig= -----END CERTIFICATE-----Generated at Sat May 18 01:43:21 2024 by rpki-client on console-fra.rpki-client.org