$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8843c9af-14b6-3c5a-92fe-77b2a6d68e34.roa File: 8843c9af-14b6-3c5a-92fe-77b2a6d68e34.roa (raw, json) Hash identifier: C1+9pTKuwUJOwDT/rfBsfyGpXHybtcmrPmTwfESlKgo= Subject key identifier: 69:2A:36:70:29:6D:CA:4A:97:CC:90:03:B4:E6:2A:DA:F7:95:DA:02 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285845C8739E225BA39C78E166A680 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8843c9af-14b6-3c5a-92fe-77b2a6d68e34.roa Signing time: Mon 06 May 2024 13:00:34 +0000 ROA not before: Mon 06 May 2024 13:00:34 +0000 ROA not after: Sun 04 Aug 2024 13:00:34 +0000 asID: 202 IP address blocks: 168.87.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:c8:73:9e:22:5b:a3:9c:78:e1:66:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: May 6 13:00:34 2024 GMT Not After : Aug 4 13:00:34 2024 GMT Subject: CN=b16acf22-fda7-441a-b4e3-abfae081295b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3b:fc:80:52:eb:64:6b:c0:b9:83:2d:c3:dc: 95:d7:a9:00:42:8c:ef:96:f5:7d:ac:bf:c6:58:dc: 46:72:2e:c3:11:28:e5:da:0e:73:d5:32:22:2f:4f: 0a:76:b7:69:45:fa:f5:8f:2e:bb:16:2d:ea:9d:ab: cb:58:9d:c3:84:12:27:41:92:8f:98:ac:76:4d:1b: 44:9b:34:c7:4e:18:be:d2:de:69:b7:c6:64:58:6d: 5d:58:a2:4b:ea:16:f0:14:f7:7f:d4:95:b0:44:5c: 25:04:99:a6:e9:b4:cb:4e:41:f2:c4:f9:68:17:42: c6:4b:df:35:78:ac:a8:9b:a1:95:6a:14:37:ff:18: f4:af:a0:3b:4b:a9:f0:58:d3:07:77:e4:03:6f:dd: 98:2f:a5:79:00:0f:bf:23:ee:27:21:32:b6:e9:dc: db:c8:79:8d:dd:92:63:ff:5f:e9:de:63:1b:a1:fc: 44:18:f7:8c:10:98:f9:80:46:5f:72:7b:db:a1:11: 06:f6:fa:3b:56:8d:a2:cf:3b:61:71:6d:81:5e:f3: c8:e7:86:a3:00:75:6d:aa:bd:57:81:9a:db:80:1d: c5:30:e2:f5:61:64:01:45:1f:48:de:2f:bf:bd:f0: 22:f6:d0:10:27:88:8e:48:56:8a:fe:c5:6c:25:ce: e3:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:2A:36:70:29:6D:CA:4A:97:CC:90:03:B4:E6:2A:DA:F7:95:DA:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8843c9af-14b6-3c5a-92fe-77b2a6d68e34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:34:4e:9a:fe:a0:62:02:f2:c4:8b:c6:f6:d1:62:fc:93:e9: 71:97:89:69:a8:88:c5:d3:51:79:b3:79:74:21:a1:c5:af:2c: 00:4d:e4:c5:d7:69:d5:c6:ef:19:66:44:5c:fb:74:81:70:b9: fb:18:49:03:87:62:b0:23:53:96:7b:70:33:1c:26:b8:2e:ed: 75:a2:cf:79:d9:27:6a:11:0d:a8:fd:94:ee:c1:91:1c:c4:97: 99:c5:4c:0d:df:29:5a:90:4f:c5:76:63:56:28:fb:d7:66:87: df:e6:5f:18:47:e8:e4:b3:cc:53:b3:3c:e4:14:c9:ec:09:41: 64:ca:8b:25:bc:32:c3:9d:2e:cf:2d:43:28:4f:7d:6b:58:e7: 8d:ee:cb:14:e9:3b:18:eb:21:61:61:c9:60:da:e1:18:7e:0f: 70:df:c2:e8:2f:da:54:36:85:26:23:7a:91:f1:18:67:b5:a4: 46:30:d4:e1:60:50:41:fd:ae:25:e2:ce:58:11:7c:21:b5:24: a5:65:24:fb:4d:70:9d:fc:11:90:42:82:9f:07:d1:45:46:01: 63:61:07:a0:54:ed:2d:b5:12:22:5a:34:ec:32:bc:ab:b3:76: a6:9c:08:5d:63:03:bf:99:9f:6b:6d:6d:c9:fe:7e:bc:e6:0b: 4d:dc:26:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXIc54iW6OceOFmpoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI0MDUwNjEzMDAzNFoXDTI0MDgwNDEzMDAzNFowLzEtMCsGA1UEAxMk YjE2YWNmMjItZmRhNy00NDFhLWI0ZTMtYWJmYWUwODEyOTViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujv8gFLrZGvAuYMtw9yV16kAQozvlvV9rL/G WNxGci7DESjl2g5z1TIiL08KdrdpRfr1jy67Fi3qnavLWJ3DhBInQZKPmKx2TRtE mzTHThi+0t5pt8ZkWG1dWKJL6hbwFPd/1JWwRFwlBJmm6bTLTkHyxPloF0LGS981 eKyom6GVahQ3/xj0r6A7S6nwWNMHd+QDb92YL6V5AA+/I+4nITK26dzbyHmN3ZJj /1/p3mMbofxEGPeMEJj5gEZfcnvboREG9vo7Vo2izzthcW2BXvPI54ajAHVtqr1X gZrbgB3FMOL1YWQBRR9I3i+/vfAi9tAQJ4iOSFaK/sVsJc7jWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGkqNnApbcpKl8yQA7TmKtr3ldoCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvODg0M2M5YWYtMTRiNi0z YzVhLTkyZmUtNzdiMmE2ZDY4ZTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqFcAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEs0Tpr+oGIC8sSLxvbRYvyT6XGXiWmoiMXTUXmzeXQhocWvLABN5MXX adXG7xlmRFz7dIFwufsYSQOHYrAjU5Z7cDMcJrgu7XWiz3nZJ2oRDaj9lO7BkRzE l5nFTA3fKVqQT8V2Y1Yo+9dmh9/mXxhH6OSzzFOzPOQUyewJQWTKiyW8MsOdLs8t QyhPfWtY543uyxTpOxjrIWFhyWDa4Rh+D3Dfwugv2lQ2hSYjepHxGGe1pEYw1OFg UEH9riXizlgRfCG1JKVlJPtNcJ38EZBCgp8H0UVGAWNhB6BU7S21EiJaNOwyvKuz dqacCF1jA7+Zn2ttbcn+frzmC03cJmk= -----END CERTIFICATE-----Generated at Sat May 18 01:43:22 2024 by rpki-client on console-fra.rpki-client.org