$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/00f6a963-b32a-3889-b9fd-e220b34242ca.roa File: 00f6a963-b32a-3889-b9fd-e220b34242ca.roa (raw, json) Hash identifier: Suv1EjRjJmsKhT5VMG3dt32KK7rTLaDYfff1LBDUmYc= Subject key identifier: 0E:02:F8:B2:4C:6C:EA:57:9B:C8:38:0B:2B:9E:C1:84:14:19:34:8F Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285848B8F0C4A21A6F7BC6CA0D8800 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/00f6a963-b32a-3889-b9fd-e220b34242ca.roa Signing time: Fri 31 Jan 2025 02:00:39 +0000 ROA not before: Fri 31 Jan 2025 02:00:39 +0000 ROA not after: Thu 01 May 2025 01:00:39 +0000 asID: 203 IP address blocks: 168.87.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b8:f0:c4:a2:1a:6f:7b:c6:ca:0d:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jan 31 02:00:39 2025 GMT Not After : May 1 01:00:39 2025 GMT Subject: CN=d84606f8-1c61-4ef2-8b4c-0c59f48d8967 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c5:53:17:25:80:4a:1f:78:71:db:60:80:8c: 60:11:99:11:fb:a6:48:71:e8:d2:6c:3e:1e:75:05: dd:7f:91:13:cb:5e:b6:04:20:e2:72:9b:48:f0:f8: b3:fc:99:25:fd:1f:a1:e3:9e:10:ab:a6:4f:44:60: 6e:40:f5:00:b6:36:88:35:45:3b:c5:6a:66:74:7a: fb:97:b8:98:cc:29:ca:e7:ff:21:f4:44:4f:c0:47: c9:53:4a:70:eb:19:5b:be:ce:c0:aa:70:6f:12:0b: 48:65:56:ba:aa:a2:3e:fc:70:f0:20:d5:c7:26:64: 50:8f:b7:6c:72:d9:d6:e3:14:35:96:ca:11:8f:01: f2:f4:d2:a0:20:d2:4d:db:aa:02:b8:85:3a:f5:9e: 99:54:bd:e0:20:f3:5d:d3:5d:21:f1:58:77:c9:f8: 7a:6d:f4:7d:0c:7e:18:db:f5:dc:9d:73:da:4e:a2: 27:65:c3:11:99:3f:a6:83:c7:9d:12:aa:43:66:d0: cc:8b:19:63:64:35:66:26:3b:ff:41:ec:4a:3c:ec: b7:d5:9a:f8:c1:56:a6:75:00:39:87:71:c8:56:b4: af:cc:5e:0b:33:5e:0f:1f:ab:4a:3b:75:a6:94:2b: a6:18:71:20:bf:b1:ec:ca:c9:20:fe:4f:f1:33:50: d7:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:02:F8:B2:4C:6C:EA:57:9B:C8:38:0B:2B:9E:C1:84:14:19:34:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/00f6a963-b32a-3889-b9fd-e220b34242ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:de:43:f3:88:a2:f6:10:f7:d1:cf:51:d7:20:82:b7:c7:89: 3b:6f:98:7c:c7:96:bd:a3:ce:de:d9:c7:4c:24:ff:cd:eb:69: 84:dd:ee:46:bc:2e:56:d5:66:24:d5:18:63:a6:52:75:8e:af: 4d:1b:25:f1:ed:c8:0f:3e:80:56:03:69:02:35:d5:45:2c:4a: 61:38:b1:0e:71:f0:5e:1a:08:a5:3f:f4:ad:67:48:93:d2:8e: 02:c0:82:5c:87:80:36:aa:32:a4:b9:a1:4b:a5:ff:27:ac:65: 21:e0:f5:9e:d4:10:75:1e:ab:5b:b9:3e:32:ba:ec:f7:6d:1f: b7:67:58:14:f1:7f:0f:67:a8:8a:5d:cd:27:86:a1:ab:f3:64: ef:02:72:a4:d4:fe:1e:be:e5:53:2c:47:47:70:44:a5:4b:21: 0c:ae:7f:85:10:1e:b7:69:f1:35:bd:c9:1b:7e:49:9b:bc:03: 63:ee:7d:af:06:e5:e5:44:a3:3c:dc:ff:48:64:ff:d1:54:e6: 19:c6:61:7e:94:70:de:b9:95:f2:f1:1d:d2:09:d0:9b:65:07: 4b:5e:eb:7e:33:3e:43:a8:62:6c:ab:56:b9:e5:78:cf:c4:fc: 0e:5b:dc:97:55:57:7b:eb:74:fe:98:11:94:39:aa:c6:69:8c: e7:62:6d:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi48MSiGm97xsoNiAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDEzMTAyMDAzOVoXDTI1MDUwMTAxMDAzOVowLzEtMCsGA1UEAxMk ZDg0NjA2ZjgtMWM2MS00ZWYyLThiNGMtMGM1OWY0OGQ4OTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMVTFyWASh94cdtggIxgEZkR+6ZIcejSbD4e dQXdf5ETy162BCDicptI8Piz/Jkl/R+h454Qq6ZPRGBuQPUAtjaINUU7xWpmdHr7 l7iYzCnK5/8h9ERPwEfJU0pw6xlbvs7AqnBvEgtIZVa6qqI+/HDwINXHJmRQj7ds ctnW4xQ1lsoRjwHy9NKgINJN26oCuIU69Z6ZVL3gIPNd010h8Vh3yfh6bfR9DH4Y 2/XcnXPaTqInZcMRmT+mg8edEqpDZtDMixljZDVmJjv/QexKPOy31Zr4wVamdQA5 h3HIVrSvzF4LM14PH6tKO3WmlCumGHEgv7Hsyskg/k/xM1DX+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA4C+LJMbOpXm8g4CyuewYQUGTSPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMDBmNmE5NjMtYjMyYS0z ODg5LWI5ZmQtZTIyMGIzNDI0MmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFeoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzeQ/OIovYQ99HPUdcggrfHiTtvmHzHlr2jzt7Zx0wk/83raYTd7ka8 LlbVZiTVGGOmUnWOr00bJfHtyA8+gFYDaQI11UUsSmE4sQ5x8F4aCKU/9K1nSJPS jgLAglyHgDaqMqS5oUul/yesZSHg9Z7UEHUeq1u5PjK67PdtH7dnWBTxfw9nqIpd zSeGoavzZO8CcqTU/h6+5VMsR0dwRKVLIQyuf4UQHrdp8TW9yRt+SZu8A2Pufa8G 5eVEozzc/0hk/9FU5hnGYX6UcN65lfLxHdIJ0JtlB0te634zPkOoYmyrVrnleM/E /A5b3JdVV3vrdP6YEZQ5qsZpjOdibe0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:49:30 2025 by rpki-client