$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0e3da453-af8a-39ea-bf9c-ca08a4c4d08b.roa File: 0e3da453-af8a-39ea-bf9c-ca08a4c4d08b.roa (raw, json) Hash identifier: cwACjxSnQ/Hre5skXFFJfwH86KKvREbzxtWpdmz0VbM= Subject key identifier: CB:E3:3A:61:3E:A0:C9:AA:3B:49:1B:CF:1E:70:D3:00:97:DA:27:55 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858491246B8F771B949CC06848380 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0e3da453-af8a-39ea-bf9c-ca08a4c4d08b.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 202 IP address blocks: 168.87.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:b8:f7:71:b9:49:cc:06:84:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=db800450-8e7b-49b4-93a6-fdc87a3e3146 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:c8:65:ec:05:c2:09:d8:f0:b2:51:cb:ea:6e: ce:8d:12:bb:04:fb:42:fa:97:3c:4e:4d:c2:93:c6: d8:65:71:43:47:2f:b5:2c:89:f4:df:4f:ef:09:ec: 8e:fe:fb:bb:15:38:47:8e:7b:c5:24:d1:fc:d6:2f: f3:af:0e:76:eb:29:a0:92:0e:6b:8c:0d:47:1f:10: 8e:59:5c:cd:68:66:bb:e9:81:56:f3:43:67:f3:5a: 97:e7:65:7f:a4:e9:6e:a5:da:51:9e:b3:f8:f3:42: 36:3a:59:d3:3f:28:fb:9f:12:79:0b:0a:52:ee:3e: 0d:5b:6a:eb:c8:94:8c:41:e1:77:9f:45:15:9d:d8: 0a:a2:b5:d2:34:eb:9a:fc:1f:1a:5b:0a:16:b6:f0: 05:9a:1e:11:b4:3b:c7:f4:c2:d6:c7:18:af:d3:9d: 20:cc:a9:0c:cd:7b:f4:af:0d:64:b3:11:9f:6f:41: 0a:98:42:65:6b:07:2e:d5:ef:50:cf:0a:05:88:40: c6:4c:06:48:4d:aa:01:2b:2b:df:94:76:c8:8c:9e: 86:1c:15:43:28:6c:39:3d:98:ba:60:f6:4f:9f:88: e7:92:40:d8:6f:c6:5e:92:67:53:bd:07:b1:f3:45: 97:b6:10:1c:f9:35:61:c3:b6:37:84:ca:37:ec:4a: e5:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:E3:3A:61:3E:A0:C9:AA:3B:49:1B:CF:1E:70:D3:00:97:DA:27:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0e3da453-af8a-39ea-bf9c-ca08a4c4d08b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:95:c6:f1:18:b1:5c:e9:70:53:36:b2:54:77:55:d1:e9:73: f9:d0:ec:71:c7:b5:18:76:4d:7b:c0:17:2e:68:9d:f1:51:0b: 1f:a5:39:3f:8f:a5:3d:06:19:fc:91:36:13:ad:12:bb:d1:71: 26:ad:6c:ab:06:86:2d:67:93:18:9e:95:12:82:e5:76:9a:cf: e0:92:84:01:c8:d7:03:cc:e5:9a:66:a5:cc:0f:0f:00:44:1f: cb:ca:8a:8e:e6:5b:68:41:ee:79:83:9b:15:7e:8b:77:53:d8: 3b:bc:21:13:cf:63:33:09:31:8d:ac:b7:8d:58:b2:dc:e4:6a: 6c:8d:2c:a2:9a:e0:65:ed:54:22:b3:bd:d4:cc:2e:e0:f4:23: 60:14:70:16:e5:d4:ad:4d:d9:aa:4a:e0:df:2a:a3:25:66:fd: 29:58:ef:3e:a3:25:d0:68:13:71:14:26:11:bf:7d:39:be:11: 5a:f8:a5:95:f7:be:e2:fe:3d:ff:23:45:a7:a2:09:b0:8a:52: 33:f3:ed:27:dd:78:28:e7:e7:46:90:90:35:fc:cd:7e:fa:c0: 20:14:9c:c1:cc:c5:6b:48:30:86:c6:92:5f:19:dc:c3:a9:e2: 04:af:a8:5b:fe:7a:e6:3b:98:13:a5:3b:54:d9:ac:3b:53:72: ff:35:9f:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRrj3cblJzAaEg4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk ZGI4MDA0NTAtOGU3Yi00OWI0LTkzYTYtZmRjODdhM2UzMTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9chl7AXCCdjwslHL6m7OjRK7BPtC+pc8Tk3C k8bYZXFDRy+1LIn030/vCeyO/vu7FThHjnvFJNH81i/zrw526ymgkg5rjA1HHxCO WVzNaGa76YFW80Nn81qX52V/pOlupdpRnrP480I2OlnTPyj7nxJ5CwpS7j4NW2rr yJSMQeF3n0UVndgKorXSNOua/B8aWwoWtvAFmh4RtDvH9MLWxxiv050gzKkMzXv0 rw1ksxGfb0EKmEJlawcu1e9QzwoFiEDGTAZITaoBKyvflHbIjJ6GHBVDKGw5PZi6 YPZPn4jnkkDYb8ZekmdTvQex80WXthAc+TVhw7Y3hMo37ErlowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMvjOmE+oMmqO0kbzx5w0wCX2idVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMGUzZGE0NTMtYWY4YS0z OWVhLWJmOWMtY2EwOGE0YzRkMDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFcYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFSVxvEYsVzpcFM2slR3VdHpc/nQ7HHHtRh2TXvAFy5onfFRCx+lOT+P pT0GGfyRNhOtErvRcSatbKsGhi1nkxielRKC5Xaaz+CShAHI1wPM5ZpmpcwPDwBE H8vKio7mW2hB7nmDmxV+i3dT2Du8IRPPYzMJMY2st41YstzkamyNLKKa4GXtVCKz vdTMLuD0I2AUcBbl1K1N2apK4N8qoyVm/SlY7z6jJdBoE3EUJhG/fTm+EVr4pZX3 vuL+Pf8jRaeiCbCKUjPz7SfdeCjn50aQkDX8zX76wCAUnMHMxWtIMIbGkl8Z3MOp 4gSvqFv+euY7mBOlO1TZrDtTcv81n/A= -----END CERTIFICATE-----Generated at Sat Apr 5 16:39:57 2025 by rpki-client