$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1ac748f2-d4da-34a0-9d25-57e210d45db7.roa File: 1ac748f2-d4da-34a0-9d25-57e210d45db7.roa (raw, json) Hash identifier: eJCccXwRT8KaflvgHsIQjj/FjucB4WqT6Cf8Xb1kwDQ= Subject key identifier: B9:A6:BF:2A:08:2E:48:61:3B:BB:BB:C1:57:57:9D:21:09:36:6D:F9 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584832F01E1B168C8D78682A9280 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1ac748f2-d4da-34a0-9d25-57e210d45db7.roa Signing time: Sat 14 Dec 2024 02:00:39 +0000 ROA not before: Sat 14 Dec 2024 02:00:39 +0000 ROA not after: Fri 14 Mar 2025 01:00:39 +0000 asID: 3360 IP address blocks: 168.87.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:32:f0:1e:1b:16:8c:8d:78:68:2a:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Dec 14 02:00:39 2024 GMT Not After : Mar 14 01:00:39 2025 GMT Subject: CN=c4642b54-a6b8-4c5d-a0a1-2d9dd8bda528 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1a:c2:61:32:8b:80:35:62:f0:99:30:22:49: f6:f9:82:00:13:8d:aa:f9:ea:b3:35:5b:14:cf:0b: d0:ab:6f:2a:c8:f9:e5:70:72:10:9a:ad:f5:66:b3: 17:6f:70:86:d0:cb:01:45:a3:76:9e:40:7c:3b:0e: 6f:a8:0c:b9:85:4c:6b:73:e7:06:e4:61:ad:c4:e0: ca:90:fa:bf:c6:dc:49:5c:86:5c:cd:48:a1:5e:1b: f9:be:7a:08:91:d3:3e:9d:f1:f6:3e:9e:48:29:d7: a3:98:76:8c:92:10:de:86:4c:b3:34:e5:33:81:5a: 58:39:d5:a2:0e:fb:34:07:78:48:07:8e:37:9d:87: 2f:11:1f:00:72:c4:cd:d5:73:bc:ce:ed:d4:c8:9f: 43:5d:97:14:ad:2d:a8:09:d6:99:17:54:c4:78:53: c2:1c:5d:45:5e:ca:d7:68:ca:d2:f6:e3:43:90:c7: e4:13:21:a3:e9:29:5d:dd:9e:75:b7:18:83:f6:37: ae:b7:d0:e6:08:65:76:71:27:88:37:64:f6:45:15: 3c:9c:ce:97:af:a0:24:ce:3b:49:59:4f:17:2f:ce: fd:9f:cc:65:6a:6f:32:d4:05:5d:6b:29:1f:77:d9: 0c:94:3f:19:cd:c1:9e:23:cd:ab:41:77:33:00:ce: d0:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:A6:BF:2A:08:2E:48:61:3B:BB:BB:C1:57:57:9D:21:09:36:6D:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1ac748f2-d4da-34a0-9d25-57e210d45db7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:1f:0c:70:f0:47:23:d2:f5:e8:94:91:e2:c3:95:95:99:b9: 0c:bd:ee:f5:52:80:d1:1c:ac:d5:57:6a:62:1a:7c:d4:91:99: 5c:42:43:16:dc:19:ab:cc:5e:66:08:3f:b6:d4:1f:d3:13:de: 14:1d:1e:01:61:d8:a4:a5:1a:1e:d1:01:e7:3a:0a:04:29:7a: dc:00:18:cb:b4:1f:21:4c:c4:77:83:45:00:6c:ae:6c:6b:b3: a3:88:41:5d:f6:5f:3f:35:64:b4:7a:0f:19:d5:d7:90:9c:21: ce:a7:4a:62:1a:be:4d:c2:63:b5:82:73:a7:6b:c0:58:42:a4: 18:e1:3b:37:3b:37:2c:61:40:ae:29:62:7f:09:03:62:ac:df: 2d:c7:c1:df:d3:7f:13:e6:4f:8e:42:43:02:6d:1a:e4:df:a8: 6c:f7:02:0a:bc:7a:20:b5:b3:bc:a9:2e:7d:06:ef:3b:2a:3e: cf:96:e2:d4:f9:e8:4b:ef:40:dc:73:be:7e:71:35:52:ad:a7: f2:b9:0a:7e:5a:b1:f1:37:f4:00:43:ee:3d:68:80:e0:8a:69: 8c:17:c1:fc:2e:a7:0e:84:06:6f:4e:ab:04:4c:a7:1e:1c:db: e1:ff:6d:56:ed:5c:0e:b2:4b:4a:e0:78:49:df:b5:0b:d8:52: 9a:57:42:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgy8B4bFoyNeGgqkoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI0MTIxNDAyMDAzOVoXDTI1MDMxNDAxMDAzOVowLzEtMCsGA1UEAxMk YzQ2NDJiNTQtYTZiOC00YzVkLWEwYTEtMmQ5ZGQ4YmRhNTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBrCYTKLgDVi8JkwIkn2+YIAE42q+eqzNVsU zwvQq28qyPnlcHIQmq31ZrMXb3CG0MsBRaN2nkB8Ow5vqAy5hUxrc+cG5GGtxODK kPq/xtxJXIZczUihXhv5vnoIkdM+nfH2Pp5IKdejmHaMkhDehkyzNOUzgVpYOdWi Dvs0B3hIB443nYcvER8AcsTN1XO8zu3UyJ9DXZcUrS2oCdaZF1TEeFPCHF1FXsrX aMrS9uNDkMfkEyGj6Sld3Z51txiD9jeut9DmCGV2cSeIN2T2RRU8nM6Xr6AkzjtJ WU8XL879n8xlam8y1AVdaykfd9kMlD8ZzcGeI82rQXczAM7QIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLmmvyoILkhhO7u7wVdXnSEJNm35MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMWFjNzQ4ZjItZDRkYS0z NGEwLTlkMjUtNTdlMjEwZDQ1ZGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFeCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGcfDHDwRyPS9eiUkeLDlZWZuQy97vVSgNEcrNVXamIafNSRmVxCQxbc GavMXmYIP7bUH9MT3hQdHgFh2KSlGh7RAec6CgQpetwAGMu0HyFMxHeDRQBsrmxr s6OIQV32Xz81ZLR6DxnV15CcIc6nSmIavk3CY7WCc6drwFhCpBjhOzc7NyxhQK4p Yn8JA2Ks3y3Hwd/TfxPmT45CQwJtGuTfqGz3Agq8eiC1s7ypLn0G7zsqPs+W4tT5 6EvvQNxzvn5xNVKtp/K5Cn5asfE39ABD7j1ogOCKaYwXwfwupw6EBm9OqwRMpx4c 2+H/bVbtXA6yS0rgeEnftQvYUppXQiE= -----END CERTIFICATE-----Generated at Sun Feb 16 15:35:37 2025 by rpki-client