$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/296978a2-0497-36c1-b3eb-fd6da0b5f567.roa File: 296978a2-0497-36c1-b3eb-fd6da0b5f567.roa (raw, json) Hash identifier: Y5K2k16zze3uCTCoHSmQs54fPuWBSAReuYK+9jHe5vU= Subject key identifier: 69:9F:15:D3:5B:67:F1:8F:5A:8C:EC:00:F7:1C:FD:02:59:7C:DA:33 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285847CA3F4374BD158E6074414580 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/296978a2-0497-36c1-b3eb-fd6da0b5f567.roa Signing time: Wed 06 Nov 2024 14:00:41 +0000 ROA not before: Wed 06 Nov 2024 14:00:41 +0000 ROA not after: Tue 04 Feb 2025 14:00:41 +0000 asID: 203 IP address blocks: 168.87.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ca:3f:43:74:bd:15:8e:60:74:41:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Nov 6 14:00:41 2024 GMT Not After : Feb 4 14:00:41 2025 GMT Subject: CN=f4da6de1-92c8-4ebd-999f-632fdb832f82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:6b:1e:f6:12:5e:08:47:31:81:70:82:8d:6c: 85:c6:51:7e:07:db:95:77:d1:2a:8a:ff:ce:ce:a5: 3d:f7:bb:4a:34:04:6a:c2:40:70:c0:29:2e:b6:87: 0b:97:0b:26:97:3f:60:61:ac:6c:27:4b:a7:d6:1a: 24:d9:f2:b4:4c:a1:56:a3:a4:47:ef:38:5c:27:19: 3c:11:e9:ad:52:f8:a4:2a:1d:68:05:81:68:17:15: cd:89:e3:3d:42:eb:f9:cb:0a:60:0f:c0:74:98:af: 37:fe:c5:49:2c:76:49:43:1d:36:c2:bf:a0:7b:ce: 41:f0:7b:b5:d0:ff:55:56:fd:ee:4c:35:70:4d:0a: d6:b2:4e:5a:59:9d:30:da:b9:d5:de:76:f1:38:75: c2:01:0e:2d:e9:ba:e9:fb:6c:09:ae:06:6b:38:23: 46:19:96:13:7b:c6:53:b5:74:03:38:ed:de:11:06: f1:42:f0:c7:85:e2:7c:ae:ae:8f:0c:d6:b0:74:92: 81:6d:d8:56:e7:48:52:67:be:79:6e:49:fb:8d:89: 9c:31:82:ba:09:0d:52:e0:13:87:67:b9:21:c1:2e: a8:11:9c:c3:01:40:60:3f:2d:21:e5:56:a1:a8:b2: 64:b7:9a:fb:02:60:6d:86:0a:4d:65:d7:56:aa:67: 80:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:9F:15:D3:5B:67:F1:8F:5A:8C:EC:00:F7:1C:FD:02:59:7C:DA:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/296978a2-0497-36c1-b3eb-fd6da0b5f567.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:3a:26:1c:5e:05:44:20:5a:21:27:66:d2:6a:da:61:fd:e3: 49:30:c8:f7:08:32:e2:97:2c:65:ac:57:ce:f5:b1:d4:4a:74: 42:d8:18:a3:09:fa:f6:87:e7:a5:0a:29:2f:1d:78:c4:df:7d: a2:9d:16:ee:55:59:89:62:c6:3c:ac:7c:15:40:ad:92:0f:f1: b6:18:ec:99:2f:c2:6e:22:17:2a:40:e4:65:1e:54:3f:16:22: e7:83:89:48:4f:b7:24:ac:99:14:76:5d:a0:d3:3b:d2:14:71: 1f:e9:c1:07:39:08:cf:ba:8b:4b:62:72:66:7a:b4:bd:c7:3f: c5:99:a0:c3:26:44:aa:ca:ed:6a:75:a1:fc:59:5c:5f:c6:20: 98:1d:b2:5b:df:b8:85:01:9a:b6:7f:ae:01:1a:d4:a3:1a:66: 40:03:15:01:5f:50:5c:3b:3d:7e:c8:fe:9d:f4:b2:96:82:8f: f7:31:3a:b7:65:ba:ba:e2:e7:23:56:05:3d:c3:a5:f7:a2:40: 1e:13:40:ff:01:d7:1b:3f:2d:ba:65:69:25:2a:22:c3:1d:49: 17:60:82:b5:86:7f:01:24:76:63:2c:31:85:23:d1:8e:2c:74: 72:2e:b9:8f:47:ae:a1:5e:54:70:29:6c:e4:3c:a9:e8:90:62: 02:3c:6b:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfKP0N0vRWOYHRBRYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI0MTEwNjE0MDA0MVoXDTI1MDIwNDE0MDA0MVowLzEtMCsGA1UEAxMk ZjRkYTZkZTEtOTJjOC00ZWJkLTk5OWYtNjMyZmRiODMyZjgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGse9hJeCEcxgXCCjWyFxlF+B9uVd9Eqiv/O zqU997tKNARqwkBwwCkutocLlwsmlz9gYaxsJ0un1hok2fK0TKFWo6RH7zhcJxk8 EemtUvikKh1oBYFoFxXNieM9Quv5ywpgD8B0mK83/sVJLHZJQx02wr+ge85B8Hu1 0P9VVv3uTDVwTQrWsk5aWZ0w2rnV3nbxOHXCAQ4t6brp+2wJrgZrOCNGGZYTe8ZT tXQDOO3eEQbxQvDHheJ8rq6PDNawdJKBbdhW50hSZ755bkn7jYmcMYK6CQ1S4BOH Z7khwS6oEZzDAUBgPy0h5VahqLJkt5r7AmBthgpNZddWqmeA7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGmfFdNbZ/GPWozsAPcc/QJZfNozMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMjk2OTc4YTItMDQ5Ny0z NmMxLWIzZWItZmQ2ZGEwYjVmNTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqFdIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABU6JhxeBUQgWiEnZtJq2mH940kwyPcIMuKXLGWsV871sdRKdELYGKMJ +vaH56UKKS8deMTffaKdFu5VWYlixjysfBVArZIP8bYY7Jkvwm4iFypA5GUeVD8W IueDiUhPtySsmRR2XaDTO9IUcR/pwQc5CM+6i0ticmZ6tL3HP8WZoMMmRKrK7Wp1 ofxZXF/GIJgdslvfuIUBmrZ/rgEa1KMaZkADFQFfUFw7PX7I/p30spaCj/cxOrdl urri5yNWBT3DpfeiQB4TQP8B1xs/LbplaSUqIsMdSRdggrWGfwEkdmMsMYUj0Y4s dHIuuY9HrqFeVHApbOQ8qeiQYgI8a2E= -----END CERTIFICATE-----Generated at Thu Nov 21 21:48:43 2024 by rpki-client on console-ams.rpki-client.org