$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2b8b37d4-6402-313e-8eec-4b3538fb036e.roa File: 2b8b37d4-6402-313e-8eec-4b3538fb036e.roa (raw, json) Hash identifier: mJozHkYDHYKJZWFdBfuBUUsUlGdbn6F3sGGK0r8gOPk= Subject key identifier: F1:2A:BE:B8:CB:A1:12:79:2E:C7:07:B1:68:13:8E:EB:00:E1:02:3E Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285847CE6F4A6DF76B7B4A2BCD1380 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2b8b37d4-6402-313e-8eec-4b3538fb036e.roa Signing time: Fri 08 Nov 2024 02:00:27 +0000 ROA not before: Fri 08 Nov 2024 02:00:27 +0000 ROA not after: Thu 06 Feb 2025 02:00:27 +0000 asID: 3360 IP address blocks: 168.87.146.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ce:6f:4a:6d:f7:6b:7b:4a:2b:cd:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Nov 8 02:00:27 2024 GMT Not After : Feb 6 02:00:27 2025 GMT Subject: CN=5ec617bb-1c11-4e16-b294-c0a9a2a83f58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:cb:ba:7e:3b:df:63:da:14:7e:5d:17:be:7f: 10:39:02:8c:ba:0c:08:63:ea:e0:50:4a:82:3e:fb: 36:7b:60:9b:c4:3a:af:ba:fa:7e:4b:bc:2b:28:d1: f8:e1:50:32:0e:29:29:d0:90:05:d2:23:e8:7b:4e: d7:25:df:6f:1d:77:b4:a5:3f:90:c7:fd:97:07:b0: 96:e7:cd:7a:b6:02:01:f4:e2:30:bf:4e:f8:3d:f4: 1c:04:5e:70:e9:f6:22:ec:51:72:64:37:ac:eb:fe: aa:d1:61:36:ad:25:99:72:c2:df:f6:50:98:2d:22: d7:9c:95:2d:dd:ad:bd:f3:24:22:e4:1b:c2:77:83: 23:e8:f1:67:48:69:be:be:7d:3f:5c:7b:17:9d:3d: da:7d:d1:9e:cc:d5:ed:9c:29:f8:18:60:3f:bd:ee: 7d:e6:12:d7:7f:13:31:27:ba:47:21:63:fd:52:4c: e6:d0:8f:73:cd:ec:f8:b7:20:fd:a0:e0:6a:82:bf: a2:81:a7:5c:9a:6d:93:72:fa:3f:82:87:99:40:eb: 69:02:2c:77:7b:8c:35:4f:ca:04:04:ca:4c:fd:e7: 3d:49:42:5b:fa:fa:37:99:be:0d:3f:97:4d:0b:7f: b8:87:7a:cd:c3:0b:1b:a3:64:73:95:d0:d9:59:f7: e3:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:2A:BE:B8:CB:A1:12:79:2E:C7:07:B1:68:13:8E:EB:00:E1:02:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2b8b37d4-6402-313e-8eec-4b3538fb036e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.146.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:51:81:95:01:28:42:26:49:6e:ff:fd:50:9e:98:b4:5f:dd: 15:97:7a:b2:2d:81:1b:16:6e:b1:bc:e0:e6:99:07:7f:73:a7: 8a:15:65:8f:04:4f:9d:6f:17:23:e8:4d:97:56:46:c5:4e:ad: 38:78:06:8b:65:e0:d7:02:b7:87:18:e8:db:b5:6c:75:f4:92: 0f:85:4a:d0:ca:b3:b2:11:87:cb:39:d4:b2:10:32:3e:3f:db: 10:11:68:d9:d7:33:a1:44:c6:09:68:80:52:75:a5:09:9f:c7: 68:1b:f8:42:c1:56:6e:1f:1c:2a:d2:d5:c5:cc:4a:d8:de:39: e4:07:9f:e5:e8:40:81:a1:ab:8b:53:99:a6:cc:7d:41:e8:0d: 5e:ed:63:75:98:a7:64:de:d6:3f:3d:d8:f5:16:7a:ac:39:0f: cf:27:06:49:d6:27:b8:bf:0f:6f:05:18:03:0b:33:bb:e5:86: 9f:cf:a0:ab:65:03:d8:75:ab:32:72:ef:e9:7c:76:e1:39:f5: 7a:cd:b3:c4:78:99:67:37:1f:61:8d:de:38:08:53:74:e9:ae: c4:e4:40:60:3c:29:ba:7a:c9:12:3b:29:be:3b:22:24:a1:d9: fd:4d:f2:08:b2:4b:fc:6f:ca:44:38:4c:c4:74:04:eb:d0:0a: 58:67:91:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfOb0pt92t7SivNE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI0MTEwODAyMDAyN1oXDTI1MDIwNjAyMDAyN1owLzEtMCsGA1UEAxMk NWVjNjE3YmItMWMxMS00ZTE2LWIyOTQtYzBhOWEyYTgzZjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMu6fjvfY9oUfl0Xvn8QOQKMugwIY+rgUEqC Pvs2e2CbxDqvuvp+S7wrKNH44VAyDikp0JAF0iPoe07XJd9vHXe0pT+Qx/2XB7CW 5816tgIB9OIwv074PfQcBF5w6fYi7FFyZDes6/6q0WE2rSWZcsLf9lCYLSLXnJUt 3a298yQi5BvCd4Mj6PFnSGm+vn0/XHsXnT3afdGezNXtnCn4GGA/ve595hLXfxMx J7pHIWP9Ukzm0I9zzez4tyD9oOBqgr+igadcmm2Tcvo/goeZQOtpAix3e4w1T8oE BMpM/ec9SUJb+vo3mb4NP5dNC3+4h3rNwwsbo2RzldDZWffjeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPEqvrjLoRJ5LscHsWgTjusA4QI+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMmI4YjM3ZDQtNjQwMi0z MTNlLThlZWMtNGIzNTM4ZmIwMzZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqFeSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFlRgZUBKEImSW7//VCemLRf3RWXerItgRsWbrG84OaZB39zp4oVZY8E T51vFyPoTZdWRsVOrTh4Botl4NcCt4cY6Nu1bHX0kg+FStDKs7IRh8s51LIQMj4/ 2xARaNnXM6FExglogFJ1pQmfx2gb+ELBVm4fHCrS1cXMStjeOeQHn+XoQIGhq4tT mabMfUHoDV7tY3WYp2Te1j892PUWeqw5D88nBknWJ7i/D28FGAMLM7vlhp/PoKtl A9h1qzJy7+l8duE59XrNs8R4mWc3H2GN3jgIU3TprsTkQGA8Kbp6yRI7Kb47IiSh 2f1N8giyS/xvykQ4TMR0BOvQClhnkfY= -----END CERTIFICATE-----Generated at Sun Nov 24 21:48:33 2024 by rpki-client on console-ams.rpki-client.org