$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3e9825d2-b9e7-35c9-a9e7-98d7aeffb375.roa File: 3e9825d2-b9e7-35c9-a9e7-98d7aeffb375.roa (raw, json) Hash identifier: B+A08rWL/EsSHGgBetvaBsBAXH6OpeHonze6ALCJ6Qk= Subject key identifier: E3:8C:27:40:BF:48:25:B2:7C:39:1D:6D:44:9E:24:23:67:C9:76:BA Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285848ADC616D911546AC7F9144D78 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3e9825d2-b9e7-35c9-a9e7-98d7aeffb375.roa Signing time: Mon 27 Jan 2025 02:00:39 +0000 ROA not before: Mon 27 Jan 2025 02:00:39 +0000 ROA not after: Sun 27 Apr 2025 01:00:39 +0000 asID: 202 IP address blocks: 168.87.146.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ad:c6:16:d9:11:54:6a:c7:f9:14:4d:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jan 27 02:00:39 2025 GMT Not After : Apr 27 01:00:39 2025 GMT Subject: CN=b0b95834-780c-4efb-a9f5-5072192b6783 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:aa:81:b4:2d:cf:e8:07:7d:ac:1b:ff:72:a3: d4:4e:d9:64:3a:aa:84:cd:46:4f:5e:8d:e4:32:45: a9:91:2e:bb:01:49:80:72:9e:0a:d6:de:fc:ee:d3: 1e:6c:9e:e1:f5:cd:6a:c2:a7:d9:e5:e2:0b:41:9a: f6:76:4a:73:14:0d:35:4a:2d:a0:17:c7:d8:97:63: 75:02:ff:3b:e2:31:9c:3b:0c:a5:0c:09:ce:9a:c0: b7:a5:28:a6:08:ef:b2:a2:fa:d3:be:1f:29:17:ba: 50:d5:77:7e:09:07:2c:a7:62:a5:16:e1:4b:f1:e5: c9:d0:83:d0:c0:9e:53:9b:4c:2a:05:33:a5:1d:e0: 20:67:e7:91:8c:8e:fd:62:77:c7:d8:d3:e8:1a:3a: ca:0f:94:33:0f:c2:5b:4e:06:39:8f:55:39:0d:9a: a3:12:c1:3b:85:18:01:46:02:97:84:dc:fa:79:d7: c3:a7:11:fd:3a:b0:f8:b8:74:1e:ba:13:93:23:e5: 68:1a:e0:88:9d:6b:2a:d2:2e:de:48:c6:83:5d:87: 14:ca:73:56:2b:f3:d5:b8:b4:a2:ed:f1:58:e2:42: c9:0e:64:1d:de:ce:71:09:01:0c:b1:4c:f0:db:33: d7:d6:98:36:2a:a4:a7:82:95:0b:be:1a:a6:b2:e0: 61:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:8C:27:40:BF:48:25:B2:7C:39:1D:6D:44:9E:24:23:67:C9:76:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3e9825d2-b9e7-35c9-a9e7-98d7aeffb375.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.146.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:7c:83:f1:98:45:83:76:8b:bd:ad:19:0f:fd:e0:46:ab:d6: 20:c1:85:26:37:8a:7a:3b:6a:69:64:55:af:31:aa:4b:d3:ec: 77:98:d2:0e:18:27:db:30:10:a1:45:5a:2f:a8:69:c0:6e:e0: 6f:b7:e7:f3:c0:40:38:4a:7f:b2:06:72:20:6d:a7:a6:e8:96: d3:d7:85:ff:b0:e4:21:a1:17:c2:12:66:89:0a:7f:41:9c:38: 02:a2:d7:40:83:f3:33:66:cb:22:c3:da:34:2c:43:56:29:64: 7a:4c:dc:69:30:6b:2e:3a:24:23:a6:c6:0d:ae:16:18:d2:92: d8:c5:ab:7e:27:3a:e8:3e:59:14:ae:76:10:88:c6:75:a3:1e: c7:f7:0e:aa:8a:a7:6c:b6:60:c7:b0:f3:09:62:62:75:87:32: c7:44:ee:4a:d3:23:73:78:90:07:d3:03:cf:24:d0:3b:0d:c7: 39:bf:2d:8b:1b:56:c7:01:b8:2f:7f:c2:ab:78:71:57:b6:7b: 13:bb:ed:7f:7f:0b:64:a0:b3:c1:33:5e:3a:e2:12:00:d4:5a: 94:bf:ae:80:e1:4b:57:65:65:cb:86:94:66:4d:0e:b0:96:37: d6:e0:46:63:49:ad:bc:d8:f8:25:df:20:4a:c2:15:14:a6:c2: 41:2e:3f:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEitxhbZEVRqx/kUTXgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDEyNzAyMDAzOVoXDTI1MDQyNzAxMDAzOVowLzEtMCsGA1UEAxMk YjBiOTU4MzQtNzgwYy00ZWZiLWE5ZjUtNTA3MjE5MmI2NzgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKqBtC3P6Ad9rBv/cqPUTtlkOqqEzUZPXo3k MkWpkS67AUmAcp4K1t787tMebJ7h9c1qwqfZ5eILQZr2dkpzFA01Si2gF8fYl2N1 Av874jGcOwylDAnOmsC3pSimCO+yovrTvh8pF7pQ1Xd+CQcsp2KlFuFL8eXJ0IPQ wJ5Tm0wqBTOlHeAgZ+eRjI79YnfH2NPoGjrKD5QzD8JbTgY5j1U5DZqjEsE7hRgB RgKXhNz6edfDpxH9OrD4uHQeuhOTI+VoGuCInWsq0i7eSMaDXYcUynNWK/PVuLSi 7fFY4kLJDmQd3s5xCQEMsUzw2zPX1pg2KqSngpULvhqmsuBhFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOOMJ0C/SCWyfDkdbUSeJCNnyXa6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvM2U5ODI1ZDItYjllNy0z NWM5LWE5ZTctOThkN2FlZmZiMzc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqFeSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJp8g/GYRYN2i72tGQ/94Ear1iDBhSY3ino7amlkVa8xqkvT7HeY0g4Y J9swEKFFWi+oacBu4G+35/PAQDhKf7IGciBtp6boltPXhf+w5CGhF8ISZokKf0Gc OAKi10CD8zNmyyLD2jQsQ1YpZHpM3Gkway46JCOmxg2uFhjSktjFq34nOug+WRSu dhCIxnWjHsf3DqqKp2y2YMew8wliYnWHMsdE7krTI3N4kAfTA88k0DsNxzm/LYsb VscBuC9/wqt4cVe2exO77X9/C2Sgs8EzXjriEgDUWpS/roDhS1dlZcuGlGZNDrCW N9bgRmNJrbzY+CXfIErCFRSmwkEuP8c= -----END CERTIFICATE-----Generated at Sun Feb 16 15:22:46 2025 by rpki-client