$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/40b5c67a-9ac0-3589-acab-9c3b29acdede.roa File: 40b5c67a-9ac0-3589-acab-9c3b29acdede.roa (raw, json) Hash identifier: iMYlBFjdUz53802Su1InFuBNQBkJe7gE37gfhnXyMIE= Subject key identifier: F7:FF:8E:71:06:4C:D8:D0:46:DA:C2:87:48:DC:F3:FD:66:CA:82:1A Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285848A9961F46988FA27452BDFB80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/40b5c67a-9ac0-3589-acab-9c3b29acdede.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 132121 IP address blocks: 168.87.80.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:1f:46:98:8f:a2:74:52:bd:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=f8447ece-5616-4e44-97b0-5dc1a92942a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:64:8a:c7:21:59:08:27:0f:e8:58:17:2b:b3: d2:d0:cc:cf:45:ff:e2:eb:6c:9b:6c:aa:e9:a9:f9: fc:92:d0:53:dd:a7:f5:65:6b:1c:37:49:9e:af:59: b4:5d:df:28:ba:14:78:c3:91:34:83:62:8f:85:5e: 2d:67:69:16:ab:f0:81:25:ee:61:32:fa:0b:91:f0: 1b:02:34:39:20:b6:2f:d1:5f:50:ee:2a:ee:50:9c: 1a:fb:cd:00:46:f6:6b:bf:ba:51:58:7d:52:34:83: 65:eb:1b:d4:48:de:55:ee:b6:1d:9d:ac:c7:23:67: 9d:0e:4d:c5:0c:e2:52:df:9b:a7:d2:3f:e7:42:22: 1b:de:65:19:58:02:2c:6c:5b:de:ed:37:4f:be:91: bb:0b:a9:69:2c:22:17:2b:99:0a:c9:a7:b4:f7:da: 77:21:4d:79:f0:a1:7a:ce:a9:55:e1:e7:a9:21:3d: 42:da:16:c2:a5:4c:b5:a2:e5:8c:b2:e8:62:60:49: 45:1b:d2:8f:ce:1d:37:a3:28:f3:98:61:db:ad:ae: 89:99:19:e5:c6:23:5a:18:5f:c6:87:fb:e2:67:6d: 2f:1e:1f:90:b2:45:87:56:4a:ea:fe:30:f0:ed:28: 27:1b:de:5c:6f:5a:85:81:f7:49:4e:1f:5b:15:96: 4f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:FF:8E:71:06:4C:D8:D0:46:DA:C2:87:48:DC:F3:FD:66:CA:82:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/40b5c67a-9ac0-3589-acab-9c3b29acdede.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.80.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:a8:f0:c8:5b:66:ca:e9:51:e0:c4:a3:8e:77:1b:bc:e3:da: 6d:50:e5:57:53:46:1b:72:e8:9b:51:d5:36:fa:3d:6e:32:1b: f9:70:ae:ed:98:d2:08:b7:cc:18:5b:f2:f8:2f:33:50:21:26: 91:88:52:32:36:ef:aa:97:c3:9a:c8:33:4b:2e:6a:57:32:2c: 03:55:9d:38:6a:13:75:1e:93:c4:a3:dd:2f:33:ca:cf:21:fc: 24:a8:0a:ad:3a:92:f0:9c:e0:07:5a:d2:b3:11:bd:97:27:df: 5e:b7:eb:d1:38:55:df:03:d0:19:2e:55:e6:f7:16:3e:e7:7a: 92:f5:03:c4:a2:8b:85:c9:ab:af:6a:43:7f:65:da:37:d0:63: 88:ee:97:ef:28:a2:b3:00:a4:e7:0a:05:9e:13:11:4f:da:2c: 59:2f:09:14:2c:50:9e:52:c8:87:16:30:ba:71:e4:b9:a0:02: 00:24:f8:dc:ab:d2:6a:f5:97:39:dc:be:a2:1f:63:6c:f4:cf: 74:91:30:1b:4d:b2:aa:6a:61:f0:e7:12:a0:e8:9b:37:24:6e: bb:ce:30:8e:32:35:4e:f7:57:44:59:45:b9:e5:4e:fb:6e:fb: 2f:45:15:11:0c:22:81:6e:04:0e:46:00:35:63:76:ef:2a:ce: 1f:35:88:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiplh9GmI+idFK9+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk Zjg0NDdlY2UtNTYxNi00ZTQ0LTk3YjAtNWRjMWE5Mjk0MmE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWSKxyFZCCcP6FgXK7PS0MzPRf/i62ybbKrp qfn8ktBT3af1ZWscN0mer1m0Xd8ouhR4w5E0g2KPhV4tZ2kWq/CBJe5hMvoLkfAb AjQ5ILYv0V9Q7iruUJwa+80ARvZrv7pRWH1SNINl6xvUSN5V7rYdnazHI2edDk3F DOJS35un0j/nQiIb3mUZWAIsbFve7TdPvpG7C6lpLCIXK5kKyae099p3IU158KF6 zqlV4eepIT1C2hbCpUy1ouWMsuhiYElFG9KPzh03oyjzmGHbra6JmRnlxiNaGF/G h/viZ20vHh+QskWHVkrq/jDw7SgnG95cb1qFgfdJTh9bFZZP5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPf/jnEGTNjQRtrCh0jc8/1myoIaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNDBiNWM2N2EtOWFjMC0z NTg5LWFjYWItOWMzYjI5YWNkZWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqFdQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACOo8MhbZsrpUeDEo453G7zj2m1Q5VdTRhty6JtR1Tb6PW4yG/lwru2Y 0gi3zBhb8vgvM1AhJpGIUjI276qXw5rIM0sualcyLANVnThqE3Uek8Sj3S8zys8h /CSoCq06kvCc4Ada0rMRvZcn316369E4Vd8D0BkuVeb3Fj7nepL1A8Sii4XJq69q Q39l2jfQY4jul+8oorMApOcKBZ4TEU/aLFkvCRQsUJ5SyIcWMLpx5LmgAgAk+Nyr 0mr1lzncvqIfY2z0z3SRMBtNsqpqYfDnEqDomzckbrvOMI4yNU73V0RZRbnlTvtu +y9FFREMIoFuBA5GADVjdu8qzh81iKI= -----END CERTIFICATE-----Generated at Fri Mar 14 09:31:31 2025 by rpki-client