$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/47801835-9fbe-389b-866c-79e68d399e16.roa File: 47801835-9fbe-389b-866c-79e68d399e16.roa (raw, json) Hash identifier: fvFwT34NrgSMYsKkUOZQkQaSsL2MwXnuVmJsNJvfnZM= Subject key identifier: AF:66:B3:E6:65:E5:E3:E0:A5:98:04:DE:75:19:94:7D:CC:8B:47:EE Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285844E8E3D1DE502A38A184D85000 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/47801835-9fbe-389b-866c-79e68d399e16.roa Signing time: Fri 16 Feb 2024 11:05:42 +0000 ROA not before: Fri 16 Feb 2024 11:05:42 +0000 ROA not after: Thu 16 May 2024 10:05:42 +0000 asID: 3356 IP address blocks: 168.87.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 May 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:e8:e3:d1:de:50:2a:38:a1:84:d8:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Feb 16 11:05:42 2024 GMT Not After : May 16 10:05:42 2024 GMT Subject: CN=891a4072-9b38-44a4-b12a-a1f7c05fcfb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:97:c1:18:c2:67:af:05:ff:f2:9a:ea:64:e3: 4e:8f:c1:53:7a:39:c3:d6:23:8f:fd:18:42:c5:9f: 49:c9:76:61:e0:93:bf:e8:bb:b6:04:f6:82:6d:74: ed:35:61:5d:97:6c:e6:f1:7d:00:2c:49:d9:3c:83: 1d:c1:a3:e9:a7:2e:33:57:33:d3:a0:84:52:d2:1c: 91:68:29:23:f1:08:8e:33:aa:d3:ff:df:20:af:c1: 26:ca:f1:04:25:b9:ed:c2:20:c6:65:33:33:00:14: 47:79:8f:ee:f1:9b:c0:e9:65:4b:95:4b:5f:05:07: 5d:06:40:ce:f2:1c:1e:50:1e:f3:12:c3:38:2c:18: d6:eb:19:55:22:ed:52:54:9f:f3:6c:37:59:9b:f8: 7f:f5:de:da:5c:94:6e:a4:86:0a:fa:f5:97:86:11: 97:f1:36:ec:2f:14:57:4a:c7:ac:d7:21:9e:b4:ba: 8c:a5:6c:db:a3:98:0b:94:0d:73:ed:4f:81:0c:37: d9:aa:ad:af:d0:ae:86:c5:4d:e9:fa:58:a3:75:4a: 2b:23:6d:d8:a1:78:b6:3a:40:9c:9c:63:6b:c2:37: fd:40:cc:db:73:12:86:ae:c7:3b:04:c2:5c:ae:e5: 0f:52:0b:1a:1a:ce:67:44:b5:36:0e:d5:ba:02:80: 42:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:66:B3:E6:65:E5:E3:E0:A5:98:04:DE:75:19:94:7D:CC:8B:47:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/47801835-9fbe-389b-866c-79e68d399e16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:a4:da:dd:cb:81:86:32:79:e4:8c:54:7e:02:8d:4c:bd:f4: fe:f2:a5:49:0c:ec:12:ac:a0:d6:b9:9c:ea:2b:44:a4:65:51: cb:05:1a:ac:27:51:84:ef:11:7e:fe:04:8a:66:e6:60:31:45: 02:19:c8:42:66:9b:e2:5e:46:5f:da:d9:54:ba:15:9c:11:dd: 79:f4:62:77:cf:1b:8b:ac:60:93:67:b6:f9:56:1c:7c:6e:1f: 9c:50:90:1d:c9:95:f7:d7:26:cf:50:2c:1e:b1:4e:5e:47:a5: b6:31:fe:f3:b0:cc:66:28:60:68:76:2a:60:75:7c:c7:03:0a: 61:24:91:39:ca:a1:f2:b7:78:75:68:b5:5c:dd:3b:6e:a3:d7: 1e:c5:25:db:fc:09:6e:1a:f7:09:25:f7:73:76:57:fb:61:56: 01:ed:d1:b3:11:c8:ac:43:b8:8b:86:be:6b:7f:2e:bc:f4:99: 70:ee:68:7e:c1:b4:0b:59:5c:db:43:0d:d1:9d:8d:c0:1d:c8: eb:65:c9:6a:52:ae:c1:54:2e:cd:3f:66:ec:24:38:69:b9:a4: 7c:30:74:8f:6d:b7:c8:e2:be:8c:a5:40:41:95:16:02:59:94: 82:33:e4:7b:05:30:ca:92:90:b4:f5:84:e0:e7:4c:86:40:70: 75:6a:7d:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWETo49HeUCo4oYTYUAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI0MDIxNjExMDU0MloXDTI0MDUxNjEwMDU0MlowLzEtMCsGA1UEAxMk ODkxYTQwNzItOWIzOC00NGE0LWIxMmEtYTFmN2MwNWZjZmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZfBGMJnrwX/8prqZONOj8FTejnD1iOP/RhC xZ9JyXZh4JO/6Lu2BPaCbXTtNWFdl2zm8X0ALEnZPIMdwaPppy4zVzPToIRS0hyR aCkj8QiOM6rT/98gr8EmyvEEJbntwiDGZTMzABRHeY/u8ZvA6WVLlUtfBQddBkDO 8hweUB7zEsM4LBjW6xlVIu1SVJ/zbDdZm/h/9d7aXJRupIYK+vWXhhGX8TbsLxRX Sses1yGetLqMpWzbo5gLlA1z7U+BDDfZqq2v0K6GxU3p+lijdUorI23YoXi2OkCc nGNrwjf9QMzbcxKGrsc7BMJcruUPUgsaGs5nRLU2DtW6AoBCEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK9ms+Zl5ePgpZgE3nUZlH3Mi0fuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNDc4MDE4MzUtOWZiZS0z ODliLTg2NmMtNzllNjhkMzk5ZTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqFcAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH2k2t3LgYYyeeSMVH4CjUy99P7ypUkM7BKsoNa5nOorRKRlUcsFGqwn UYTvEX7+BIpm5mAxRQIZyEJmm+JeRl/a2VS6FZwR3Xn0YnfPG4usYJNntvlWHHxu H5xQkB3JlffXJs9QLB6xTl5HpbYx/vOwzGYoYGh2KmB1fMcDCmEkkTnKofK3eHVo tVzdO26j1x7FJdv8CW4a9wkl93N2V/thVgHt0bMRyKxDuIuGvmt/Lrz0mXDuaH7B tAtZXNtDDdGdjcAdyOtlyWpSrsFULs0/ZuwkOGm5pHwwdI9tt8jivoylQEGVFgJZ lIIz5HsFMMqSkLT1hODnTIZAcHVqfQo= -----END CERTIFICATE-----Generated at Thu May 2 14:57:42 2024 by rpki-client on console-fra.rpki-client.org