$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/47801835-9fbe-389b-866c-79e68d399e16.roa File: 47801835-9fbe-389b-866c-79e68d399e16.roa (raw, json) Hash identifier: N88w2ihANiRyY4DOf2pJIEt4JH/SRpLy+k/6dB8IiVs= Subject key identifier: 51:AC:F3:38:B8:88:6F:35:0C:75:9F:80:49:24:8C:17:9A:47:85:F6 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858486695C7B721ED6DD72A51EFC0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/47801835-9fbe-389b-866c-79e68d399e16.roa Signing time: Wed 01 Jan 2025 14:00:53 +0000 ROA not before: Wed 01 Jan 2025 14:00:53 +0000 ROA not after: Tue 01 Apr 2025 13:00:53 +0000 asID: 3356 IP address blocks: 168.87.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:66:95:c7:b7:21:ed:6d:d7:2a:51:ef:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jan 1 14:00:53 2025 GMT Not After : Apr 1 13:00:53 2025 GMT Subject: CN=fe971561-cb2d-4a00-a73d-40f65fd0e8f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:74:f2:ee:e6:d3:de:60:37:93:df:c6:33:26: 0a:5a:29:46:0c:49:ba:22:77:55:15:d7:20:17:63: b7:14:8b:ca:12:a3:4b:4e:34:e9:23:0a:c4:8a:97: 9c:03:77:82:8c:98:11:c1:80:dc:bf:6c:f9:30:52: d6:f7:a5:4a:4c:0b:35:ce:46:7d:33:3a:df:41:a8: fc:ef:de:95:f6:6f:a3:1d:31:0c:85:86:fc:a9:e7: 6f:0b:9c:15:f0:fb:ca:bd:2f:a2:10:bf:54:0a:1d: 8b:38:84:0e:a7:a3:0f:05:6b:b7:50:2b:5c:ed:d8: 16:d9:30:33:90:1a:f0:98:cb:f7:bb:7d:33:c0:99: 27:0d:54:a0:9d:a5:e1:4a:e2:66:e1:aa:18:e1:4e: 16:c1:05:38:63:3c:42:aa:f1:c2:71:54:d2:f3:1c: 7b:e6:c8:53:e4:cc:62:94:24:35:23:28:48:95:11: 75:ea:54:6d:a3:75:ab:88:9f:81:3d:fb:96:13:aa: 03:31:eb:8d:54:59:cd:67:88:46:e8:d3:9c:67:f8: ee:c3:3b:0b:99:55:8e:8f:3a:33:03:34:f9:d9:a0: 56:84:0b:a1:65:f7:a4:9f:51:35:71:91:de:2e:f6: 55:e1:fb:7a:be:f6:69:c0:bc:fb:41:b3:85:10:1f: da:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:AC:F3:38:B8:88:6F:35:0C:75:9F:80:49:24:8C:17:9A:47:85:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/47801835-9fbe-389b-866c-79e68d399e16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:82:c5:68:0d:65:a3:8c:dd:f5:c8:7e:48:55:5c:35:db:df: 2d:da:4a:0b:19:a3:97:be:7e:fa:9c:aa:49:f4:e7:52:58:19: 14:cf:c2:e8:a4:4e:64:8d:a6:09:67:86:8e:4f:ea:fe:d8:15: 06:eb:5c:c2:d4:26:8b:b2:8d:cb:4e:59:19:a0:8f:4a:05:fe: b8:dc:09:3a:99:05:70:11:ee:0e:6f:9e:a1:50:c8:26:59:2c: d0:32:39:ef:0b:f3:94:b5:bc:9c:6d:3f:22:74:9d:e2:93:a7: 28:68:ef:69:e8:d7:bd:55:c9:ca:a2:4a:e7:ac:1b:a3:2d:2d: 63:33:27:7d:de:82:42:4a:66:b2:32:28:5f:6b:22:cf:dc:5d: 75:e1:29:6b:75:b2:14:76:82:ba:49:f6:de:52:95:7f:ea:c5: 67:cb:8c:40:a0:a7:17:2c:b0:9b:78:62:26:f3:41:de:96:35: 4b:4d:2e:a2:34:2c:b0:a1:9c:47:0d:18:b3:2e:84:d4:3d:0b: cd:ec:ce:a3:70:8d:ac:d2:86:9f:6e:98:70:c7:46:08:e1:07: 41:91:b5:40:6d:a4:dd:61:fa:3a:6d:e9:9b:5e:ac:46:8e:bc: 71:12:93:b0:fb:7a:19:b7:2a:57:f1:f3:e6:cd:89:7d:c4:50: 43:46:5e:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhmlce3Ie1t1ypR78AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDEwMTE0MDA1M1oXDTI1MDQwMTEzMDA1M1owLzEtMCsGA1UEAxMk ZmU5NzE1NjEtY2IyZC00YTAwLWE3M2QtNDBmNjVmZDBlOGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3Ty7ubT3mA3k9/GMyYKWilGDEm6IndVFdcg F2O3FIvKEqNLTjTpIwrEipecA3eCjJgRwYDcv2z5MFLW96VKTAs1zkZ9MzrfQaj8 796V9m+jHTEMhYb8qedvC5wV8PvKvS+iEL9UCh2LOIQOp6MPBWu3UCtc7dgW2TAz kBrwmMv3u30zwJknDVSgnaXhSuJm4aoY4U4WwQU4YzxCqvHCcVTS8xx75shT5Mxi lCQ1IyhIlRF16lRto3WriJ+BPfuWE6oDMeuNVFnNZ4hG6NOcZ/juwzsLmVWOjzoz AzT52aBWhAuhZfekn1E1cZHeLvZV4ft6vvZpwLz7QbOFEB/aIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFGs8zi4iG81DHWfgEkkjBeaR4X2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNDc4MDE4MzUtOWZiZS0z ODliLTg2NmMtNzllNjhkMzk5ZTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqFcAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHyCxWgNZaOM3fXIfkhVXDXb3y3aSgsZo5e+fvqcqkn051JYGRTPwuik TmSNpglnho5P6v7YFQbrXMLUJouyjctOWRmgj0oF/rjcCTqZBXAR7g5vnqFQyCZZ LNAyOe8L85S1vJxtPyJ0neKTpyho72no171VycqiSuesG6MtLWMzJ33egkJKZrIy KF9rIs/cXXXhKWt1shR2grpJ9t5SlX/qxWfLjECgpxcssJt4YibzQd6WNUtNLqI0 LLChnEcNGLMuhNQ9C83szqNwjazShp9umHDHRgjhB0GRtUBtpN1h+jpt6ZterEaO vHESk7D7ehm3Klfx8+bNiX3EUENGXpY= -----END CERTIFICATE-----Generated at Sun Feb 16 15:30:00 2025 by rpki-client