$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/48529b48-e02e-3ba6-87a0-38a733adde1c.roa File: 48529b48-e02e-3ba6-87a0-38a733adde1c.roa (raw, json) Hash identifier: kujQ4bO6JViJNahr9phcITjJfs3jreD2oKCgC3UiKtM= Subject key identifier: A3:04:C4:E3:3B:EB:8D:A1:5C:9C:C1:F3:73:52:3B:4A:28:7A:26:B0 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858491246CB396AC3D2898B3A40C0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/48529b48-e02e-3ba6-87a0-38a733adde1c.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 203 IP address blocks: 168.87.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:cb:39:6a:c3:d2:89:8b:3a:40:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=1c8542b5-a6dd-4f6c-a16e-f83dc6686cc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ea:15:4f:93:15:81:03:f5:7b:09:70:27:45: bf:6f:29:0a:77:ae:79:96:95:ab:2b:7b:26:12:a4: a6:29:0a:85:b3:36:c6:44:88:f1:7d:5e:8d:3d:b5: 3a:2e:53:13:55:ec:ea:5b:18:b8:12:b0:29:0b:48: 38:98:7a:d3:f4:06:4f:13:e3:12:1b:3f:74:6b:be: 53:e3:e4:80:b0:55:5f:1d:16:89:8c:20:e6:e9:e9: bf:1f:cc:94:f7:cb:c2:12:7e:eb:73:3b:8f:f7:d7: 66:e8:2d:0b:c4:f6:af:c8:9f:b9:e8:82:d7:3b:df: 89:0b:68:b7:b8:44:2c:d0:71:b9:80:b6:3a:c8:3d: d8:91:ba:e1:fd:86:ee:80:3c:a7:02:12:36:58:df: fb:7e:54:a9:97:b7:91:28:cb:2c:2d:2d:ef:10:24: 37:de:dc:ec:a9:41:31:ae:6b:bc:ae:4c:5e:9a:8f: 0b:f2:46:46:2f:01:ac:c0:88:3d:59:6f:1f:1d:f3: 03:d1:45:f7:41:23:6b:8d:e4:9e:fe:c1:7d:25:0b: 21:24:07:cf:b5:6d:b6:8b:d3:dd:49:ba:90:5f:7d: ab:bb:25:39:88:ff:82:e5:da:fa:f1:32:8e:da:aa: e3:70:34:07:d1:25:97:25:dc:e2:57:ae:59:86:d3: ac:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:04:C4:E3:3B:EB:8D:A1:5C:9C:C1:F3:73:52:3B:4A:28:7A:26:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/48529b48-e02e-3ba6-87a0-38a733adde1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:a9:03:5f:6a:7f:0a:5b:c4:69:84:01:64:49:a3:fc:7c:28: e2:ea:e4:ce:42:7a:75:c6:4b:a9:3f:06:22:42:aa:f6:a5:9d: c1:b4:0b:e7:95:ec:19:d5:9e:e6:52:66:0a:10:50:9a:0d:3b: e2:7d:13:0a:b9:2a:f4:8d:f5:9a:7d:18:40:f9:0f:e6:9d:8b: 7e:c9:46:84:3c:3c:5f:b3:d0:39:b5:3d:34:45:95:9b:29:e2: 2c:54:55:d4:02:f6:77:00:a8:de:43:a3:77:85:bd:c5:cd:55: ab:2d:b3:a1:7a:41:fc:9d:41:b0:50:d5:07:96:40:80:68:77: 23:89:26:f0:b8:f4:95:6b:ca:5a:48:11:b0:fd:b4:a2:05:87: 02:c4:6b:38:a9:8d:c1:93:ea:f0:89:a6:83:8c:5c:5e:33:e0: a0:b6:46:0f:36:b8:48:c3:58:3a:3f:70:9e:f7:42:fd:c2:e9: 2f:98:79:bb:4c:ab:c2:92:0e:74:da:d8:55:c9:92:6a:0d:b3: 58:a2:d8:f7:13:bd:c7:ed:3e:91:f4:9e:34:b2:4b:54:ad:6c: a4:90:0c:f3:77:c5:d8:71:9b:e9:f2:09:8a:f1:55:45:0d:41: 13:c6:7c:c0:3d:25:ef:dd:13:01:ac:51:6d:16:02:f2:7d:1f: ad:28:f7:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRss5asPSiYs6QMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk MWM4NTQyYjUtYTZkZC00ZjZjLWExNmUtZjgzZGM2Njg2Y2M4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4OoVT5MVgQP1ewlwJ0W/bykKd655lpWrK3sm EqSmKQqFszbGRIjxfV6NPbU6LlMTVezqWxi4ErApC0g4mHrT9AZPE+MSGz90a75T 4+SAsFVfHRaJjCDm6em/H8yU98vCEn7rczuP99dm6C0LxPavyJ+56ILXO9+JC2i3 uEQs0HG5gLY6yD3Ykbrh/YbugDynAhI2WN/7flSpl7eRKMssLS3vECQ33tzsqUEx rmu8rkxemo8L8kZGLwGswIg9WW8fHfMD0UX3QSNrjeSe/sF9JQshJAfPtW22i9Pd SbqQX32ruyU5iP+C5dr68TKO2qrjcDQH0SWXJdziV65ZhtOsXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKMExOM7642hXJzB83NSO0ooeiawMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNDg1MjliNDgtZTAyZS0z YmE2LTg3YTAtMzhhNzMzYWRkZTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqFeIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAupA19qfwpbxGmEAWRJo/x8KOLq5M5CenXGS6k/BiJCqvalncG0C+eV 7BnVnuZSZgoQUJoNO+J9Ewq5KvSN9Zp9GED5D+adi37JRoQ8PF+z0Dm1PTRFlZsp 4ixUVdQC9ncAqN5Do3eFvcXNVasts6F6QfydQbBQ1QeWQIBodyOJJvC49JVrylpI EbD9tKIFhwLEazipjcGT6vCJpoOMXF4z4KC2Rg82uEjDWDo/cJ73Qv3C6S+YebtM q8KSDnTa2FXJkmoNs1ii2PcTvcftPpH0njSyS1StbKSQDPN3xdhxm+nyCYrxVUUN QRPGfMA9Je/dEwGsUW0WAvJ9H60o97U= -----END CERTIFICATE-----Generated at Sat Apr 5 21:25:18 2025 by rpki-client