$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4e2d7ca9-2fc5-32aa-baaa-157281611287.roa File: 4e2d7ca9-2fc5-32aa-baaa-157281611287.roa (raw, json) Hash identifier: kKXgXZkSVm4Orc2D4nW0nqXpPjSnIKH80sMmLXhmOm4= Subject key identifier: B2:A2:8E:76:09:99:6A:58:51:DC:3F:5F:70:E1:EA:E0:80:34:29:21 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285849F17FD366E595D418960B7F20 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4e2d7ca9-2fc5-32aa-baaa-157281611287.roa Signing time: Fri 23 May 2025 01:00:49 +0000 ROA not before: Fri 23 May 2025 01:00:49 +0000 ROA not after: Thu 21 Aug 2025 01:00:49 +0000 asID: 203 IP address blocks: 168.87.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:7f:d3:66:e5:95:d4:18:96:0b:7f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: May 23 01:00:49 2025 GMT Not After : Aug 21 01:00:49 2025 GMT Subject: CN=0888c46f-9ab8-4d66-8744-9cf358f42051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:26:36:c1:1b:d1:0b:63:de:f0:fe:10:71:2c: be:0b:1b:35:9c:92:5b:2e:0a:d5:40:45:55:ec:91: 1a:33:da:e6:71:5a:83:32:e5:f6:8a:7b:06:7b:0f: d5:e6:f0:2e:bc:4b:72:a6:9f:35:54:36:04:0a:4e: 48:70:de:0c:de:02:49:ed:a3:13:0b:d1:e1:b8:da: f0:46:df:3d:e2:9b:9d:e4:24:89:8c:6d:60:9c:6a: 71:45:90:7c:75:a1:09:7a:9d:5b:4d:92:86:17:48: d8:a2:d0:1c:0f:85:0d:18:08:8c:f0:4e:c3:47:b5: ca:28:98:25:35:35:45:97:e6:ea:0a:e3:80:89:ff: 70:7d:db:57:fd:84:67:30:cf:d8:bb:ae:d3:8e:79: 31:ad:82:df:23:eb:57:0d:aa:c9:88:01:94:c1:c6: 5e:8b:8e:76:30:31:35:3e:5b:bb:4c:3b:0d:f6:d7: e1:a3:b3:53:e5:9f:d4:bf:64:66:f2:07:46:76:15: 21:b2:50:6a:c5:64:a2:de:c4:aa:83:cf:3a:29:52: 21:7d:da:84:df:68:30:33:e9:31:4f:a0:e5:7f:ef: 8b:22:eb:23:ce:ab:95:54:8c:3d:eb:66:bc:ae:e0: 26:86:38:a9:2c:7f:f1:0d:b7:8e:50:bf:85:82:c4: 4f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:A2:8E:76:09:99:6A:58:51:DC:3F:5F:70:E1:EA:E0:80:34:29:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4e2d7ca9-2fc5-32aa-baaa-157281611287.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:22:ea:cf:8b:03:32:56:df:96:3f:5e:34:6c:b6:a8:4b:92: 25:cf:44:53:c0:e5:9a:48:65:0f:38:a4:f8:f2:48:49:7f:73: ab:de:dc:24:9b:2a:95:f3:97:d0:4f:ad:15:e7:3e:65:22:53: 9f:d9:33:8e:90:b5:97:67:c4:cc:0c:8c:87:18:6d:d0:b2:87: c6:de:a8:c2:0a:3c:ef:e7:10:a4:5e:06:12:53:15:5f:71:e0: e5:17:26:80:4c:91:d4:e7:7f:bf:a4:36:39:34:9a:ed:31:8f: f2:80:7c:ca:3a:4d:25:2b:e9:10:7e:5b:2f:c7:32:72:b5:4a: 07:ea:5e:c6:94:68:e3:9f:aa:43:47:0d:83:6f:17:b9:3e:58: 77:00:5b:e9:2c:5e:71:6e:f0:ae:fb:1d:75:06:20:2f:64:e0: 71:1b:a5:38:60:f2:1f:38:45:11:40:0d:fe:2b:48:72:27:1a: ba:76:72:23:67:da:4f:d9:9e:d5:2b:fd:52:f1:9d:fc:1e:d4: 5a:db:0d:3b:da:20:0c:36:38:3e:73:e8:de:97:4d:86:94:0a: 59:16:24:1b:7e:e6:53:c1:2e:25:dd:6c:3c:a2:b7:5c:47:d7: 2f:7a:3a:c2:cc:bb:df:35:35:69:2f:65:88:05:38:33:e0:3d: ad:4b:75:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxf9Nm5ZXUGJYLfyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk MDg4OGM0NmYtOWFiOC00ZDY2LTg3NDQtOWNmMzU4ZjQyMDUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyY2wRvRC2Pe8P4QcSy+Cxs1nJJbLgrVQEVV 7JEaM9rmcVqDMuX2insGew/V5vAuvEtypp81VDYECk5IcN4M3gJJ7aMTC9HhuNrw Rt894pud5CSJjG1gnGpxRZB8daEJep1bTZKGF0jYotAcD4UNGAiM8E7DR7XKKJgl NTVFl+bqCuOAif9wfdtX/YRnMM/Yu67TjnkxrYLfI+tXDarJiAGUwcZei452MDE1 Plu7TDsN9tfho7NT5Z/Uv2Rm8gdGdhUhslBqxWSi3sSqg886KVIhfdqE32gwM+kx T6Dlf++LIusjzquVVIw962a8ruAmhjipLH/xDbeOUL+FgsRPWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLKijnYJmWpYUdw/X3Dh6uCANCkhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNGUyZDdjYTktMmZjNS0z MmFhLWJhYWEtMTU3MjgxNjExMjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFeCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEgi6s+LAzJW35Y/XjRstqhLkiXPRFPA5ZpIZQ84pPjySEl/c6ve3CSb KpXzl9BPrRXnPmUiU5/ZM46QtZdnxMwMjIcYbdCyh8beqMIKPO/nEKReBhJTFV9x 4OUXJoBMkdTnf7+kNjk0mu0xj/KAfMo6TSUr6RB+Wy/HMnK1SgfqXsaUaOOfqkNH DYNvF7k+WHcAW+ksXnFu8K77HXUGIC9k4HEbpThg8h84RRFADf4rSHInGrp2ciNn 2k/ZntUr/VLxnfwe1FrbDTvaIAw2OD5z6N6XTYaUClkWJBt+5lPBLiXdbDyit1xH 1y96OsLMu981NWkvZYgFODPgPa1LdRA= -----END CERTIFICATE-----Generated at Sat Jun 7 01:41:38 2025 by rpki-client