$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/53056f5a-e0bd-3846-bf36-0e3d1ab87d37.roa File: 53056f5a-e0bd-3846-bf36-0e3d1ab87d37.roa (raw, json) Hash identifier: TIwvNxwlVkF64rD9V+RR67XC2lSaPAxtuobTmK5aO+s= Subject key identifier: 9E:E4:45:4A:CA:53:F3:FD:E7:26:31:4D:A4:68:24:01:A9:B0:71:4B Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584865303A422022902F29095B00 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/53056f5a-e0bd-3846-bf36-0e3d1ab87d37.roa Signing time: Wed 01 Jan 2025 02:00:40 +0000 ROA not before: Wed 01 Jan 2025 02:00:40 +0000 ROA not after: Tue 01 Apr 2025 01:00:40 +0000 asID: 203 IP address blocks: 168.87.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:65:30:3a:42:20:22:90:2f:29:09:5b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jan 1 02:00:40 2025 GMT Not After : Apr 1 01:00:40 2025 GMT Subject: CN=4ca5a691-163d-43df-955a-49cacfde5ace Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:e9:eb:da:0d:9f:57:06:4c:b8:30:63:24:a5: a6:4f:6c:35:9a:3b:9e:d1:50:7d:85:ab:52:48:60: 46:91:20:f0:32:82:d6:2c:9e:2f:74:67:38:bc:66: b3:c9:5a:db:eb:b8:81:29:20:59:c2:35:bb:11:32: 06:4d:0d:a0:38:72:73:3e:a1:6a:37:c1:2e:9d:2e: a1:7a:2b:e0:e1:ff:9f:b4:1b:45:57:8c:4b:92:10: 7c:ae:cc:c7:6a:00:94:f0:80:f6:f9:ab:b0:4e:fd: 06:65:8e:c6:3c:51:8c:7c:6d:74:82:d2:aa:59:09: 9c:04:b8:75:9f:f6:77:eb:83:8f:c9:99:5a:30:f5: 46:db:1f:87:dc:21:a2:d5:5f:32:84:2b:64:89:cb: e7:8c:9d:5c:20:86:59:48:d5:13:cb:d2:80:f8:4f: b0:71:ab:d6:ff:4f:6d:3b:02:bb:50:0b:fa:13:c0: 69:0b:c7:4a:15:85:c4:b2:b4:87:ce:1b:27:f1:cd: 26:59:68:6a:75:97:84:b0:f5:94:30:cf:11:43:9f: d7:9f:44:3f:42:7a:c8:8d:e3:2a:5a:23:8c:be:58: 9a:fa:98:12:74:b5:ac:f5:cd:a5:f9:97:34:5e:4c: 9a:58:01:8e:a7:5c:a2:1c:34:8e:ac:bf:3d:5d:8a: 15:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:E4:45:4A:CA:53:F3:FD:E7:26:31:4D:A4:68:24:01:A9:B0:71:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/53056f5a-e0bd-3846-bf36-0e3d1ab87d37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:91:25:c2:65:30:46:e6:8f:e8:75:11:49:85:28:48:74:17: 96:36:48:a7:c5:e9:7f:d1:15:84:f9:ed:08:59:54:86:50:20: 91:9a:16:a3:f9:da:75:a6:31:c9:38:ef:77:1e:2a:eb:3c:df: 69:d9:dd:dd:78:56:34:2d:44:45:b0:62:d5:42:2f:a2:bd:5e: 14:6c:af:24:79:84:78:2d:76:80:42:c3:81:39:95:af:ce:22: 40:c4:59:89:46:32:25:a5:8e:f4:d6:0c:9f:2e:b6:f6:c7:f3: 0f:ee:dd:3f:15:77:48:5b:e3:13:78:64:9b:ff:23:ec:08:0b: 6e:ba:c1:37:2a:6e:b5:dd:53:bd:7e:07:5b:76:35:dd:b3:fd: a5:2f:2d:c1:0a:92:05:77:29:95:a4:7d:93:90:b7:76:08:3d: 30:b8:4f:67:aa:cb:40:82:41:15:eb:27:e6:a7:6a:cb:f8:16: 80:56:33:d3:65:ca:f4:7a:d5:b8:ec:ac:7f:a5:a0:69:ab:16: 5c:99:59:63:9b:d1:65:87:e2:45:2f:07:f7:db:2e:c3:9a:3e: 98:ba:9d:2b:ed:bd:47:73:a9:77:8e:3d:88:6b:ad:ac:c4:f0: 60:c8:3d:00:05:96:a3:b4:8e:87:cf:a1:b4:12:34:9d:87:5b: c6:45:78:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhlMDpCICKQLykJWwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDEwMTAyMDA0MFoXDTI1MDQwMTAxMDA0MFowLzEtMCsGA1UEAxMk NGNhNWE2OTEtMTYzZC00M2RmLTk1NWEtNDljYWNmZGU1YWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+nr2g2fVwZMuDBjJKWmT2w1mjue0VB9hatS SGBGkSDwMoLWLJ4vdGc4vGazyVrb67iBKSBZwjW7ETIGTQ2gOHJzPqFqN8EunS6h eivg4f+ftBtFV4xLkhB8rszHagCU8ID2+auwTv0GZY7GPFGMfG10gtKqWQmcBLh1 n/Z364OPyZlaMPVG2x+H3CGi1V8yhCtkicvnjJ1cIIZZSNUTy9KA+E+wcavW/09t OwK7UAv6E8BpC8dKFYXEsrSHzhsn8c0mWWhqdZeEsPWUMM8RQ5/Xn0Q/QnrIjeMq WiOMvlia+pgSdLWs9c2l+Zc0XkyaWAGOp1yiHDSOrL89XYoVaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ7kRUrKU/P95yYxTaRoJAGpsHFLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNTMwNTZmNWEtZTBiZC0z ODQ2LWJmMzYtMGUzZDFhYjg3ZDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqFdAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIyRJcJlMEbmj+h1EUmFKEh0F5Y2SKfF6X/RFYT57QhZVIZQIJGaFqP5 2nWmMck473ceKus832nZ3d14VjQtREWwYtVCL6K9XhRsryR5hHgtdoBCw4E5la/O IkDEWYlGMiWljvTWDJ8utvbH8w/u3T8Vd0hb4xN4ZJv/I+wIC266wTcqbrXdU71+ B1t2Nd2z/aUvLcEKkgV3KZWkfZOQt3YIPTC4T2eqy0CCQRXrJ+anasv4FoBWM9Nl yvR61bjsrH+loGmrFlyZWWOb0WWH4kUvB/fbLsOaPpi6nSvtvUdzqXeOPYhrrazE 8GDIPQAFlqO0jofPobQSNJ2HW8ZFeKM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:04:12 2025 by rpki-client