$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5cb026f0-8e2f-386c-8de0-bf4d009f9d4d.roa File: 5cb026f0-8e2f-386c-8de0-bf4d009f9d4d.roa (raw, json) Hash identifier: JAd7G+YngbFkfEMA/IlsBfUnqN9OlIWZ3oRnq61MCGM= Subject key identifier: DC:20:ED:CE:4B:23:E1:ED:93:5A:83:9D:3C:03:9B:4C:B1:18:F6:78 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285848ADC6170D1D6F12B3171AFA40 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5cb026f0-8e2f-386c-8de0-bf4d009f9d4d.roa Signing time: Mon 27 Jan 2025 02:00:39 +0000 ROA not before: Mon 27 Jan 2025 02:00:39 +0000 ROA not after: Sun 27 Apr 2025 01:00:39 +0000 asID: 3356 IP address blocks: 168.87.154.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ad:c6:17:0d:1d:6f:12:b3:17:1a:fa:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jan 27 02:00:39 2025 GMT Not After : Apr 27 01:00:39 2025 GMT Subject: CN=5a791442-9a07-47dc-97c5-f8427b095441 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:db:32:38:fc:2a:d9:2a:ad:92:19:ca:18:01: 78:99:68:49:55:93:f9:b9:b8:6f:06:8b:3c:4e:87: 93:94:f8:d5:83:7a:5d:3c:c3:52:e7:8d:b3:a8:71: 89:24:8a:b2:4e:b4:88:0d:c5:a1:6c:5f:4e:44:f8: 56:05:48:93:26:18:a2:62:d4:89:64:95:d8:d3:89: e6:61:38:7e:7e:4e:04:a1:d0:eb:eb:8d:32:dd:11: d4:d0:90:7f:3c:48:07:c0:d3:29:a4:22:24:88:fd: 77:1f:15:9a:df:58:f9:da:e5:5c:39:35:13:1c:0f: 87:87:94:52:57:3f:3b:0b:fd:32:28:34:e3:11:cd: 59:2b:8c:8c:81:ab:e7:3d:d4:a8:ec:d0:d0:56:5d: 9d:1a:35:0b:21:41:ad:8e:b8:ef:95:66:58:15:53: 10:ed:7a:85:7a:d0:04:fd:69:0e:45:90:bc:52:de: 0c:4f:3c:8b:fc:d5:98:76:db:a1:ad:d8:ca:83:95: 11:95:f8:97:f0:27:29:96:1d:2b:86:ff:88:71:05: 55:7e:78:27:e0:e9:00:a1:e3:fc:1c:26:af:6d:10: ec:00:a8:2c:1a:14:24:4f:e3:10:3e:c2:7f:fe:ce: a9:85:82:b9:fe:c2:ea:42:ad:48:11:57:b2:4f:7c: c4:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:20:ED:CE:4B:23:E1:ED:93:5A:83:9D:3C:03:9B:4C:B1:18:F6:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5cb026f0-8e2f-386c-8de0-bf4d009f9d4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.154.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:23:4c:6e:4b:01:7c:a9:ff:ca:e4:a4:53:37:a4:d6:16:42: ab:01:92:14:21:35:1c:5b:a9:2c:3c:f9:f1:77:e7:63:b7:80: 66:f7:7c:7d:55:38:f3:79:6d:3b:ae:f0:8a:94:a1:82:10:1b: 9c:91:f7:02:91:fc:0b:02:74:1a:22:b1:48:fb:ff:72:e6:5e: 15:b9:0a:19:40:b8:93:a2:83:ca:ce:a9:ff:d5:31:cd:cd:d1: 68:8b:f0:4a:83:fe:a8:7f:c3:f4:63:0e:84:7b:fe:54:b1:54: e9:e5:08:1f:f4:96:9e:de:bf:82:85:d5:7f:e7:1e:54:62:36: e0:c8:33:4d:4c:0a:ba:3e:c9:27:f9:2e:8b:d4:b5:a8:34:6b: 39:83:11:46:f6:53:84:09:8a:af:05:17:5f:25:5e:2c:05:54: 71:cd:13:99:4e:6a:9a:e3:e9:9b:4b:bf:da:0b:c8:b5:e4:cc: 6e:10:5a:c7:78:0d:64:dc:64:b6:95:24:47:2f:ae:f5:15:3a: 06:28:b6:e9:c1:d3:f4:80:37:00:07:ea:90:c8:a0:4e:dd:1a: 33:8b:e4:1d:83:fc:58:07:e9:13:d4:28:c2:c1:79:46:c7:99: 0c:f1:98:02:a8:8e:8a:32:d7:cd:8c:fd:2e:4e:f8:3a:6c:95: c5:46:4a:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEitxhcNHW8Ssxca+kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDEyNzAyMDAzOVoXDTI1MDQyNzAxMDAzOVowLzEtMCsGA1UEAxMk NWE3OTE0NDItOWEwNy00N2RjLTk3YzUtZjg0MjdiMDk1NDQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtsyOPwq2SqtkhnKGAF4mWhJVZP5ubhvBos8 ToeTlPjVg3pdPMNS542zqHGJJIqyTrSIDcWhbF9ORPhWBUiTJhiiYtSJZJXY04nm YTh+fk4EodDr640y3RHU0JB/PEgHwNMppCIkiP13HxWa31j52uVcOTUTHA+Hh5RS Vz87C/0yKDTjEc1ZK4yMgavnPdSo7NDQVl2dGjULIUGtjrjvlWZYFVMQ7XqFetAE /WkORZC8Ut4MTzyL/NWYdtuhrdjKg5URlfiX8Ccplh0rhv+IcQVVfngn4OkAoeP8 HCavbRDsAKgsGhQkT+MQPsJ//s6phYK5/sLqQq1IEVeyT3zE5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNwg7c5LI+Htk1qDnTwDm0yxGPZ4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNWNiMDI2ZjAtOGUyZi0z ODZjLThkZTAtYmY0ZDAwOWY5ZDRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqFeaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJojTG5LAXyp/8rkpFM3pNYWQqsBkhQhNRxbqSw8+fF352O3gGb3fH1V OPN5bTuu8IqUoYIQG5yR9wKR/AsCdBoisUj7/3LmXhW5ChlAuJOig8rOqf/VMc3N 0WiL8EqD/qh/w/RjDoR7/lSxVOnlCB/0lp7ev4KF1X/nHlRiNuDIM01MCro+ySf5 LovUtag0azmDEUb2U4QJiq8FF18lXiwFVHHNE5lOaprj6ZtLv9oLyLXkzG4QWsd4 DWTcZLaVJEcvrvUVOgYotunB0/SANwAH6pDIoE7dGjOL5B2D/FgH6RPUKMLBeUbH mQzxmAKojooy182M/S5O+DpslcVGSqQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:31:02 2025 by rpki-client