$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5db721f0-41f0-3884-abef-c8d193e99ca5.roa File: 5db721f0-41f0-3884-abef-c8d193e99ca5.roa (raw, json) Hash identifier: W31pPX3vK3RtONdIe9UGJius9zeDtMH9SAfnVSrX8DU= Subject key identifier: 22:C3:1C:F6:6B:00:FF:A8:81:05:2C:A0:DD:9C:BF:A2:C0:83:58:E8 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858486695C7FEAFBA3D1CE8731BC0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5db721f0-41f0-3884-abef-c8d193e99ca5.roa Signing time: Wed 01 Jan 2025 14:00:53 +0000 ROA not before: Wed 01 Jan 2025 14:00:53 +0000 ROA not after: Tue 01 Apr 2025 13:00:53 +0000 asID: 202 IP address blocks: 168.87.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:66:95:c7:fe:af:ba:3d:1c:e8:73:1b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jan 1 14:00:53 2025 GMT Not After : Apr 1 13:00:53 2025 GMT Subject: CN=eac4aa94-2179-4734-8925-fe9f6f9b1bc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:97:7d:97:80:a9:57:a6:c8:14:3e:75:8d:b7: fd:6b:e3:1b:61:c8:18:18:19:98:66:77:bc:33:21: 97:43:2c:0b:23:c5:12:99:09:7c:c3:1e:36:ea:5a: 45:05:1c:b0:35:ca:17:19:b2:46:41:98:4e:93:72: d6:77:2d:e7:79:06:b9:bb:fa:ca:dc:21:c1:da:c7: 91:f5:dc:f8:16:3c:05:e1:37:d9:dc:4a:7d:85:4a: 29:b3:3c:42:69:2a:56:46:5a:ed:42:09:8b:38:65: 61:b2:76:f3:31:ef:0e:76:b9:e3:b5:8e:bc:51:b2: 2b:64:9f:58:0d:00:af:91:e3:2c:a4:77:dd:11:0b: 90:17:69:77:9f:1d:63:02:e1:5e:83:8f:c0:df:08: 4a:64:af:76:21:bb:97:98:9b:2a:42:e7:00:39:2e: 48:34:98:55:d6:68:3b:e5:5f:d2:b4:0d:27:9b:c7: 0d:26:a1:c8:d4:2a:fb:f4:c5:82:9d:e0:61:42:ac: d2:95:9c:de:4b:5a:d0:60:5a:3a:a3:4c:b1:2c:fa: 6f:41:8a:bb:fb:f0:7f:0c:05:2c:e7:26:36:63:d5: d6:89:9a:9e:06:13:c9:9c:a5:c9:ef:6b:ce:92:e7: 62:5d:8f:d5:76:e7:c7:ca:e3:63:f8:e4:45:41:d2: 7f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:C3:1C:F6:6B:00:FF:A8:81:05:2C:A0:DD:9C:BF:A2:C0:83:58:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5db721f0-41f0-3884-abef-c8d193e99ca5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:31:a0:a8:e2:37:97:fb:68:4a:08:34:99:74:0f:c7:3c:fa: 60:da:75:85:b0:94:c1:a5:7d:fe:7b:b2:69:38:22:ec:7f:be: 9c:49:08:8b:25:40:ba:99:fe:97:f4:13:13:9b:08:f4:b7:9a: a3:e1:ec:fb:63:c9:ae:c0:c9:d0:ee:99:1a:97:77:bc:1a:9e: e6:e1:04:c8:23:5e:18:29:47:3c:e6:c5:e0:45:9c:5e:73:14: 64:2b:1b:68:26:c2:6d:e9:fc:69:b9:29:57:fc:94:2a:d0:81: 78:4c:3c:94:4b:50:b1:2d:d7:ce:66:51:41:56:00:5c:ad:d7: 63:41:06:2e:f7:59:df:b9:33:12:c1:90:14:44:13:8a:a6:b8: 2e:07:b8:6f:d4:1f:5e:96:66:a2:b8:aa:6c:1a:f0:2d:6c:eb: d7:81:49:e3:9d:56:dd:4c:5f:37:a1:8c:58:0f:9d:54:c2:a0: 64:1e:d7:ab:e8:6e:e3:fa:95:65:f4:d2:d8:65:a4:28:6b:da: 42:b5:ac:54:0f:06:06:21:14:f0:92:4d:39:77:d7:e7:f0:56: a6:39:70:75:78:ca:c1:27:1f:db:aa:c4:88:90:9f:6a:df:cb: e5:fb:42:dd:5e:60:7a:b8:96:22:f6:1c:01:0d:59:41:da:3c: 6d:77:ab:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhmlcf+r7o9HOhzG8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDEwMTE0MDA1M1oXDTI1MDQwMTEzMDA1M1owLzEtMCsGA1UEAxMk ZWFjNGFhOTQtMjE3OS00NzM0LTg5MjUtZmU5ZjZmOWIxYmMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipd9l4CpV6bIFD51jbf9a+MbYcgYGBmYZne8 MyGXQywLI8USmQl8wx426lpFBRywNcoXGbJGQZhOk3LWdy3neQa5u/rK3CHB2seR 9dz4FjwF4TfZ3Ep9hUopszxCaSpWRlrtQgmLOGVhsnbzMe8OdrnjtY68UbIrZJ9Y DQCvkeMspHfdEQuQF2l3nx1jAuFeg4/A3whKZK92IbuXmJsqQucAOS5INJhV1mg7 5V/StA0nm8cNJqHI1Cr79MWCneBhQqzSlZzeS1rQYFo6o0yxLPpvQYq7+/B/DAUs 5yY2Y9XWiZqeBhPJnKXJ72vOkudiXY/VdufHyuNj+ORFQdJ/yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCLDHPZrAP+ogQUsoN2cv6LAg1joMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNWRiNzIxZjAtNDFmMC0z ODg0LWFiZWYtYzhkMTkzZTk5Y2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqFcUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADMxoKjiN5f7aEoINJl0D8c8+mDadYWwlMGlff57smk4Iux/vpxJCIsl QLqZ/pf0ExObCPS3mqPh7Ptjya7AydDumRqXd7wanubhBMgjXhgpRzzmxeBFnF5z FGQrG2gmwm3p/Gm5KVf8lCrQgXhMPJRLULEt185mUUFWAFyt12NBBi73Wd+5MxLB kBREE4qmuC4HuG/UH16WZqK4qmwa8C1s69eBSeOdVt1MXzehjFgPnVTCoGQe16vo buP6lWX00thlpChr2kK1rFQPBgYhFPCSTTl31+fwVqY5cHV4ysEnH9uqxIiQn2rf y+X7Qt1eYHq4liL2HAENWUHaPG13q0E= -----END CERTIFICATE-----Generated at Sun Feb 16 15:34:26 2025 by rpki-client