$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/620b5565-3e1d-374f-993f-56e5a13bc7bf.roa File: 620b5565-3e1d-374f-993f-56e5a13bc7bf.roa (raw, json) Hash identifier: Vf7wWjUc+ovuNaxn1DqyBhyRzdRxhVtZpsyq2TYiKNA= Subject key identifier: 59:9C:A2:A0:E1:39:54:1D:80:9F:D1:FD:28:B7:B4:79:F9:D1:A2:44 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858491246CABA936D1D13CEDC4680 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/620b5565-3e1d-374f-993f-56e5a13bc7bf.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 202 IP address blocks: 168.87.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:ca:ba:93:6d:1d:13:ce:dc:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=2e1d3904-3811-4ecf-bd5e-6b4775ca58f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:c4:96:9e:f4:fa:9b:65:c5:40:0e:41:4a:9a: d2:e7:c3:81:93:af:d3:b0:ef:03:1f:9b:32:88:55: 0a:ed:84:5c:06:74:70:4b:cc:81:5f:be:92:cb:17: d0:a7:b4:2b:7a:e6:cf:8d:6c:60:dc:60:a4:dc:67: 69:0c:ac:66:93:d6:ef:33:4d:29:2f:9d:7b:66:eb: f0:12:55:d2:45:60:d1:b9:89:4e:6c:5a:4b:fa:69: b9:da:58:4a:99:e2:9e:20:c0:cc:9c:f4:a3:fa:c5: 1b:26:d7:e1:3c:09:21:97:a8:97:41:aa:39:b2:e0: 16:04:b3:27:f4:52:01:10:25:a0:8f:da:91:f6:20: 3d:56:12:b9:57:20:59:94:ee:41:95:5e:36:c0:d3: d0:9c:2b:f9:9d:cb:dc:02:d9:2d:dd:e3:1e:44:ba: a4:ad:b4:57:d4:f5:e4:4d:d9:69:49:6f:4d:11:02: 64:49:5d:b5:cb:c9:4e:53:48:da:08:79:32:e6:89: 06:8b:19:61:c5:89:4c:28:76:02:c3:f0:11:83:6b: 2b:26:f3:d2:b5:90:bc:41:56:2f:5a:ca:f5:80:2a: 94:55:e1:bf:e7:75:06:3b:e9:c9:42:ec:75:ae:b5: 3f:35:40:61:86:e9:d1:d5:16:51:77:b9:b9:e4:4c: 17:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:9C:A2:A0:E1:39:54:1D:80:9F:D1:FD:28:B7:B4:79:F9:D1:A2:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/620b5565-3e1d-374f-993f-56e5a13bc7bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.115.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:2c:27:3b:c2:6a:4b:fa:de:9e:b8:75:5a:16:29:6e:89:f8: 9a:c7:46:e1:9a:8b:9b:f2:e5:c6:fd:93:0d:19:81:e0:c3:e4: 85:fd:16:12:ba:4d:40:86:6a:30:47:5a:54:21:76:0d:0b:33: 1b:b7:3d:0f:4c:0e:9a:a7:74:73:28:e9:8f:a6:be:45:2a:f0: 68:41:66:5a:c7:05:06:8b:57:be:44:e7:8b:14:a8:cc:03:a6: 48:0a:db:8a:55:ea:e8:65:d2:65:9b:07:ab:5a:c1:af:80:16: 0f:8b:53:d7:79:fa:3c:f9:19:6a:fc:db:51:ef:89:55:97:dc: 51:8b:9b:f3:12:bb:cf:ac:b6:76:ab:0f:1e:58:4d:a2:d9:8a: c6:c3:67:ab:60:70:52:d2:58:89:5a:ed:8f:64:da:3d:17:51: e3:64:6a:9d:b2:5b:ea:f2:46:52:83:17:4c:de:c6:8b:ae:f2: e4:12:98:69:d8:98:1c:10:0c:0c:ee:81:b3:0d:29:75:10:82: aa:bd:02:8a:1b:c5:18:75:72:e2:2f:96:40:06:ef:42:7c:17: 4d:51:23:b7:fa:b8:0d:26:19:59:71:b7:25:21:db:fd:6f:32: 5a:2e:34:73:81:c3:b1:d0:2a:77:b8:b2:5b:c6:e0:9e:97:24: 91:4e:3d:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRsq6k20dE87cRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk MmUxZDM5MDQtMzgxMS00ZWNmLWJkNWUtNmI0Nzc1Y2E1OGY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8SWnvT6m2XFQA5BSprS58OBk6/TsO8DH5sy iFUK7YRcBnRwS8yBX76SyxfQp7QreubPjWxg3GCk3GdpDKxmk9bvM00pL517Zuvw ElXSRWDRuYlObFpL+mm52lhKmeKeIMDMnPSj+sUbJtfhPAkhl6iXQao5suAWBLMn 9FIBECWgj9qR9iA9VhK5VyBZlO5BlV42wNPQnCv5ncvcAtkt3eMeRLqkrbRX1PXk TdlpSW9NEQJkSV21y8lOU0jaCHky5okGixlhxYlMKHYCw/ARg2srJvPStZC8QVYv Wsr1gCqUVeG/53UGO+nJQux1rrU/NUBhhunR1RZRd7m55EwXawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFmcoqDhOVQdgJ/R/Si3tHn50aJEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNjIwYjU1NjUtM2UxZC0z NzRmLTk5M2YtNTZlNWExM2JjN2JmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFdzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAUsJzvCakv63p64dVoWKW6J+JrHRuGai5vy5cb9kw0ZgeDD5IX9FhK6 TUCGajBHWlQhdg0LMxu3PQ9MDpqndHMo6Y+mvkUq8GhBZlrHBQaLV75E54sUqMwD pkgK24pV6uhl0mWbB6tawa+AFg+LU9d5+jz5GWr821HviVWX3FGLm/MSu8+stnar Dx5YTaLZisbDZ6tgcFLSWIla7Y9k2j0XUeNkap2yW+ryRlKDF0zexouu8uQSmGnY mBwQDAzugbMNKXUQgqq9AoobxRh1cuIvlkAG70J8F01RI7f6uA0mGVlxtyUh2/1v MlouNHOBw7HQKne4slvG4J6XJJFOPTQ= -----END CERTIFICATE-----Generated at Fri Mar 14 10:05:43 2025 by rpki-client