$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6c7c0aa8-3479-31d2-bbe3-1470d1c21b2f.roa File: 6c7c0aa8-3479-31d2-bbe3-1470d1c21b2f.roa (raw, json) Hash identifier: tHl7ns5uuAG5MOSLT5nzvhgY0zRpZ64SrR/qiXBY2eE= Subject key identifier: EA:D5:85:05:A8:89:C2:07:1E:70:01:71:C6:4C:4F:B9:8C:A2:9D:A6 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285848EC969EDF849708217A16F660 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6c7c0aa8-3479-31d2-bbe3-1470d1c21b2f.roa Signing time: Tue 18 Feb 2025 14:00:52 +0000 ROA not before: Tue 18 Feb 2025 14:00:52 +0000 ROA not after: Mon 19 May 2025 13:00:52 +0000 asID: 203 IP address blocks: 168.87.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ec:96:9e:df:84:97:08:21:7a:16:f6:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Feb 18 14:00:52 2025 GMT Not After : May 19 13:00:52 2025 GMT Subject: CN=681e8d13-1365-45d5-b951-dfb138c7d8ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:5c:fd:bd:22:be:5a:54:10:36:e5:47:1c:3e: 7b:7e:81:f2:2a:4d:b3:db:6b:6b:c4:8a:df:de:c9: b2:8a:69:40:a2:66:44:b4:2a:ab:0b:9b:d0:1a:4e: 84:77:fc:02:da:00:c1:69:bb:02:01:e5:a4:54:2c: 76:0b:3b:70:c8:7a:70:4f:b4:9a:e0:8f:be:8e:4f: 54:ed:ce:24:33:4a:b9:e6:b3:dd:05:a8:54:c4:3f: 0a:dc:57:ef:ab:6d:bf:50:96:a1:2c:3a:06:e5:b1: 16:f1:d9:4b:de:04:a7:02:28:29:57:bf:c0:94:9d: 3d:64:a9:3f:1c:19:54:36:de:64:9c:ac:75:89:90: c5:e4:39:4a:9b:0c:33:79:e9:b2:21:c9:c4:41:3b: ba:c8:e2:64:f8:44:26:48:d4:37:d0:23:10:f7:96: 58:b3:10:dd:9f:10:b6:8b:5a:1b:a2:85:94:ea:a1: a8:8b:fd:4e:7f:fa:56:3d:b4:08:ca:9e:af:ba:61: 15:33:3d:1f:67:b3:c8:b6:af:8e:27:97:f9:37:5f: bb:f6:aa:9a:37:b6:6c:0e:41:82:5f:12:ea:4b:ff: fe:c8:1b:41:56:56:87:27:c5:c6:2d:bf:ba:6e:f2: c2:7a:bd:6b:bf:43:0f:ee:93:59:a0:01:c9:a0:02: 5b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:D5:85:05:A8:89:C2:07:1E:70:01:71:C6:4C:4F:B9:8C:A2:9D:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6c7c0aa8-3479-31d2-bbe3-1470d1c21b2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:cb:4b:79:26:36:2e:ac:cf:fb:0d:f8:8c:e0:da:87:57:a0: 51:0a:f3:2b:1d:91:2a:98:22:d4:58:02:e3:61:d1:8d:cb:9b: d8:13:36:14:d8:69:47:77:77:31:b7:5e:8c:7a:ac:ed:c6:2b: 16:81:9c:95:c3:02:3d:ca:8e:d2:1c:8a:49:bf:67:76:82:31: 4e:2f:d8:ce:50:ec:4a:9a:87:f1:dc:cd:2a:72:fd:f9:c1:27: 9c:a6:a0:03:89:4a:ae:31:19:c0:b1:b8:0a:de:00:77:59:53: e8:6f:db:ef:31:bc:ee:00:d6:f0:e9:f2:f8:a4:23:c4:27:f7: 22:17:82:f9:7e:60:98:65:7f:a6:52:dd:82:d0:0d:42:5c:bc: 23:5a:c3:d8:3c:27:a6:72:6e:f8:55:d5:01:ef:89:27:9d:94: a4:c3:5e:ea:d1:cd:20:ec:30:fa:ff:9a:d8:d0:59:78:e2:7f: 00:a6:14:48:15:8b:4f:7f:71:30:fa:45:7d:28:ba:48:9b:7e: 15:a4:d1:3c:70:77:5d:d4:eb:65:33:fe:fa:ea:fe:83:c1:3a: 85:95:31:f9:c3:7f:ff:e6:b2:33:1e:84:38:da:99:2b:e7:65: 4d:89:68:b9:75:c9:1e:4f:ce:1f:57:8c:48:5a:86:df:fc:1d: 38:eb:ef:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjslp7fhJcIIXoW9mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk NjgxZThkMTMtMTM2NS00NWQ1LWI5NTEtZGZiMTM4YzdkOGVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllz9vSK+WlQQNuVHHD57foHyKk2z22trxIrf 3smyimlAomZEtCqrC5vQGk6Ed/wC2gDBabsCAeWkVCx2CztwyHpwT7Sa4I++jk9U 7c4kM0q55rPdBahUxD8K3Ffvq22/UJahLDoG5bEW8dlL3gSnAigpV7/AlJ09ZKk/ HBlUNt5knKx1iZDF5DlKmwwzeemyIcnEQTu6yOJk+EQmSNQ30CMQ95ZYsxDdnxC2 i1obooWU6qGoi/1Of/pWPbQIyp6vumEVMz0fZ7PItq+OJ5f5N1+79qqaN7ZsDkGC XxLqS//+yBtBVlaHJ8XGLb+6bvLCer1rv0MP7pNZoAHJoAJbHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOrVhQWoicIHHnABccZMT7mMop2mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNmM3YzBhYTgtMzQ3OS0z MWQyLWJiZTMtMTQ3MGQxYzIxYjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqFcIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAATLS3kmNi6sz/sN+Izg2odXoFEK8ysdkSqYItRYAuNh0Y3Lm9gTNhTY aUd3dzG3Xox6rO3GKxaBnJXDAj3KjtIcikm/Z3aCMU4v2M5Q7Eqah/HczSpy/fnB J5ymoAOJSq4xGcCxuAreAHdZU+hv2+8xvO4A1vDp8vikI8Qn9yIXgvl+YJhlf6ZS 3YLQDUJcvCNaw9g8J6ZybvhV1QHviSedlKTDXurRzSDsMPr/mtjQWXjifwCmFEgV i09/cTD6RX0oukibfhWk0Txwd13U62Uz/vrq/oPBOoWVMfnDf//msjMehDjamSvn ZU2JaLl1yR5Pzh9XjEhaht/8HTjr770= -----END CERTIFICATE-----Generated at Wed Apr 9 22:19:47 2025 by rpki-client