$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6eeaed7a-4a3c-3ecb-9ca9-3c00b84693a7.roa File: 6eeaed7a-4a3c-3ecb-9ca9-3c00b84693a7.roa (raw, json) Hash identifier: pFyuazkDkBOWRyBHbaoat0K8yPflAfhT79XYjo6nxAc= Subject key identifier: 38:68:17:F0:5A:54:C0:F6:D5:DB:93:55:03:A0:81:BB:01:7E:0F:83 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285848B8F0CF0490C4533FD971AFC0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6eeaed7a-4a3c-3ecb-9ca9-3c00b84693a7.roa Signing time: Fri 31 Jan 2025 02:00:39 +0000 ROA not before: Fri 31 Jan 2025 02:00:39 +0000 ROA not after: Thu 01 May 2025 01:00:39 +0000 asID: 3360 IP address blocks: 168.87.4.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b8:f0:cf:04:90:c4:53:3f:d9:71:af:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jan 31 02:00:39 2025 GMT Not After : May 1 01:00:39 2025 GMT Subject: CN=32731f78-a7d3-45af-acc3-a4fe87f1a4fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:6d:dd:0d:19:ac:5b:92:06:d0:cc:22:c8:c1: 46:7f:69:60:a4:0d:7c:ce:f5:bc:6b:c1:af:17:81: bc:a7:4f:c1:b6:19:df:9c:9a:00:77:6d:33:b9:89: 6c:4f:1d:e6:ad:ed:d8:dd:fd:6a:68:00:1d:d4:61: e0:a4:7c:52:fa:70:29:17:ad:ea:d2:2b:ed:ec:fe: a6:6f:ea:23:21:e8:0b:a2:0c:0f:84:9c:87:ff:45: d9:07:0e:55:f7:21:89:cb:9d:f6:17:0a:53:a1:78: 63:d1:09:35:4b:c7:a9:a2:9e:4c:b9:5c:c7:72:ac: 3e:4c:26:7d:07:af:19:ff:07:13:70:02:99:0f:15: 19:db:82:1a:ff:fb:ec:a5:89:01:1b:d8:1f:7d:14: dc:13:ef:cd:62:8a:8d:92:50:15:f7:b0:1d:c5:54: cb:ed:8d:29:45:b2:df:b1:ad:89:74:e8:a5:6e:6e: 7c:8e:f8:9d:1e:9a:7d:d6:54:1d:11:ab:6a:8b:1a: 09:0d:53:50:8b:90:74:9b:d9:90:0b:2b:c7:ad:49: d1:c8:cc:15:a8:d2:b5:53:11:42:24:60:63:57:db: 18:7f:14:0c:ff:5d:92:57:58:8c:2b:a4:c9:5a:00: ee:e2:34:af:0e:7d:b3:14:74:c3:51:0b:f9:8c:83: 25:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:68:17:F0:5A:54:C0:F6:D5:DB:93:55:03:A0:81:BB:01:7E:0F:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6eeaed7a-4a3c-3ecb-9ca9-3c00b84693a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.4.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:17:21:55:aa:45:e9:46:54:6e:a5:c4:86:01:17:fd:54:b0: 67:60:f8:4b:66:83:6b:93:44:7b:21:fe:a8:f3:2e:8b:f3:2d: 9c:8d:41:23:bf:37:03:10:5f:c5:a2:ed:db:77:dc:e3:e6:4b: b6:61:f2:0b:7e:a7:c9:58:f2:a3:6d:18:31:86:96:2f:7f:2a: 46:4c:60:fb:1e:b8:50:e7:3f:a6:30:50:0b:8b:83:c1:e9:7d: 54:f8:24:6d:ce:15:93:f8:96:6d:39:2d:f2:f1:b2:a3:fc:06: 7d:ed:fa:db:58:c8:86:d4:80:59:3c:6f:11:fa:89:81:08:60: f8:57:82:db:79:f7:10:f2:1c:1f:26:77:a5:7b:a4:81:06:55: 0b:96:e3:cf:e7:24:ae:1b:d7:eb:9d:8f:9b:0d:86:12:ee:05: 2b:30:86:1d:b4:08:23:25:b0:d0:54:0c:da:92:3f:8b:72:22: 72:fe:a7:9e:76:ab:64:d4:d0:4c:30:72:26:eb:1b:ae:91:6a: 03:12:8f:3b:93:99:4b:c9:2a:34:ca:f7:52:bd:43:62:d6:55: 81:53:27:23:b1:e8:a2:4c:81:47:b8:f3:82:7e:c3:5e:e5:95: ad:fb:c3:e0:cf:1c:06:ba:a4:9c:9d:48:0c:5d:c5:d6:4a:c4: 88:2d:f4:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi48M8EkMRTP9lxr8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDEzMTAyMDAzOVoXDTI1MDUwMTAxMDAzOVowLzEtMCsGA1UEAxMk MzI3MzFmNzgtYTdkMy00NWFmLWFjYzMtYTRmZTg3ZjFhNGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiW3dDRmsW5IG0MwiyMFGf2lgpA18zvW8a8Gv F4G8p0/BthnfnJoAd20zuYlsTx3mre3Y3f1qaAAd1GHgpHxS+nApF63q0ivt7P6m b+ojIegLogwPhJyH/0XZBw5V9yGJy532FwpToXhj0Qk1S8epop5MuVzHcqw+TCZ9 B68Z/wcTcAKZDxUZ24Ia//vspYkBG9gffRTcE+/NYoqNklAV97AdxVTL7Y0pRbLf sa2JdOilbm58jvidHpp91lQdEatqixoJDVNQi5B0m9mQCyvHrUnRyMwVqNK1UxFC JGBjV9sYfxQM/12SV1iMK6TJWgDu4jSvDn2zFHTDUQv5jIMllQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDhoF/BaVMD21duTVQOggbsBfg+DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNmVlYWVkN2EtNGEzYy0z ZWNiLTljYTktM2MwMGI4NDY5M2E3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqFcEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIQXIVWqRelGVG6lxIYBF/1UsGdg+Etmg2uTRHsh/qjzLovzLZyNQSO/ NwMQX8Wi7dt33OPmS7Zh8gt+p8lY8qNtGDGGli9/KkZMYPseuFDnP6YwUAuLg8Hp fVT4JG3OFZP4lm05LfLxsqP8Bn3t+ttYyIbUgFk8bxH6iYEIYPhXgtt59xDyHB8m d6V7pIEGVQuW48/nJK4b1+udj5sNhhLuBSswhh20CCMlsNBUDNqSP4tyInL+p552 q2TU0EwwcibrG66RagMSjzuTmUvJKjTK91K9Q2LWVYFTJyOx6KJMgUe484J+w17l la37w+DPHAa6pJydSAxdxdZKxIgt9L4= -----END CERTIFICATE-----Generated at Fri Mar 14 08:41:15 2025 by rpki-client