$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/78648d11-2f6f-3a66-8f68-3edfca0d6da9.roa File: 78648d11-2f6f-3a66-8f68-3edfca0d6da9.roa (raw, json) Hash identifier: 2hDBzK+OmlCqEnRyNOPuEQbqvf95iLuSGt2R45MIhV0= Subject key identifier: BB:F1:99:C6:B0:7F:21:62:97:EF:1B:C4:01:B7:1B:96:49:FB:18:F8 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858491246C8ED42364C658C081300 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/78648d11-2f6f-3a66-8f68-3edfca0d6da9.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 202 IP address blocks: 168.87.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:c8:ed:42:36:4c:65:8c:08:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=5da672fa-1ce3-431f-a8c5-71ab8ad9def1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e9:0c:3c:f5:25:2b:fa:11:79:c6:31:e5:99: ed:2d:3c:58:7b:e0:40:ab:67:dc:fd:53:57:ec:75: 47:09:a8:bb:95:6a:54:26:9a:f2:de:66:11:bb:70: 94:6a:64:84:5a:a0:4c:94:0f:b6:3b:0f:27:f2:92: c8:87:a5:41:91:50:32:f6:d0:01:f8:e5:6b:c1:f2: 08:60:b0:79:f2:25:86:e3:ce:dd:80:a5:7e:9d:c5: 79:94:0b:41:e0:f9:a7:6b:fc:a6:57:06:11:dc:74: 00:e8:29:bc:f3:45:3e:61:f1:fe:0a:4d:f5:c6:6e: b4:36:39:e0:a1:ae:e6:84:47:36:ef:66:e7:55:12: fb:16:15:e2:be:e2:19:26:2c:74:41:b0:b4:86:50: fc:2c:40:72:6b:5f:97:01:3f:36:19:ad:62:d0:2d: 70:71:60:c8:e9:41:ed:c6:8a:72:40:a0:b9:38:96: 1f:75:09:3a:de:90:25:d4:f0:97:59:15:75:d2:39: 3e:22:18:78:1f:ef:f2:8f:de:b7:98:f0:99:21:89: 05:59:fd:69:13:05:fc:50:e1:7b:7d:52:97:00:a6: 8e:4c:1f:00:a4:84:21:49:3a:2b:c2:db:34:f9:27: 83:a5:fa:49:84:20:51:18:99:44:82:16:56:b4:3a: d9:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:F1:99:C6:B0:7F:21:62:97:EF:1B:C4:01:B7:1B:96:49:FB:18:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/78648d11-2f6f-3a66-8f68-3edfca0d6da9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:71:df:14:23:eb:e4:d8:5d:ff:e0:69:c4:ae:00:0f:24:ec: 9e:6a:54:5a:a4:af:cb:1a:76:5a:08:2e:43:fe:41:07:9b:f6: 40:92:33:8c:a3:2c:7a:0a:3d:75:71:5b:ff:50:ae:c1:c3:cc: d1:54:c4:36:1d:ed:be:3f:0c:43:0c:48:0c:aa:fe:12:0f:20: 4e:fc:6d:1e:c1:18:78:b8:f5:0d:17:88:0a:bd:69:84:fb:64: 7d:5c:fa:09:85:bc:58:16:4d:a9:7f:00:bd:31:79:5c:38:ba: f8:a6:de:f1:44:03:7f:ec:e9:84:da:7b:e6:ea:fc:bb:fb:f9: fb:4f:e2:2c:ad:92:73:18:ae:a2:03:10:93:75:e1:43:11:b3: 68:d8:ae:f2:82:b8:7d:f5:c2:44:12:81:e5:31:1e:8a:e2:4b: a4:22:a8:44:24:8a:0b:87:6f:d9:91:6b:fc:df:ea:95:d7:6c: ca:ef:19:b3:98:fa:60:da:40:8b:b1:d7:d2:fb:3f:7b:be:12: db:5a:45:8c:20:42:5b:9c:0e:96:d0:a1:ac:06:b5:6a:9b:cf: 9f:e7:80:aa:f6:af:e8:dc:fc:2f:75:5a:55:7a:f6:93:04:54: a3:1d:de:50:c2:dd:ca:ff:84:89:c9:a0:f7:12:07:d3:9d:86: 5f:20:f1:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRsjtQjZMZYwIEwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk NWRhNjcyZmEtMWNlMy00MzFmLWE4YzUtNzFhYjhhZDlkZWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmekMPPUlK/oRecYx5ZntLTxYe+BAq2fc/VNX 7HVHCai7lWpUJpry3mYRu3CUamSEWqBMlA+2Ow8n8pLIh6VBkVAy9tAB+OVrwfII YLB58iWG487dgKV+ncV5lAtB4Pmna/ymVwYR3HQA6Cm880U+YfH+Ck31xm60Njng oa7mhEc272bnVRL7FhXivuIZJix0QbC0hlD8LEBya1+XAT82Ga1i0C1wcWDI6UHt xopyQKC5OJYfdQk63pAl1PCXWRV10jk+Ihh4H+/yj963mPCZIYkFWf1pEwX8UOF7 fVKXAKaOTB8ApIQhSTorwts0+SeDpfpJhCBRGJlEghZWtDrZuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLvxmcawfyFil+8bxAG3G5ZJ+xj4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNzg2NDhkMTEtMmY2Zi0z YTY2LThmNjgtM2VkZmNhMGQ2ZGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFeCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGdx3xQj6+TYXf/gacSuAA8k7J5qVFqkr8sadloILkP+QQeb9kCSM4yj LHoKPXVxW/9QrsHDzNFUxDYd7b4/DEMMSAyq/hIPIE78bR7BGHi49Q0XiAq9aYT7 ZH1c+gmFvFgWTal/AL0xeVw4uvim3vFEA3/s6YTae+bq/Lv7+ftP4iytknMYrqID EJN14UMRs2jYrvKCuH31wkQSgeUxHoriS6QiqEQkiguHb9mRa/zf6pXXbMrvGbOY +mDaQIux19L7P3u+EttaRYwgQlucDpbQoawGtWqbz5/ngKr2r+jc/C91WlV69pME VKMd3lDC3cr/hInJoPcSB9Odhl8g8Sc= -----END CERTIFICATE-----Generated at Fri Mar 14 09:22:13 2025 by rpki-client