$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/7f93ed14-adce-318a-a8a0-17029e539127.roa File: 7f93ed14-adce-318a-a8a0-17029e539127.roa (raw, json) Hash identifier: HjRhUf6e/alQ/Ag/RzIpeg7xwLo/MYI4cJSwN0vtBP8= Subject key identifier: 14:5A:85:35:5D:4F:D7:1A:FB:66:65:39:34:B2:16:A6:71:77:62:4D Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858494469469A7B7996C0DF8C4980 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/7f93ed14-adce-318a-a8a0-17029e539127.roa Signing time: Sat 22 Mar 2025 01:00:40 +0000 ROA not before: Sat 22 Mar 2025 01:00:40 +0000 ROA not after: Fri 20 Jun 2025 01:00:40 +0000 asID: 202 IP address blocks: 168.87.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:44:69:46:9a:7b:79:96:c0:df:8c:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 22 01:00:40 2025 GMT Not After : Jun 20 01:00:40 2025 GMT Subject: CN=9ec08fa1-fea7-40e9-90e6-3678e52e0157 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:cf:95:34:cb:1e:67:8f:8e:80:cc:68:43:e6: 0f:6b:bd:97:cd:2e:f8:36:6d:69:5d:82:47:3e:d3: 2c:c4:af:ef:11:c8:28:6e:0d:10:a8:78:f2:78:95: 67:40:95:16:18:c0:6b:df:a9:fe:8e:00:d5:78:02: 2e:23:0a:34:6f:97:68:74:02:aa:a1:3c:ce:06:84: 02:f0:2b:88:2e:1c:08:ff:15:ee:1e:7c:33:11:54: 69:b0:22:b0:4d:02:08:82:a6:c0:bd:ee:6d:28:ae: 0f:5c:4d:f6:d0:22:92:e1:8c:7c:b1:b9:9f:1d:01: 17:9d:3b:c9:ed:7b:66:35:cb:36:03:a0:69:8d:40: 32:20:69:c2:7b:fa:af:e0:8b:c5:56:91:76:80:73: 91:44:a0:96:0e:89:bd:9b:4d:86:fa:f3:01:ee:55: 69:0f:aa:ac:77:6d:a6:3a:42:12:44:81:09:62:78: 63:a9:c4:fa:e3:2a:00:ab:ff:7a:11:4f:b8:21:0b: be:84:4b:a1:f2:af:97:45:20:25:6d:36:30:4a:04: a0:f3:aa:69:f8:6b:ee:0b:25:f6:77:bd:a6:cd:db: 08:b8:f8:25:b9:94:c2:53:e0:e8:2b:22:cf:04:67: 97:28:70:6f:9f:53:89:5c:15:ce:7c:86:4f:49:e9: 26:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:5A:85:35:5D:4F:D7:1A:FB:66:65:39:34:B2:16:A6:71:77:62:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/7f93ed14-adce-318a-a8a0-17029e539127.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:45:3f:6f:a5:b4:e4:c4:3e:95:09:61:b8:29:ab:c7:19:b6: 5a:b0:4e:d2:6e:17:24:06:35:12:8b:f5:19:b4:6f:23:a5:c9: 6a:01:e7:74:a4:05:53:38:cd:e0:9d:bb:15:14:33:f8:e3:c0: 4a:99:95:3d:bd:d0:12:96:25:78:a7:80:c9:fa:0f:fc:c9:7e: 12:43:05:e0:a1:e2:3c:66:71:c6:01:83:a8:36:e4:02:c5:79: 11:30:92:30:90:5b:29:f5:c7:71:e0:64:cb:44:42:9e:13:12: c0:96:f3:53:41:c1:87:73:59:5e:94:6b:4e:ab:49:60:26:c5: 63:5d:ab:e1:37:9b:e4:9a:a6:ad:02:2b:22:48:8d:14:a7:17: 8e:d6:ea:04:e5:65:7a:b0:70:d4:e0:60:ab:04:9e:15:30:01: c1:66:48:6c:fc:d4:3c:bc:cf:bf:0e:f7:ab:dd:64:1d:11:33: b7:8a:29:64:18:3c:36:a8:cb:bb:7b:9d:0b:ff:5f:82:5d:f0: 4d:72:db:bf:f7:04:23:77:c7:de:44:ed:8a:7c:5e:fb:ed:ad: dd:90:22:57:53:c8:42:21:5a:15:54:02:ab:5a:78:e0:0b:9c: af:51:62:70:e5:a6:dd:01:0f:85:88:30:9b:02:0b:3e:80:43: ea:9f:da:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElEaUaae3mWwN+MSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk OWVjMDhmYTEtZmVhNy00MGU5LTkwZTYtMzY3OGU1MmUwMTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3c+VNMseZ4+OgMxoQ+YPa72XzS74Nm1pXYJH PtMsxK/vEcgobg0QqHjyeJVnQJUWGMBr36n+jgDVeAIuIwo0b5dodAKqoTzOBoQC 8CuILhwI/xXuHnwzEVRpsCKwTQIIgqbAve5tKK4PXE320CKS4Yx8sbmfHQEXnTvJ 7XtmNcs2A6BpjUAyIGnCe/qv4IvFVpF2gHORRKCWDom9m02G+vMB7lVpD6qsd22m OkISRIEJYnhjqcT64yoAq/96EU+4IQu+hEuh8q+XRSAlbTYwSgSg86pp+GvuCyX2 d72mzdsIuPgluZTCU+DoKyLPBGeXKHBvn1OJXBXOfIZPSekmKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBRahTVdT9ca+2ZlOTSyFqZxd2JNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvN2Y5M2VkMTQtYWRjZS0z MThhLWE4YTAtMTcwMjllNTM5MTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqFdAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGVFP2+ltOTEPpUJYbgpq8cZtlqwTtJuFyQGNRKL9Rm0byOlyWoB53Sk BVM4zeCduxUUM/jjwEqZlT290BKWJXingMn6D/zJfhJDBeCh4jxmccYBg6g25ALF eREwkjCQWyn1x3HgZMtEQp4TEsCW81NBwYdzWV6Ua06rSWAmxWNdq+E3m+Sapq0C KyJIjRSnF47W6gTlZXqwcNTgYKsEnhUwAcFmSGz81Dy8z78O96vdZB0RM7eKKWQY PDaoy7t7nQv/X4Jd8E1y27/3BCN3x95E7Yp8Xvvtrd2QIldTyEIhWhVUAqtaeOAL nK9RYnDlpt0BD4WIMJsCCz6AQ+qf2mw= -----END CERTIFICATE-----Generated at Sat Apr 5 16:45:22 2025 by rpki-client