$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8843c9af-14b6-3c5a-92fe-77b2a6d68e34.roa File: 8843c9af-14b6-3c5a-92fe-77b2a6d68e34.roa (raw, json) Hash identifier: UHG73xgQsQ91NrfM4FLzj/UrJj0qSul7Mnt5FC+W1C4= Subject key identifier: 15:61:5B:11:F8:03:6F:60:E9:DD:FD:37:20:5D:86:78:4F:89:5D:DC Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285847872136C8F29DB74D9057FD00 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8843c9af-14b6-3c5a-92fe-77b2a6d68e34.roa Signing time: Sun 13 Oct 2024 13:00:42 +0000 ROA not before: Sun 13 Oct 2024 13:00:42 +0000 ROA not after: Sat 11 Jan 2025 14:00:42 +0000 asID: 202 IP address blocks: 168.87.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:87:21:36:c8:f2:9d:b7:4d:90:57:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 13 13:00:42 2024 GMT Not After : Jan 11 14:00:42 2025 GMT Subject: CN=3883c74e-4bac-47ea-a8db-a63dd3390864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:08:ae:f5:50:52:c5:c8:e1:8e:52:9e:da:a7: f8:35:46:29:b6:9b:98:8d:71:15:63:79:b0:59:b8: 86:c7:cd:2b:57:4a:5e:71:b5:80:bf:5b:c4:ef:c6: 03:e2:b7:a8:24:70:a4:10:70:d1:5d:48:b6:89:4a: 77:de:1c:4c:2c:9b:02:8f:1b:98:ff:16:e0:f5:44: 06:a0:77:ab:65:68:8b:21:1e:1f:d9:5d:05:f3:11: 47:98:46:c9:f0:ac:8d:4e:0f:29:38:c8:be:45:97: 52:57:77:4f:b4:42:fe:6f:2a:f7:95:7c:48:a2:95: 6b:e0:b7:af:52:ab:f6:b2:47:59:0e:c2:a1:95:c9: 7e:73:3e:f1:05:ea:fb:16:ce:3e:0f:3b:f8:e0:e9: 62:e9:58:ee:4d:23:6d:ae:d6:70:04:31:bf:8a:11: db:71:eb:b8:02:7a:1e:25:f1:62:18:8c:90:16:07: 26:7e:5a:9c:9a:32:c6:ba:40:8a:c8:83:f0:33:a0: 85:ff:d2:88:60:42:d5:18:d6:89:3b:e9:43:44:83: b5:83:ba:2e:bd:2e:00:20:55:45:d6:92:5d:13:03: 8d:f2:0a:57:3f:19:95:48:69:be:0a:b2:7c:9f:ba: e0:08:3b:43:92:5e:ca:70:fe:fa:a4:ae:f7:62:79: 30:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:61:5B:11:F8:03:6F:60:E9:DD:FD:37:20:5D:86:78:4F:89:5D:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8843c9af-14b6-3c5a-92fe-77b2a6d68e34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:37:ae:0f:99:40:56:b5:74:c1:a7:53:7a:69:0d:31:f9:72: 91:9f:13:ec:66:89:a6:33:2a:6d:69:8e:f4:80:0f:c4:47:44: 27:76:a6:0c:d6:f5:1d:a4:72:96:a9:51:17:46:c3:74:75:c3: 64:54:79:9b:6f:29:03:a2:92:a7:73:73:d0:51:52:0d:8e:71: a6:3c:da:b0:4a:59:d3:35:de:f7:54:07:a7:d4:7e:72:16:74: 2d:dd:75:a4:bc:29:23:e6:94:cd:94:09:bc:d3:c8:d0:61:ad: 50:9d:b1:41:ac:a7:45:88:ca:de:d8:26:c5:78:54:ce:d3:f0: 4c:71:33:7d:2c:74:c2:f0:a5:41:29:23:5d:86:66:6e:d9:71: f7:0d:31:8f:f7:1a:f8:03:e9:6b:c2:0d:d7:a0:ca:e7:8d:f3: c5:84:50:bb:12:16:6c:10:83:f4:f9:62:ef:58:29:54:12:ce: ae:7b:58:cf:45:c3:a9:e1:ea:fc:25:d0:3f:4a:05:53:a4:52: 73:3c:85:70:11:67:15:a2:c9:bf:76:d4:e8:4f:e3:46:a7:8f: 50:b2:d5:e3:30:9d:cd:2e:f9:a1:54:cc:7c:9f:92:e0:54:b4: c8:09:8f:a7:76:06:07:86:80:5b:dc:27:2c:25:db:bd:67:4f: 2b:73:f3:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeHITbI8p23TZBX/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI0MTAxMzEzMDA0MloXDTI1MDExMTE0MDA0MlowLzEtMCsGA1UEAxMk Mzg4M2M3NGUtNGJhYy00N2VhLWE4ZGItYTYzZGQzMzkwODY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhAiu9VBSxcjhjlKe2qf4NUYptpuYjXEVY3mw WbiGx80rV0pecbWAv1vE78YD4reoJHCkEHDRXUi2iUp33hxMLJsCjxuY/xbg9UQG oHerZWiLIR4f2V0F8xFHmEbJ8KyNTg8pOMi+RZdSV3dPtEL+byr3lXxIopVr4Lev Uqv2skdZDsKhlcl+cz7xBer7Fs4+Dzv44Oli6VjuTSNtrtZwBDG/ihHbceu4Anoe JfFiGIyQFgcmflqcmjLGukCKyIPwM6CF/9KIYELVGNaJO+lDRIO1g7ouvS4AIFVF 1pJdEwON8gpXPxmVSGm+CrJ8n7rgCDtDkl7KcP76pK73YnkwGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBVhWxH4A29g6d39NyBdhnhPiV3cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvODg0M2M5YWYtMTRiNi0z YzVhLTkyZmUtNzdiMmE2ZDY4ZTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqFcAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJI3rg+ZQFa1dMGnU3ppDTH5cpGfE+xmiaYzKm1pjvSAD8RHRCd2pgzW 9R2kcpapURdGw3R1w2RUeZtvKQOikqdzc9BRUg2OcaY82rBKWdM13vdUB6fUfnIW dC3ddaS8KSPmlM2UCbzTyNBhrVCdsUGsp0WIyt7YJsV4VM7T8ExxM30sdMLwpUEp I12GZm7ZcfcNMY/3GvgD6WvCDdegyueN88WEULsSFmwQg/T5Yu9YKVQSzq57WM9F w6nh6vwl0D9KBVOkUnM8hXARZxWiyb921OhP40anj1Cy1eMwnc0u+aFUzHyfkuBU tMgJj6d2BgeGgFvcJywl271nTytz88w= -----END CERTIFICATE-----Generated at Thu Nov 21 21:09:44 2024 by rpki-client on console-fra.rpki-client.org