$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8843c9af-14b6-3c5a-92fe-77b2a6d68e34.roa File: 8843c9af-14b6-3c5a-92fe-77b2a6d68e34.roa (raw, json) Hash identifier: MMAPmwzXY9p31PuefYSO0vNcgI3Ck2FNywJK1AIBfSw= Subject key identifier: 8F:0D:75:48:40:C5:70:00:7D:09:10:C3:28:A8:89:C1:B5:9A:A5:05 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858494733F01F843B91A8C4FEAFF0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8843c9af-14b6-3c5a-92fe-77b2a6d68e34.roa Signing time: Sun 23 Mar 2025 01:00:39 +0000 ROA not before: Sun 23 Mar 2025 01:00:39 +0000 ROA not after: Sat 21 Jun 2025 01:00:39 +0000 asID: 202 IP address blocks: 168.87.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:47:33:f0:1f:84:3b:91:a8:c4:fe:af:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 23 01:00:39 2025 GMT Not After : Jun 21 01:00:39 2025 GMT Subject: CN=c073be60-4905-4b4e-a4f6-d30f3a98bf84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:5e:67:cc:b3:b2:b8:45:25:95:4f:8e:05:01: 9f:83:12:4d:1a:5b:07:6d:0a:32:24:72:16:9e:8c: 7b:9d:21:75:c9:b8:0c:2b:46:43:9c:3f:16:fa:14: c7:bd:c7:b0:10:77:42:0d:38:c4:b9:bd:a4:ca:73: 0b:45:4e:66:58:0e:53:84:c1:47:ac:71:4d:68:4a: 7b:5d:01:e7:8f:cd:6c:f4:26:8e:5c:cd:c3:dc:4d: c1:89:37:45:2b:b4:c3:3c:29:0a:c0:6c:f6:bd:7c: f9:1f:d1:7e:5f:38:77:c2:ee:72:e0:a3:ba:c5:be: 9e:9d:d8:70:85:62:0f:f9:c0:4a:c9:76:af:2b:a5: f6:8e:e1:ea:ae:fa:3f:39:d9:d8:14:d0:c6:23:b8: 51:c9:b9:ae:f9:ab:6b:9f:4f:f6:44:37:35:d7:4f: 88:a0:df:87:60:2b:80:8a:a6:a4:40:28:fb:e2:64: f1:9a:93:2c:44:69:b3:fe:8b:28:d4:9c:61:7a:c9: bc:c5:e3:a7:1c:b8:3a:f4:6a:76:42:e9:1c:4f:41: a3:1d:f6:97:46:2d:9b:2a:55:1a:50:6a:6c:68:f0: 31:bd:a9:2f:cc:c0:80:12:82:52:7d:e4:a6:35:75: 06:e7:85:ee:02:fe:1f:82:44:e8:58:b5:39:82:5c: f3:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:0D:75:48:40:C5:70:00:7D:09:10:C3:28:A8:89:C1:B5:9A:A5:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8843c9af-14b6-3c5a-92fe-77b2a6d68e34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:a4:36:24:92:6c:d4:73:c5:12:f3:f2:2a:a9:28:bd:08:ec: be:69:a7:1b:fd:62:f2:5b:67:ed:1b:c7:30:da:bf:ee:24:2d: a9:b8:39:21:66:6b:e1:25:8b:99:3f:71:6f:73:73:01:5c:20: 89:c8:8e:69:11:ff:29:c0:c7:66:a5:e9:df:f3:09:61:79:35: 07:89:04:2a:42:b2:59:dc:9b:71:d7:75:d0:b1:61:41:d1:d4: ab:f5:fb:0e:a0:2a:60:1a:40:63:ca:1b:b4:1b:c5:30:ea:9f: 7a:44:28:da:55:bb:c5:f1:0d:2a:3f:f2:b5:6e:5d:2a:52:f9: d9:b4:ca:14:99:e9:bf:7a:43:fb:26:af:cc:29:9a:06:d4:b4: 77:d1:3e:a3:f2:73:b1:25:3c:f2:78:45:22:72:43:e7:a9:45: 65:70:ec:e9:7d:5d:8d:2e:03:4e:99:95:ea:4e:56:d3:d5:dd: a2:0e:35:b4:fb:e7:5d:68:5c:8d:9d:01:90:3b:69:b8:d5:b7: cf:8b:64:43:fb:69:0e:36:fd:7a:81:64:c0:b5:b5:bc:eb:9a: 41:7b:e5:ef:f3:fc:6b:0b:a1:69:65:d6:be:f9:5f:73:17:46: 3f:49:c7:9a:da:f4:5c:4d:9c:a9:5a:44:02:51:c8:4b:08:4b: f0:84:05:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElHM/AfhDuRqMT+r/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDMyMzAxMDAzOVoXDTI1MDYyMTAxMDAzOVowLzEtMCsGA1UEAxMk YzA3M2JlNjAtNDkwNS00YjRlLWE0ZjYtZDMwZjNhOThiZjg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhF5nzLOyuEUllU+OBQGfgxJNGlsHbQoyJHIW nox7nSF1ybgMK0ZDnD8W+hTHvcewEHdCDTjEub2kynMLRU5mWA5ThMFHrHFNaEp7 XQHnj81s9CaOXM3D3E3BiTdFK7TDPCkKwGz2vXz5H9F+Xzh3wu5y4KO6xb6endhw hWIP+cBKyXavK6X2juHqrvo/OdnYFNDGI7hRybmu+atrn0/2RDc110+IoN+HYCuA iqakQCj74mTxmpMsRGmz/oso1Jxhesm8xeOnHLg69Gp2QukcT0GjHfaXRi2bKlUa UGpsaPAxvakvzMCAEoJSfeSmNXUG54XuAv4fgkToWLU5glzzvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI8NdUhAxXAAfQkQwyioicG1mqUFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvODg0M2M5YWYtMTRiNi0z YzVhLTkyZmUtNzdiMmE2ZDY4ZTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqFcAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHWkNiSSbNRzxRLz8iqpKL0I7L5ppxv9YvJbZ+0bxzDav+4kLam4OSFm a+Eli5k/cW9zcwFcIInIjmkR/ynAx2al6d/zCWF5NQeJBCpCslncm3HXddCxYUHR 1Kv1+w6gKmAaQGPKG7QbxTDqn3pEKNpVu8XxDSo/8rVuXSpS+dm0yhSZ6b96Q/sm r8wpmgbUtHfRPqPyc7ElPPJ4RSJyQ+epRWVw7Ol9XY0uA06ZlepOVtPV3aIONbT7 511oXI2dAZA7abjVt8+LZEP7aQ42/XqBZMC1tbzrmkF75e/z/GsLoWll1r75X3MX Rj9Jx5ra9FxNnKlaRAJRyEsIS/CEBf0= -----END CERTIFICATE-----Generated at Sat Apr 5 16:41:56 2025 by rpki-client