$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8abd230a-c24c-319f-8460-aa0cf23312f0.roa File: 8abd230a-c24c-319f-8460-aa0cf23312f0.roa (raw, json) Hash identifier: GKy7yxFGZQgmpq2zUtVw4Q0G7+Cn/aA8WvKjKwZljzk= Subject key identifier: E1:01:7C:BE:23:D9:AA:2C:8F:0E:13:1A:A6:E5:54:9E:1C:C8:92:B0 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285848B8F0CEF78CB7F0312E9747C0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8abd230a-c24c-319f-8460-aa0cf23312f0.roa Signing time: Fri 31 Jan 2025 02:00:39 +0000 ROA not before: Fri 31 Jan 2025 02:00:39 +0000 ROA not after: Thu 01 May 2025 01:00:39 +0000 asID: 3356 IP address blocks: 168.87.4.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b8:f0:ce:f7:8c:b7:f0:31:2e:97:47:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jan 31 02:00:39 2025 GMT Not After : May 1 01:00:39 2025 GMT Subject: CN=94715dac-0cb2-4504-a6fb-f21d33af60ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e9:ab:85:b1:bc:41:0a:74:09:14:98:8a:8b: 1a:0e:3e:cf:72:43:4e:e2:3f:a3:29:59:d4:c6:45: 27:0c:7f:ad:dc:82:6b:58:c1:4f:45:d1:c6:2d:b2: f9:cd:6f:75:35:ca:f9:aa:5f:0d:42:3c:de:e8:a3: c3:be:2e:80:60:98:6c:16:60:ad:20:1c:24:6f:62: 4d:97:9c:af:dc:06:dd:fe:b0:5b:a9:84:2c:bc:2a: 8a:6d:81:20:bf:26:06:dc:51:cc:42:47:4b:e0:40: 4b:a5:0d:02:bf:20:63:37:b5:f5:48:56:97:db:74: 09:6d:97:17:5f:0c:e1:e0:0e:43:75:41:f9:4a:af: 5d:8d:ee:27:af:48:a9:94:b4:8a:2c:d9:3d:5e:46: a5:5f:21:fc:f6:a2:65:bf:ac:44:7f:db:fb:5b:18: 8e:3d:64:70:74:30:10:92:b1:6b:dd:f7:f1:27:bd: 21:4a:51:cc:2a:e7:ba:31:44:e5:9a:17:42:d9:8a: 95:33:e0:e0:a6:40:a4:66:95:c6:c4:cc:8e:61:16: 86:92:a5:62:ba:1b:94:c1:bf:21:52:e5:da:46:1f: eb:c9:6c:86:ad:7a:3e:df:70:ae:b9:c1:ca:e9:b9: 0c:c9:a5:f5:e9:36:bb:13:1f:54:8e:5e:26:9f:fc: 23:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:01:7C:BE:23:D9:AA:2C:8F:0E:13:1A:A6:E5:54:9E:1C:C8:92:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8abd230a-c24c-319f-8460-aa0cf23312f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.4.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:d4:d2:2b:70:cf:6d:90:59:91:eb:46:60:dc:15:06:54:62: ab:33:81:b1:55:ae:87:a8:c4:39:79:02:12:b1:6e:78:b8:75: c9:69:6d:57:9d:09:f9:47:fd:2e:8d:71:ad:ff:14:8d:4e:1b: 68:10:6f:60:b3:18:8e:bc:05:3f:fc:44:3e:ed:bb:d8:ee:67: 08:be:93:d5:d1:78:1a:08:e7:b6:43:4b:ae:1b:f2:6f:2d:3c: 3e:4b:e6:5d:ec:2e:a2:23:f3:5e:d7:07:44:15:00:a8:eb:99: e1:d4:24:cf:63:a4:09:17:7b:66:a9:a6:d3:2c:ec:70:c5:1d: e0:92:ed:d2:83:2b:51:31:5a:15:e5:58:3c:e1:7f:a9:e2:03: d8:49:ce:c2:f4:8a:55:ba:67:13:fd:dc:be:08:47:5c:b7:2f: 4e:0c:25:08:d2:12:f9:85:5a:6b:40:b8:fe:1f:ac:19:05:72: e3:ef:60:ec:0c:1d:c1:02:7c:c3:47:bc:54:4e:55:d9:4f:a0: a3:19:3a:c6:07:27:03:5a:e4:0d:9d:64:23:a7:48:be:59:1f: 13:33:e4:c3:b6:44:47:07:38:ea:48:7d:aa:7a:b2:10:da:94: 3e:a4:4c:0a:66:51:e7:f3:62:1a:80:30:f0:0e:fd:7f:a0:0f: 60:8f:b6:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi48M73jLfwMS6XR8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDEzMTAyMDAzOVoXDTI1MDUwMTAxMDAzOVowLzEtMCsGA1UEAxMk OTQ3MTVkYWMtMGNiMi00NTA0LWE2ZmItZjIxZDMzYWY2MGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+mrhbG8QQp0CRSYiosaDj7PckNO4j+jKVnU xkUnDH+t3IJrWMFPRdHGLbL5zW91Ncr5ql8NQjze6KPDvi6AYJhsFmCtIBwkb2JN l5yv3Abd/rBbqYQsvCqKbYEgvyYG3FHMQkdL4EBLpQ0CvyBjN7X1SFaX23QJbZcX Xwzh4A5DdUH5Sq9dje4nr0iplLSKLNk9XkalXyH89qJlv6xEf9v7WxiOPWRwdDAQ krFr3ffxJ70hSlHMKue6MUTlmhdC2YqVM+DgpkCkZpXGxMyOYRaGkqViuhuUwb8h UuXaRh/ryWyGrXo+33CuucHK6bkMyaX16Ta7Ex9Ujl4mn/wjOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOEBfL4j2aosjw4TGqblVJ4cyJKwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvOGFiZDIzMGEtYzI0Yy0z MTlmLTg0NjAtYWEwY2YyMzMxMmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqFcEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHDU0itwz22QWZHrRmDcFQZUYqszgbFVroeoxDl5AhKxbni4dclpbVed CflH/S6Nca3/FI1OG2gQb2CzGI68BT/8RD7tu9juZwi+k9XReBoI57ZDS64b8m8t PD5L5l3sLqIj817XB0QVAKjrmeHUJM9jpAkXe2apptMs7HDFHeCS7dKDK1ExWhXl WDzhf6niA9hJzsL0ilW6ZxP93L4IR1y3L04MJQjSEvmFWmtAuP4frBkFcuPvYOwM HcECfMNHvFROVdlPoKMZOsYHJwNa5A2dZCOnSL5ZHxMz5MO2REcHOOpIfap6shDa lD6kTApmUefzYhqAMPAO/X+gD2CPtkU= -----END CERTIFICATE-----Generated at Sat Apr 5 11:11:32 2025 by rpki-client