$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/96e35a71-f0e3-34dd-b42a-3c90606a1834.roa File: 96e35a71-f0e3-34dd-b42a-3c90606a1834.roa (raw, json) Hash identifier: xSn2tRud7Dsdzyd6asJ5M8JSf/pOLVik+Alf14L2HFc= Subject key identifier: B0:D0:2B:A6:05:02:AD:D3:16:BD:AA:6F:60:99:09:11:A3:DE:23:CF Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858494733F0798C2B08FF230B3700 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/96e35a71-f0e3-34dd-b42a-3c90606a1834.roa Signing time: Sun 23 Mar 2025 01:00:39 +0000 ROA not before: Sun 23 Mar 2025 01:00:39 +0000 ROA not after: Sat 21 Jun 2025 01:00:39 +0000 asID: 3360 IP address blocks: 168.87.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:47:33:f0:79:8c:2b:08:ff:23:0b:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 23 01:00:39 2025 GMT Not After : Jun 21 01:00:39 2025 GMT Subject: CN=201a4d14-b99f-4bb7-a8f2-ff12853e2970 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:28:5a:cd:3c:7c:84:bf:fe:49:40:9c:b5:35: 83:23:b6:5b:a4:1d:14:8e:66:53:d2:7c:c3:d7:e4: d6:17:00:0c:db:a8:97:95:ae:0e:25:d0:d2:af:86: d1:30:a8:a3:f3:a7:1c:39:7c:16:f3:0c:34:66:e3: ad:e6:cc:a8:ea:5a:72:17:6a:aa:16:28:d7:21:d3: 4d:48:bb:85:7b:fe:e4:03:50:42:c5:db:72:6c:e5: 24:e6:b0:95:7f:76:3a:db:00:b4:35:22:49:04:4e: 11:64:3f:d0:42:e1:42:19:07:41:79:10:6f:5c:1f: d1:56:35:41:33:ca:66:d0:42:9e:0a:fd:73:0c:b0: 60:3a:5a:8f:05:91:28:90:46:c2:a4:1d:47:43:da: 3e:36:88:ea:00:10:77:2f:89:e2:f1:e0:8a:80:f4: ee:21:e3:cb:b0:85:3c:f6:4f:8c:14:80:3e:35:a1: 46:b8:96:3b:c5:03:44:bb:2b:40:bb:78:0c:d2:24: 7d:14:2c:f9:be:18:a2:85:84:33:a8:b5:b4:40:22: 2f:ad:24:20:a6:a2:77:b9:ce:95:21:a3:64:3b:f7: 95:04:32:c0:a7:e7:36:f3:55:89:de:0a:85:2c:5f: ec:53:3f:1a:9b:64:57:64:86:fd:79:84:3c:65:a4: cf:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:D0:2B:A6:05:02:AD:D3:16:BD:AA:6F:60:99:09:11:A3:DE:23:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/96e35a71-f0e3-34dd-b42a-3c90606a1834.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.51.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:35:74:68:c6:7f:3c:85:d7:32:64:1a:2e:a8:87:46:88:fc: 3a:8b:f7:60:34:39:74:22:58:1d:e2:e5:86:e6:21:ea:4e:f3: 4b:b6:ef:6b:bb:db:59:ab:4f:2b:97:cc:a4:b7:8c:4a:8c:19: 31:69:45:b4:4e:fc:a0:21:c6:da:fe:86:f9:be:2e:27:6a:45: b8:f1:21:ee:66:b7:a0:2c:8f:e1:f5:97:8e:ce:44:fb:b2:c7: aa:e7:20:d4:7a:ee:dc:2f:13:3c:ea:69:c6:b4:cd:e9:c0:4a: 8a:a8:73:2d:14:ad:dd:0c:79:dd:85:22:45:81:5a:5d:d2:07: 39:d3:9b:d2:b1:85:ca:b9:9f:39:25:05:8a:29:4f:d6:8a:e3: 82:37:4b:16:f1:71:9f:d3:e4:38:65:ce:f9:64:00:91:c0:53: 9d:9f:2a:7a:7d:2b:6f:5d:d3:f0:d9:73:27:66:bb:18:59:98: 94:fb:e0:a9:82:3e:57:f3:8f:17:d8:46:88:5e:67:00:c9:d1: cd:9c:c2:f3:55:57:2c:6a:2e:31:ff:63:2f:b1:47:cd:6b:9d: 9d:e3:45:14:57:aa:e0:8d:50:65:c3:02:08:aa:e5:6f:27:fb: dd:f3:bf:f3:64:86:c4:ea:c3:cd:29:e9:6f:09:92:43:af:9f: a3:30:35:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElHM/B5jCsI/yMLNwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDMyMzAxMDAzOVoXDTI1MDYyMTAxMDAzOVowLzEtMCsGA1UEAxMk MjAxYTRkMTQtYjk5Zi00YmI3LWE4ZjItZmYxMjg1M2UyOTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiShazTx8hL/+SUCctTWDI7ZbpB0UjmZT0nzD 1+TWFwAM26iXla4OJdDSr4bRMKij86ccOXwW8ww0ZuOt5syo6lpyF2qqFijXIdNN SLuFe/7kA1BCxdtybOUk5rCVf3Y62wC0NSJJBE4RZD/QQuFCGQdBeRBvXB/RVjVB M8pm0EKeCv1zDLBgOlqPBZEokEbCpB1HQ9o+NojqABB3L4ni8eCKgPTuIePLsIU8 9k+MFIA+NaFGuJY7xQNEuytAu3gM0iR9FCz5vhiihYQzqLW0QCIvrSQgpqJ3uc6V IaNkO/eVBDLAp+c281WJ3gqFLF/sUz8am2RXZIb9eYQ8ZaTPQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLDQK6YFAq3TFr2qb2CZCRGj3iPPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvOTZlMzVhNzEtZjBlMy0z NGRkLWI0MmEtM2M5MDYwNmExODM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFczMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFI1dGjGfzyF1zJkGi6oh0aI/DqL92A0OXQiWB3i5YbmIepO80u272u7 21mrTyuXzKS3jEqMGTFpRbRO/KAhxtr+hvm+LidqRbjxIe5mt6Asj+H1l47ORPuy x6rnINR67twvEzzqaca0zenASoqocy0Urd0Med2FIkWBWl3SBznTm9Kxhcq5nzkl BYopT9aK44I3SxbxcZ/T5DhlzvlkAJHAU52fKnp9K29d0/DZcydmuxhZmJT74KmC PlfzjxfYRoheZwDJ0c2cwvNVVyxqLjH/Yy+xR81rnZ3jRRRXquCNUGXDAgiq5W8n +93zv/NkhsTqw80p6W8JkkOvn6MwNYw= -----END CERTIFICATE-----Generated at Sat Apr 5 23:21:16 2025 by rpki-client