$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a1d0d491-fe6e-38a5-87b7-0a94cc1a0825.roa File: a1d0d491-fe6e-38a5-87b7-0a94cc1a0825.roa (raw, json) Hash identifier: FBhIX5RrV+YBAuzGZdhkP4PHb/CA0yifXfOeMaBptS0= Subject key identifier: 6F:3C:1E:9C:D7:59:E4:58:CA:1F:B6:EC:9B:41:2D:7E:33:13:BF:40 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285848A9962B0DB8A8E42FAEBC04F8 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a1d0d491-fe6e-38a5-87b7-0a94cc1a0825.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 202 IP address blocks: 168.87.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:2b:0d:b8:a8:e4:2f:ae:bc:04:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=5c19ccad-979a-4753-9d79-f3dd3cbe1b44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:03:1b:c9:96:e3:2b:20:0b:82:24:e6:e7:70: fd:97:ee:79:c8:d9:6d:8e:83:02:42:42:1f:18:a7: 04:c3:de:d1:49:33:66:c8:41:58:ec:aa:34:5c:e9: 79:c2:e5:0a:c9:00:98:c3:c2:34:d6:33:48:d0:2c: 9b:70:7f:56:6a:72:f8:02:6c:11:e3:de:58:61:74: 12:83:e4:72:49:91:00:be:10:cf:18:72:cd:ed:32: 41:33:3e:fe:ee:ba:c1:5a:c3:69:8c:93:85:a9:b6: 6d:72:0d:77:35:7b:94:31:01:8b:97:17:30:06:d8: 52:c7:64:dd:20:3d:9e:da:af:fa:c1:41:81:b0:54: d2:47:7a:8a:f0:13:93:58:23:b7:ab:73:48:6d:bd: 24:27:41:39:3c:a8:f0:08:e3:ca:6d:3d:d5:c3:66: 0b:d1:dd:a8:86:cc:98:c9:46:c1:9b:d3:e1:a9:be: a3:94:63:54:05:fd:69:b6:93:db:ce:92:31:0c:23: 2c:02:23:a4:10:1e:63:0a:e9:7d:1c:9f:96:f8:7b: 63:f6:4f:1a:4a:79:3e:e8:c0:9a:1c:97:92:dc:09: 39:6c:d9:37:a7:81:96:72:87:48:7d:3f:e8:04:5f: 73:d6:3e:32:ae:01:3e:48:7d:81:74:bf:4f:ae:84: 17:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:3C:1E:9C:D7:59:E4:58:CA:1F:B6:EC:9B:41:2D:7E:33:13:BF:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a1d0d491-fe6e-38a5-87b7-0a94cc1a0825.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:05:99:a0:72:5a:5a:36:82:b8:c4:51:75:da:ab:35:c9:1c: 34:81:67:82:9e:80:e4:ae:52:61:4a:cc:04:81:7c:d9:a3:83: 5a:70:d9:cf:ee:40:2e:fa:2b:53:90:69:19:74:0c:a4:eb:27: 3a:65:84:f9:e6:c7:2a:11:bf:32:1f:d0:5c:f0:41:27:75:f6: 42:48:ce:4d:fb:7d:d2:ab:23:0b:31:78:58:3e:a8:d4:13:16: 59:16:42:00:f7:e6:5b:6f:95:73:41:40:0d:1d:ca:82:ab:47: 5f:05:6d:18:c3:34:76:68:95:0f:99:3d:c4:46:a0:14:31:3a: 7a:07:d1:c0:0c:e0:0c:fc:0f:ba:15:f3:ce:5d:ee:b2:67:f8: e1:16:a7:69:f3:4c:87:2f:ab:d8:85:50:73:49:35:53:ca:a6: 3c:ba:c8:8a:97:a0:ff:a4:1a:1c:e2:8d:13:fa:fc:79:94:26: 2f:e1:6e:70:94:71:ef:5c:37:1c:51:fc:0f:62:71:01:92:12: 77:7d:a3:cf:36:b7:60:1a:82:14:50:f5:29:cc:37:50:12:f2: f8:f8:e3:8f:d6:19:74:eb:74:76:bd:f4:2f:56:71:52:af:4c: 52:da:ea:b2:02:5f:1d:49:a5:68:dc:64:21:6a:ca:4a:fd:c6: cc:bf:9f:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiplisNuKjkL668BPgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk NWMxOWNjYWQtOTc5YS00NzUzLTlkNzktZjNkZDNjYmUxYjQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQMbyZbjKyALgiTm53D9l+55yNltjoMCQkIf GKcEw97RSTNmyEFY7Ko0XOl5wuUKyQCYw8I01jNI0CybcH9WanL4AmwR495YYXQS g+RySZEAvhDPGHLN7TJBMz7+7rrBWsNpjJOFqbZtcg13NXuUMQGLlxcwBthSx2Td ID2e2q/6wUGBsFTSR3qK8BOTWCO3q3NIbb0kJ0E5PKjwCOPKbT3Vw2YL0d2ohsyY yUbBm9Phqb6jlGNUBf1ptpPbzpIxDCMsAiOkEB5jCul9HJ+W+Htj9k8aSnk+6MCa HJeS3Ak5bNk3p4GWcodIfT/oBF9z1j4yrgE+SH2BdL9ProQXDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG88HpzXWeRYyh+27JtBLX4zE79AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYTFkMGQ0OTEtZmU2ZS0z OGE1LTg3YjctMGE5NGNjMWEwODI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqFdIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIAFmaByWlo2grjEUXXaqzXJHDSBZ4KegOSuUmFKzASBfNmjg1pw2c/u QC76K1OQaRl0DKTrJzplhPnmxyoRvzIf0FzwQSd19kJIzk37fdKrIwsxeFg+qNQT FlkWQgD35ltvlXNBQA0dyoKrR18FbRjDNHZolQ+ZPcRGoBQxOnoH0cAM4Az8D7oV 885d7rJn+OEWp2nzTIcvq9iFUHNJNVPKpjy6yIqXoP+kGhzijRP6/HmUJi/hbnCU ce9cNxxR/A9icQGSEnd9o882t2AaghRQ9SnMN1AS8vj444/WGXTrdHa99C9WcVKv TFLa6rICXx1JpWjcZCFqykr9xsy/n2Q= -----END CERTIFICATE-----Generated at Sat Apr 5 16:39:39 2025 by rpki-client