$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a1d0d491-fe6e-38a5-87b7-0a94cc1a0825.roa File: a1d0d491-fe6e-38a5-87b7-0a94cc1a0825.roa (raw, json) Hash identifier: wOWf/7dL3+FoZlx2Ece9YvIYnAschIFL0EkLZ8HPP8M= Subject key identifier: 52:42:01:38:36:D0:A8:44:86:72:30:F4:67:BD:EB:45:14:95:D8:7C Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285847CA3F435A26BEB16A3C151DE0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a1d0d491-fe6e-38a5-87b7-0a94cc1a0825.roa Signing time: Wed 06 Nov 2024 14:00:41 +0000 ROA not before: Wed 06 Nov 2024 14:00:41 +0000 ROA not after: Tue 04 Feb 2025 14:00:41 +0000 asID: 202 IP address blocks: 168.87.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ca:3f:43:5a:26:be:b1:6a:3c:15:1d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Nov 6 14:00:41 2024 GMT Not After : Feb 4 14:00:41 2025 GMT Subject: CN=602c0886-82c5-4959-b92a-603a0a79a729 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:fd:88:54:42:d8:24:c8:2b:74:ed:6f:0d:98: 47:6f:4d:db:8d:64:2c:1f:0b:a2:12:7f:e3:24:6a: aa:b3:da:8f:38:75:b5:c0:e4:05:c3:9f:a7:48:3f: d4:0b:c8:58:f1:b4:12:d1:ac:65:1a:67:e6:c4:07: 04:36:9d:34:66:ec:8f:dd:44:f6:7e:d2:bf:cd:91: 35:f2:63:cb:b1:d9:d1:b2:d8:05:f1:47:18:7f:62: 1e:31:92:b1:08:b7:60:7d:51:ab:59:93:b7:2a:11: 82:b6:3f:ca:5d:71:a0:0e:05:72:ce:69:7d:7b:f5: 58:0c:20:bb:62:41:cd:69:76:c4:df:16:3e:10:c2: fd:5b:76:eb:0f:7d:75:1c:ae:c1:fa:d5:14:ec:03: 4a:4b:ed:16:e7:87:76:97:35:fb:6c:9a:35:f8:60: e1:fd:c4:42:c0:8b:c3:63:5b:e7:7e:9f:4a:55:6b: 41:fa:57:a7:d5:43:10:16:a4:cf:25:bf:a1:30:48: e4:5b:e4:3b:18:73:e6:ec:e4:06:51:99:e5:06:bd: 6b:6a:dc:2d:dd:2f:bf:c2:7b:a8:03:00:83:57:1f: d1:48:4b:c4:3d:f9:28:0f:d7:81:cd:f7:b2:a0:0e: ee:0c:74:6d:cd:71:a9:aa:fd:b3:36:32:61:34:61: f2:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:42:01:38:36:D0:A8:44:86:72:30:F4:67:BD:EB:45:14:95:D8:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a1d0d491-fe6e-38a5-87b7-0a94cc1a0825.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:0f:15:a7:97:0f:da:37:39:0c:35:45:9e:07:3b:78:e2:0d: d8:cf:12:5d:6c:70:b6:54:74:5f:de:b0:dd:53:5d:8f:c5:83: 85:d7:b1:92:53:4d:1a:58:8d:cd:c3:93:24:8d:6e:aa:97:eb: d3:eb:10:35:f0:ed:65:c3:ed:48:0a:ec:61:e5:6a:ff:9e:9c: 5a:71:96:af:16:b1:67:42:97:51:4b:27:36:21:8d:53:94:2a: 9b:fe:76:ec:c6:30:e0:33:b3:32:a3:60:2f:4a:56:33:fd:74: 45:4c:97:32:20:b7:32:63:a6:12:2f:cb:cd:e6:86:fa:38:70: 5b:a1:4a:13:29:4d:25:af:47:14:43:93:a7:23:48:0c:f6:3d: 72:91:64:a2:47:d7:df:c8:fa:4f:06:fe:5f:59:61:47:c0:d9: df:fe:5d:81:85:78:8e:56:35:b1:2a:72:9f:de:7a:7d:27:91: 7c:c4:2d:2f:b2:4c:6f:be:7f:08:38:21:2d:12:35:04:32:ca: 94:d1:6c:0f:80:cd:f1:bd:78:72:fa:06:bc:b4:ad:34:15:20: ce:ab:e1:35:82:f3:48:ae:77:75:e3:2f:5a:a4:a0:bd:20:e4: 86:5c:4b:9c:f4:ed:13:f0:cd:aa:78:d9:a0:24:93:76:cd:7f: 5c:f1:83:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfKP0NaJr6xajwVHeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI0MTEwNjE0MDA0MVoXDTI1MDIwNDE0MDA0MVowLzEtMCsGA1UEAxMk NjAyYzA4ODYtODJjNS00OTU5LWI5MmEtNjAzYTBhNzlhNzI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxP2IVELYJMgrdO1vDZhHb03bjWQsHwuiEn/j JGqqs9qPOHW1wOQFw5+nSD/UC8hY8bQS0axlGmfmxAcENp00ZuyP3UT2ftK/zZE1 8mPLsdnRstgF8UcYf2IeMZKxCLdgfVGrWZO3KhGCtj/KXXGgDgVyzml9e/VYDCC7 YkHNaXbE3xY+EML9W3brD311HK7B+tUU7ANKS+0W54d2lzX7bJo1+GDh/cRCwIvD Y1vnfp9KVWtB+len1UMQFqTPJb+hMEjkW+Q7GHPm7OQGUZnlBr1ratwt3S+/wnuo AwCDVx/RSEvEPfkoD9eBzfeyoA7uDHRtzXGpqv2zNjJhNGHytQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFJCATg20KhEhnIw9Ge960UUldh8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYTFkMGQ0OTEtZmU2ZS0z OGE1LTg3YjctMGE5NGNjMWEwODI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqFdIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGIPFaeXD9o3OQw1RZ4HO3jiDdjPEl1scLZUdF/esN1TXY/Fg4XXsZJT TRpYjc3DkySNbqqX69PrEDXw7WXD7UgK7GHlav+enFpxlq8WsWdCl1FLJzYhjVOU Kpv+duzGMOAzszKjYC9KVjP9dEVMlzIgtzJjphIvy83mhvo4cFuhShMpTSWvRxRD k6cjSAz2PXKRZKJH19/I+k8G/l9ZYUfA2d/+XYGFeI5WNbEqcp/een0nkXzELS+y TG++fwg4IS0SNQQyypTRbA+AzfG9eHL6Bry0rTQVIM6r4TWC80iud3XjL1qkoL0g 5IZcS5z07RPwzap42aAkk3bNf1zxgw0= -----END CERTIFICATE-----Generated at Sun Nov 24 21:00:40 2024 by rpki-client on console-fra.rpki-client.org