$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a31774e7-446e-3499-8a50-32d75dcc77d7.roa File: a31774e7-446e-3499-8a50-32d75dcc77d7.roa (raw, json) Hash identifier: /1fLkeOI8dnHfMw83WdZ4EgV2aFQ6kyqQ4VWyxqhm8U= Subject key identifier: 69:E5:C1:E0:68:D2:6A:F7:D0:88:B4:F9:3A:95:99:44:CA:3F:FF:A9 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285847DDEC848F750EBB968528CD80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a31774e7-446e-3499-8a50-32d75dcc77d7.roa Signing time: Wed 13 Nov 2024 15:10:09 +0000 ROA not before: Wed 13 Nov 2024 15:10:09 +0000 ROA not after: Tue 11 Feb 2025 15:10:09 +0000 asID: 3356 IP address blocks: 168.87.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:dd:ec:84:8f:75:0e:bb:96:85:28:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Nov 13 15:10:09 2024 GMT Not After : Feb 11 15:10:09 2025 GMT Subject: CN=05e941a3-53e1-4e56-9ffb-956d9deb1483 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:77:97:58:fd:6f:69:b0:64:cc:fc:e3:c1:f2: 5b:e0:1f:0c:68:83:33:d5:33:d0:84:bb:8e:a9:8f: 46:a9:7e:93:03:09:13:69:e9:c2:d8:fb:d4:66:6a: f7:09:8a:2f:92:d7:48:a3:75:fc:54:d3:2b:07:fa: 2a:30:88:f6:11:21:1a:74:3b:c5:ae:d6:7a:0a:e0: 4e:7c:97:b6:b4:e7:5c:d8:e2:09:5d:a5:64:36:7c: 7c:b5:40:6d:5a:f9:5c:cb:14:8a:3e:77:1a:76:5a: fa:64:0d:68:a3:dd:f1:60:45:45:3a:46:47:25:d5: 34:ec:81:90:a2:50:d3:67:e8:3b:bd:ca:a3:d2:fd: 70:65:69:8c:74:0b:70:f9:9f:af:34:44:28:41:7e: a4:54:59:98:bf:30:28:81:67:fb:2a:e7:88:a7:8a: 1d:77:1a:3c:b9:5a:e4:f6:ad:15:e2:5d:f0:43:b1: 99:e4:9d:5c:13:87:62:30:76:2c:00:b1:37:9a:b7: 66:92:a0:93:c3:a8:ec:39:7a:27:fe:43:e5:58:7a: a9:2a:bc:9f:9a:4f:b8:ed:f7:3e:d8:ea:32:9e:c8: 47:8e:9f:c8:16:30:91:93:ac:db:ae:33:84:65:6e: cb:16:bd:54:4a:ed:40:4a:48:cb:af:92:83:eb:69: 79:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:E5:C1:E0:68:D2:6A:F7:D0:88:B4:F9:3A:95:99:44:CA:3F:FF:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a31774e7-446e-3499-8a50-32d75dcc77d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:9b:08:17:a4:a3:93:bd:6d:66:24:e9:45:63:4f:5f:e8:51: fd:f9:8b:f1:98:c1:7c:e1:81:d8:83:49:0c:d9:4b:77:65:61: b0:88:35:48:10:9f:8d:bd:c6:06:7d:0c:c7:a6:f6:7d:4f:a3: 2a:74:7a:13:87:d2:6d:47:ba:4f:f1:97:5a:6a:d4:fe:d9:b2: e6:c4:24:34:30:2a:01:47:c5:b4:13:11:e2:3f:eb:42:2a:70: d3:ad:cc:70:c4:58:bf:f7:50:e5:a2:43:ef:e1:54:59:c0:12: ba:d3:bc:b0:24:da:95:0f:fc:e6:c4:54:e0:0d:9b:b2:70:5d: 4f:65:1e:d9:35:78:69:17:36:95:09:6b:05:42:6e:a0:71:d8: e5:0e:c6:29:64:65:f7:43:52:ef:18:cb:a9:ba:c4:a7:f7:cd: 51:b0:f3:e6:f7:f5:ed:85:22:4b:50:1f:d3:8b:68:8d:82:e6: 6f:3d:9a:90:35:b5:5a:96:ef:55:10:81:bd:fb:e4:dc:7d:d8: be:f0:80:52:e6:a2:81:d2:14:05:7a:31:c9:d2:a8:32:f0:ee: 72:f3:71:73:4e:73:85:8a:4f:f3:38:76:3b:83:85:2f:d2:10: 72:fa:d2:09:aa:73:92:c4:07:38:83:eb:23:2a:d6:92:ca:25: 09:5d:1c:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfd7ISPdQ67loUozYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI0MTExMzE1MTAwOVoXDTI1MDIxMTE1MTAwOVowLzEtMCsGA1UEAxMk MDVlOTQxYTMtNTNlMS00ZTU2LTlmZmItOTU2ZDlkZWIxNDgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4XeXWP1vabBkzPzjwfJb4B8MaIMz1TPQhLuO qY9GqX6TAwkTaenC2PvUZmr3CYovktdIo3X8VNMrB/oqMIj2ESEadDvFrtZ6CuBO fJe2tOdc2OIJXaVkNnx8tUBtWvlcyxSKPncadlr6ZA1oo93xYEVFOkZHJdU07IGQ olDTZ+g7vcqj0v1wZWmMdAtw+Z+vNEQoQX6kVFmYvzAogWf7KueIp4oddxo8uVrk 9q0V4l3wQ7GZ5J1cE4diMHYsALE3mrdmkqCTw6jsOXon/kPlWHqpKryfmk+47fc+ 2OoynshHjp/IFjCRk6zbrjOEZW7LFr1USu1ASkjLr5KD62l5XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGnlweBo0mr30Ii0+TqVmUTKP/+pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYTMxNzc0ZTctNDQ2ZS0z NDk5LThhNTAtMzJkNzVkY2M3N2Q3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFcZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHKbCBeko5O9bWYk6UVjT1/oUf35i/GYwXzhgdiDSQzZS3dlYbCINUgQ n429xgZ9DMem9n1Poyp0ehOH0m1Huk/xl1pq1P7ZsubEJDQwKgFHxbQTEeI/60Iq cNOtzHDEWL/3UOWiQ+/hVFnAErrTvLAk2pUP/ObEVOANm7JwXU9lHtk1eGkXNpUJ awVCbqBx2OUOxilkZfdDUu8Yy6m6xKf3zVGw8+b39e2FIktQH9OLaI2C5m89mpA1 tVqW71UQgb375Nx92L7wgFLmooHSFAV6McnSqDLw7nLzcXNOc4WKT/M4djuDhS/S EHL60gmqc5LEBziD6yMq1pLKJQldHDU= -----END CERTIFICATE-----Generated at Thu Nov 21 21:09:44 2024 by rpki-client on console-fra.rpki-client.org