$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b6581fd7-dd5b-32ff-8ba6-6756536188db.roa File: b6581fd7-dd5b-32ff-8ba6-6756536188db.roa (raw, json) Hash identifier: OimmoEhnTHtQhWnXtLC6wDjE0bjqfmC3hLEu0EFC2rg= Subject key identifier: 04:0C:38:07:79:77:82:74:E1:9E:30:44:9F:0B:30:52:9F:D7:12:A7 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285848ADC61726142A602D37B14180 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b6581fd7-dd5b-32ff-8ba6-6756536188db.roa Signing time: Mon 27 Jan 2025 02:00:39 +0000 ROA not before: Mon 27 Jan 2025 02:00:39 +0000 ROA not after: Sun 27 Apr 2025 01:00:39 +0000 asID: 203 IP address blocks: 168.87.154.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ad:c6:17:26:14:2a:60:2d:37:b1:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jan 27 02:00:39 2025 GMT Not After : Apr 27 01:00:39 2025 GMT Subject: CN=a95ce7eb-e6b6-446f-94c9-7a808e8e1dc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:cf:4a:51:94:e3:63:3b:03:4b:a6:12:53:1b: c0:b4:38:d0:97:d7:83:22:b4:0a:a5:4f:a6:55:5d: c8:1d:96:7a:7f:df:f4:a9:41:48:21:80:4f:fb:c4: 0a:4a:22:3c:6d:1a:0f:79:26:02:fd:63:9e:0c:c7: 91:9a:0c:02:1d:8f:80:69:38:11:b5:92:46:e3:a3: 97:03:08:8f:f8:f3:a6:77:0f:4d:48:b8:98:44:07: 5e:c1:9b:e4:1d:85:01:a6:26:8d:f7:4f:60:77:4a: bf:5c:16:7d:1c:57:0c:86:23:4b:53:10:20:ca:7b: 96:59:c2:8b:19:3f:bb:36:bd:7f:75:ea:7d:3a:14: af:99:44:c6:73:22:d1:7e:4c:9e:b1:4d:23:cf:47: ea:38:d2:bf:ad:04:40:0a:7d:1b:e2:12:db:e0:f8: 19:f1:5e:14:04:bf:52:8a:8f:b5:01:dc:2a:13:ba: a1:e0:3a:08:38:03:06:70:fa:ed:9c:de:16:07:44: e1:a5:5b:4e:73:02:91:a1:65:be:d6:04:21:69:4c: 9b:ac:ce:9a:d8:8d:32:27:bc:1a:94:0b:2a:0a:c4: 60:33:e8:45:2e:b7:12:59:12:45:64:a2:c2:b2:9b: e4:f3:72:15:6f:be:da:91:db:d6:6e:06:36:7f:77: 6d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:0C:38:07:79:77:82:74:E1:9E:30:44:9F:0B:30:52:9F:D7:12:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b6581fd7-dd5b-32ff-8ba6-6756536188db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.154.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:31:cf:db:8b:4e:2c:a3:03:a7:1e:7a:b1:99:9f:51:c1:ae: 47:c7:f3:12:10:28:8f:8f:e2:1c:bf:5c:0d:eb:e8:29:b5:f9: 14:cf:b8:76:9a:ce:13:39:48:ec:06:83:c8:cc:8e:7c:d8:36: 58:24:6c:0f:0f:19:63:35:ad:b7:8c:1b:25:e6:78:04:26:5c: 03:19:32:7d:fe:30:17:e8:a8:ca:46:ac:fa:74:a9:19:23:9f: 0b:d4:a0:89:49:6e:08:d6:76:36:7b:9c:5e:16:62:92:65:6d: 83:5b:01:be:78:3a:91:65:ea:15:33:49:c4:a1:da:b5:d4:57: 13:24:1d:43:4b:82:d6:b6:90:0e:6f:5c:6c:dc:10:0c:4a:b3: bd:88:eb:3f:a4:8a:4f:39:7d:e3:72:8e:c5:52:6d:62:57:9c: d0:d6:d9:ec:d9:23:f3:9c:e7:da:b0:4d:44:4c:fd:06:ae:fa: 2f:92:b9:82:c8:48:ce:89:8e:da:f7:33:cf:a1:6e:4a:c9:83: fb:15:98:3c:cc:65:74:03:9f:c5:ae:7f:01:5f:43:49:9d:f0: 7f:69:42:67:23:83:fb:52:e2:00:7d:a8:59:95:cc:4a:2e:30: 43:f7:0a:72:ba:4d:7b:65:9d:62:0f:8c:01:e3:dc:a5:57:7d: ec:09:1d:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEitxhcmFCpgLTexQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDEyNzAyMDAzOVoXDTI1MDQyNzAxMDAzOVowLzEtMCsGA1UEAxMk YTk1Y2U3ZWItZTZiNi00NDZmLTk0YzktN2E4MDhlOGUxZGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3s9KUZTjYzsDS6YSUxvAtDjQl9eDIrQKpU+m VV3IHZZ6f9/0qUFIIYBP+8QKSiI8bRoPeSYC/WOeDMeRmgwCHY+AaTgRtZJG46OX AwiP+POmdw9NSLiYRAdewZvkHYUBpiaN909gd0q/XBZ9HFcMhiNLUxAgynuWWcKL GT+7Nr1/dep9OhSvmUTGcyLRfkyesU0jz0fqONK/rQRACn0b4hLb4PgZ8V4UBL9S io+1AdwqE7qh4DoIOAMGcPrtnN4WB0ThpVtOcwKRoWW+1gQhaUybrM6a2I0yJ7wa lAsqCsRgM+hFLrcSWRJFZKLCspvk83IVb77akdvWbgY2f3dtXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAQMOAd5d4J04Z4wRJ8LMFKf1xKnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYjY1ODFmZDctZGQ1Yi0z MmZmLThiYTYtNjc1NjUzNjE4OGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqFeaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGsxz9uLTiyjA6ceerGZn1HBrkfH8xIQKI+P4hy/XA3r6Cm1+RTPuHaa zhM5SOwGg8jMjnzYNlgkbA8PGWM1rbeMGyXmeAQmXAMZMn3+MBfoqMpGrPp0qRkj nwvUoIlJbgjWdjZ7nF4WYpJlbYNbAb54OpFl6hUzScSh2rXUVxMkHUNLgta2kA5v XGzcEAxKs72I6z+kik85feNyjsVSbWJXnNDW2ezZI/Oc59qwTURM/Qau+i+SuYLI SM6Jjtr3M8+hbkrJg/sVmDzMZXQDn8WufwFfQ0md8H9pQmcjg/tS4gB9qFmVzEou MEP3CnK6TXtlnWIPjAHj3KVXfewJHSg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:49:37 2025 by rpki-client