$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b8caf72d-4885-3c6b-a035-6ad6075d7ede.roa File: b8caf72d-4885-3c6b-a035-6ad6075d7ede.roa (raw, json) Hash identifier: ltafEpAuxBMN4oNcMDpdiD5eSHE5tVpVZXnagE+usnk= Subject key identifier: CD:18:29:92:7A:65:FF:2F:0F:30:24:A9:FD:83:4F:B2:66:74:3F:2A Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584865303A19FD347C3AA6BA7F40 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b8caf72d-4885-3c6b-a035-6ad6075d7ede.roa Signing time: Wed 01 Jan 2025 02:00:40 +0000 ROA not before: Wed 01 Jan 2025 02:00:40 +0000 ROA not after: Tue 01 Apr 2025 01:00:40 +0000 asID: 3356 IP address blocks: 168.87.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:65:30:3a:19:fd:34:7c:3a:a6:ba:7f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jan 1 02:00:40 2025 GMT Not After : Apr 1 01:00:40 2025 GMT Subject: CN=7414c18e-7c0d-45e5-9616-b3772d29bc86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:23:ab:8d:f2:21:af:08:cc:7f:e9:95:f5:34: 5b:30:1d:3e:99:75:e0:12:b3:b5:41:1a:69:6d:9e: f2:b5:ab:5d:bd:28:06:fb:ee:ee:c0:54:a1:c5:59: 05:62:0b:aa:85:8f:5e:15:bb:28:c4:ef:9a:35:3f: 73:0a:32:ad:a1:2f:b8:e5:40:1d:4a:3a:68:cc:2d: 55:51:cf:2c:14:ed:d4:35:24:88:4e:28:b6:7c:b4: cb:bd:46:21:e1:51:9e:7a:c0:5b:0a:6c:23:6b:9f: bd:24:6e:9b:0e:f6:6e:37:48:73:b9:b9:ab:5a:05: 0a:af:96:a5:09:dd:28:45:ac:cc:53:a8:69:94:52: 35:0d:31:4b:1c:6d:08:6c:e1:4b:06:09:e9:ee:b1: 83:80:11:44:0e:22:5e:d4:0a:28:cc:2d:d8:68:e8: 89:86:7c:72:0d:35:16:a6:02:e5:7e:95:cc:55:a1: 9c:f0:cc:ef:86:af:8d:68:da:0e:78:b0:24:cc:e0: 02:47:bd:df:d7:f5:05:91:50:29:66:d5:eb:d6:26: e2:07:53:ed:8a:ea:4b:52:9a:03:dd:45:e9:47:a9: 74:29:bb:4d:02:f3:bb:91:29:6c:27:ee:08:cb:b9: dd:41:2c:79:7b:cb:63:8e:b4:a2:ff:b9:ca:d2:ce: 92:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:18:29:92:7A:65:FF:2F:0F:30:24:A9:FD:83:4F:B2:66:74:3F:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b8caf72d-4885-3c6b-a035-6ad6075d7ede.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:91:33:54:f6:d2:2d:8e:05:19:29:be:7a:f7:82:48:f4:29: 44:2d:a2:3b:8c:cf:6e:dc:c5:b8:16:a8:88:9d:12:fa:1b:14: 04:96:37:ee:0e:8c:11:68:31:a6:dc:7e:e9:e1:be:2b:56:44: ed:7c:87:aa:ff:92:0a:07:be:2a:9d:36:ad:9d:bd:9e:01:15: 50:f7:31:36:cf:a0:d7:04:ab:93:ef:78:ff:94:bb:f6:25:c4: 04:90:14:7e:c3:4d:69:6f:f8:5b:e1:3a:b7:bf:36:9b:09:5b: bc:13:9f:aa:a8:69:77:1a:0d:2f:07:c0:6a:cf:c2:02:f1:c7: 0f:5f:07:a0:0d:10:fb:4e:e7:4f:81:0e:85:81:bf:d6:07:a9: d4:ff:35:71:59:c4:7d:8c:ac:70:65:51:16:ad:8a:73:0e:34: 3e:e0:36:ad:68:56:a7:f9:c8:54:2c:d5:a6:a7:01:09:d0:a3: a8:6b:93:0b:3c:08:34:1c:c1:ba:48:08:4c:d6:01:6f:b9:ba: c8:c8:56:28:d2:26:ba:7a:4d:ac:c0:4a:fa:b8:83:ce:72:5e: c9:d0:31:14:ce:5d:2c:d7:0a:41:e8:c8:4c:41:95:55:e1:69: 92:44:cd:21:6d:e4:5e:82:10:56:e2:15:6f:a7:de:e6:22:07: 6f:b0:1a:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhlMDoZ/TR8Oqa6f0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDEwMTAyMDA0MFoXDTI1MDQwMTAxMDA0MFowLzEtMCsGA1UEAxMk NzQxNGMxOGUtN2MwZC00NWU1LTk2MTYtYjM3NzJkMjliYzg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyOrjfIhrwjMf+mV9TRbMB0+mXXgErO1QRpp bZ7ytatdvSgG++7uwFShxVkFYguqhY9eFbsoxO+aNT9zCjKtoS+45UAdSjpozC1V Uc8sFO3UNSSITii2fLTLvUYh4VGeesBbCmwja5+9JG6bDvZuN0hzubmrWgUKr5al Cd0oRazMU6hplFI1DTFLHG0IbOFLBgnp7rGDgBFEDiJe1AoozC3YaOiJhnxyDTUW pgLlfpXMVaGc8Mzvhq+NaNoOeLAkzOACR73f1/UFkVApZtXr1ibiB1PtiupLUpoD 3UXpR6l0KbtNAvO7kSlsJ+4Iy7ndQSx5e8tjjrSi/7nK0s6SwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM0YKZJ6Zf8vDzAkqf2DT7JmdD8qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYjhjYWY3MmQtNDg4NS0z YzZiLWEwMzUtNmFkNjA3NWQ3ZWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqFdAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCRM1T20i2OBRkpvnr3gkj0KUQtojuMz27cxbgWqIidEvobFASWN+4O jBFoMabcfunhvitWRO18h6r/kgoHviqdNq2dvZ4BFVD3MTbPoNcEq5PveP+Uu/Yl xASQFH7DTWlv+FvhOre/NpsJW7wTn6qoaXcaDS8HwGrPwgLxxw9fB6ANEPtO50+B DoWBv9YHqdT/NXFZxH2MrHBlURatinMOND7gNq1oVqf5yFQs1aanAQnQo6hrkws8 CDQcwbpICEzWAW+5usjIVijSJrp6TazASvq4g85yXsnQMRTOXSzXCkHoyExBlVXh aZJEzSFt5F6CEFbiFW+n3uYiB2+wGo8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:29:20 2025 by rpki-client