$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/baf76233-3c6d-35f7-8a9d-4b108593331e.roa File: baf76233-3c6d-35f7-8a9d-4b108593331e.roa (raw, json) Hash identifier: sjW8W5xE5Vue2YodS9YSwCxIdBmsuu+2kwnznauxom8= Subject key identifier: 71:4B:91:05:4B:97:BD:8A:DD:FA:1C:29:30:95:EA:3E:94:1B:51:C2 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285844E23FD71E59F48D1024EF1D40 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/baf76233-3c6d-35f7-8a9d-4b108593331e.roa Signing time: Wed 14 Feb 2024 02:00:25 +0000 ROA not before: Wed 14 Feb 2024 02:00:25 +0000 ROA not after: Tue 14 May 2024 01:00:25 +0000 asID: 16509 IP address blocks: 168.87.182.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 May 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:e2:3f:d7:1e:59:f4:8d:10:24:ef:1d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Feb 14 02:00:25 2024 GMT Not After : May 14 01:00:25 2024 GMT Subject: CN=55d7ae37-addf-4632-92a0-7454d86b5f1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:59:25:fe:57:e4:6f:0a:53:e3:4e:b0:d3:5e: b1:aa:c2:70:59:53:f7:85:95:85:1f:9e:1e:93:68: 32:bc:1d:9f:e1:6c:52:f3:86:32:57:e5:3f:0a:87: fe:0f:88:21:ce:28:f1:5c:33:65:d4:8c:6a:21:4a: 13:c2:58:5e:57:e8:3f:05:23:27:18:96:d4:00:a0: 18:81:48:0c:00:ab:e0:2b:39:58:10:60:0f:5b:46: 63:65:f4:97:86:8e:05:6f:bb:60:0d:b8:ac:77:25: 62:76:12:39:9b:e4:cc:1d:c9:3c:35:18:4d:2a:a1: 73:0b:6a:ca:25:c5:6d:9b:a6:ba:06:3d:d3:fd:1c: c2:3f:7b:51:d9:80:9a:b0:62:35:a8:94:0f:8a:b0: 40:09:4b:32:da:15:c9:58:1b:19:3a:ea:fb:56:a6: 4c:7c:d5:08:75:6c:70:84:bf:1f:63:5f:d7:a4:a1: f7:8b:04:54:75:b1:f8:5f:73:20:bc:a5:92:8f:06: b3:59:62:99:a1:94:6c:df:44:00:80:35:fc:0a:3e: 7f:2e:ad:96:ac:51:c3:10:d3:c3:d6:38:c0:3f:cb: d0:dd:6d:27:6b:9e:70:42:63:e5:1e:eb:6b:13:af: ca:88:c5:9d:c7:c8:1a:b5:85:1f:1f:f7:c0:dd:21: ef:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:4B:91:05:4B:97:BD:8A:DD:FA:1C:29:30:95:EA:3E:94:1B:51:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/baf76233-3c6d-35f7-8a9d-4b108593331e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.182.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:92:75:bb:7b:59:e5:ab:44:b2:23:62:4a:52:2c:ac:10:a7: 6f:26:11:3d:70:c2:4b:07:54:d7:61:c5:98:14:59:67:1f:d5: b7:52:fe:34:f9:63:63:52:da:54:6a:b6:c5:2c:06:4b:eb:fc: 06:aa:6d:7b:90:a4:f0:28:38:25:5d:22:a9:c4:6a:5f:0d:35: 2c:85:d5:28:45:50:72:4e:e4:f3:f3:16:3c:c1:1c:8c:2e:ac: f7:0f:72:06:48:7f:0c:4e:5f:8b:10:ed:06:46:6e:c5:60:cb: 21:d4:62:71:35:bc:38:ca:89:90:eb:d7:71:02:c7:81:6d:e6: a4:c7:19:2c:3d:c8:12:75:c7:c1:1d:4e:24:d1:2b:a9:7b:1e: d0:95:a5:ee:2b:6b:ed:e7:d5:cd:85:c7:97:8d:02:0b:7a:eb: 74:f2:e2:b4:66:85:e2:97:2f:d0:e9:83:f6:27:e7:e2:1a:d3: 28:bb:92:9e:57:bf:4f:26:00:5a:fb:10:9f:4c:03:f8:13:86: 87:43:7c:b0:c7:06:c2:ea:5e:f3:86:6b:28:07:23:61:fc:df: 1b:5e:76:3a:7c:12:d8:fd:31:ec:8b:ac:c1:d4:32:fd:83:18: ed:38:9a:87:3d:82:7a:c2:03:fe:3e:38:f7:ce:ab:aa:a4:dd: 16:68:c1:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWETiP9ceWfSNECTvHUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI0MDIxNDAyMDAyNVoXDTI0MDUxNDAxMDAyNVowLzEtMCsGA1UEAxMk NTVkN2FlMzctYWRkZi00NjMyLTkyYTAtNzQ1NGQ4NmI1ZjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllkl/lfkbwpT406w016xqsJwWVP3hZWFH54e k2gyvB2f4WxS84YyV+U/Cof+D4ghzijxXDNl1IxqIUoTwlheV+g/BSMnGJbUAKAY gUgMAKvgKzlYEGAPW0ZjZfSXho4Fb7tgDbisdyVidhI5m+TMHck8NRhNKqFzC2rK JcVtm6a6Bj3T/RzCP3tR2YCasGI1qJQPirBACUsy2hXJWBsZOur7VqZMfNUIdWxw hL8fY1/XpKH3iwRUdbH4X3MgvKWSjwazWWKZoZRs30QAgDX8Cj5/Lq2WrFHDENPD 1jjAP8vQ3W0na55wQmPlHutrE6/KiMWdx8gatYUfH/fA3SHvhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHFLkQVLl72K3focKTCV6j6UG1HCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYmFmNzYyMzMtM2M2ZC0z NWY3LThhOWQtNGIxMDg1OTMzMzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFe2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAWSdbt7WeWrRLIjYkpSLKwQp28mET1wwksHVNdhxZgUWWcf1bdS/jT5 Y2NS2lRqtsUsBkvr/AaqbXuQpPAoOCVdIqnEal8NNSyF1ShFUHJO5PPzFjzBHIwu rPcPcgZIfwxOX4sQ7QZGbsVgyyHUYnE1vDjKiZDr13ECx4Ft5qTHGSw9yBJ1x8Ed TiTRK6l7HtCVpe4ra+3n1c2Fx5eNAgt663Ty4rRmheKXL9Dpg/Yn5+Ia0yi7kp5X v08mAFr7EJ9MA/gThodDfLDHBsLqXvOGaygHI2H83xtedjp8Etj9MeyLrMHUMv2D GO04moc9gnrCA/4+OPfOq6qk3RZowbU= -----END CERTIFICATE-----Generated at Thu May 2 14:59:52 2024 by rpki-client on console-ams.rpki-client.org