$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d278ae60-b775-3806-a671-2d604899597d.roa File: d278ae60-b775-3806-a671-2d604899597d.roa (raw, json) Hash identifier: Hdbd23yqUvuUhetMoZYWrxMsSdggAcs1BMh4PdXAB0M= Subject key identifier: CF:F1:53:A3:19:E5:F6:08:69:A6:2A:A7:A8:CC:77:C2:71:71:93:20 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285848B8F0C47FF79D1807B4C51880 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d278ae60-b775-3806-a671-2d604899597d.roa Signing time: Fri 31 Jan 2025 02:00:39 +0000 ROA not before: Fri 31 Jan 2025 02:00:39 +0000 ROA not after: Thu 01 May 2025 01:00:39 +0000 asID: 3356 IP address blocks: 168.87.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b8:f0:c4:7f:f7:9d:18:07:b4:c5:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jan 31 02:00:39 2025 GMT Not After : May 1 01:00:39 2025 GMT Subject: CN=814b8907-949c-423f-816d-045a53c84af6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:50:f4:4b:63:94:e8:9f:81:d8:4f:db:07:94: 50:64:aa:6f:de:df:ef:40:58:03:a5:98:29:a3:80: ea:a6:88:af:e8:b3:36:20:a4:27:29:1d:1e:61:fc: 4c:a2:66:ee:fa:c2:48:dd:f0:de:e8:c1:1e:d2:6c: 5c:b5:71:4e:89:de:fb:a1:ef:4d:d6:00:15:cf:16: da:88:76:ce:0f:ee:24:7e:89:ed:85:69:54:ee:1d: 4f:72:29:f5:f2:8a:bf:51:eb:1d:68:a2:b1:03:92: c4:c7:2f:bd:59:54:65:1d:d4:5e:f8:a2:ff:4c:a2: 6c:11:08:c6:a0:e0:0a:9e:57:db:35:7f:3c:b6:da: 0b:1d:4a:91:d4:47:7d:a7:48:86:ac:62:67:34:6f: 28:8c:5f:4f:41:47:b3:b1:eb:01:e9:26:e1:dc:e6: c3:93:dc:d5:11:f1:01:fc:ea:09:e5:6d:8d:e4:c7: db:da:32:ad:7e:ca:e0:67:9d:23:56:39:7d:98:67: 86:ca:e5:f7:02:0a:5a:73:19:bd:7b:1b:5f:14:e5: ef:9a:2a:d3:aa:2f:5c:0d:95:a6:ca:d8:4c:00:0a: b4:96:4d:29:09:11:ad:4f:01:65:ed:0d:f9:ec:db: ff:3b:aa:5c:05:18:23:ac:ee:83:00:2f:87:54:be: 63:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:F1:53:A3:19:E5:F6:08:69:A6:2A:A7:A8:CC:77:C2:71:71:93:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d278ae60-b775-3806-a671-2d604899597d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:4a:ea:e7:38:25:7f:98:04:43:c7:6f:45:02:8d:8a:bb:6b: cf:d8:a7:45:d0:d4:2d:58:96:3f:09:0e:c4:cc:97:27:93:75: ff:76:ec:fb:eb:c0:96:77:ae:72:db:ca:65:61:e6:01:8f:fd: 6f:02:63:58:18:9b:a6:23:0d:f7:a1:a0:65:71:f7:b6:05:94: 29:89:86:85:ef:69:c0:c6:27:2f:8c:6b:35:59:10:29:00:68: bd:18:df:ae:29:0f:e4:e3:99:b5:34:97:37:90:85:59:7c:0b: 81:0a:4f:df:c8:0c:f7:5f:1c:31:01:18:57:1b:99:d8:97:b5: 36:ed:df:52:6f:d7:ac:4f:db:eb:76:fb:42:19:3b:35:da:bc: fc:ad:a4:bd:b3:1c:4c:f9:eb:06:1b:28:42:ed:65:9a:4e:40: 0e:fa:6a:6f:b3:c4:d9:4b:3b:b4:68:fe:66:98:bf:fd:f6:99: e0:15:98:70:b1:44:39:a9:70:8d:9e:86:2b:25:45:24:28:aa: 08:52:95:b0:6e:a0:7b:61:1c:85:93:91:59:43:ac:e7:51:ed: 7e:bb:a9:f4:4d:9d:50:89:32:ef:ef:e6:50:ac:bc:54:7a:f0: 96:ed:43:b8:3b:87:b4:f9:80:5b:de:b3:93:2d:94:ca:81:1c: 3d:a4:01:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi48MR/950YB7TFGIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDEzMTAyMDAzOVoXDTI1MDUwMTAxMDAzOVowLzEtMCsGA1UEAxMk ODE0Yjg5MDctOTQ5Yy00MjNmLTgxNmQtMDQ1YTUzYzg0YWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlD0S2OU6J+B2E/bB5RQZKpv3t/vQFgDpZgp o4Dqpoiv6LM2IKQnKR0eYfxMombu+sJI3fDe6MEe0mxctXFOid77oe9N1gAVzxba iHbOD+4kfonthWlU7h1Pcin18oq/UesdaKKxA5LExy+9WVRlHdRe+KL/TKJsEQjG oOAKnlfbNX88ttoLHUqR1Ed9p0iGrGJnNG8ojF9PQUezsesB6Sbh3ObDk9zVEfEB /OoJ5W2N5Mfb2jKtfsrgZ50jVjl9mGeGyuX3Agpacxm9extfFOXvmirTqi9cDZWm ythMAAq0lk0pCRGtTwFl7Q357Nv/O6pcBRgjrO6DAC+HVL5jEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM/xU6MZ5fYIaaYqp6jMd8JxcZMgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZDI3OGFlNjAtYjc3NS0z ODA2LWE2NzEtMmQ2MDQ4OTk1OTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFeoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAdK6uc4JX+YBEPHb0UCjYq7a8/Yp0XQ1C1Ylj8JDsTMlyeTdf927Pvr wJZ3rnLbymVh5gGP/W8CY1gYm6YjDfehoGVx97YFlCmJhoXvacDGJy+MazVZECkA aL0Y364pD+TjmbU0lzeQhVl8C4EKT9/IDPdfHDEBGFcbmdiXtTbt31Jv16xP2+t2 +0IZOzXavPytpL2zHEz56wYbKELtZZpOQA76am+zxNlLO7Ro/maYv/32meAVmHCx RDmpcI2ehislRSQoqghSlbBuoHthHIWTkVlDrOdR7X67qfRNnVCJMu/v5lCsvFR6 8JbtQ7g7h7T5gFves5MtlMqBHD2kARc= -----END CERTIFICATE-----Generated at Sat Apr 5 11:19:30 2025 by rpki-client