$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d665c16c-aafb-312c-9ec6-e661450e6510.roa File: d665c16c-aafb-312c-9ec6-e661450e6510.roa (raw, json) Hash identifier: czOfGBVeUaFga91TKZiuSyU7Rpl5flhwNhnUBOKoe2o= Subject key identifier: 25:D9:2A:6A:5C:09:5B:CA:AC:DA:D4:47:40:A8:FD:A0:FB:D5:62:20 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584832F023E1E597CFDFD370ABD0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d665c16c-aafb-312c-9ec6-e661450e6510.roa Signing time: Sat 14 Dec 2024 02:00:39 +0000 ROA not before: Sat 14 Dec 2024 02:00:39 +0000 ROA not after: Fri 14 Mar 2025 01:00:39 +0000 asID: 202 IP address blocks: 206.164.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:32:f0:23:e1:e5:97:cf:df:d3:70:ab:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Dec 14 02:00:39 2024 GMT Not After : Mar 14 01:00:39 2025 GMT Subject: CN=c053fda8-a441-42ed-ba79-6b0aa229dab0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ea:75:6e:50:78:23:f7:13:a3:ef:db:20:e0: d2:b9:c6:5a:af:d4:23:12:78:01:6a:4a:7c:65:dd: f6:24:b3:3e:10:f8:d1:cc:44:ca:ed:52:37:9d:df: bb:c7:a8:c6:01:0a:9a:a1:c9:1e:5e:ce:ca:ae:6a: 81:e9:3e:f6:f7:7e:6c:d4:11:5f:a0:ae:9b:7f:ba: 75:8a:38:e9:9e:02:60:7e:83:e5:51:22:82:e9:b8: 73:0b:e0:a1:22:10:a6:e6:7e:29:70:a6:c8:18:13: 61:d8:8f:04:4c:1d:e3:18:f5:f7:79:ae:b9:97:f9: 6f:d4:7d:b0:d4:91:87:48:c5:71:40:32:08:54:0a: 49:cd:e3:6a:8a:fc:c3:a4:28:c1:71:bd:28:94:f8: e0:20:cf:35:db:cd:53:5f:5a:ae:dd:11:48:5c:51: 1f:e4:8b:9b:11:71:01:4b:b8:8a:f3:4b:43:f4:5d: cc:9d:f1:99:6e:2a:62:a1:b2:d7:bc:06:4b:72:23: 13:2e:43:53:8c:65:f7:b0:1d:49:84:3f:c5:6d:94: 41:a9:f3:78:65:dc:fa:3e:45:db:da:82:84:be:48: 47:8a:c1:07:a1:23:a3:b5:ae:25:c8:99:f9:fb:e1: 78:78:a0:a7:ae:e6:9a:52:8a:14:64:0c:2b:4a:4d: ce:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:D9:2A:6A:5C:09:5B:CA:AC:DA:D4:47:40:A8:FD:A0:FB:D5:62:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d665c16c-aafb-312c-9ec6-e661450e6510.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 206.164.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:2e:78:cb:22:f4:95:68:32:60:29:61:f3:f8:f7:3d:f4:c5: f8:55:18:09:e9:18:db:ee:49:59:de:8d:b2:0e:cf:15:1b:2c: f1:27:de:07:ef:3e:34:0e:e5:03:9f:c8:b9:08:f2:c6:2b:ba: 56:31:ad:34:e1:ac:12:80:d2:45:40:0c:d9:94:71:31:c8:c1: dd:4c:d0:2a:ff:31:79:6c:5f:95:d9:b8:56:96:52:62:80:56: 15:83:25:38:00:37:0a:a5:0a:6e:e0:39:43:1e:ca:f1:b3:bc: b0:50:67:e2:df:cd:70:5c:e6:fd:24:07:22:5c:3a:ba:cf:37: e6:6e:a5:cc:f5:70:74:a3:20:94:d8:13:87:fe:9a:7d:bd:c9: c6:d0:49:a7:7b:d7:d1:b8:cc:bc:d6:8e:62:1b:7b:36:03:ab: ce:77:34:73:d0:ae:63:92:52:5e:4f:8e:b0:9c:46:35:fb:10: 1f:0c:52:1a:d2:73:12:10:dd:43:b3:6d:d7:03:60:48:19:db: ae:17:81:1e:fa:74:77:22:33:9e:b3:ae:0e:f9:30:b8:c8:02: fc:08:1e:64:ff:a8:63:22:a4:2d:68:a4:29:ba:a8:32:6c:d5: a2:50:ae:8d:1f:40:d5:2b:00:3d:89:18:e9:45:95:f4:9a:5c: b3:ea:c6:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgy8CPh5ZfP39Nwq9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI0MTIxNDAyMDAzOVoXDTI1MDMxNDAxMDAzOVowLzEtMCsGA1UEAxMk YzA1M2ZkYTgtYTQ0MS00MmVkLWJhNzktNmIwYWEyMjlkYWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+p1blB4I/cTo+/bIODSucZar9QjEngBakp8 Zd32JLM+EPjRzETK7VI3nd+7x6jGAQqaockeXs7KrmqB6T72935s1BFfoK6bf7p1 ijjpngJgfoPlUSKC6bhzC+ChIhCm5n4pcKbIGBNh2I8ETB3jGPX3ea65l/lv1H2w 1JGHSMVxQDIIVApJzeNqivzDpCjBcb0olPjgIM81281TX1qu3RFIXFEf5IubEXEB S7iK80tD9F3MnfGZbipiobLXvAZLciMTLkNTjGX3sB1JhD/FbZRBqfN4Zdz6PkXb 2oKEvkhHisEHoSOjta4lyJn5++F4eKCnruaaUooUZAwrSk3OgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCXZKmpcCVvKrNrUR0Co/aD71WIgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZDY2NWMxNmMtYWFmYi0z MTJjLTllYzYtZTY2MTQ1MGU2NTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzqSoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEsueMsi9JVoMmApYfP49z30xfhVGAnpGNvuSVnejbIOzxUbLPEn3gfv PjQO5QOfyLkI8sYrulYxrTThrBKA0kVADNmUcTHIwd1M0Cr/MXlsX5XZuFaWUmKA VhWDJTgANwqlCm7gOUMeyvGzvLBQZ+LfzXBc5v0kByJcOrrPN+Zupcz1cHSjIJTY E4f+mn29ycbQSad719G4zLzWjmIbezYDq853NHPQrmOSUl5PjrCcRjX7EB8MUhrS cxIQ3UOzbdcDYEgZ264XgR76dHciM56zrg75MLjIAvwIHmT/qGMipC1opCm6qDJs 1aJQro0fQNUrAD2JGOlFlfSaXLPqxj0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:33:02 2025 by rpki-client