$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/dd2d4465-b2a4-340d-adba-4403b5cfbf1d.roa File: dd2d4465-b2a4-340d-adba-4403b5cfbf1d.roa (raw, json) Hash identifier: IWaFtXR49I0WXKGDMlLvOM8CTENKNYSLrFFgz37kje4= Subject key identifier: 11:4C:E2:D3:43:2B:23:37:3D:12:3C:21:6C:B6:AD:7B:64:40:0E:40 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285848B1F6275A4AFE01A70797A540 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/dd2d4465-b2a4-340d-adba-4403b5cfbf1d.roa Signing time: Tue 28 Jan 2025 14:00:52 +0000 ROA not before: Tue 28 Jan 2025 14:00:52 +0000 ROA not after: Mon 28 Apr 2025 13:00:52 +0000 asID: 2159 IP address blocks: 168.87.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b1:f6:27:5a:4a:fe:01:a7:07:97:a5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jan 28 14:00:52 2025 GMT Not After : Apr 28 13:00:52 2025 GMT Subject: CN=26313e3a-4b8f-4185-b159-4c515140cc6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:16:fd:da:df:63:a0:d9:a4:ec:0e:dc:56:93: 7e:02:b4:6b:0a:50:40:c7:df:0b:eb:45:27:21:76: ae:ed:ba:6c:17:75:ac:68:2e:72:b9:ac:6f:63:0d: 1d:de:6a:35:36:e5:7a:a1:7a:c9:60:a5:7e:82:09: 78:9c:d6:a7:e0:d1:52:b9:d4:c6:01:bc:cc:07:7e: 04:53:d4:8e:4f:db:83:6d:3e:e3:33:82:ad:a7:e9: 77:f3:58:78:a6:7e:fb:5c:52:a7:67:b4:99:5d:15: 3e:a5:8e:cd:2b:36:6f:2b:8b:13:e9:17:f7:11:7a: 62:5b:cb:8e:ff:40:67:64:e7:bd:8d:bb:05:29:43: 1e:e9:16:2c:00:d1:20:bd:74:76:e7:3c:a3:a5:46: 99:11:d0:e9:e3:68:02:85:f9:92:a9:fc:54:e1:f2: dc:36:6d:28:f9:10:3d:7c:dd:1c:94:1a:d6:01:91: 70:97:78:0e:ae:1e:15:11:e1:d7:50:4a:5f:b9:4b: ae:67:80:42:f2:ae:62:f1:4f:1a:73:0b:d0:71:15: 5b:c8:64:1d:24:78:23:35:5a:a1:af:fc:0d:0f:c6: 9d:bf:4e:98:8a:0d:90:00:90:41:f1:6d:0e:b8:a6: 03:42:55:d8:0a:8f:b2:1d:de:19:b2:7e:67:1f:f3: c4:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:4C:E2:D3:43:2B:23:37:3D:12:3C:21:6C:B6:AD:7B:64:40:0E:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/dd2d4465-b2a4-340d-adba-4403b5cfbf1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:b1:87:4d:60:dc:c8:0c:e4:fc:fd:51:14:a3:7c:13:8a:44: 22:1b:2b:ef:0e:2b:ff:3a:22:48:8c:2f:85:f7:56:88:fb:3c: d6:84:fd:ad:19:40:d9:33:7b:01:b1:bb:8c:6e:4c:c9:2d:d2: 10:66:7a:bc:33:db:50:5e:8a:94:48:dd:a8:c6:76:1a:1d:f1: b5:e2:3c:86:2f:ca:a2:19:12:54:9c:e2:27:9f:cc:c7:12:68: cf:2a:55:9e:f0:e1:d6:bb:e5:b4:b1:7b:ed:3c:16:fb:4d:10: 28:09:2d:24:bd:97:23:bc:43:6a:54:a7:fc:96:28:7f:ef:dd: 1a:e6:51:8d:2d:0e:cb:81:39:d5:c4:01:d6:6e:28:5f:ec:98: a1:c5:9e:36:38:0a:cd:c6:fc:d6:7c:43:10:a0:37:5e:a8:55: 13:96:99:d5:d3:1f:0f:75:90:14:63:9e:5f:e2:3e:c4:36:02: 22:2d:78:01:b9:26:b9:95:d2:3a:28:bf:f7:1d:6a:07:c6:69: a2:37:22:ca:ff:01:bd:95:36:d5:22:4c:97:a0:4a:f0:bd:49: a8:3c:0c:26:36:0b:13:60:25:63:22:49:0b:47:60:79:f8:8f: d8:49:43:2f:e1:65:e5:19:43:50:4a:c6:5f:c9:ac:e8:61:53: fa:00:e2:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEix9idaSv4BpweXpUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDEyODE0MDA1MloXDTI1MDQyODEzMDA1MlowLzEtMCsGA1UEAxMk MjYzMTNlM2EtNGI4Zi00MTg1LWIxNTktNGM1MTUxNDBjYzZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7hb92t9joNmk7A7cVpN+ArRrClBAx98L60Un IXau7bpsF3WsaC5yuaxvYw0d3mo1NuV6oXrJYKV+ggl4nNan4NFSudTGAbzMB34E U9SOT9uDbT7jM4Ktp+l381h4pn77XFKnZ7SZXRU+pY7NKzZvK4sT6Rf3EXpiW8uO /0BnZOe9jbsFKUMe6RYsANEgvXR25zyjpUaZEdDp42gChfmSqfxU4fLcNm0o+RA9 fN0clBrWAZFwl3gOrh4VEeHXUEpfuUuuZ4BC8q5i8U8acwvQcRVbyGQdJHgjNVqh r/wND8adv06Yig2QAJBB8W0OuKYDQlXYCo+yHd4Zsn5nH/PElQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBFM4tNDKyM3PRI8IWy2rXtkQA5AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZGQyZDQ0NjUtYjJhNC0z NDBkLWFkYmEtNDQwM2I1Y2ZiZjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqFf4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWxh01g3MgM5Pz9URSjfBOKRCIbK+8OK/86IkiML4X3Voj7PNaE/a0Z QNkzewGxu4xuTMkt0hBmerwz21BeipRI3ajGdhod8bXiPIYvyqIZElSc4iefzMcS aM8qVZ7w4da75bSxe+08FvtNECgJLSS9lyO8Q2pUp/yWKH/v3RrmUY0tDsuBOdXE AdZuKF/smKHFnjY4Cs3G/NZ8QxCgN16oVROWmdXTHw91kBRjnl/iPsQ2AiIteAG5 JrmV0joov/cdagfGaaI3Isr/Ab2VNtUiTJegSvC9Sag8DCY2CxNgJWMiSQtHYHn4 j9hJQy/hZeUZQ1BKxl/JrOhhU/oA4gA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:45:34 2025 by rpki-client