$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/df54e28e-16a2-3158-9e5c-42ba1c10d6e4.roa File: df54e28e-16a2-3158-9e5c-42ba1c10d6e4.roa (raw, json) Hash identifier: KzIgiKUJNGwK/8/VATqz/ZHt6qiTlRnH/q2zPEMiWlk= Subject key identifier: AD:3B:13:6B:22:20:A6:62:63:0E:F1:55:09:35:DE:8D:C8:06:22:92 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858491246BA255FD5420B380A01C0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/df54e28e-16a2-3158-9e5c-42ba1c10d6e4.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 202 IP address blocks: 168.87.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:ba:25:5f:d5:42:0b:38:0a:01:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=96f58898-5946-4acb-93b5-da6465835b6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:59:f7:da:15:bb:2d:55:d1:e6:a6:e5:0e:bd: 21:40:e3:82:e9:53:dc:3e:02:5b:61:2a:69:1f:51: 5d:66:d2:35:f7:ea:07:10:9e:72:27:49:e4:36:b3: ba:de:5e:4d:29:f7:d8:de:1a:39:67:40:1d:49:7f: f9:56:f0:2f:92:51:59:c6:3a:97:c5:57:13:70:f9: 86:2b:9d:9c:35:c4:17:f2:a7:0b:58:7c:68:06:3e: fe:54:a8:8a:ff:08:61:12:f4:38:2d:58:a9:77:87: 5e:58:c4:ed:9d:f5:50:05:2d:5f:e0:f5:97:e8:69: 3e:6e:ed:69:9e:0d:3f:2f:54:ff:db:69:73:07:e1: 3e:df:20:6f:c2:d9:ae:c0:bc:60:b1:c6:79:22:da: 8d:3e:9c:a5:b7:8f:85:bf:3a:e9:40:bb:aa:84:39: 4e:4d:ba:c9:5c:28:89:af:f4:5f:fd:0c:da:8b:37: ad:6f:93:ab:2a:8f:d9:52:cf:6d:7f:58:5b:ef:7f: b9:17:3c:f9:46:fd:4f:ef:4f:98:b1:5d:9b:b4:17: d0:8b:e2:6f:3c:28:34:0b:14:5e:ba:86:6a:08:fe: 09:14:e8:df:7d:ac:e3:d9:36:5a:8e:d9:d9:fd:31: 4f:41:e5:0d:32:06:10:c9:b8:05:e5:75:65:22:12: 87:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:3B:13:6B:22:20:A6:62:63:0E:F1:55:09:35:DE:8D:C8:06:22:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/df54e28e-16a2-3158-9e5c-42ba1c10d6e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.160.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:f5:2f:fe:5d:60:1a:cf:0a:ce:bf:82:56:ce:0a:1d:5b:13: a9:1f:0e:c9:7a:43:a6:80:19:e3:91:95:98:74:44:ea:c0:6d: bb:51:f6:76:fb:55:28:80:da:76:e0:35:97:29:a5:cd:87:ea: d3:d7:6e:2d:2d:ad:6f:92:b4:d7:00:39:7e:23:50:f1:6d:87: b0:f5:1c:b9:c8:64:1b:a2:9e:f8:1d:26:a0:5b:47:17:f9:b4: ee:7c:ae:ed:f9:02:60:07:4b:e8:5b:dd:d0:4b:42:ff:2c:9d: fa:c1:ae:73:09:ef:3d:ea:96:c8:19:ac:6b:53:3f:5b:98:f5: d4:33:26:b9:e3:a4:7e:40:55:0b:84:c0:b5:89:98:07:f6:a5: 56:83:c4:54:bc:c1:d5:d4:62:41:51:41:dc:c1:7d:37:b8:05: ed:49:91:1b:0b:1b:9f:76:c9:76:91:38:93:af:b0:5c:98:74: 9b:59:e0:8d:a0:47:74:f8:1f:d2:e2:7a:69:d0:15:38:d8:88: d4:70:99:a0:3c:d2:19:8a:6d:30:c8:29:ae:3c:27:34:df:77: 10:fb:89:8d:aa:0c:72:10:75:8d:1a:3f:65:78:08:78:3e:7b: 0d:9b:be:42:6b:3e:28:94:94:19:8b:0a:6d:33:e4:32:ad:f1: 1c:67:9c:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRrolX9VCCzgKAcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk OTZmNTg4OTgtNTk0Ni00YWNiLTkzYjUtZGE2NDY1ODM1YjZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1n32hW7LVXR5qblDr0hQOOC6VPcPgJbYSpp H1FdZtI19+oHEJ5yJ0nkNrO63l5NKffY3ho5Z0AdSX/5VvAvklFZxjqXxVcTcPmG K52cNcQX8qcLWHxoBj7+VKiK/whhEvQ4LVipd4deWMTtnfVQBS1f4PWX6Gk+bu1p ng0/L1T/22lzB+E+3yBvwtmuwLxgscZ5ItqNPpylt4+FvzrpQLuqhDlOTbrJXCiJ r/Rf/Qzaizetb5OrKo/ZUs9tf1hb73+5Fzz5Rv1P70+YsV2btBfQi+JvPCg0CxRe uoZqCP4JFOjffazj2TZajtnZ/TFPQeUNMgYQybgF5XVlIhKHVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK07E2siIKZiYw7xVQk13o3IBiKSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZGY1NGUyOGUtMTZhMi0z MTU4LTllNWMtNDJiYTFjMTBkNmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqFegMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHj1L/5dYBrPCs6/glbOCh1bE6kfDsl6Q6aAGeORlZh0ROrAbbtR9nb7 VSiA2nbgNZcppc2H6tPXbi0trW+StNcAOX4jUPFth7D1HLnIZBuinvgdJqBbRxf5 tO58ru35AmAHS+hb3dBLQv8snfrBrnMJ7z3qlsgZrGtTP1uY9dQzJrnjpH5AVQuE wLWJmAf2pVaDxFS8wdXUYkFRQdzBfTe4Be1JkRsLG592yXaROJOvsFyYdJtZ4I2g R3T4H9LiemnQFTjYiNRwmaA80hmKbTDIKa48JzTfdxD7iY2qDHIQdY0aP2V4CHg+ ew2bvkJrPiiUlBmLCm0z5DKt8RxnnJ8= -----END CERTIFICATE-----Generated at Sat Apr 5 16:39:37 2025 by rpki-client