$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e1449b40-c4e8-38ff-8b05-5fd9dc245096.roa File: e1449b40-c4e8-38ff-8b05-5fd9dc245096.roa (raw, json) Hash identifier: /Ju0wznopb/KySsDdi9xByDly3aI6JLHv49UsY+I/T8= Subject key identifier: 27:B8:55:37:D3:81:96:FF:38:4B:9A:6A:98:3A:23:DD:35:1E:A0:0C Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858489E6B61366ED0EB70BE400740 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e1449b40-c4e8-38ff-8b05-5fd9dc245096.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 86 IP address blocks: 168.87.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6b:61:36:6e:d0:eb:70:be:40:07:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=73dc7630-9dd2-4064-9819-c5b6ced5e701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:bf:a1:f7:58:d9:12:98:32:9d:47:fc:b3:76: c6:26:05:7e:29:66:51:58:0c:bd:53:47:91:6d:ee: 98:77:9f:1e:7e:c4:9c:dd:37:49:59:90:d9:09:6e: b1:e1:fa:21:0a:8e:05:7f:25:37:1e:f6:f8:d1:2a: 12:46:01:bb:0a:36:c3:d7:c6:34:41:01:39:60:4e: 52:60:77:e4:db:19:f3:e4:4d:61:bd:c9:1c:15:c2: 11:35:11:73:40:2d:11:c9:c5:64:bb:bb:49:da:7c: 7a:59:77:f2:19:93:22:8a:3b:81:11:05:07:e2:26: 42:34:be:35:1d:85:c0:f6:df:7a:41:6b:76:38:6e: 34:ef:66:20:4b:f5:a8:03:6e:c6:e1:15:b7:65:3c: a7:ff:14:ee:ea:f4:8d:92:17:d5:37:a4:33:68:3c: d5:53:57:e7:bd:e4:35:10:ff:b0:f2:3d:d7:3f:ef: e8:ed:ab:66:93:b4:cb:8a:81:13:2b:ec:c7:e2:d4: fd:dc:aa:b8:59:46:95:fe:fa:61:fd:24:6f:e1:7c: 58:81:15:70:ab:bc:53:a4:fb:b7:2d:5a:75:0d:b7: 24:2b:21:bb:b0:a2:98:ed:77:d8:f7:c5:62:2a:82: ba:e8:aa:cc:59:72:da:5c:48:c9:dd:7e:0a:ca:99: 0b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:B8:55:37:D3:81:96:FF:38:4B:9A:6A:98:3A:23:DD:35:1E:A0:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e1449b40-c4e8-38ff-8b05-5fd9dc245096.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:9c:9f:bd:79:b3:46:cc:7f:3a:10:af:2f:8a:4a:28:d3:75: fb:a2:18:b4:b4:0e:35:f5:89:c9:86:eb:ba:cf:c9:d2:56:52: 32:b2:3a:36:40:d7:4a:ba:56:ba:97:2c:70:3f:58:00:fb:2f: 88:1d:63:53:49:47:15:a5:74:40:d2:6f:da:45:c4:e5:9e:29: e9:fa:a2:38:59:07:61:26:85:6a:45:1c:08:87:1d:a6:9f:e4: 66:82:e2:de:e6:af:d1:4d:b9:3c:37:50:61:54:b3:36:de:d3: ca:ca:3d:05:34:3c:50:d0:8b:75:be:9d:c9:26:a5:11:bd:f3: c5:bf:1d:95:3a:54:6d:05:b6:f1:84:09:1a:70:07:66:b4:07: 9f:42:ac:7b:61:64:46:d4:78:fa:06:7f:df:89:85:a2:75:6b: b8:fa:e6:c9:ae:db:79:03:75:07:6c:28:e7:e0:f6:8c:cc:60: aa:d0:94:db:aa:85:0c:13:69:14:a1:a5:5f:4f:d2:c3:2e:9c: f8:db:d9:88:fb:c8:88:af:04:53:2b:1f:68:80:1d:72:ba:83: df:01:b7:7a:fe:33:51:1f:dc:9e:70:9b:1d:c9:d0:f7:d7:ac: 5a:8b:ea:f3:9c:6c:34:cc:85:15:ee:c7:d4:c3:b1:5a:71:9b: 24:f2:df:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiea2E2btDrcL5AB0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk NzNkYzc2MzAtOWRkMi00MDY0LTk4MTktYzViNmNlZDVlNzAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlL+h91jZEpgynUf8s3bGJgV+KWZRWAy9U0eR be6Yd58efsSc3TdJWZDZCW6x4fohCo4FfyU3Hvb40SoSRgG7CjbD18Y0QQE5YE5S YHfk2xnz5E1hvckcFcIRNRFzQC0RycVku7tJ2nx6WXfyGZMiijuBEQUH4iZCNL41 HYXA9t96QWt2OG4072YgS/WoA27G4RW3ZTyn/xTu6vSNkhfVN6QzaDzVU1fnveQ1 EP+w8j3XP+/o7atmk7TLioETK+zH4tT93Kq4WUaV/vph/SRv4XxYgRVwq7xTpPu3 LVp1DbckKyG7sKKY7XfY98ViKoK66KrMWXLaXEjJ3X4KypkLHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCe4VTfTgZb/OEuaapg6I901HqAMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZTE0NDliNDAtYzRlOC0z OGZmLThiMDUtNWZkOWRjMjQ1MDk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFeHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADecn715s0bMfzoQry+KSijTdfuiGLS0DjX1icmG67rPydJWUjKyOjZA 10q6VrqXLHA/WAD7L4gdY1NJRxWldEDSb9pFxOWeKen6ojhZB2EmhWpFHAiHHaaf 5GaC4t7mr9FNuTw3UGFUszbe08rKPQU0PFDQi3W+nckmpRG988W/HZU6VG0FtvGE CRpwB2a0B59CrHthZEbUePoGf9+JhaJ1a7j65smu23kDdQdsKOfg9ozMYKrQlNuq hQwTaRShpV9P0sMunPjb2Yj7yIivBFMrH2iAHXK6g98Bt3r+M1Ef3J5wmx3J0PfX rFqL6vOcbDTMhRXux9TDsVpxmyTy3yk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:48:14 2025 by rpki-client