$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e4f6a5a5-bea9-322a-9fab-0663b5137b6e.roa File: e4f6a5a5-bea9-322a-9fab-0663b5137b6e.roa (raw, json) Hash identifier: J2Mi0GUqRNn4w6RZantXpp+5VxjNHFAHEhEqqcmKfcs= Subject key identifier: 2F:02:D3:4E:D0:F9:E8:5E:16:3E:05:C7:EC:05:5D:BF:8C:98:AD:4E Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285847DDEF8493656959F9950A8E80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e4f6a5a5-bea9-322a-9fab-0663b5137b6e.roa Signing time: Wed 13 Nov 2024 15:16:12 +0000 ROA not before: Wed 13 Nov 2024 15:16:12 +0000 ROA not after: Tue 11 Feb 2025 15:16:12 +0000 asID: 3360 IP address blocks: 168.87.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:dd:ef:84:93:65:69:59:f9:95:0a:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Nov 13 15:16:12 2024 GMT Not After : Feb 11 15:16:12 2025 GMT Subject: CN=411958b1-a513-43e4-99a5-359ceeeb3ca0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:42:8e:08:cc:0e:87:ed:53:f2:71:a2:fb:48: 5b:66:3a:00:8f:d8:e5:1b:d8:99:99:9d:a7:49:88: c3:ff:9e:12:89:f4:d3:b9:21:a9:9a:f0:b2:89:bb: b3:a8:cd:e9:67:48:96:2b:d5:6d:f5:60:a0:27:50: 32:87:f2:ae:ec:03:76:a3:b5:b5:4d:b0:38:7f:e9: 6b:84:0d:3b:22:61:a3:77:16:28:08:ab:69:81:74: 83:8a:68:72:c0:4f:c8:38:79:18:0d:aa:2d:9e:bf: 39:eb:aa:f0:5d:f6:da:21:80:98:1b:23:cd:c8:31: b9:ab:2c:0b:7f:f4:81:86:d3:79:77:06:68:cb:5e: 2a:8e:76:33:1c:83:80:cf:c2:63:df:5f:45:db:a2: 2a:04:0d:f9:ba:f2:fe:8d:e0:89:cd:cf:70:c7:44: 8f:36:12:7d:67:d9:ad:cb:d0:1e:7d:d2:1c:5b:d8: 4d:de:f8:68:0c:89:f2:f2:e9:25:d4:cd:25:87:05: ed:a8:c5:79:58:4f:72:dc:45:04:ee:34:0d:57:57: a3:b6:13:0c:8f:0c:b6:aa:45:53:c3:62:4e:c6:2a: 67:85:4a:15:9e:7c:89:0d:43:bd:f7:53:3e:54:d0: a2:f5:fa:19:ed:ff:a7:cd:c1:83:c2:dc:72:17:6d: 86:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:02:D3:4E:D0:F9:E8:5E:16:3E:05:C7:EC:05:5D:BF:8C:98:AD:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e4f6a5a5-bea9-322a-9fab-0663b5137b6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:98:3c:eb:4c:75:e9:c7:56:64:7d:05:1b:f8:a5:8e:c8:92: a6:0d:06:b2:de:20:73:ae:0f:c0:75:1b:b8:b0:35:0f:36:b9: 3f:d2:5d:57:39:2f:22:2e:0a:53:05:58:05:8b:43:82:50:96: c8:0e:25:4a:66:e4:f1:ba:81:0d:30:f6:69:d1:9a:25:9e:01: b1:02:92:9e:40:8e:02:06:dd:38:21:e0:b2:37:16:ce:42:84: ca:0d:86:37:4b:05:1c:b7:5d:2d:6e:4c:44:00:dc:8f:3a:e4: 85:c9:29:c1:8f:da:d8:c5:86:cc:ec:28:56:c2:5e:f0:fc:ec: ab:08:5b:b7:a2:43:6b:b7:97:25:00:12:a7:89:fe:f5:dc:c5: 7e:2b:16:00:e2:97:68:e7:71:54:eb:ef:2b:f7:bb:da:64:56: 67:95:bf:7f:c8:90:01:ec:99:60:3e:2f:e7:80:e4:21:7c:59: d6:4c:8f:93:38:d9:51:63:3c:c4:80:38:2c:69:47:c1:ce:d4: f9:0d:ce:ca:2d:ec:96:8e:e2:ed:33:2f:9e:b9:70:1a:b5:f9: 11:9a:54:fe:3a:64:b5:b8:47:f6:67:4d:2b:12:7a:49:21:b5: be:83:e7:39:26:dd:29:2c:db:23:fa:70:af:aa:06:fd:65:a8: 6f:b8:b9:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfd74STZWlZ+ZUKjoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI0MTExMzE1MTYxMloXDTI1MDIxMTE1MTYxMlowLzEtMCsGA1UEAxMk NDExOTU4YjEtYTUxMy00M2U0LTk5YTUtMzU5Y2VlZWIzY2EwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEKOCMwOh+1T8nGi+0hbZjoAj9jlG9iZmZ2n SYjD/54SifTTuSGpmvCyibuzqM3pZ0iWK9Vt9WCgJ1Ayh/Ku7AN2o7W1TbA4f+lr hA07ImGjdxYoCKtpgXSDimhywE/IOHkYDaotnr8566rwXfbaIYCYGyPNyDG5qywL f/SBhtN5dwZoy14qjnYzHIOAz8Jj319F26IqBA35uvL+jeCJzc9wx0SPNhJ9Z9mt y9AefdIcW9hN3vhoDIny8ukl1M0lhwXtqMV5WE9y3EUE7jQNV1ejthMMjwy2qkVT w2JOxipnhUoVnnyJDUO991M+VNCi9foZ7f+nzcGDwtxyF22G7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC8C007Q+eheFj4Fx+wFXb+MmK1OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZTRmNmE1YTUtYmVhOS0z MjJhLTlmYWItMDY2M2I1MTM3YjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqFcQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIyYPOtMdenHVmR9BRv4pY7IkqYNBrLeIHOuD8B1G7iwNQ82uT/SXVc5 LyIuClMFWAWLQ4JQlsgOJUpm5PG6gQ0w9mnRmiWeAbECkp5AjgIG3Tgh4LI3Fs5C hMoNhjdLBRy3XS1uTEQA3I865IXJKcGP2tjFhszsKFbCXvD87KsIW7eiQ2u3lyUA EqeJ/vXcxX4rFgDil2jncVTr7yv3u9pkVmeVv3/IkAHsmWA+L+eA5CF8WdZMj5M4 2VFjPMSAOCxpR8HO1PkNzsot7JaO4u0zL565cBq1+RGaVP46ZLW4R/ZnTSsSekkh tb6D5zkm3Sks2yP6cK+qBv1lqG+4uUk= -----END CERTIFICATE-----Generated at Sun Nov 24 21:00:42 2024 by rpki-client on console-fra.rpki-client.org