$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e671f43d-35d5-35ee-8fb1-9ed92ef33ba5.roa File: e671f43d-35d5-35ee-8fb1-9ed92ef33ba5.roa (raw, json) Hash identifier: CO1nFepTpSsojE4vLkcy4QMboiLkSu+oL/eYM2RvD+k= Subject key identifier: 15:E9:50:4D:98:87:73:7D:E8:B1:14:18:E4:4A:EF:01:A3:89:58:9B Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858491246BA36333D9DDAF66E9B00 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e671f43d-35d5-35ee-8fb1-9ed92ef33ba5.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 203 IP address blocks: 168.87.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:ba:36:33:3d:9d:da:f6:6e:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=e3a4f9e0-6904-4e33-8b22-fe63f13a6119 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:70:6c:5e:c9:f6:60:f7:6b:56:7b:fe:71:cd: 4b:dc:b7:85:2a:be:a4:d8:1f:6b:c0:92:1b:f2:13: 67:cc:ae:b1:65:51:ce:81:33:99:b4:6c:e4:e9:06: 58:80:72:b4:98:69:7a:ea:69:d8:d8:05:b4:1c:1d: 28:b7:25:06:c3:94:de:db:ce:d7:94:89:3d:9e:4b: 40:b9:49:77:50:19:da:78:5c:3b:c3:58:fe:f6:0b: d3:7e:81:68:51:9d:b5:bc:33:4f:ba:ac:7a:32:d1: 81:28:b2:3c:ca:6e:78:02:c9:8c:9a:49:6d:ec:5f: 18:b1:b3:5a:28:a6:91:8f:e1:45:33:6c:8c:2a:96: 27:15:6b:de:25:47:f2:75:4d:17:ae:ec:ac:48:b7: 40:86:f1:1d:13:6b:9f:f3:37:bf:e3:c9:61:22:d8: 51:fa:ea:fa:02:09:da:a4:13:8e:94:1f:88:3e:7d: 9b:e4:60:e6:a2:a4:75:56:40:05:bc:db:c7:ec:91: fe:85:f8:82:2c:c8:2c:28:fd:b4:78:a0:87:4c:6a: ea:0a:d9:77:e5:97:9f:cf:33:b0:53:03:f5:c3:b6: 31:0a:00:cb:ec:62:1d:97:fb:85:99:5b:1d:cf:5e: a7:6f:96:c3:61:ec:43:7d:d1:1f:f2:56:27:00:c4: 48:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:E9:50:4D:98:87:73:7D:E8:B1:14:18:E4:4A:EF:01:A3:89:58:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e671f43d-35d5-35ee-8fb1-9ed92ef33ba5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.160.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:7a:52:70:9c:1e:3c:3d:b4:d0:01:63:c0:15:c6:53:4d:3a: c1:95:cd:f9:c4:36:f9:e9:58:90:e6:69:fc:94:18:71:71:cf: 54:91:52:f2:7a:dc:70:0b:90:69:af:e8:ea:8a:27:45:be:23: 01:b2:6f:46:13:6e:06:4c:1d:c0:eb:97:4d:4e:ef:5e:5e:4d: d7:5e:8c:2c:d2:f7:36:2c:cb:74:8f:e1:f6:d6:52:5b:85:e2: d7:c6:97:1a:b3:82:a1:9b:19:71:96:92:d8:47:97:9e:7f:58: c2:70:de:d3:ca:79:cb:36:37:ca:ae:d8:21:54:47:4e:da:fe: 4d:cf:d7:5a:a7:e6:cd:bb:a7:f1:9e:20:12:d8:c5:c8:b7:cb: 28:bb:14:88:4f:a1:e1:31:55:61:6d:ea:5b:f0:19:0f:13:5e: f8:63:1d:e8:c1:9b:61:4c:c6:ea:43:64:a3:7b:96:95:a2:1d: d9:40:c0:f5:22:68:51:ad:f8:7b:3a:a6:e5:a9:f2:bb:e2:02: de:4e:82:27:d2:f8:90:6f:27:3d:7a:7a:7c:ae:d0:28:cc:e2: a7:da:23:cb:66:93:16:9c:a9:db:8e:08:d1:35:0b:ed:31:58: 3a:c6:d9:10:90:0f:27:52:c1:ef:92:c7:64:36:6d:17:49:1a: 8f:e7:12:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRro2Mz2d2vZumwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk ZTNhNGY5ZTAtNjkwNC00ZTMzLThiMjItZmU2M2YxM2E2MTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznBsXsn2YPdrVnv+cc1L3LeFKr6k2B9rwJIb 8hNnzK6xZVHOgTOZtGzk6QZYgHK0mGl66mnY2AW0HB0otyUGw5Te287XlIk9nktA uUl3UBnaeFw7w1j+9gvTfoFoUZ21vDNPuqx6MtGBKLI8ym54AsmMmklt7F8YsbNa KKaRj+FFM2yMKpYnFWveJUfydU0XruysSLdAhvEdE2uf8ze/48lhIthR+ur6Agna pBOOlB+IPn2b5GDmoqR1VkAFvNvH7JH+hfiCLMgsKP20eKCHTGrqCtl35ZefzzOw UwP1w7YxCgDL7GIdl/uFmVsdz16nb5bDYexDfdEf8lYnAMRI7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBXpUE2Yh3N96LEUGORK7wGjiVibMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZTY3MWY0M2QtMzVkNS0z NWVlLThmYjEtOWVkOTJlZjMzYmE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqFegMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHd6UnCcHjw9tNABY8AVxlNNOsGVzfnENvnpWJDmafyUGHFxz1SRUvJ6 3HALkGmv6OqKJ0W+IwGyb0YTbgZMHcDrl01O715eTddejCzS9zYsy3SP4fbWUluF 4tfGlxqzgqGbGXGWkthHl55/WMJw3tPKecs2N8qu2CFUR07a/k3P11qn5s27p/Ge IBLYxci3yyi7FIhPoeExVWFt6lvwGQ8TXvhjHejBm2FMxupDZKN7lpWiHdlAwPUi aFGt+Hs6puWp8rviAt5OgifS+JBvJz16enyu0CjM4qfaI8tmkxacqduOCNE1C+0x WDrG2RCQDydSwe+Sx2Q2bRdJGo/nEsc= -----END CERTIFICATE-----Generated at Fri Mar 14 10:35:26 2025 by rpki-client