$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ed031f12-45c2-3095-bf6e-a833ff00e52a.roa File: ed031f12-45c2-3095-bf6e-a833ff00e52a.roa (raw, json) Hash identifier: 6kmKOX8s+DMV0/czYOqZ1qH95ZapgAMILzwouZ6cM+U= Subject key identifier: 63:72:E6:80:16:EB:F6:00:58:02:6C:3E:EE:85:15:7E:8F:11:E6:3F Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584832F01FC6C43D9572261FBFC0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ed031f12-45c2-3095-bf6e-a833ff00e52a.roa Signing time: Sat 14 Dec 2024 02:00:39 +0000 ROA not before: Sat 14 Dec 2024 02:00:39 +0000 ROA not after: Fri 14 Mar 2025 01:00:39 +0000 asID: 3356 IP address blocks: 168.87.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:32:f0:1f:c6:c4:3d:95:72:26:1f:bf:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Dec 14 02:00:39 2024 GMT Not After : Mar 14 01:00:39 2025 GMT Subject: CN=ecf0f75a-6f28-48ec-8678-b133bb3a4980 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c3:ec:68:af:f8:23:bc:9d:59:b2:e3:35:0e: 88:a4:96:c5:82:51:f8:fa:89:fe:2c:54:b3:8f:1a: 02:31:00:95:79:4b:ad:98:34:ad:73:4e:1a:15:fb: 4a:21:07:39:bd:3b:37:b9:1e:cd:b7:69:74:ad:6d: 6b:84:a8:32:32:48:f5:bf:ff:0d:a6:68:8c:d2:b9: 88:bf:33:c9:68:9a:b1:5a:bd:a9:1a:c6:d9:20:a8: 38:41:6f:9d:f4:07:9e:a0:a3:fd:b5:90:fa:6e:5b: 0b:c2:96:1e:a4:09:f7:18:b9:94:5c:fe:eb:57:5c: e0:8d:95:72:93:88:8d:95:ba:8e:ef:86:36:c2:04: 6e:62:bd:ce:63:33:a0:d4:08:32:2a:bf:c9:2a:98: 38:56:fe:12:c2:0c:8e:72:ee:91:7b:21:0c:6e:f1: 04:df:ce:4f:1f:ed:81:b8:20:8b:e1:0e:55:6e:35: a4:28:ee:2d:95:7e:75:8f:48:91:d8:e4:02:8c:30: 8a:a2:e8:f3:61:9f:b7:b9:22:df:f1:d1:47:8e:ec: b9:d8:22:e2:75:0d:6e:81:33:1a:7d:90:35:ac:04: c2:84:da:80:7f:e9:9e:8b:b3:ec:1d:7b:09:97:c2: fd:71:95:0b:cd:d2:7a:dd:39:29:f0:3c:50:bb:c1: b8:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:72:E6:80:16:EB:F6:00:58:02:6C:3E:EE:85:15:7E:8F:11:E6:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ed031f12-45c2-3095-bf6e-a833ff00e52a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:4d:b7:00:f8:4e:8b:ec:5b:f4:7a:e3:a6:fb:70:bd:d9:9d: a7:85:d9:da:fe:3d:80:a5:3c:13:8e:94:19:66:4c:1c:5e:2a: 0b:9d:fe:65:b5:b8:54:fe:d3:56:fc:a7:06:f8:97:ca:a0:ce: 48:ee:af:6e:29:25:16:6d:42:08:8d:b7:65:0f:d9:dc:e8:80: ed:52:bd:3a:da:47:33:ab:aa:5a:e4:42:3c:7c:0e:83:2c:7f: 35:89:39:5f:0c:b3:d0:f7:7a:10:22:c6:6b:aa:e5:93:64:c5: b8:6b:cd:d2:1a:76:d6:bb:a6:0f:35:43:2a:47:7c:ee:b1:d8: 04:10:1e:4d:30:5c:be:f3:72:93:d1:51:79:dc:9e:2c:9c:9f: c5:b9:1f:26:b6:c5:70:17:45:ee:0d:d9:f0:b8:b1:a1:b0:eb: f2:61:99:b8:7f:ce:d9:da:38:6f:b4:04:a7:cb:86:bb:a5:bb: e0:c7:77:34:16:b5:da:47:d8:67:6f:17:d5:9c:0a:6a:10:35: df:58:33:dd:7f:ab:2f:d3:f1:0c:41:11:51:dc:e5:be:df:14: 3f:dc:68:72:37:5b:13:4a:41:c5:2f:0c:97:ea:1d:73:30:2f: 2f:81:9e:a2:df:9f:9e:7c:ed:06:6c:a6:02:1c:c1:d7:e2:66: 88:14:8d:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgy8B/GxD2VciYfv8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI0MTIxNDAyMDAzOVoXDTI1MDMxNDAxMDAzOVowLzEtMCsGA1UEAxMk ZWNmMGY3NWEtNmYyOC00OGVjLTg2NzgtYjEzM2JiM2E0OTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8PsaK/4I7ydWbLjNQ6IpJbFglH4+on+LFSz jxoCMQCVeUutmDStc04aFftKIQc5vTs3uR7Nt2l0rW1rhKgyMkj1v/8NpmiM0rmI vzPJaJqxWr2pGsbZIKg4QW+d9AeeoKP9tZD6blsLwpYepAn3GLmUXP7rV1zgjZVy k4iNlbqO74Y2wgRuYr3OYzOg1AgyKr/JKpg4Vv4SwgyOcu6ReyEMbvEE385PH+2B uCCL4Q5VbjWkKO4tlX51j0iR2OQCjDCKoujzYZ+3uSLf8dFHjuy52CLidQ1ugTMa fZA1rATChNqAf+mei7PsHXsJl8L9cZULzdJ63Tkp8DxQu8G4HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGNy5oAW6/YAWAJsPu6FFX6PEeY/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZWQwMzFmMTItNDVjMi0z MDk1LWJmNmUtYTgzM2ZmMDBlNTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFdwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFhNtwD4TovsW/R646b7cL3ZnaeF2dr+PYClPBOOlBlmTBxeKgud/mW1 uFT+01b8pwb4l8qgzkjur24pJRZtQgiNt2UP2dzogO1SvTraRzOrqlrkQjx8DoMs fzWJOV8Ms9D3ehAixmuq5ZNkxbhrzdIadta7pg81QypHfO6x2AQQHk0wXL7zcpPR UXncniycn8W5Hya2xXAXRe4N2fC4saGw6/Jhmbh/ztnaOG+0BKfLhrulu+DHdzQW tdpH2GdvF9WcCmoQNd9YM91/qy/T8QxBEVHc5b7fFD/caHI3WxNKQcUvDJfqHXMw Ly+BnqLfn5587QZspgIcwdfiZogUjeM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:25:34 2025 by rpki-client