$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f00700ad-3b21-3127-8b41-4f7218a8e714.roa File: f00700ad-3b21-3127-8b41-4f7218a8e714.roa (raw, json) Hash identifier: l89HRhsd4KyOzHG02242WXiO+q77A9oY2PyjY805Tbk= Subject key identifier: 89:A8:65:3F:15:8B:5F:DF:95:4A:00:01:60:5A:5B:B8:B5:31:03:CC Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285847CE6F4ACAA03408C401B56BA0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f00700ad-3b21-3127-8b41-4f7218a8e714.roa Signing time: Fri 08 Nov 2024 02:00:27 +0000 ROA not before: Fri 08 Nov 2024 02:00:27 +0000 ROA not after: Thu 06 Feb 2025 02:00:27 +0000 asID: 202 IP address blocks: 168.87.154.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ce:6f:4a:ca:a0:34:08:c4:01:b5:6b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Nov 8 02:00:27 2024 GMT Not After : Feb 6 02:00:27 2025 GMT Subject: CN=5996dd44-5a64-4845-a0c9-b0660dea7072 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:2d:36:82:22:1f:e8:03:da:94:7b:30:92:6c: df:7f:41:a3:f3:03:fb:b2:41:e2:71:3e:10:4a:e8: ea:2d:ee:67:e8:8e:6c:91:0c:0c:06:89:c0:d8:5c: f3:0a:56:5f:0d:76:a5:bd:60:34:d4:99:45:63:ee: 41:20:1d:92:3c:30:07:cb:c0:7e:3d:3a:1a:34:6b: dd:3d:01:63:0a:d6:29:e0:7d:c9:52:aa:b5:4f:93: ba:ff:bf:70:fb:4d:7a:f6:95:e5:e5:17:b0:f4:39: d6:b2:ed:04:50:e8:79:9c:f3:15:5b:aa:f9:c6:6f: ac:72:ce:6f:e3:f3:ca:75:91:3a:34:08:e1:43:6b: 83:d3:2b:ac:44:88:d8:7b:ab:d1:41:86:04:02:0a: b2:47:58:49:1c:f2:51:06:43:dd:09:8e:8d:ad:df: 52:f2:ba:1d:22:b1:01:7b:0c:a5:aa:8d:5e:9d:aa: e8:59:d1:7f:e4:6b:41:f6:79:d3:1d:ad:24:ee:4e: 78:4b:f9:f7:ec:69:11:7b:ac:59:ff:b0:50:2b:f0: b5:5e:f3:67:ed:60:3e:d7:d4:69:a1:57:ce:36:e1: b0:b9:78:c8:dc:1b:03:5b:05:0c:55:e8:b0:4b:96: 36:d6:89:65:01:b2:c1:b9:12:20:5c:8f:b7:9e:26: 83:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:A8:65:3F:15:8B:5F:DF:95:4A:00:01:60:5A:5B:B8:B5:31:03:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f00700ad-3b21-3127-8b41-4f7218a8e714.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.154.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:08:e8:4c:7d:b1:b7:68:06:3f:f6:0f:56:c4:95:06:30:10: e2:b0:60:0f:9d:5f:b9:6a:69:7a:bf:e3:1e:78:fc:66:6d:dc: f4:c4:ef:33:ca:68:8e:f8:c2:b1:88:69:c7:b9:27:25:02:25: 08:53:be:b8:2c:fb:57:90:69:6e:9d:64:7d:07:d4:79:d5:1c: d6:42:b1:b4:5f:f2:fc:c8:a4:b3:f5:fb:e6:c4:44:7c:5a:99: b0:85:07:3f:39:2f:25:87:48:2e:91:31:88:15:2c:93:fa:83: f1:20:5e:c2:c4:a5:ed:73:c7:21:9c:7e:9e:fc:67:9c:39:03: c4:b7:64:d9:9a:83:54:f3:8c:66:b5:9b:4e:0e:13:40:53:2c: e3:37:32:d4:de:ce:1c:1e:85:89:d7:77:da:3c:f0:ba:fc:b1: ff:d3:9e:34:db:86:54:f7:47:a2:83:0a:db:d2:46:54:d9:0e: e5:4f:c8:ad:77:57:df:a6:3a:86:2a:c9:f2:5a:e5:d6:fe:3c: 7b:83:fe:33:8f:ea:49:8b:9c:18:f1:51:64:0d:20:75:48:71: 43:11:4c:ab:6e:b5:09:92:f7:8a:9f:5b:f9:8c:9e:95:cd:1d: f8:78:8d:08:72:3f:2e:96:65:fe:8e:8d:ee:c4:5b:db:b4:55: 81:82:73:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfOb0rKoDQIxAG1a6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI0MTEwODAyMDAyN1oXDTI1MDIwNjAyMDAyN1owLzEtMCsGA1UEAxMk NTk5NmRkNDQtNWE2NC00ODQ1LWEwYzktYjA2NjBkZWE3MDcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjC02giIf6APalHswkmzff0Gj8wP7skHicT4Q SujqLe5n6I5skQwMBonA2FzzClZfDXalvWA01JlFY+5BIB2SPDAHy8B+PToaNGvd PQFjCtYp4H3JUqq1T5O6/79w+0169pXl5Rew9DnWsu0EUOh5nPMVW6r5xm+scs5v 4/PKdZE6NAjhQ2uD0yusRIjYe6vRQYYEAgqyR1hJHPJRBkPdCY6Nrd9S8rodIrEB ewylqo1enaroWdF/5GtB9nnTHa0k7k54S/n37GkRe6xZ/7BQK/C1XvNn7WA+19Rp oVfONuGwuXjI3BsDWwUMVeiwS5Y21ollAbLBuRIgXI+3niaD3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFImoZT8Vi1/flUoAAWBaW7i1MQPMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZjAwNzAwYWQtM2IyMS0z MTI3LThiNDEtNGY3MjE4YThlNzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqFeaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADEI6Ex9sbdoBj/2D1bElQYwEOKwYA+dX7lqaXq/4x54/GZt3PTE7zPK aI74wrGIace5JyUCJQhTvrgs+1eQaW6dZH0H1HnVHNZCsbRf8vzIpLP1++bERHxa mbCFBz85LyWHSC6RMYgVLJP6g/EgXsLEpe1zxyGcfp78Z5w5A8S3ZNmag1TzjGa1 m04OE0BTLOM3MtTezhwehYnXd9o88Lr8sf/TnjTbhlT3R6KDCtvSRlTZDuVPyK13 V9+mOoYqyfJa5db+PHuD/jOP6kmLnBjxUWQNIHVIcUMRTKtutQmS94qfW/mMnpXN Hfh4jQhyPy6WZf6Oje7EW9u0VYGCc+g= -----END CERTIFICATE-----Generated at Sun Nov 24 21:48:38 2024 by rpki-client on console-ams.rpki-client.org