$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f1f77be5-daf4-345a-99b1-f4bee4f839d6.roa File: f1f77be5-daf4-345a-99b1-f4bee4f839d6.roa (raw, json) Hash identifier: xnxbow9bd0KJNc6kRMs4PZt2tn0OGNHK4GWUjNHt9mM= Subject key identifier: 1B:6E:84:06:06:EC:2B:59:C2:B2:6C:4C:71:D1:EA:8E:7E:E1:05:34 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285844E8E572D28A749B77CBF4AE20 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f1f77be5-daf4-345a-99b1-f4bee4f839d6.roa Signing time: Fri 16 Feb 2024 11:08:59 +0000 ROA not before: Fri 16 Feb 2024 11:08:59 +0000 ROA not after: Thu 16 May 2024 10:08:59 +0000 asID: 3356 IP address blocks: 168.87.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 May 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:e8:e5:72:d2:8a:74:9b:77:cb:f4:ae:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Feb 16 11:08:59 2024 GMT Not After : May 16 10:08:59 2024 GMT Subject: CN=c161ac2e-7c58-4c8b-85f6-79e8b298b0fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:de:f9:e9:14:04:9d:2b:30:5a:48:f0:e4:e7: f0:6a:5e:a6:61:a9:0d:04:8a:74:a2:ea:fb:08:cb: a5:55:d1:5d:03:a5:e0:f4:7f:f3:91:3d:d5:ec:23: 03:33:fa:f9:a3:21:9b:be:42:22:85:fe:f6:35:00: b8:fc:77:0b:76:f7:a5:e9:c4:26:88:c0:8c:1e:9a: ce:55:b4:1e:fc:fe:67:90:f6:1f:e5:25:54:e4:bf: f2:7e:05:20:ce:39:6d:01:c3:7c:26:e2:0a:87:10: dc:6d:3b:85:14:41:ef:d6:ec:df:80:bc:56:22:a2: 42:ac:ef:9b:69:ff:e8:b3:22:81:b2:b6:e7:41:eb: 36:69:a9:ec:a7:9c:71:30:61:33:5b:6f:32:25:f9: ad:6c:9f:67:e3:c3:da:0e:ec:0a:94:10:01:54:90: 7d:8e:2e:8f:f4:0e:5d:7f:f5:89:e3:d4:71:ce:d7: ef:1f:d7:e5:91:f0:4f:29:72:d6:27:ac:1c:d6:bf: be:83:7c:9d:b3:14:1a:01:c4:42:b3:ac:09:6d:1f: 7d:78:ba:3b:95:ac:bd:73:fe:40:0d:5b:4b:c8:ef: dd:64:6d:2d:85:4a:4f:36:f1:1a:8b:83:5c:c8:f9: 29:37:62:b9:23:bf:63:a5:cf:e6:95:c5:1d:98:75: 40:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:6E:84:06:06:EC:2B:59:C2:B2:6C:4C:71:D1:EA:8E:7E:E1:05:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f1f77be5-daf4-345a-99b1-f4bee4f839d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:66:81:ab:9a:f8:0d:ea:5d:e0:3a:c0:2c:b2:e0:11:2a:87: e0:f2:07:b3:ce:23:02:7b:d9:1b:1b:91:d3:25:67:e8:f5:b0: 3c:44:74:ff:17:8d:54:2b:26:7b:e6:20:29:c8:4f:e2:a8:fa: 4c:5e:86:39:e0:25:ff:6b:21:79:fe:65:a2:3a:73:df:4e:72: 9d:e2:f7:b4:06:0e:25:e4:c5:ec:54:ff:7c:c8:35:d8:30:ae: 98:44:98:5c:4e:61:a2:af:4d:79:a3:be:aa:1e:44:a0:03:c2: c2:8b:0a:49:07:1e:a1:e9:1a:18:ca:1a:c7:40:5c:71:20:4a: 72:2b:1b:50:33:a0:88:85:7e:7e:4f:a9:36:06:4f:3a:24:87: 65:e2:0a:a0:cf:91:2b:d7:93:a9:e7:d6:79:31:c5:c6:b1:30: 96:aa:89:29:40:cd:76:29:e0:e4:fc:e8:91:a5:33:9d:76:64: 94:d8:a3:45:e6:81:2f:47:04:7b:cc:93:92:03:ac:35:51:1e: a3:23:3f:f6:f6:57:74:c2:03:9f:82:46:94:13:b1:20:fe:0c: 3d:4e:86:fd:a5:f6:ca:a9:13:df:04:59:39:07:1b:ee:03:dc: 94:fd:74:91:f8:aa:99:9a:33:b9:d0:f4:8e:35:86:72:86:d0: c1:be:93:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWETo5XLSinSbd8v0riAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI0MDIxNjExMDg1OVoXDTI0MDUxNjEwMDg1OVowLzEtMCsGA1UEAxMk YzE2MWFjMmUtN2M1OC00YzhiLTg1ZjYtNzllOGIyOThiMGZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtt756RQEnSswWkjw5Ofwal6mYakNBIp0our7 CMulVdFdA6Xg9H/zkT3V7CMDM/r5oyGbvkIihf72NQC4/HcLdvel6cQmiMCMHprO VbQe/P5nkPYf5SVU5L/yfgUgzjltAcN8JuIKhxDcbTuFFEHv1uzfgLxWIqJCrO+b af/osyKBsrbnQes2aansp5xxMGEzW28yJfmtbJ9n48PaDuwKlBABVJB9ji6P9A5d f/WJ49RxztfvH9flkfBPKXLWJ6wc1r++g3ydsxQaAcRCs6wJbR99eLo7lay9c/5A DVtLyO/dZG0thUpPNvEai4NcyPkpN2K5I79jpc/mlcUdmHVA4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBtuhAYG7CtZwrJsTHHR6o5+4QU0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZjFmNzdiZTUtZGFmNC0z NDVhLTk5YjEtZjRiZWU0ZjgzOWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqFcUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIhmgaua+A3qXeA6wCyy4BEqh+DyB7POIwJ72RsbkdMlZ+j1sDxEdP8X jVQrJnvmICnIT+Ko+kxehjngJf9rIXn+ZaI6c99Ocp3i97QGDiXkxexU/3zINdgw rphEmFxOYaKvTXmjvqoeRKADwsKLCkkHHqHpGhjKGsdAXHEgSnIrG1AzoIiFfn5P qTYGTzokh2XiCqDPkSvXk6nn1nkxxcaxMJaqiSlAzXYp4OT86JGlM512ZJTYo0Xm gS9HBHvMk5IDrDVRHqMjP/b2V3TCA5+CRpQTsSD+DD1Ohv2l9sqpE98EWTkHG+4D 3JT9dJH4qpmaM7nQ9I41hnKG0MG+k68= -----END CERTIFICATE-----Generated at Thu May 2 22:30:35 2024 by rpki-client on console-ams.rpki-client.org