$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f408855e-9251-37a2-9fb5-4cba259a98d2.roa File: f408855e-9251-37a2-9fb5-4cba259a98d2.roa (raw, json) Hash identifier: h6NNMCvm00t3N4LdmJ8+KAaWaDKkpuIf7dGUIUehcGQ= Subject key identifier: F9:7D:1C:C7:55:88:B5:CF:7F:52:72:8D:D2:6F:4A:75:56:C6:90:2C Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858491246CB173FDFB9678123B520 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f408855e-9251-37a2-9fb5-4cba259a98d2.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 202 IP address blocks: 168.87.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:cb:17:3f:df:b9:67:81:23:b5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=bdb0bbb3-9871-48a9-be83-cdaa63b4d275 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:33:4b:e3:4a:d7:24:f8:cc:a9:a2:f6:31:19: ee:74:e1:79:51:25:88:3c:06:1d:16:de:45:44:91: ca:01:f3:f1:d1:86:54:66:ba:ef:db:ff:aa:76:04: 60:fb:ce:9c:76:d1:7e:a8:18:40:7b:3e:f1:c8:00: 78:8d:4e:d5:87:40:30:65:f5:a6:93:72:69:39:ee: 56:c7:44:0e:16:96:78:87:c8:56:c9:23:c0:28:22: e7:6e:9e:c8:b8:62:87:c0:4d:90:be:a6:2d:ec:f6: af:b7:90:a4:88:1c:a9:48:93:ac:29:4c:09:ca:63: 32:d8:45:9e:91:ce:79:a1:40:c3:88:96:05:93:e9: e8:6c:2b:a0:43:b8:9d:18:33:1b:4a:2f:6d:6c:06: df:c0:68:8f:9d:74:35:80:85:d4:fc:9e:4a:29:d9: f8:b6:98:2d:63:35:0b:f3:01:e7:7d:20:e9:e1:7f: ec:c8:92:d9:05:55:24:56:01:34:95:88:78:5a:a1: b9:77:ae:9d:ea:31:c8:18:e6:32:1e:09:23:89:58: b7:d8:04:e9:6c:a1:27:bc:7c:8f:bc:d2:09:31:27: 6c:3b:95:82:11:62:ca:93:d6:1b:8e:45:a7:a5:bd: dc:1e:a3:3f:33:e4:1e:88:84:f2:ae:65:c3:4d:db: d5:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:7D:1C:C7:55:88:B5:CF:7F:52:72:8D:D2:6F:4A:75:56:C6:90:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f408855e-9251-37a2-9fb5-4cba259a98d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:e4:36:c4:4f:14:f0:04:68:f7:03:e2:ee:90:cd:77:de:fc: 54:b8:ac:3e:8f:30:2b:93:00:fb:4e:a6:52:f0:95:a6:23:5d: a0:03:a0:74:34:6b:3f:30:31:93:b0:38:f0:2b:39:0a:60:48: fb:05:11:d6:6d:09:29:4a:e7:ff:6e:d9:23:04:cd:37:29:53: a9:3c:18:c9:d5:86:29:23:ca:da:c3:8c:d0:e3:66:56:bc:f8: 9b:a4:f6:be:34:98:a2:39:1c:a8:44:e1:39:a8:74:98:9c:10: 7a:ef:4c:64:ba:a2:fc:f3:9e:c2:31:30:98:84:12:ba:35:ce: 3e:29:05:f4:33:42:a8:34:1e:a8:fe:58:a2:7f:16:30:fd:5d: eb:02:1f:a5:0f:8e:83:ea:3b:5e:ff:db:90:0d:9f:45:fd:22: 4a:d8:35:ca:ab:6a:a5:22:12:22:99:77:a2:77:f8:75:e9:15: d4:c6:23:63:2b:7f:d2:5c:08:7a:33:e3:e8:b1:9e:91:6f:4c: c4:8f:25:84:21:5e:87:f4:61:70:22:f4:39:6a:51:96:88:0c: 97:48:e6:c9:0b:5b:2a:c5:14:11:dc:be:fc:90:67:8c:e4:57: 85:d9:65:aa:4c:7d:14:2b:90:a1:24:c3:ff:96:fa:5e:b9:79: 85:7b:5a:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRssXP9+5Z4EjtSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk YmRiMGJiYjMtOTg3MS00OGE5LWJlODMtY2RhYTYzYjRkMjc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTNL40rXJPjMqaL2MRnudOF5USWIPAYdFt5F RJHKAfPx0YZUZrrv2/+qdgRg+86cdtF+qBhAez7xyAB4jU7Vh0AwZfWmk3JpOe5W x0QOFpZ4h8hWySPAKCLnbp7IuGKHwE2QvqYt7Pavt5CkiBypSJOsKUwJymMy2EWe kc55oUDDiJYFk+nobCugQ7idGDMbSi9tbAbfwGiPnXQ1gIXU/J5KKdn4tpgtYzUL 8wHnfSDp4X/syJLZBVUkVgE0lYh4WqG5d66d6jHIGOYyHgkjiVi32ATpbKEnvHyP vNIJMSdsO5WCEWLKk9YbjkWnpb3cHqM/M+QeiITyrmXDTdvVIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPl9HMdViLXPf1JyjdJvSnVWxpAsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZjQwODg1NWUtOTI1MS0z N2EyLTlmYjUtNGNiYTI1OWE5OGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqFeIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJbkNsRPFPAEaPcD4u6QzXfe/FS4rD6PMCuTAPtOplLwlaYjXaADoHQ0 az8wMZOwOPArOQpgSPsFEdZtCSlK5/9u2SMEzTcpU6k8GMnVhikjytrDjNDjZla8 +Juk9r40mKI5HKhE4TmodJicEHrvTGS6ovzznsIxMJiEEro1zj4pBfQzQqg0Hqj+ WKJ/FjD9XesCH6UPjoPqO17/25ANn0X9IkrYNcqraqUiEiKZd6J3+HXpFdTGI2Mr f9JcCHoz4+ixnpFvTMSPJYQhXof0YXAi9DlqUZaIDJdI5skLWyrFFBHcvvyQZ4zk V4XZZapMfRQrkKEkw/+W+l65eYV7WgU= -----END CERTIFICATE-----Generated at Sat Apr 5 16:41:43 2025 by rpki-client