$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/025b099e-2056-3082-9d73-75d92962953c.roa File: 025b099e-2056-3082-9d73-75d92962953c.roa (raw, json) Hash identifier: IlVi85Yy76o2jXXAuukUM0p+wKPPpvM+9/jvzpj8X1I= Subject key identifier: 4B:F4:AA:33:50:97:60:3A:12:54:2D:87:2E:A4:E0:BA:14:5B:16:66 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584988CF2582F853B44B72FFB980 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/025b099e-2056-3082-9d73-75d92962953c.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 132121 IP address blocks: 168.87.88.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:25:82:f8:53:b4:4b:72:ff:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=89950161-a600-49d7-b02d-1030d62e3d37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:74:0f:48:72:b1:2a:d0:12:f3:35:81:a6:81: 65:89:c8:da:8b:b5:7a:bc:ab:08:01:e4:d1:4a:b5: c7:f5:54:88:7b:57:a9:e6:7b:74:a3:b7:58:ec:41: a5:6a:7a:9a:ef:b8:33:ed:67:fd:1a:14:c1:51:29: 8d:da:cd:5b:00:ea:93:8a:cc:49:a4:83:f0:2d:83: d5:08:17:92:fa:3d:d5:25:2f:8f:dc:05:eb:18:ab: c5:82:e4:2f:77:a3:ac:30:63:f2:2d:df:64:0e:b6: 44:71:20:97:1e:c3:fc:6d:d7:07:f0:3d:7b:dd:c4: 4d:64:ea:f1:da:29:0c:a0:c2:1e:78:e4:83:96:71: 7b:1d:9b:1c:79:f7:63:4b:ff:fd:6f:44:43:89:38: 88:4a:33:d0:f2:a5:a7:c1:3f:ae:a0:2e:30:94:db: 84:be:23:a5:66:4b:05:7c:db:ec:13:9c:fe:99:7c: 64:41:da:55:5a:25:84:83:93:38:28:7c:78:0d:52: 13:f3:1b:6b:36:23:83:10:c3:aa:b4:be:a7:e9:d7: 88:8c:ba:09:eb:67:56:38:96:29:b3:bb:10:fe:1e: 69:d8:37:3a:c6:d2:f6:7a:20:c8:a4:16:5a:9e:2c: 1f:8a:ce:3b:e9:62:44:4b:74:40:06:01:ab:3d:80: 2b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:F4:AA:33:50:97:60:3A:12:54:2D:87:2E:A4:E0:BA:14:5B:16:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/025b099e-2056-3082-9d73-75d92962953c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:87:6d:f8:87:10:9c:6b:6e:f2:ce:db:4b:7f:cf:3a:f6:c5: f2:56:ce:22:6f:16:05:3a:80:3a:28:e1:7d:de:5c:f8:8c:27: c7:c7:b1:72:b5:77:c8:c5:37:3f:1d:55:46:5b:b5:38:9b:96: e8:5a:4a:b4:04:ac:87:34:d5:57:20:ed:7e:77:06:49:d2:77: 4e:fd:4c:35:8a:60:47:11:b1:f5:7e:d5:d3:d1:0e:01:0b:8d: f9:90:ef:37:d1:9d:c7:98:c8:28:f6:f5:0f:1a:6c:60:8b:23: 1c:d4:2b:e1:5c:4c:2a:fb:e0:bd:8f:2d:7a:40:b8:a4:c2:39: 2e:4c:65:82:82:3d:af:0c:7f:b9:d7:cc:58:70:9c:c6:23:d5: 37:1c:25:91:68:27:53:9c:dc:99:7c:74:44:6e:1b:b6:48:a6: c8:6b:c6:d6:03:69:64:c1:1a:99:22:be:0d:f3:3d:87:3c:ab: 29:d8:ed:e2:ca:80:57:b6:5e:4f:5b:b3:85:c7:9a:7b:35:51: 99:67:21:03:ca:85:59:fb:ef:82:51:2b:2f:06:be:31:d7:cb: f1:ec:30:50:9c:96:4d:71:f5:50:f1:67:4a:93:53:da:80:a8: 51:b3:84:86:cf:2d:bb:3e:8e:57:7f:40:76:f0:dc:c5:00:2a: 5d:41:f6:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIzyWC+FO0S3L/uYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk ODk5NTAxNjEtYTYwMC00OWQ3LWIwMmQtMTAzMGQ2MmUzZDM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXQPSHKxKtAS8zWBpoFlicjai7V6vKsIAeTR SrXH9VSIe1ep5nt0o7dY7EGlanqa77gz7Wf9GhTBUSmN2s1bAOqTisxJpIPwLYPV CBeS+j3VJS+P3AXrGKvFguQvd6OsMGPyLd9kDrZEcSCXHsP8bdcH8D173cRNZOrx 2ikMoMIeeOSDlnF7HZscefdjS//9b0RDiTiISjPQ8qWnwT+uoC4wlNuEviOlZksF fNvsE5z+mXxkQdpVWiWEg5M4KHx4DVIT8xtrNiODEMOqtL6n6deIjLoJ62dWOJYp s7sQ/h5p2Dc6xtL2eiDIpBZaniwfis476WJES3RABgGrPYArRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEv0qjNQl2A6ElQthy6k4LoUWxZmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMDI1YjA5OWUtMjA1Ni0z MDgyLTlkNzMtNzVkOTI5NjI5NTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqFdYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGCHbfiHEJxrbvLO20t/zzr2xfJWziJvFgU6gDoo4X3eXPiMJ8fHsXK1 d8jFNz8dVUZbtTibluhaSrQErIc01Vcg7X53BknSd079TDWKYEcRsfV+1dPRDgEL jfmQ7zfRnceYyCj29Q8abGCLIxzUK+FcTCr74L2PLXpAuKTCOS5MZYKCPa8Mf7nX zFhwnMYj1TccJZFoJ1Oc3Jl8dERuG7ZIpshrxtYDaWTBGpkivg3zPYc8qynY7eLK gFe2Xk9bs4XHmns1UZlnIQPKhVn774JRKy8GvjHXy/HsMFCclk1x9VDxZ0qTU9qA qFGzhIbPLbs+jld/QHbw3MUAKl1B9m8= -----END CERTIFICATE-----Generated at Sun Apr 27 04:13:14 2025 by rpki-client