$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/081022da-f622-3048-a3bc-f4d6d01f9dd6.roa File: 081022da-f622-3048-a3bc-f4d6d01f9dd6.roa (raw, json) Hash identifier: 5jm2w+hdn24PBZAMn583TbgSLnqkLmfgZIiCZuRockQ= Subject key identifier: B8:6C:CC:B9:89:12:59:F1:91:9B:D6:BB:49:8C:96:49:D9:6A:AA:DC Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858498CFF125CCB41F8CBACB3D1B0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/081022da-f622-3048-a3bc-f4d6d01f9dd6.roa Signing time: Thu 17 Apr 2025 01:00:45 +0000 ROA not before: Thu 17 Apr 2025 01:00:45 +0000 ROA not after: Wed 16 Jul 2025 01:00:45 +0000 asID: 3360 IP address blocks: 168.87.154.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:ff:12:5c:cb:41:f8:cb:ac:b3:d1:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 17 01:00:45 2025 GMT Not After : Jul 16 01:00:45 2025 GMT Subject: CN=7b8a6004-4cc7-42af-9c99-11899a691e07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:04:c8:e5:df:fd:9e:49:d2:f0:75:35:f8:5e: b7:cf:08:e7:5e:6e:13:e5:0c:99:d1:62:91:33:d9: 5a:62:cf:a5:0f:c4:c1:0f:f6:91:4c:46:d8:47:38: ce:0e:21:3e:b0:c7:33:15:be:6b:a3:7a:94:34:08: 48:5c:47:1e:f1:89:35:c4:27:f8:7c:a2:0c:95:04: c4:74:35:4e:8c:59:77:49:8d:1f:36:fc:de:3e:c7: c1:6f:12:40:91:73:4b:be:05:fe:df:04:bf:9f:17: 13:46:e9:cd:50:f9:01:ba:b6:94:fc:8e:f9:0d:b2: 4e:b9:69:5c:7c:ec:8e:7e:93:a1:55:90:b3:07:18: 15:37:36:ef:cf:d0:cb:8d:37:35:70:f1:7f:16:70: 2d:97:3b:e7:2f:21:f0:62:42:4b:15:5d:23:b8:1b: 9b:dd:12:55:35:d8:84:f4:eb:9b:f9:c3:5f:5a:ae: 9b:38:e7:67:bb:00:48:74:56:56:a5:50:00:27:c6: cf:ca:7b:e9:b4:44:4c:af:91:a7:97:f4:a2:6d:3a: c9:4d:d1:2c:02:e6:31:07:7f:b2:7a:02:ce:e5:ff: 6f:98:3c:72:c3:2e:89:b3:de:a4:43:db:55:80:ae: 2c:71:39:22:af:06:56:e7:d8:e7:3b:24:19:c6:b6: 1b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:6C:CC:B9:89:12:59:F1:91:9B:D6:BB:49:8C:96:49:D9:6A:AA:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/081022da-f622-3048-a3bc-f4d6d01f9dd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.154.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:b9:35:16:d6:39:c2:36:2e:87:cb:65:ae:44:c8:c4:55:78: 36:cc:76:c1:ce:f7:b2:6b:55:11:61:2a:83:dd:2d:ab:46:af: 79:c0:87:53:7d:6b:eb:aa:33:89:92:91:1f:b3:1f:66:7a:9f: a8:a9:a6:31:61:a8:57:1c:28:55:e8:88:2a:23:90:36:0f:d6: cc:a3:ee:52:5b:f2:87:76:00:ac:ce:81:fc:98:7b:26:04:1a: 88:7b:93:92:f8:d3:33:7d:09:e4:92:12:b5:70:8a:80:09:70: a6:50:c1:ce:60:15:27:a5:82:b4:04:2a:80:ad:2f:23:17:b3: e8:cf:f2:36:51:60:24:11:4f:e8:0b:3f:e0:7e:2f:2b:64:53: 68:e6:01:0c:aa:82:6a:6f:33:74:f8:d9:14:9d:4b:e4:74:3b: 29:66:18:08:a4:50:e4:9f:60:fa:c5:ee:97:26:57:53:a6:ba: cb:af:09:ce:37:8a:78:e3:67:65:46:a6:19:a5:c4:5e:5c:21: 6d:23:c4:eb:c7:91:e0:17:b8:f5:06:27:bb:24:92:fe:20:9a: a8:85:87:42:dd:9f:9f:e2:35:98:e5:96:48:b3:93:b0:72:ab: cb:4b:66:e9:8d:fd:9b:66:10:e2:d1:14:a1:3d:50:33:fc:d1: f7:19:98:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmM/xJcy0H4y6yz0bAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk N2I4YTYwMDQtNGNjNy00MmFmLTljOTktMTE4OTlhNjkxZTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjATI5d/9nknS8HU1+F63zwjnXm4T5QyZ0WKR M9laYs+lD8TBD/aRTEbYRzjODiE+sMczFb5ro3qUNAhIXEce8Yk1xCf4fKIMlQTE dDVOjFl3SY0fNvzePsfBbxJAkXNLvgX+3wS/nxcTRunNUPkBuraU/I75DbJOuWlc fOyOfpOhVZCzBxgVNzbvz9DLjTc1cPF/FnAtlzvnLyHwYkJLFV0juBub3RJVNdiE 9Oub+cNfWq6bOOdnuwBIdFZWpVAAJ8bPynvptERMr5Gnl/SibTrJTdEsAuYxB3+y egLO5f9vmDxywy6Js96kQ9tVgK4scTkirwZW59jnOyQZxrYbcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLhszLmJElnxkZvWu0mMlknZaqrcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMDgxMDIyZGEtZjYyMi0z MDQ4LWEzYmMtZjRkNmQwMWY5ZGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqFeaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEu5NRbWOcI2LofLZa5EyMRVeDbMdsHO97JrVRFhKoPdLatGr3nAh1N9 a+uqM4mSkR+zH2Z6n6ippjFhqFccKFXoiCojkDYP1syj7lJb8od2AKzOgfyYeyYE Goh7k5L40zN9CeSSErVwioAJcKZQwc5gFSelgrQEKoCtLyMXs+jP8jZRYCQRT+gL P+B+LytkU2jmAQyqgmpvM3T42RSdS+R0OylmGAikUOSfYPrF7pcmV1OmusuvCc43 injjZ2VGphmlxF5cIW0jxOvHkeAXuPUGJ7skkv4gmqiFh0Ldn5/iNZjllkizk7By q8tLZumN/ZtmEOLRFKE9UDP80fcZmPg= -----END CERTIFICATE-----Generated at Sun Apr 27 00:22:04 2025 by rpki-client