$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1a05c6a3-0c65-3f34-9648-8864d7b21030.roa File: 1a05c6a3-0c65-3f34-9648-8864d7b21030.roa (raw, json) Hash identifier: 8r6BUSwL4AtTF67R48o1yLgFkRXxUwrMkQf/PD4TFyk= Subject key identifier: EF:F8:60:17:FD:7A:C5:BB:EC:A5:24:09:3A:F6:CE:E5:99:1E:9D:F8 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858499DBF3B83CA05B2DE0B192B00 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1a05c6a3-0c65-3f34-9648-8864d7b21030.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 203 IP address blocks: 168.87.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:3b:83:ca:05:b2:de:0b:19:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=9dbaeee1-58b7-4ca9-827e-e977a7f5519e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ed:24:d6:ea:3e:c7:bc:17:78:09:a3:e2:4a: 6c:99:0f:fb:cd:5f:df:dc:03:8d:a7:b3:56:16:c2: fb:f0:60:88:c1:5c:80:8a:c1:f7:19:bc:6a:20:f8: 4a:4a:77:54:f0:d1:7a:50:99:0f:35:25:ed:02:bb: 9e:52:34:50:a3:10:48:db:07:6e:94:4c:ec:12:78: cc:c9:bf:fd:ff:37:ab:89:b6:77:19:29:54:b4:df: d3:29:bb:7e:1c:fe:93:30:dd:18:65:10:1c:2d:5b: a8:0f:02:38:bf:f3:41:14:bc:6c:fb:7d:be:88:a1: b6:38:92:28:0c:d9:7f:e5:8a:f1:cd:43:56:2c:73: 16:04:bf:47:3b:2b:26:47:cb:6e:f0:4d:47:d7:6f: 44:c5:de:05:85:e8:be:73:94:53:c2:34:de:b1:55: 90:22:82:a3:a5:2e:dc:63:d0:1e:2f:2c:db:1b:75: 4f:1f:10:35:1b:63:83:e8:5e:91:a6:bd:db:06:28: 31:78:c8:d6:08:55:82:84:48:6b:5e:ee:ad:b6:21: 16:1f:3d:36:14:29:c3:15:b3:1a:ce:dd:86:36:98: df:18:39:ba:e9:61:76:e9:24:95:ac:0c:5d:c3:df: a8:41:9b:bd:f6:ed:c7:1d:eb:28:17:95:7a:a8:ca: fe:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:F8:60:17:FD:7A:C5:BB:EC:A5:24:09:3A:F6:CE:E5:99:1E:9D:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1a05c6a3-0c65-3f34-9648-8864d7b21030.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:7f:3c:0f:bc:69:ab:f7:be:1c:64:af:9b:e7:db:98:b6:38: 13:c1:a2:8f:cb:8c:d3:e7:01:9c:24:30:6c:fe:ca:eb:da:02: 0f:46:81:cf:2c:f0:21:8c:a9:f4:6c:f7:af:8f:13:d8:e9:a7: 7b:7b:e5:91:0d:3c:5f:e0:a6:2d:39:e5:98:a8:c6:97:b3:eb: 61:61:24:6c:9b:8b:a8:85:8e:94:84:2d:b0:db:48:d2:77:6f: 90:05:36:48:2a:a9:6e:8a:d0:34:17:0f:7c:ba:f5:d8:34:f2: bd:9d:69:e6:fd:21:76:9c:79:2b:bb:c5:09:c9:50:92:92:a1: 36:0d:fc:93:55:a1:85:35:bd:f1:e2:77:2f:6b:78:d8:52:53: 5e:a6:5a:9b:57:ad:56:71:54:37:1b:97:d7:9d:8b:ef:34:3f: d3:34:bf:e8:4d:14:01:d2:e4:22:f1:a3:0f:46:ed:76:5a:0f: 11:13:80:de:d7:ba:5c:88:b0:a2:7f:50:54:41:cb:5d:bb:7e: 36:75:65:e9:5a:68:7a:38:04:0d:96:b9:c7:e8:ff:5b:6e:e6: 2b:ef:ee:fd:86:5b:4b:fa:42:16:92:cd:f5:e3:e3:b9:95:7a: cb:77:c8:59:f4:0a:05:71:89:09:fc:ff:cb:2d:5d:97:1a:0c: b0:53:94:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdvzuDygWy3gsZKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk OWRiYWVlZTEtNThiNy00Y2E5LTgyN2UtZTk3N2E3ZjU1MTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+0k1uo+x7wXeAmj4kpsmQ/7zV/f3AONp7NW FsL78GCIwVyAisH3GbxqIPhKSndU8NF6UJkPNSXtArueUjRQoxBI2wdulEzsEnjM yb/9/zeribZ3GSlUtN/TKbt+HP6TMN0YZRAcLVuoDwI4v/NBFLxs+32+iKG2OJIo DNl/5YrxzUNWLHMWBL9HOysmR8tu8E1H129Exd4Fhei+c5RTwjTesVWQIoKjpS7c Y9AeLyzbG3VPHxA1G2OD6F6Rpr3bBigxeMjWCFWChEhrXu6ttiEWHz02FCnDFbMa zt2GNpjfGDm66WF26SSVrAxdw9+oQZu99u3HHesoF5V6qMr+kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO/4YBf9esW77KUkCTr2zuWZHp34MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMWEwNWM2YTMtMGM2NS0z ZjM0LTk2NDgtODg2NGQ3YjIxMDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFcZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJF/PA+8aav3vhxkr5vn25i2OBPBoo/LjNPnAZwkMGz+yuvaAg9Ggc8s 8CGMqfRs96+PE9jpp3t75ZENPF/gpi055Zioxpez62FhJGybi6iFjpSELbDbSNJ3 b5AFNkgqqW6K0DQXD3y69dg08r2daeb9IXaceSu7xQnJUJKSoTYN/JNVoYU1vfHi dy9reNhSU16mWptXrVZxVDcbl9edi+80P9M0v+hNFAHS5CLxow9G7XZaDxETgN7X ulyIsKJ/UFRBy127fjZ1ZelaaHo4BA2Wucfo/1tu5ivv7v2GW0v6QhaSzfXj47mV est3yFn0CgVxiQn8/8stXZcaDLBTlCk= -----END CERTIFICATE-----Generated at Sat Apr 26 19:26:35 2025 by rpki-client