$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1ea7b1f0-49bd-331c-9245-d0817563b8bf.roa File: 1ea7b1f0-49bd-331c-9245-d0817563b8bf.roa (raw, json) Hash identifier: mSo/VupMSCB+bWP52Y3OZj4gZdobIluHJRfOlYYgsCI= Subject key identifier: 66:2C:EE:BC:B4:A3:1F:00:A0:17:4B:E6:39:37:4D:18:06:98:5E:BD Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858498A34615C79B568385511A320 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1ea7b1f0-49bd-331c-9245-d0817563b8bf.roa Signing time: Wed 16 Apr 2025 01:00:48 +0000 ROA not before: Wed 16 Apr 2025 01:00:48 +0000 ROA not after: Tue 15 Jul 2025 01:00:48 +0000 asID: 203 IP address blocks: 168.87.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8a:34:61:5c:79:b5:68:38:55:11:a3:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 16 01:00:48 2025 GMT Not After : Jul 15 01:00:48 2025 GMT Subject: CN=73b81787-056f-4965-9d22-88d17756a1ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:51:79:dc:6a:18:51:6b:63:ee:fb:8b:5b:65: ea:79:33:22:d9:58:4b:69:4b:77:77:09:9e:ed:44: 10:56:73:11:1c:ed:75:9c:db:93:26:b8:87:c4:81: c7:7b:d0:14:42:98:d9:09:0c:a5:0c:53:56:94:ee: 2f:d8:83:cb:42:2d:9a:9a:fc:69:9a:f1:58:9b:6c: fc:18:40:48:8d:67:a3:34:7e:37:ff:5f:58:9b:76: 29:27:cb:92:55:55:cc:94:42:23:f6:f9:63:0f:05: 5d:ef:96:34:65:36:65:3f:c6:6d:f6:70:5c:c9:98: 03:15:e7:e7:f1:ff:be:59:fc:8a:e6:c5:f4:a6:04: 66:4d:69:00:9e:3a:1d:da:ea:72:fb:ee:e9:76:c7: 64:c1:97:dc:9d:11:16:50:89:59:b8:37:03:40:31: a3:c0:6f:b7:73:79:87:f9:0e:b2:45:87:da:26:86: c6:53:4f:6e:60:a6:4a:71:40:e1:d9:af:d5:77:37: 24:9f:20:32:ec:6d:49:5d:65:e7:41:23:ed:9b:68: d8:8f:06:ca:fb:1e:47:ef:78:10:af:43:13:90:84: bd:80:80:1f:f1:96:15:8e:38:54:a8:2d:c1:11:ae: 23:c2:16:f7:d4:87:42:0f:aa:e1:bd:7d:1a:45:f3: 0a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:2C:EE:BC:B4:A3:1F:00:A0:17:4B:E6:39:37:4D:18:06:98:5E:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1ea7b1f0-49bd-331c-9245-d0817563b8bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:d7:44:e4:68:8f:5d:b6:0d:fd:db:73:57:b6:8a:6d:c4:c6: 94:3f:e7:cf:a7:37:22:e8:09:fe:c5:d8:57:34:30:cc:72:64: 62:bc:7d:34:2b:1c:97:fb:e6:08:e0:1c:eb:b7:d2:c1:cc:32: dd:ff:11:ea:9b:71:93:8f:59:a3:06:97:06:a2:96:41:4f:30: 5c:ee:fb:49:50:07:c8:bb:e9:9c:f0:56:f8:18:6e:e8:9a:bd: e3:ea:25:2a:c7:f9:56:4d:be:d0:32:44:12:c3:ef:3d:ae:4e: 03:5a:02:52:ba:19:a0:c3:fb:aa:8c:58:d9:a6:7d:88:7e:62: b3:32:de:ea:1a:87:8b:1f:09:22:75:23:1a:82:c4:fb:71:17: 36:6f:38:d2:99:6d:db:8f:49:dd:c8:c6:bf:a0:0b:10:e7:4a: 93:36:d1:7d:78:c8:62:8b:ae:e7:25:39:ee:98:53:8c:dc:91: 8e:2b:c9:ab:75:80:a7:db:8e:eb:4d:ea:58:fc:5a:68:27:46: ec:48:0d:bc:fc:8d:29:35:74:ee:53:af:52:e3:cb:2d:13:37: 2e:96:e9:a7:b6:3b:80:72:9d:54:ae:b7:e4:67:68:40:82:85: ee:bc:7f:86:ba:a2:9e:05:9b:9a:be:10:a3:72:91:6f:2f:8d: 9d:2b:4a:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmKNGFcebVoOFURoyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDQxNjAxMDA0OFoXDTI1MDcxNTAxMDA0OFowLzEtMCsGA1UEAxMk NzNiODE3ODctMDU2Zi00OTY1LTlkMjItODhkMTc3NTZhMWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVF53GoYUWtj7vuLW2XqeTMi2VhLaUt3dwme 7UQQVnMRHO11nNuTJriHxIHHe9AUQpjZCQylDFNWlO4v2IPLQi2amvxpmvFYm2z8 GEBIjWejNH43/19Ym3YpJ8uSVVXMlEIj9vljDwVd75Y0ZTZlP8Zt9nBcyZgDFefn 8f++WfyK5sX0pgRmTWkAnjod2upy++7pdsdkwZfcnREWUIlZuDcDQDGjwG+3c3mH +Q6yRYfaJobGU09uYKZKcUDh2a/VdzcknyAy7G1JXWXnQSPtm2jYjwbK+x5H73gQ r0MTkIS9gIAf8ZYVjjhUqC3BEa4jwhb31IdCD6rhvX0aRfMKxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGYs7ry0ox8AoBdL5jk3TRgGmF69MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMWVhN2IxZjAtNDliZC0z MzFjLTkyNDUtZDA4MTc1NjNiOGJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqFeEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJzXRORoj122Df3bc1e2im3ExpQ/58+nNyLoCf7F2Fc0MMxyZGK8fTQr HJf75gjgHOu30sHMMt3/EeqbcZOPWaMGlwailkFPMFzu+0lQB8i76ZzwVvgYbuia vePqJSrH+VZNvtAyRBLD7z2uTgNaAlK6GaDD+6qMWNmmfYh+YrMy3uoah4sfCSJ1 IxqCxPtxFzZvONKZbduPSd3Ixr+gCxDnSpM20X14yGKLruclOe6YU4zckY4ryat1 gKfbjutN6lj8WmgnRuxIDbz8jSk1dO5Tr1Ljyy0TNy6W6ae2O4BynVSut+RnaECC he68f4a6op4Fm5q+EKNykW8vjZ0rSik= -----END CERTIFICATE-----Generated at Sat Apr 26 19:28:10 2025 by rpki-client