$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/34510429-d958-3a78-990a-f80264d9221e.roa File: 34510429-d958-3a78-990a-f80264d9221e.roa (raw, json) Hash identifier: W2Ak+aB+AXR8sv0Zf9+6F5R5cuhLG3ZSplpbcnov4ko= Subject key identifier: B2:62:4E:39:47:56:7B:2A:4D:69:11:50:57:3E:36:01:D1:40:A5:B2 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584988CF2AFAB246D96AAFB78580 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/34510429-d958-3a78-990a-f80264d9221e.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 3360 IP address blocks: 168.87.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:2a:fa:b2:46:d9:6a:af:b7:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=086566f2-259a-4a7f-8478-1b4e6b8e8636 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:be:3e:45:30:43:fb:c4:03:5f:bc:4a:e5:b2: be:27:bf:be:f6:a5:fd:34:3d:ff:43:2e:05:a1:78: f0:e8:4b:dd:1d:29:5c:f6:e3:61:90:03:73:5c:b1: b5:8e:ba:f2:a8:2c:14:e2:f3:c7:c8:17:67:b6:2c: a1:5a:42:0c:4b:d2:23:3e:bd:33:67:1f:81:74:a7: f4:63:06:33:98:0e:1c:98:5e:02:aa:6b:92:97:51: 3e:45:4e:6e:29:75:f2:ef:8c:55:ec:c0:e9:dd:47: 0d:df:2a:35:13:00:d9:c9:3f:b9:e3:c2:6c:00:dc: 96:a0:7d:94:d1:17:b6:e5:81:53:db:b5:e8:1c:bd: 32:8b:72:e9:75:16:41:c8:63:d2:bc:65:15:ad:a1: eb:e1:1e:33:72:23:dc:d0:a9:08:77:e4:83:52:04: 97:25:75:25:21:9f:ce:89:fd:53:4f:73:82:9e:5b: 4a:9b:e1:bb:c4:9e:52:b6:e8:c5:26:0f:49:84:49: 28:14:e2:e0:49:eb:4f:c9:f6:0d:03:98:e8:d2:4d: 0c:b2:21:a2:11:8c:94:cb:46:3e:56:a1:29:1c:18: 16:c3:2b:d8:33:8c:82:bc:e7:ae:e2:ad:7d:f5:50: 1d:aa:86:e8:01:af:fc:de:78:79:cb:2f:08:a4:c7: 9a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:62:4E:39:47:56:7B:2A:4D:69:11:50:57:3E:36:01:D1:40:A5:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/34510429-d958-3a78-990a-f80264d9221e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:a0:f1:53:89:e6:6a:4d:d7:fb:d5:0e:3e:90:92:49:fe:7c: 81:8f:41:1a:17:0a:48:7d:b0:3e:09:c0:21:b6:8f:9e:2b:04: a3:09:91:8c:06:3f:1e:71:8c:c8:e6:34:b4:8d:00:06:3c:18: 54:9a:fc:80:5b:e5:38:63:d0:89:f2:a9:09:e7:3a:bf:6c:14: c5:97:16:87:7f:94:dd:c6:a7:60:1b:4f:3e:08:e4:2a:de:ec: d8:4e:6d:e9:08:2e:7d:10:41:78:bc:11:48:48:59:fc:a6:4b: e0:f3:6b:44:91:54:39:4f:5c:01:ad:7a:e5:bf:d2:e3:c2:ac: f7:d0:7c:4b:a0:a5:07:cc:68:a8:2d:f0:7f:c9:5a:e1:ad:c1: 2e:34:f3:f0:66:8f:38:6f:eb:1b:07:90:6f:96:64:e8:27:b5: 67:68:d1:39:12:ed:e8:8c:ea:a1:b7:4d:fb:73:ba:41:46:d4: d7:fc:e0:df:e2:a3:9d:4c:72:4e:1c:cf:27:18:6e:6b:b1:11: 13:f6:ca:9e:7d:c5:94:d8:fc:c0:bf:7c:56:18:55:1c:16:bd: 98:af:01:63:82:ba:17:40:e6:cb:6f:69:d7:09:f8:f3:80:be: df:df:9e:73:f2:37:ee:12:99:66:15:7e:62:d5:93:33:a2:6a: 10:3d:be:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIzyr6skbZaq+3hYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk MDg2NTY2ZjItMjU5YS00YTdmLTg0NzgtMWI0ZTZiOGU4NjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA274+RTBD+8QDX7xK5bK+J7++9qX9ND3/Qy4F oXjw6EvdHSlc9uNhkANzXLG1jrryqCwU4vPHyBdntiyhWkIMS9IjPr0zZx+BdKf0 YwYzmA4cmF4CqmuSl1E+RU5uKXXy74xV7MDp3UcN3yo1EwDZyT+548JsANyWoH2U 0Re25YFT27XoHL0yi3LpdRZByGPSvGUVraHr4R4zciPc0KkId+SDUgSXJXUlIZ/O if1TT3OCnltKm+G7xJ5StujFJg9JhEkoFOLgSetPyfYNA5jo0k0MsiGiEYyUy0Y+ VqEpHBgWwyvYM4yCvOeu4q199VAdqoboAa/83nh5yy8IpMeanwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLJiTjlHVnsqTWkRUFc+NgHRQKWyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMzQ1MTA0MjktZDk1OC0z YTc4LTk5MGEtZjgwMjY0ZDkyMjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqFdIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG6g8VOJ5mpN1/vVDj6Qkkn+fIGPQRoXCkh9sD4JwCG2j54rBKMJkYwG Px5xjMjmNLSNAAY8GFSa/IBb5Thj0InyqQnnOr9sFMWXFod/lN3Gp2AbTz4I5Cre 7NhObekILn0QQXi8EUhIWfymS+Dza0SRVDlPXAGteuW/0uPCrPfQfEugpQfMaKgt 8H/JWuGtwS408/Bmjzhv6xsHkG+WZOgntWdo0TkS7eiM6qG3TftzukFG1Nf84N/i o51Mck4czycYbmuxERP2yp59xZTY/MC/fFYYVRwWvZivAWOCuhdA5stvadcJ+POA vt/fnnPyN+4SmWYVfmLVkzOiahA9vt4= -----END CERTIFICATE-----Generated at Sun Apr 27 04:22:20 2025 by rpki-client