$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3e9825d2-b9e7-35c9-a9e7-98d7aeffb375.roa File: 3e9825d2-b9e7-35c9-a9e7-98d7aeffb375.roa (raw, json) Hash identifier: XE+NDJ3CS6d06zMEJ0KpkOAhgPXIkYD1SY+XNd5BvEE= Subject key identifier: 2E:F2:1F:2E:FA:31:A8:51:16:1C:D1:73:BB:5F:E0:CE:03:98:C8:C5 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858498CFF12409EDBA22BAF3C5AC0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3e9825d2-b9e7-35c9-a9e7-98d7aeffb375.roa Signing time: Thu 17 Apr 2025 01:00:45 +0000 ROA not before: Thu 17 Apr 2025 01:00:45 +0000 ROA not after: Wed 16 Jul 2025 01:00:45 +0000 asID: 202 IP address blocks: 168.87.146.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:ff:12:40:9e:db:a2:2b:af:3c:5a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 17 01:00:45 2025 GMT Not After : Jul 16 01:00:45 2025 GMT Subject: CN=5fcd2ffa-737f-484e-802f-50e2e50515d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:64:4e:b2:9e:73:d1:42:24:f2:1e:fa:a6:30: 91:01:06:03:60:8a:7a:32:49:b3:32:62:74:e1:b8: 7f:05:ba:fe:b5:0a:89:2d:93:d4:87:b9:9b:28:42: b0:d4:29:98:1d:76:f9:d9:70:b3:c5:8e:7e:3c:40: ba:ae:d5:b5:99:f9:38:37:44:14:c8:d0:0a:10:24: 74:d2:97:e5:6c:b5:78:0b:82:ab:2c:77:90:28:b5: 14:7f:6f:64:b4:95:93:cd:83:c7:dd:52:2c:30:f9: d2:ff:6e:7c:17:fc:9d:06:ec:fe:c7:2f:4c:67:f2: 57:07:51:b4:7c:a0:58:8e:a5:f4:0b:5d:67:41:93: bb:bb:0c:c0:8d:07:e6:7a:4d:1e:af:9d:63:d8:5d: 53:45:de:7e:f4:7d:8d:04:5b:70:67:71:2b:a4:9d: c9:e5:9d:95:60:bd:51:fe:ee:c7:67:73:28:43:00: b6:4a:d5:53:5d:ba:27:90:77:e8:c9:40:24:38:49: ff:e9:75:9c:2d:cf:9e:c4:e0:56:7b:c0:b8:a1:5c: 8a:ec:c4:aa:05:fa:07:78:d1:85:6e:26:59:a3:cb: aa:1d:83:86:6f:f6:7e:c4:b2:d8:81:02:75:53:12: ee:b3:dd:b6:16:c3:e0:c5:30:7c:46:e8:6f:8e:6d: d1:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:F2:1F:2E:FA:31:A8:51:16:1C:D1:73:BB:5F:E0:CE:03:98:C8:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3e9825d2-b9e7-35c9-a9e7-98d7aeffb375.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.146.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:82:c5:0b:9f:c1:ce:96:42:56:43:05:07:41:90:90:60:1b: ef:0d:45:44:9d:66:5c:6d:d8:cb:bb:c6:00:57:0c:aa:a7:79: 99:90:1f:3a:57:21:25:fa:53:74:20:59:a5:e5:8c:b4:41:ac: 4d:21:2c:c0:77:cd:17:14:d0:96:a6:ef:87:13:02:c6:20:28: 7c:1f:2e:15:7d:fc:40:16:79:91:45:7c:57:1d:96:5e:59:e3: ff:d9:ee:cf:e1:e6:da:da:64:7b:5f:73:ab:41:21:9c:7a:d6: 48:c2:13:0c:52:f2:41:85:ff:3a:56:3a:15:66:5a:45:f5:9f: 49:ca:ec:76:a4:ab:e9:07:1e:07:e7:65:12:28:da:b9:36:20: 37:c6:c3:ab:d8:05:96:dd:05:0b:11:b8:eb:5a:34:ff:e9:e7: 7d:12:eb:ac:e3:b8:12:7d:c9:96:7d:46:7b:68:47:86:01:e5: c2:52:3d:cd:91:ac:d4:2c:60:7f:c4:b2:da:36:2a:f0:a5:ba: b9:92:52:f5:d4:d4:70:2a:e1:68:ea:69:c1:3f:a5:6d:18:91: a4:cc:9d:a9:a7:ab:4f:f8:05:df:52:06:fa:11:7d:09:5b:79: 70:11:2c:08:88:77:d0:d8:39:0e:0e:b5:4e:2d:8a:07:a9:73: 81:97:32:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmM/xJAntuiK688WsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk NWZjZDJmZmEtNzM3Zi00ODRlLTgwMmYtNTBlMmU1MDUxNWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GROsp5z0UIk8h76pjCRAQYDYIp6MkmzMmJ0 4bh/Bbr+tQqJLZPUh7mbKEKw1CmYHXb52XCzxY5+PEC6rtW1mfk4N0QUyNAKECR0 0pflbLV4C4KrLHeQKLUUf29ktJWTzYPH3VIsMPnS/258F/ydBuz+xy9MZ/JXB1G0 fKBYjqX0C11nQZO7uwzAjQfmek0er51j2F1TRd5+9H2NBFtwZ3ErpJ3J5Z2VYL1R /u7HZ3MoQwC2StVTXbonkHfoyUAkOEn/6XWcLc+exOBWe8C4oVyK7MSqBfoHeNGF biZZo8uqHYOGb/Z+xLLYgQJ1UxLus922FsPgxTB8Ruhvjm3RRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC7yHy76MahRFhzRc7tf4M4DmMjFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvM2U5ODI1ZDItYjllNy0z NWM5LWE5ZTctOThkN2FlZmZiMzc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqFeSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACWCxQufwc6WQlZDBQdBkJBgG+8NRUSdZlxt2Mu7xgBXDKqneZmQHzpX ISX6U3QgWaXljLRBrE0hLMB3zRcU0Jam74cTAsYgKHwfLhV9/EAWeZFFfFcdll5Z 4//Z7s/h5traZHtfc6tBIZx61kjCEwxS8kGF/zpWOhVmWkX1n0nK7Hakq+kHHgfn ZRIo2rk2IDfGw6vYBZbdBQsRuOtaNP/p530S66zjuBJ9yZZ9RntoR4YB5cJSPc2R rNQsYH/Esto2KvClurmSUvXU1HAq4WjqacE/pW0YkaTMnamnq0/4Bd9SBvoRfQlb eXARLAiId9DYOQ4OtU4tigepc4GXMp8= -----END CERTIFICATE-----Generated at Sat Apr 26 17:59:59 2025 by rpki-client