$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/45c6a5c0-2875-3035-b41a-145c11fb5a95.roa File: 45c6a5c0-2875-3035-b41a-145c11fb5a95.roa (raw, json) Hash identifier: y48OPPQYL+gTPsK50tyLErm584D4OViFGb6R3WDa2t0= Subject key identifier: 86:07:8D:1D:F8:A8:69:BD:F6:A0:22:01:9F:03:EB:4F:76:7D:A7:FE Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858498A346113D8B41BB376F20400 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/45c6a5c0-2875-3035-b41a-145c11fb5a95.roa Signing time: Wed 16 Apr 2025 01:00:48 +0000 ROA not before: Wed 16 Apr 2025 01:00:48 +0000 ROA not after: Tue 15 Jul 2025 01:00:48 +0000 asID: 5714 IP address blocks: 168.87.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8a:34:61:13:d8:b4:1b:b3:76:f2:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 16 01:00:48 2025 GMT Not After : Jul 15 01:00:48 2025 GMT Subject: CN=a99e4570-8c53-4ff3-9c34-c5f17ca1f56a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:30:5f:fc:0d:c9:c4:29:e6:ea:3a:47:09:11: 47:3f:02:df:76:17:1d:9f:18:91:f8:da:d0:d3:ae: cf:95:cb:1b:f0:68:b5:ed:a3:56:a8:c1:94:23:d1: b6:3e:34:01:cb:e7:1e:1e:db:97:87:09:72:5f:8a: d9:d4:17:5e:7a:6f:52:10:6e:66:81:be:ec:0f:c3: 46:3d:ff:68:ef:28:38:7a:5d:7d:96:fc:9d:a5:53: 50:d3:89:d6:29:4b:eb:ac:27:28:0f:4e:8f:25:db: 91:e9:29:05:c0:09:57:7a:97:9c:dc:a7:f2:dc:2c: ca:e3:23:e0:d7:6e:3d:13:df:f4:33:61:ee:c9:9e: d4:10:8c:05:6c:17:5c:65:d1:d5:01:02:99:46:19: 90:1e:a0:52:63:42:47:5f:bb:a3:0c:d2:f4:e0:00: 47:3c:d8:92:02:1b:97:c5:d1:80:6f:af:dc:7d:40: 78:dd:b7:f6:5f:a0:31:7b:af:97:e9:90:5d:e0:04: 58:13:5e:2c:82:1e:1c:bd:2a:2b:79:de:5d:17:40: fd:93:29:e3:93:d7:06:b7:0d:ad:fa:e3:f9:30:7b: c5:f0:a8:68:d8:73:68:9b:61:f1:24:06:6e:0c:f3: 97:39:6b:ec:3f:9b:92:d1:a7:32:f7:ac:16:2c:1f: 6e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:07:8D:1D:F8:A8:69:BD:F6:A0:22:01:9F:03:EB:4F:76:7D:A7:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/45c6a5c0-2875-3035-b41a-145c11fb5a95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:a0:32:84:6d:b4:98:d1:15:59:33:65:66:29:76:43:c6:71: a2:bb:ab:dd:89:33:68:dd:39:3c:76:74:1e:48:d4:51:fd:1e: e6:ec:65:46:a5:04:52:92:e0:c1:04:1b:67:52:04:f0:52:cd: f3:e4:fb:32:02:b4:d0:2a:ff:76:32:8f:d8:17:be:45:58:82: 92:ca:b7:4a:d9:ab:53:7f:2c:a3:ad:83:a9:e6:44:be:54:6f: 20:7f:9e:3b:e9:1d:65:ab:41:bc:f2:ef:c1:fc:f0:6a:50:fe: f0:f0:3c:67:f3:ef:5e:61:04:5f:f5:6f:7a:d0:1c:f3:d6:f5: fd:c1:32:72:36:56:43:8f:67:ec:88:4b:f4:5b:b6:bc:d5:ba: 4b:31:93:29:41:8d:3e:70:02:e3:c4:6d:d8:4d:6d:e1:72:99: 3c:b5:89:13:a2:4d:53:f3:ed:b6:9c:15:41:c9:a3:fd:85:35: 49:43:e7:cc:52:22:3e:f0:cc:16:03:e6:4e:e0:3a:f1:b2:16: f9:25:d1:f5:13:8e:86:28:35:17:23:c6:56:22:44:0c:f0:75: b1:99:39:52:26:29:3c:eb:5f:e0:60:f2:5b:0b:9c:72:9b:22: 63:f4:21:45:0f:96:ec:11:9a:be:af:c1:57:79:46:84:d1:4d: 20:b7:00:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmKNGET2LQbs3byBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDQxNjAxMDA0OFoXDTI1MDcxNTAxMDA0OFowLzEtMCsGA1UEAxMk YTk5ZTQ1NzAtOGM1My00ZmYzLTljMzQtYzVmMTdjYTFmNTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2zBf/A3JxCnm6jpHCRFHPwLfdhcdnxiR+NrQ 067Plcsb8Gi17aNWqMGUI9G2PjQBy+ceHtuXhwlyX4rZ1Bdeem9SEG5mgb7sD8NG Pf9o7yg4el19lvydpVNQ04nWKUvrrCcoD06PJduR6SkFwAlXepec3Kfy3CzK4yPg 1249E9/0M2HuyZ7UEIwFbBdcZdHVAQKZRhmQHqBSY0JHX7ujDNL04ABHPNiSAhuX xdGAb6/cfUB43bf2X6Axe6+X6ZBd4ARYE14sgh4cvSored5dF0D9kynjk9cGtw2t +uP5MHvF8Kho2HNom2HxJAZuDPOXOWvsP5uS0acy96wWLB9uGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIYHjR34qGm99qAiAZ8D6092faf+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNDVjNmE1YzAtMjg3NS0z MDM1LWI0MWEtMTQ1YzExZmI1YTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqFeEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHagMoRttJjRFVkzZWYpdkPGcaK7q92JM2jdOTx2dB5I1FH9HubsZUal BFKS4MEEG2dSBPBSzfPk+zICtNAq/3Yyj9gXvkVYgpLKt0rZq1N/LKOtg6nmRL5U byB/njvpHWWrQbzy78H88GpQ/vDwPGfz715hBF/1b3rQHPPW9f3BMnI2VkOPZ+yI S/RbtrzVuksxkylBjT5wAuPEbdhNbeFymTy1iROiTVPz7bacFUHJo/2FNUlD58xS Ij7wzBYD5k7gOvGyFvkl0fUTjoYoNRcjxlYiRAzwdbGZOVImKTzrX+Bg8lsLnHKb ImP0IUUPluwRmr6vwVd5RoTRTSC3AJ4= -----END CERTIFICATE-----Generated at Sun Apr 27 04:28:34 2025 by rpki-client