$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4e7a0075-dfc4-3fff-9b1e-cbd92990628f.roa File: 4e7a0075-dfc4-3fff-9b1e-cbd92990628f.roa (raw, json) Hash identifier: kcONi0vZoOyN/2gFZnCnv9R4+aA/tSuyfyC45zCS+RY= Subject key identifier: C7:3D:D0:AF:4A:77:F9:C0:BA:A6:80:AE:1C:19:47:D1:59:37:DD:0F Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584986046945B3731FBED8613180 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4e7a0075-dfc4-3fff-9b1e-cbd92990628f.roa Signing time: Mon 14 Apr 2025 13:00:59 +0000 ROA not before: Mon 14 Apr 2025 13:00:59 +0000 ROA not after: Sun 13 Jul 2025 13:00:59 +0000 asID: 132095 IP address blocks: 168.87.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:86:04:69:45:b3:73:1f:be:d8:61:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 14 13:00:59 2025 GMT Not After : Jul 13 13:00:59 2025 GMT Subject: CN=47328a84-e211-4613-a0a8-e99eb831bcfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:3a:c5:1e:16:fe:cf:74:da:a6:94:11:06:0c: cb:78:46:c7:07:cd:4a:0d:43:47:9c:76:39:4a:87: 96:dc:4c:f1:ae:2a:0a:f2:6a:74:1d:58:e4:4b:8c: 72:0b:37:e1:82:ee:30:ea:78:b2:5f:03:7c:6e:fe: 3a:4d:19:bf:cc:31:56:9b:f2:fd:c2:fc:98:bb:84: 4f:4a:87:ae:c6:ee:c1:83:df:4f:b1:ce:dd:77:b8: 43:22:f3:12:fe:75:bb:31:13:3a:81:59:0f:0c:9a: ce:8e:10:f1:ac:f3:a6:1f:2b:f3:a6:e0:b0:b8:49: 81:24:77:da:a8:50:c2:6a:17:83:cb:78:03:c1:a0: 0c:7c:de:b3:7c:1b:b3:93:4e:89:de:8a:74:eb:00: 3e:d6:55:a2:0d:86:11:a5:23:64:fc:76:b3:24:42: ba:eb:7f:c6:d3:77:b0:4e:8b:68:b2:71:83:01:ce: b8:11:1b:f4:6e:a4:10:c7:20:bb:97:84:1b:1e:83: 3a:b0:13:81:b6:52:2b:a0:10:18:90:63:4c:a9:1a: 1e:4c:64:44:ca:49:70:c2:8e:06:95:14:18:3a:1c: 57:0f:28:4e:66:df:e1:5a:f4:9a:50:a9:9d:3d:88: 98:34:3d:d7:b7:31:62:c7:a4:d3:82:9a:02:53:1e: e1:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:3D:D0:AF:4A:77:F9:C0:BA:A6:80:AE:1C:19:47:D1:59:37:DD:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4e7a0075-dfc4-3fff-9b1e-cbd92990628f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:1e:c6:07:e3:89:57:4e:ea:e2:ee:cb:07:b1:f6:39:80:1d: c0:a0:96:9c:c4:ee:4d:8a:1e:16:c8:a1:88:30:69:0a:de:ac: 40:31:b9:64:b1:89:4f:71:47:79:ee:b5:bf:74:66:eb:c2:5c: df:43:55:c2:cc:0d:08:5f:03:f2:0e:fc:07:da:2c:95:cd:36: 92:e8:d1:e8:57:7f:cb:a8:48:02:2b:27:19:6a:9d:d7:49:d7: 4e:da:88:c6:a1:d1:6f:24:7a:84:d0:51:c1:6f:fc:70:3c:9b: a9:71:35:23:4b:2c:fe:6a:17:e0:16:af:24:5d:3c:1c:ad:ad: 3b:bc:84:49:23:62:8a:6f:65:c5:b8:f5:f7:d2:d5:45:0f:51: aa:20:79:2a:54:7e:76:30:dd:9d:50:c0:d5:c3:e0:5b:cd:0a: d8:72:a3:16:36:60:a9:3a:2d:18:2f:8f:96:b3:b2:71:ba:0d: 47:f6:f5:c9:40:f8:df:6d:fc:de:87:f8:eb:5c:0f:50:78:1e: 6f:2e:66:c1:81:f9:df:22:ea:85:3e:12:08:dc:31:e6:42:32: 11:75:35:0f:8f:fd:5e:52:e2:14:92:cc:67:91:92:42:75:3b: b8:3a:9d:af:36:a3:23:1b:6d:7f:bc:8b:b1:6c:f6:74:e1:06: 33:0d:90:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmGBGlFs3MfvthhMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDQxNDEzMDA1OVoXDTI1MDcxMzEzMDA1OVowLzEtMCsGA1UEAxMk NDczMjhhODQtZTIxMS00NjEzLWEwYTgtZTk5ZWI4MzFiY2ZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2TrFHhb+z3TappQRBgzLeEbHB81KDUNHnHY5 SoeW3EzxrioK8mp0HVjkS4xyCzfhgu4w6niyXwN8bv46TRm/zDFWm/L9wvyYu4RP Soeuxu7Bg99Psc7dd7hDIvMS/nW7MRM6gVkPDJrOjhDxrPOmHyvzpuCwuEmBJHfa qFDCaheDy3gDwaAMfN6zfBuzk06J3op06wA+1lWiDYYRpSNk/HazJEK663/G03ew TotosnGDAc64ERv0bqQQxyC7l4QbHoM6sBOBtlIroBAYkGNMqRoeTGREyklwwo4G lRQYOhxXDyhOZt/hWvSaUKmdPYiYND3XtzFix6TTgpoCUx7hcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMc90K9Kd/nAuqaArhwZR9FZN90PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNGU3YTAwNzUtZGZjNC0z ZmZmLTliMWUtY2JkOTI5OTA2MjhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEqFdgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI4exgfjiVdO6uLuywex9jmAHcCglpzE7k2KHhbIoYgwaQrerEAxuWSx iU9xR3nutb90ZuvCXN9DVcLMDQhfA/IO/AfaLJXNNpLo0ehXf8uoSAIrJxlqnddJ 107aiMah0W8keoTQUcFv/HA8m6lxNSNLLP5qF+AWryRdPBytrTu8hEkjYopvZcW4 9ffS1UUPUaogeSpUfnYw3Z1QwNXD4FvNCthyoxY2YKk6LRgvj5azsnG6DUf29clA +N9t/N6H+OtcD1B4Hm8uZsGB+d8i6oU+EgjcMeZCMhF1NQ+P/V5S4hSSzGeRkkJ1 O7g6na82oyMbbX+8i7Fs9nThBjMNkF0= -----END CERTIFICATE-----Generated at Sun Apr 27 19:09:30 2025 by rpki-client