$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/651c78c9-0fab-33dc-9853-a471d8f178c1.roa File: 651c78c9-0fab-33dc-9853-a471d8f178c1.roa (raw, json) Hash identifier: d8IwUBVgqS7Yd6PkJ8nfqvDmwqKeRC5b/F0OCCR307w= Subject key identifier: BE:C1:1D:E5:C1:EE:BC:2F:39:BA:89:4B:17:B4:3E:A1:82:70:11:A7 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285849446946C28E55C45C9299F780 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/651c78c9-0fab-33dc-9853-a471d8f178c1.roa Signing time: Sat 22 Mar 2025 01:00:40 +0000 ROA not before: Sat 22 Mar 2025 01:00:40 +0000 ROA not after: Fri 20 Jun 2025 01:00:40 +0000 asID: 3356 IP address blocks: 168.87.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:44:69:46:c2:8e:55:c4:5c:92:99:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 22 01:00:40 2025 GMT Not After : Jun 20 01:00:40 2025 GMT Subject: CN=c95c413a-b8c2-4828-941c-ac383416527f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2b:e4:b4:52:fb:fd:dd:61:b8:4b:b9:52:6c: c8:1c:f7:05:54:b8:d0:20:fc:c3:ac:72:55:c9:f8: 92:ad:45:ab:1a:65:60:bb:c7:61:31:ed:99:a4:06: 55:3c:60:df:a5:68:8f:e0:02:c2:6c:51:38:16:95: 1f:c2:f6:5f:51:3f:dd:c7:c2:c6:06:9e:12:e7:ce: 79:5f:49:d5:c4:70:3b:de:d5:61:6e:05:41:11:bf: 8f:fb:86:b7:ea:42:04:65:c9:29:43:2f:22:c8:4b: 63:76:18:a7:a7:6d:af:a4:82:3c:d5:f2:96:84:de: 07:5c:82:ee:bd:fa:bd:1a:46:12:89:54:e4:7b:a1: 2e:31:2a:84:5c:1c:0a:9c:7b:55:c7:ab:bb:ef:f0: 65:67:66:28:cd:61:a0:68:82:f4:0d:38:53:8b:97: 7b:ee:7c:ab:bd:9b:83:3b:52:e2:2c:ef:86:98:81: 38:9e:32:de:d7:54:44:d1:b5:7d:e4:6c:71:9e:59: 7f:cf:05:70:d1:a1:b5:f3:ef:c7:ac:6f:e0:cc:e6: d3:cd:c2:11:e5:eb:a7:8a:ba:9c:28:e8:88:6b:fa: 1c:04:8c:e7:9f:68:36:11:c6:a6:7d:b7:c5:78:87: d0:3d:aa:ff:a6:74:13:e5:6a:6a:8a:7c:ea:40:89: be:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:C1:1D:E5:C1:EE:BC:2F:39:BA:89:4B:17:B4:3E:A1:82:70:11:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/651c78c9-0fab-33dc-9853-a471d8f178c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:67:f7:c6:4c:be:b6:8d:dc:a4:26:79:5d:3b:18:6b:18:3b: a3:43:68:d4:f8:68:88:3d:fd:48:46:a1:e3:25:77:72:23:ce: 60:90:2b:1e:d8:88:93:3b:50:10:a5:c2:ee:f2:c5:d2:b8:53: ea:c3:6b:af:0b:b8:9e:9c:39:b3:21:f6:01:87:6e:9d:4c:2d: b6:68:4b:00:c0:12:f8:b5:b3:07:2f:d8:9d:00:6a:e9:47:c5: c6:76:4f:2e:b0:2a:05:28:e0:29:10:8c:ff:2e:4f:c5:58:a9: bb:59:4c:2d:77:fc:56:5c:88:5f:c6:40:2f:54:ef:9c:0f:49: 25:2d:65:e7:27:02:3b:ee:fa:77:d1:d2:9e:62:c8:2b:42:12: db:95:67:42:2b:55:e8:42:b8:3c:59:3d:47:56:24:09:c2:40: 29:2d:15:bd:f8:46:06:5b:65:31:3d:2d:77:94:6d:2b:e9:09: d0:12:b0:e2:b8:c6:69:5c:05:9c:c5:7c:cc:64:82:2d:24:2e: d4:72:f0:49:76:bc:0d:bd:06:32:3f:16:5f:34:88:5f:6a:ca: d2:ed:2c:48:bf:b8:be:6f:b8:e7:48:0c:a9:de:3d:7c:9e:72: 4f:9f:ca:63:2b:b6:59:16:f9:9e:65:c9:04:c1:37:f2:85:96: 8f:3f:6e:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElEaUbCjlXEXJKZ94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk Yzk1YzQxM2EtYjhjMi00ODI4LTk0MWMtYWMzODM0MTY1MjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCvktFL7/d1huEu5UmzIHPcFVLjQIPzDrHJV yfiSrUWrGmVgu8dhMe2ZpAZVPGDfpWiP4ALCbFE4FpUfwvZfUT/dx8LGBp4S5855 X0nVxHA73tVhbgVBEb+P+4a36kIEZckpQy8iyEtjdhinp22vpII81fKWhN4HXILu vfq9GkYSiVTke6EuMSqEXBwKnHtVx6u77/BlZ2YozWGgaIL0DThTi5d77nyrvZuD O1LiLO+GmIE4njLe11RE0bV95Gxxnll/zwVw0aG18+/HrG/gzObTzcIR5eunirqc KOiIa/ocBIznn2g2EcamfbfFeIfQPar/pnQT5WpqinzqQIm+awIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL7BHeXB7rwvObqJSxe0PqGCcBGnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNjUxYzc4YzktMGZhYi0z M2RjLTk4NTMtYTQ3MWQ4ZjE3OGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqFdEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFVn98ZMvraN3KQmeV07GGsYO6NDaNT4aIg9/UhGoeMld3IjzmCQKx7Y iJM7UBClwu7yxdK4U+rDa68LuJ6cObMh9gGHbp1MLbZoSwDAEvi1swcv2J0AaulH xcZ2Ty6wKgUo4CkQjP8uT8VYqbtZTC13/FZciF/GQC9U75wPSSUtZecnAjvu+nfR 0p5iyCtCEtuVZ0IrVehCuDxZPUdWJAnCQCktFb34RgZbZTE9LXeUbSvpCdASsOK4 xmlcBZzFfMxkgi0kLtRy8El2vA29BjI/Fl80iF9qytLtLEi/uL5vuOdIDKnePXye ck+fymMrtlkW+Z5lyQTBN/KFlo8/bu8= -----END CERTIFICATE-----Generated at Sat Apr 26 16:16:01 2025 by rpki-client