$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6eeaed7a-4a3c-3ecb-9ca9-3c00b84693a7.roa File: 6eeaed7a-4a3c-3ecb-9ca9-3c00b84693a7.roa (raw, json) Hash identifier: Dg4xwD/9ww7M8qjxBELcZPiACmZ6yjaV9uzCC/tV768= Subject key identifier: A9:29:C0:8A:84:9D:8C:BC:D7:03:B4:AA:D4:92:E2:80:3B:18:61:7F Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858499829D03CB82B6B1EC0E0D200 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6eeaed7a-4a3c-3ecb-9ca9-3c00b84693a7.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 3360 IP address blocks: 168.87.4.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:d0:3c:b8:2b:6b:1e:c0:e0:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=b8fd1b9d-6e3c-4366-98f7-e28581ad04b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:02:6f:08:a5:5f:76:a0:d1:e4:90:45:7e:14: c5:bc:ef:3a:a1:be:62:69:f1:21:6f:57:d1:6b:b5: 0f:53:64:7b:8c:aa:72:69:1d:d1:34:ea:c8:df:14: b1:e8:55:74:a0:92:ee:28:e1:37:df:51:a7:3b:88: f0:f6:50:36:87:0e:50:6c:ad:cf:98:44:19:a6:6b: 5b:6b:f9:48:c7:e8:0d:ab:4c:5d:11:34:72:7f:99: b5:2e:f9:3a:43:eb:28:e1:76:5f:d8:00:f7:0b:fc: 36:9d:a9:c1:a4:4f:df:a1:ba:08:d1:d8:c5:74:c9: d7:b6:da:42:77:d2:69:5b:e4:c7:a9:fe:dc:aa:ed: 1e:ed:37:2c:93:2f:fd:4f:85:b7:c5:a4:ac:90:a4: 01:df:01:90:7d:69:86:89:02:eb:7b:91:fe:7d:b4: d7:47:4b:b6:a9:5d:3f:0a:3e:5c:cf:0f:3c:20:37: c6:49:a1:6d:eb:fc:3d:69:0c:51:53:40:9c:02:a2: c1:d2:4a:2b:4f:e7:dd:9a:ac:10:c0:0e:9e:c7:54: f8:7a:01:9b:e8:68:0f:d2:e7:28:69:b5:38:fd:16: 2b:29:b9:66:45:ce:ce:fb:9b:48:df:87:ba:63:10: 98:58:fb:74:26:34:3d:a2:3e:aa:9f:1e:b7:53:4b: 72:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:29:C0:8A:84:9D:8C:BC:D7:03:B4:AA:D4:92:E2:80:3B:18:61:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6eeaed7a-4a3c-3ecb-9ca9-3c00b84693a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.4.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:80:58:f8:bb:bb:cd:45:82:da:d2:fc:e3:ee:85:de:e4:9d: 15:61:94:84:7b:8f:04:a4:bf:a2:3f:9c:3a:a5:1c:93:70:3c: 30:fc:46:a6:ef:72:30:a3:c5:ee:66:ff:d1:81:b6:6a:1f:af: 28:7d:f7:75:1b:3e:70:60:15:5b:83:07:16:29:7a:2f:a6:75: 30:6f:0e:f0:4d:bd:ec:9e:db:8f:33:1d:85:24:36:66:af:0d: aa:0e:63:1e:ac:74:3d:a4:74:89:47:4c:1e:6b:51:dc:97:4b: 4d:7b:c1:8b:63:10:d1:0d:cf:52:84:82:7e:c7:e2:ee:e0:83: 0e:d6:c8:fc:1e:23:87:42:02:78:c7:fa:0a:f6:0f:9a:ee:4e: 78:76:b1:5b:31:67:fd:e1:90:70:5b:fc:78:e6:33:00:5c:41: 6b:e9:ee:1a:25:b4:7d:55:b2:48:77:dd:d9:b1:4c:80:52:41: f4:73:cc:a4:12:7a:22:63:6a:d1:73:6e:3d:1e:08:1c:2f:e6: c6:73:94:fe:fc:c6:03:ff:0e:c7:d1:c1:8b:21:37:27:78:e1: 04:17:a6:34:85:37:3f:7e:36:de:d3:ad:c2:1b:a4:a3:6e:00: ee:33:e9:59:7c:8f:de:aa:4f:49:21:58:d6:51:61:67:12:fb: 99:7c:e4:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKdA8uCtrHsDg0gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk YjhmZDFiOWQtNmUzYy00MzY2LTk4ZjctZTI4NTgxYWQwNGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQJvCKVfdqDR5JBFfhTFvO86ob5iafEhb1fR a7UPU2R7jKpyaR3RNOrI3xSx6FV0oJLuKOE331GnO4jw9lA2hw5QbK3PmEQZpmtb a/lIx+gNq0xdETRyf5m1Lvk6Q+so4XZf2AD3C/w2nanBpE/foboI0djFdMnXttpC d9JpW+THqf7cqu0e7Tcsky/9T4W3xaSskKQB3wGQfWmGiQLre5H+fbTXR0u2qV0/ Cj5czw88IDfGSaFt6/w9aQxRU0CcAqLB0korT+fdmqwQwA6ex1T4egGb6GgP0uco abU4/RYrKblmRc7O+5tI34e6YxCYWPt0JjQ9oj6qnx63U0tyOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKkpwIqEnYy81wO0qtSS4oA7GGF/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNmVlYWVkN2EtNGEzYy0z ZWNiLTljYTktM2MwMGI4NDY5M2E3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqFcEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHuAWPi7u81FgtrS/OPuhd7knRVhlIR7jwSkv6I/nDqlHJNwPDD8Rqbv cjCjxe5m/9GBtmofryh993UbPnBgFVuDBxYpei+mdTBvDvBNveye248zHYUkNmav DaoOYx6sdD2kdIlHTB5rUdyXS017wYtjENENz1KEgn7H4u7ggw7WyPweI4dCAnjH +gr2D5ruTnh2sVsxZ/3hkHBb/HjmMwBcQWvp7holtH1Vskh33dmxTIBSQfRzzKQS eiJjatFzbj0eCBwv5sZzlP78xgP/DsfRwYshNyd44QQXpjSFNz9+Nt7TrcIbpKNu AO4z6Vl8j96qT0khWNZRYWcS+5l85LY= -----END CERTIFICATE-----Generated at Sun Apr 27 00:59:29 2025 by rpki-client