$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/89b6ce69-65e4-30bb-94da-990da7620180.roa File: 89b6ce69-65e4-30bb-94da-990da7620180.roa (raw, json) Hash identifier: Vxy2i1fKl1SWuOTBLkLhlVHUuR8d7S9UOodM2vDLOyA= Subject key identifier: 41:FA:84:F9:0F:E5:51:E6:1E:F6:80:B8:FA:FA:55:E1:B1:E9:DE:00 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858499AF4843742653EEEDA30C680 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/89b6ce69-65e4-30bb-94da-990da7620180.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 3356 IP address blocks: 168.87.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:84:37:42:65:3e:ee:da:30:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=0ada570c-8897-4225-8387-52fd6d59b6ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:5d:97:c8:62:e2:fb:67:74:9c:1f:ef:72:5f: 9d:7b:21:30:7f:c2:f1:45:49:9a:1f:65:de:7e:af: 51:ab:7b:4a:fd:52:5a:aa:91:e5:97:9d:9a:f7:57: 56:7c:9c:03:fb:61:f6:b8:52:6e:76:f4:f8:85:52: 4d:3b:82:0f:5c:44:21:01:6a:c4:25:5a:35:3f:fb: 69:e4:97:79:d2:20:68:10:33:57:f3:18:e8:f9:cf: b5:5a:c8:0e:2d:a0:23:ee:c8:86:73:ef:e4:04:81: bd:bd:9e:de:6b:ed:05:d4:bd:01:5b:fe:e1:50:49: 43:b6:63:16:69:4a:70:ed:3b:44:5c:3c:f1:2c:f0: ad:d5:85:c4:0d:ac:23:16:2b:d3:bd:b2:2f:d2:28: ee:1d:ce:bf:15:a8:bd:31:9c:7f:79:0e:14:bd:bf: 89:66:e6:9b:01:a5:c0:0b:ed:c9:6a:51:36:cc:29: f8:13:1b:15:5d:f0:06:6e:e6:ca:f0:1e:12:ad:2e: 6a:6b:e1:c0:69:e3:c3:a7:a6:fe:5d:11:9b:d1:80: 4e:e0:2a:9c:e9:2e:c1:c8:0b:ee:a8:24:79:e2:95: e4:33:9f:ac:07:9d:a4:2e:00:78:36:ec:97:9e:ac: 89:07:9c:7d:d8:22:99:a4:ee:35:49:39:4b:4f:e3: 15:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:FA:84:F9:0F:E5:51:E6:1E:F6:80:B8:FA:FA:55:E1:B1:E9:DE:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/89b6ce69-65e4-30bb-94da-990da7620180.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:4d:58:22:91:31:24:38:63:6e:c9:c6:c6:31:c7:e1:0b:ae: 54:08:2b:4a:47:ab:b3:72:6e:2a:8f:4c:d9:36:fc:32:84:d4: 67:92:92:ef:6e:d0:83:83:79:97:d8:b5:5a:8f:13:8a:2e:94: 4c:0b:0a:01:db:56:e4:47:97:a0:53:0b:47:f7:ef:3b:b5:9b: 9a:8a:1d:91:00:ec:34:81:d0:d5:dd:62:55:d3:05:4f:a5:9d: 89:de:37:88:ab:0e:22:e0:9b:61:d3:54:89:14:c9:9a:f2:ff: 4d:44:63:8e:ab:2c:c5:38:7b:a0:61:5b:5d:94:08:e8:8f:f4: 30:8d:59:c0:8c:63:e8:6c:71:ef:e3:82:39:2f:80:47:d8:70: ef:81:87:30:72:d9:60:00:ef:82:57:2c:c9:b5:4b:34:35:b0: b7:13:1c:2c:30:c2:4f:65:6a:89:57:05:0d:24:32:58:41:1a: 17:80:34:1e:e3:a5:ac:0d:bc:bb:7a:8c:16:84:81:55:f6:3c: 68:88:64:b3:6f:cc:70:35:79:a4:e3:9d:03:42:43:84:4d:1b: 81:a4:a7:e3:f1:9a:67:9d:44:51:5c:0d:52:f2:82:e0:cc:2d: a3:81:43:32:06:a7:32:fc:08:0d:23:6a:32:8d:07:4a:96:f0: ca:61:b8:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9IQ3QmU+7towxoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk MGFkYTU3MGMtODg5Ny00MjI1LTgzODctNTJmZDZkNTliNmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk12XyGLi+2d0nB/vcl+deyEwf8LxRUmaH2Xe fq9Rq3tK/VJaqpHll52a91dWfJwD+2H2uFJudvT4hVJNO4IPXEQhAWrEJVo1P/tp 5Jd50iBoEDNX8xjo+c+1WsgOLaAj7siGc+/kBIG9vZ7ea+0F1L0BW/7hUElDtmMW aUpw7TtEXDzxLPCt1YXEDawjFivTvbIv0ijuHc6/Fai9MZx/eQ4Uvb+JZuabAaXA C+3JalE2zCn4ExsVXfAGbubK8B4SrS5qa+HAaePDp6b+XRGb0YBO4Cqc6S7ByAvu qCR54pXkM5+sB52kLgB4NuyXnqyJB5x92CKZpO41STlLT+MVAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEH6hPkP5VHmHvaAuPr6VeGx6d4AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvODliNmNlNjktNjVlNC0z MGJiLTk0ZGEtOTkwZGE3NjIwMTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFekMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIVNWCKRMSQ4Y27JxsYxx+ELrlQIK0pHq7NybiqPTNk2/DKE1GeSku9u 0IODeZfYtVqPE4oulEwLCgHbVuRHl6BTC0f37zu1m5qKHZEA7DSB0NXdYlXTBU+l nYneN4irDiLgm2HTVIkUyZry/01EY46rLMU4e6BhW12UCOiP9DCNWcCMY+hsce/j gjkvgEfYcO+BhzBy2WAA74JXLMm1SzQ1sLcTHCwwwk9laolXBQ0kMlhBGheANB7j pawNvLt6jBaEgVX2PGiIZLNvzHA1eaTjnQNCQ4RNG4Gkp+PxmmedRFFcDVLyguDM LaOBQzIGpzL8CA0jajKNB0qW8MphuDg= -----END CERTIFICATE-----Generated at Sat Apr 26 16:40:09 2025 by rpki-client