$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8b41c2fa-e50f-3a94-9a50-475a88935f33.roa File: 8b41c2fa-e50f-3a94-9a50-475a88935f33.roa (raw, json) Hash identifier: wCxT/82sjEZk8as6A9YTpf1xsoKAst5FnE6BBRS9iH0= Subject key identifier: C6:F5:6B:84:6F:3B:0E:05:2C:71:44:CD:F9:AA:BA:73:81:A7:59:4A Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858491246B9FB1B7DB723CEE83780 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8b41c2fa-e50f-3a94-9a50-475a88935f33.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 203 IP address blocks: 168.87.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:b9:fb:1b:7d:b7:23:ce:e8:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=7b28ba82-91d0-48f6-b065-3fe81bcfc9a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:33:d5:34:b3:a5:15:ec:8b:30:76:f9:ef:05: 6a:e1:db:8d:99:63:b8:4b:6c:53:77:6c:0a:22:40: 29:c7:eb:19:f6:e6:03:93:83:c0:f8:a6:84:8d:13: 12:19:08:78:f4:84:2e:7b:48:9b:2f:a8:03:70:1f: dc:57:55:39:84:d5:75:bb:a0:ae:69:53:05:be:c1: c0:02:49:49:83:d4:be:fa:b1:4f:05:e7:d3:de:10: a1:57:7c:e4:50:20:64:62:6a:46:01:9c:72:03:6e: 94:48:54:33:e6:b8:7f:ea:82:67:23:46:a1:36:a0: 80:f9:7f:3d:ea:0e:0d:62:29:9b:7b:d7:ab:43:f1: 64:c3:ac:1d:3a:42:40:c0:91:72:85:d2:a7:2e:55: 6c:fb:cd:8e:80:6f:c9:56:c6:31:b1:06:1a:df:d9: 24:f6:61:0c:83:8a:52:dd:ff:b7:8a:90:1a:b6:b6: d9:8b:37:78:76:3f:14:d3:3b:4a:e7:ea:b3:ad:04: 57:e6:09:59:13:d7:80:3a:e2:89:2c:b6:ae:d9:73: 45:6e:63:c6:41:e2:3b:05:ed:f6:f9:c6:c6:6a:5e: 1c:76:9c:82:7f:c7:91:d8:fa:6a:2b:21:79:71:b7: 26:8a:36:fb:61:08:0f:63:e8:26:42:34:4a:69:e2: 2f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:F5:6B:84:6F:3B:0E:05:2C:71:44:CD:F9:AA:BA:73:81:A7:59:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8b41c2fa-e50f-3a94-9a50-475a88935f33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:0d:34:96:a9:d4:3c:e2:57:1a:f7:77:61:25:85:00:5a:c1: 92:1e:9c:8c:61:7e:a5:20:aa:1a:0a:34:40:73:6c:c6:a8:75: e2:6a:8e:12:f4:15:21:33:d6:00:c8:d7:17:f4:1e:cf:be:5b: ba:1b:5e:90:01:3f:12:0f:fb:12:aa:ea:ae:30:9d:cc:6b:7e: ba:92:b3:ca:4b:43:02:bd:08:dc:67:e9:4b:3c:ac:3a:21:96: a1:7b:5b:a3:53:25:bd:a4:8b:34:c2:70:86:cd:34:36:4e:e2: b4:ed:17:21:bf:0a:70:88:16:7b:04:bf:b4:cb:63:5c:fe:32: 1e:85:ed:aa:37:9d:c6:83:b2:b9:de:85:b2:2d:f0:4e:0a:d2: 78:31:d4:83:e6:1b:c4:86:9b:c8:16:f6:b8:90:32:b3:32:65: 62:73:c2:f9:f4:89:69:74:2c:68:6c:11:1e:de:03:e6:09:b7: e8:e5:cf:df:c3:cb:3a:e1:bc:0b:db:81:06:36:33:76:da:36: fb:bc:d5:f6:1f:d5:ed:d6:1f:13:d7:67:7e:d8:4f:9f:34:dd: 6f:33:6b:76:50:d0:54:13:89:56:0c:d6:6f:a3:cd:0e:ef:13: f1:a3:47:d8:cd:06:b1:c7:5f:08:a3:55:34:ce:db:16:b0:4e: 2a:31:25:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRrn7G323I87oN4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk N2IyOGJhODItOTFkMC00OGY2LWIwNjUtM2ZlODFiY2ZjOWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTPVNLOlFeyLMHb57wVq4duNmWO4S2xTd2wK IkApx+sZ9uYDk4PA+KaEjRMSGQh49IQue0ibL6gDcB/cV1U5hNV1u6CuaVMFvsHA AklJg9S++rFPBefT3hChV3zkUCBkYmpGAZxyA26USFQz5rh/6oJnI0ahNqCA+X89 6g4NYimbe9erQ/Fkw6wdOkJAwJFyhdKnLlVs+82OgG/JVsYxsQYa39kk9mEMg4pS 3f+3ipAatrbZizd4dj8U0ztK5+qzrQRX5glZE9eAOuKJLLau2XNFbmPGQeI7Be32 +cbGal4cdpyCf8eR2PpqKyF5cbcmijb7YQgPY+gmQjRKaeIvFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMb1a4RvOw4FLHFEzfmqunOBp1lKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvOGI0MWMyZmEtZTUwZi0z YTk0LTlhNTAtNDc1YTg4OTM1ZjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqFeeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQNNJap1DziVxr3d2ElhQBawZIenIxhfqUgqhoKNEBzbMaodeJqjhL0 FSEz1gDI1xf0Hs++W7obXpABPxIP+xKq6q4wncxrfrqSs8pLQwK9CNxn6Us8rDoh lqF7W6NTJb2kizTCcIbNNDZO4rTtFyG/CnCIFnsEv7TLY1z+Mh6F7ao3ncaDsrne hbIt8E4K0ngx1IPmG8SGm8gW9riQMrMyZWJzwvn0iWl0LGhsER7eA+YJt+jlz9/D yzrhvAvbgQY2M3baNvu81fYf1e3WHxPXZ37YT5803W8za3ZQ0FQTiVYM1m+jzQ7v E/GjR9jNBrHHXwijVTTO2xawTioxJYg= -----END CERTIFICATE-----Generated at Sat Apr 26 19:27:06 2025 by rpki-client