$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b6581fd7-dd5b-32ff-8ba6-6756536188db.roa File: b6581fd7-dd5b-32ff-8ba6-6756536188db.roa (raw, json) Hash identifier: ktFP9vwOiMZdJ1ntI1Z0oqO1MzuqnXIqwL9W4v1ALjA= Subject key identifier: DA:2A:A9:82:11:92:5B:04:7A:A6:6B:4C:44:58:24:6E:63:67:82:78 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858498CFF128EAABC608D2B2CC2DC Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b6581fd7-dd5b-32ff-8ba6-6756536188db.roa Signing time: Thu 17 Apr 2025 01:00:45 +0000 ROA not before: Thu 17 Apr 2025 01:00:45 +0000 ROA not after: Wed 16 Jul 2025 01:00:45 +0000 asID: 203 IP address blocks: 168.87.154.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:ff:12:8e:aa:bc:60:8d:2b:2c:c2:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 17 01:00:45 2025 GMT Not After : Jul 16 01:00:45 2025 GMT Subject: CN=d9a74985-40f9-4b3d-b3dd-bd6f8de0b095 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a4:6f:e8:55:34:79:74:29:b6:a7:39:f6:72: 0d:44:78:95:14:d1:e6:d2:f9:c4:de:7a:29:95:ef: e5:c4:6e:25:c5:b5:96:cf:a2:81:99:1c:66:63:00: 70:5b:ee:b6:76:af:e4:df:d2:a4:21:12:ca:46:45: 6f:75:78:30:4f:16:68:64:39:24:74:11:ac:d6:5c: 6e:aa:35:05:5a:9f:9f:30:86:30:d1:0c:7b:2e:53: 22:b9:47:1d:70:53:09:c5:c2:03:1b:11:d7:f1:04: f9:5e:41:5e:48:6f:fa:71:6c:16:e9:bb:b9:59:73: 31:7f:fe:6d:f5:c7:80:90:cb:38:27:5f:d6:8a:ab: ae:fe:21:3b:d0:77:d5:94:62:91:70:86:81:07:5c: cb:d1:42:ac:e9:7a:fc:17:f0:96:4c:4e:74:4a:84: bf:61:5a:d6:b0:89:72:94:13:22:2b:7a:cf:6f:0c: 44:a9:c4:8e:37:b3:99:28:df:8a:f9:e5:a0:e7:80: df:16:39:f1:66:5e:a4:90:92:7b:e7:7e:5c:31:ef: d5:df:87:1b:69:10:b1:40:dc:c3:fe:dc:f3:f2:2a: 59:4e:3a:16:78:bd:13:92:6b:05:3e:0d:99:ff:e7: 9e:53:ed:b0:b4:79:96:4e:41:06:04:2e:2e:cf:9c: ed:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:2A:A9:82:11:92:5B:04:7A:A6:6B:4C:44:58:24:6E:63:67:82:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b6581fd7-dd5b-32ff-8ba6-6756536188db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.154.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:dc:76:07:4e:f1:e9:6b:fd:9a:50:24:01:c8:d8:3d:d5:87: 9d:21:7e:b9:c4:38:5c:67:4d:1b:aa:0f:56:97:4b:d2:42:76: 0f:7e:9b:41:6e:ad:3d:6c:2d:0b:f5:3d:53:dc:0a:9c:47:03: 7d:06:41:99:f2:0a:30:a6:52:42:82:d8:a3:d1:8b:41:91:f9: 2e:3c:72:e6:a2:1f:ae:f2:10:84:f9:eb:70:84:54:54:8d:75: 5b:a6:6b:85:b6:ad:bc:48:6b:ac:e7:d0:e6:0a:51:c3:f8:4d: 99:a6:95:9a:31:1a:6e:37:c8:dc:8f:ab:2c:6b:e2:bb:51:e0: 3a:b4:ff:00:6b:d9:c7:b9:cd:49:81:f2:64:ae:37:16:f8:fa: 15:eb:a6:3a:29:e9:a0:d6:c8:9e:71:7c:de:c9:7b:2c:21:37: 40:30:5f:41:09:c0:7b:2f:ea:91:45:ef:a5:2e:ed:ff:40:02: 82:9c:bc:30:d6:18:1a:d8:3f:ef:91:d6:69:e0:54:7f:64:b5: e3:1a:58:8d:58:66:f7:ec:e6:e3:0d:42:d3:67:bb:e3:6e:d1: ed:ae:b0:1c:f1:cb:9d:0e:38:d6:e6:5c:69:dc:78:7d:01:7a: 72:3b:23:94:d3:c8:de:66:24:4c:e0:90:99:1b:86:99:cc:43: 87:d0:1d:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmM/xKOqrxgjSsswtwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk ZDlhNzQ5ODUtNDBmOS00YjNkLWIzZGQtYmQ2ZjhkZTBiMDk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaRv6FU0eXQptqc59nINRHiVFNHm0vnE3nop le/lxG4lxbWWz6KBmRxmYwBwW+62dq/k39KkIRLKRkVvdXgwTxZoZDkkdBGs1lxu qjUFWp+fMIYw0Qx7LlMiuUcdcFMJxcIDGxHX8QT5XkFeSG/6cWwW6bu5WXMxf/5t 9ceAkMs4J1/Wiquu/iE70HfVlGKRcIaBB1zL0UKs6Xr8F/CWTE50SoS/YVrWsIly lBMiK3rPbwxEqcSON7OZKN+K+eWg54DfFjnxZl6kkJJ7535cMe/V34cbaRCxQNzD /tzz8ipZTjoWeL0TkmsFPg2Z/+eeU+2wtHmWTkEGBC4uz5ztvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNoqqYIRklsEeqZrTERYJG5jZ4J4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYjY1ODFmZDctZGQ1Yi0z MmZmLThiYTYtNjc1NjUzNjE4OGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqFeaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAvcdgdO8elr/ZpQJAHI2D3Vh50hfrnEOFxnTRuqD1aXS9JCdg9+m0Fu rT1sLQv1PVPcCpxHA30GQZnyCjCmUkKC2KPRi0GR+S48cuaiH67yEIT563CEVFSN dVuma4W2rbxIa6zn0OYKUcP4TZmmlZoxGm43yNyPqyxr4rtR4Dq0/wBr2ce5zUmB 8mSuNxb4+hXrpjop6aDWyJ5xfN7JeywhN0AwX0EJwHsv6pFF76Uu7f9AAoKcvDDW GBrYP++R1mngVH9kteMaWI1YZvfs5uMNQtNnu+Nu0e2usBzxy50OONbmXGnceH0B enI7I5TTyN5mJEzgkJkbhpnMQ4fQHeQ= -----END CERTIFICATE-----Generated at Sat Apr 26 19:28:49 2025 by rpki-client