$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bee9c874-07bc-3295-92a5-96b15913b828.roa File: bee9c874-07bc-3295-92a5-96b15913b828.roa (raw, json) Hash identifier: oPdfcxMqbwI5Gbp7nqoam3x1covMfr0Jm6zhcQTTv/U= Subject key identifier: 1D:83:29:1C:AC:F6:28:BA:E7:81:B1:CE:8F:77:15:FB:9D:D6:88:57 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858499829D05B9C46F2A436315060 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bee9c874-07bc-3295-92a5-96b15913b828.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 203 IP address blocks: 168.87.4.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:d0:5b:9c:46:f2:a4:36:31:50:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=79d418ab-88b7-47b0-9e82-9053f43f0ee5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:6a:0e:2a:c8:ce:d4:c7:cb:92:89:4b:12:81: 2a:3d:1c:40:44:75:79:ef:69:6b:41:dd:8e:3e:28: f0:7b:aa:13:b6:7e:d1:41:a3:a3:36:17:f8:e1:4c: 16:98:45:e4:3c:28:95:5c:a6:16:b9:d2:b7:16:12: de:8e:9b:ea:4c:10:5e:95:94:67:07:98:1f:52:a0: 34:22:79:7f:6e:97:9e:ca:82:c2:f1:1c:51:87:bb: de:a8:ea:8b:f7:9f:3f:f0:06:08:5f:e7:b0:46:0d: 8e:e6:86:32:ad:6a:c6:6b:1b:14:93:1b:ff:86:41: 09:d0:db:95:01:66:9c:6c:c8:54:5f:9e:b7:84:4d: 22:be:c3:6a:87:d9:31:ce:44:8e:44:1c:f9:0c:4a: e4:86:d9:ed:94:c5:f8:80:4b:c8:a6:8f:ed:eb:23: 37:23:b4:d4:2b:71:a7:48:7f:26:75:df:45:1c:28: 87:db:b4:b1:4a:91:6f:f6:6c:1d:51:fa:dc:33:9b: c4:1b:5c:92:35:9c:79:65:ac:25:7a:12:ff:6a:db: c6:2f:03:9e:23:30:97:d2:89:89:69:8e:76:8b:38: 4e:bf:53:a9:31:55:60:f9:e2:96:c6:5d:9b:68:7a: b9:79:5b:d2:7f:cc:f5:e0:5c:d0:4a:ed:c0:96:78: da:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:83:29:1C:AC:F6:28:BA:E7:81:B1:CE:8F:77:15:FB:9D:D6:88:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bee9c874-07bc-3295-92a5-96b15913b828.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.4.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:c1:cf:d2:2e:e0:e0:63:95:2e:dc:b6:8c:7f:43:f4:5e:90: 9b:b8:80:b0:93:af:a5:2c:f7:90:24:a2:fb:c3:82:c4:4c:62: 04:3c:80:2a:02:e5:73:d0:e5:01:ba:73:e1:39:05:6b:77:98: f0:98:e5:72:0f:16:7a:a4:85:37:2c:7f:bb:ae:da:09:04:1a: 92:79:c9:ef:c9:df:82:7d:08:1f:ad:9a:7c:6a:e7:af:d4:04: 40:12:77:9b:37:21:32:c6:20:f6:88:51:83:1c:30:82:20:ac: 79:73:58:0a:32:58:af:cc:2d:85:25:56:83:47:02:1f:26:8b: b2:de:b1:0f:a6:c1:59:20:7c:d8:c5:3b:89:b2:27:ca:41:f1: 4c:a0:56:c4:cd:6e:09:9e:8d:d7:ce:8a:50:7b:2b:1e:56:3d: 61:8f:53:56:c3:75:4e:84:f3:e9:b5:0a:04:1d:e0:1b:a1:c6: 76:d3:ba:f4:e2:d7:68:a1:63:01:05:90:5e:4b:84:e6:01:25: d7:ea:c2:d5:60:8a:cd:5a:71:06:77:e2:59:75:c4:c8:66:09: 3a:11:47:7b:dc:27:59:82:c9:89:ab:68:05:f8:20:b8:ed:a9: a2:4e:2b:d1:ab:9a:16:7c:ea:d3:26:b3:c0:02:34:df:4f:38: 29:66:32:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKdBbnEbypDYxUGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk NzlkNDE4YWItODhiNy00N2IwLTllODItOTA1M2Y0M2YwZWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2oOKsjO1MfLkolLEoEqPRxARHV572lrQd2O Pijwe6oTtn7RQaOjNhf44UwWmEXkPCiVXKYWudK3FhLejpvqTBBelZRnB5gfUqA0 Inl/bpeeyoLC8RxRh7veqOqL958/8AYIX+ewRg2O5oYyrWrGaxsUkxv/hkEJ0NuV AWacbMhUX563hE0ivsNqh9kxzkSORBz5DErkhtntlMX4gEvIpo/t6yM3I7TUK3Gn SH8mdd9FHCiH27SxSpFv9mwdUfrcM5vEG1ySNZx5ZawlehL/atvGLwOeIzCX0omJ aY52izhOv1OpMVVg+eKWxl2baHq5eVvSf8z14FzQSu3Alnja3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB2DKRys9ii654Gxzo93Ffud1ohXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYmVlOWM4NzQtMDdiYy0z Mjk1LTkyYTUtOTZiMTU5MTNiODI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqFcEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADXBz9Iu4OBjlS7ctox/Q/RekJu4gLCTr6Us95AkovvDgsRMYgQ8gCoC 5XPQ5QG6c+E5BWt3mPCY5XIPFnqkhTcsf7uu2gkEGpJ5ye/J34J9CB+tmnxq56/U BEASd5s3ITLGIPaIUYMcMIIgrHlzWAoyWK/MLYUlVoNHAh8mi7LesQ+mwVkgfNjF O4myJ8pB8UygVsTNbgmejdfOilB7Kx5WPWGPU1bDdU6E8+m1CgQd4BuhxnbTuvTi 12ihYwEFkF5LhOYBJdfqwtVgis1acQZ34ll1xMhmCToRR3vcJ1mCyYmraAX4ILjt qaJOK9GrmhZ86tMms8ACNN9POClmMkc= -----END CERTIFICATE-----Generated at Sat Apr 26 19:30:22 2025 by rpki-client