$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d285b726-e3ef-3abf-8761-d6f1f21f4450.roa File: d285b726-e3ef-3abf-8761-d6f1f21f4450.roa (raw, json) Hash identifier: mSC+i+hVwY2UTrbL1bSbS+mASUtoPTzf3FFO6zOkXow= Subject key identifier: E0:10:97:06:2D:38:8D:3D:08:B7:30:E8:B6:5B:5D:AF:55:F3:A9:1D Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858499DBF3BD8DFC99E19F1824D00 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d285b726-e3ef-3abf-8761-d6f1f21f4450.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 202 IP address blocks: 168.87.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:3b:d8:df:c9:9e:19:f1:82:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=562b8443-d3d5-4ac5-831f-382ca6a5d647 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:c5:60:56:f0:d7:3c:79:d2:56:ac:db:63:3d: 4b:a3:09:60:19:81:6c:fe:bc:ce:46:f8:1e:42:c3: 3f:b8:56:c3:4d:ef:a1:af:ca:e7:a7:44:c9:61:09: ae:c8:25:66:be:40:10:c4:a7:49:fd:d0:aa:6d:e2: b7:33:73:25:69:9c:02:a0:4d:55:ba:f0:21:3e:51: 94:e8:e9:47:69:6c:df:35:87:64:2e:85:01:ae:44: 45:84:8b:b6:0f:23:5d:ac:92:27:4a:a7:58:c5:4c: c2:de:c7:23:e2:10:26:5e:56:65:3a:8e:4f:a4:d0: 30:9b:62:32:a5:36:3d:55:f1:48:bf:84:7f:b1:b7: dd:2b:77:9a:29:3f:a2:2c:c0:78:9d:7c:04:18:a7: 04:b5:15:d7:be:09:9d:22:43:30:25:ae:4f:f0:68: ef:ca:ca:37:a1:2e:29:ae:fd:f1:c5:33:22:af:03: 07:e0:a5:7f:f4:66:57:ea:01:5e:6a:7d:15:eb:3a: c7:82:b9:5a:25:fb:05:4f:93:2a:c4:0e:fa:dc:33: 95:9a:fb:5c:4c:d2:05:57:91:e4:20:50:08:cb:1c: dd:2f:e7:ed:5c:4c:72:35:41:87:cd:5b:61:5c:29: 18:ae:c2:cd:9d:0a:b2:86:ef:ec:a2:7f:80:43:3d: 86:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:10:97:06:2D:38:8D:3D:08:B7:30:E8:B6:5B:5D:AF:55:F3:A9:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d285b726-e3ef-3abf-8761-d6f1f21f4450.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:74:3a:41:b0:ae:df:99:9c:73:3b:4b:b0:95:c3:90:b6:7f: 1f:5c:f4:79:02:a2:c1:8a:45:c5:a7:29:ac:6c:2b:e9:5c:13: 40:eb:f9:43:10:6a:bf:32:5b:3e:ff:3d:99:8a:d8:ea:7b:02: b6:66:ff:16:65:ba:de:3a:8a:22:18:57:d7:4d:63:da:6d:b3: d6:c7:8f:53:37:7f:21:ee:79:75:a6:be:ad:52:cf:a3:7c:de: 25:c2:04:67:5d:66:e1:99:8a:c0:f2:ce:e5:1d:e8:18:d9:e9: 47:1f:1f:3b:07:cb:66:2d:58:73:99:62:75:e3:c7:da:db:eb: 0f:ed:34:79:e0:4d:c9:85:ac:d1:23:a3:9a:6d:5f:87:8c:e3: a4:41:c1:54:ae:dc:21:60:5a:1f:c5:19:a4:03:07:30:2b:7c: a5:b5:74:f1:57:a1:1a:d3:b3:b8:c4:bc:bf:c9:1c:08:2d:e7: e8:ed:89:26:82:40:ab:a4:da:4e:b9:42:59:94:9b:ba:aa:3f: c5:55:b2:68:82:2e:ba:6c:01:62:8a:b0:3e:60:f8:e7:f9:8c: 93:93:1d:a4:79:4d:4a:a7:87:ec:16:ec:89:98:33:f8:37:d1: 05:2c:5b:d0:37:fc:28:e9:76:47:60:8b:15:7d:30:cb:31:b5: db:d9:d8:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdvzvY38meGfGCTQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk NTYyYjg0NDMtZDNkNS00YWM1LTgzMWYtMzgyY2E2YTVkNjQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8VgVvDXPHnSVqzbYz1LowlgGYFs/rzORvge QsM/uFbDTe+hr8rnp0TJYQmuyCVmvkAQxKdJ/dCqbeK3M3MlaZwCoE1VuvAhPlGU 6OlHaWzfNYdkLoUBrkRFhIu2DyNdrJInSqdYxUzC3scj4hAmXlZlOo5PpNAwm2Iy pTY9VfFIv4R/sbfdK3eaKT+iLMB4nXwEGKcEtRXXvgmdIkMwJa5P8Gjvyso3oS4p rv3xxTMirwMH4KV/9GZX6gFean0V6zrHgrlaJfsFT5MqxA763DOVmvtcTNIFV5Hk IFAIyxzdL+ftXExyNUGHzVthXCkYrsLNnQqyhu/son+AQz2GwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOAQlwYtOI09CLcw6LZbXa9V86kdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZDI4NWI3MjYtZTNlZi0z YWJmLTg3NjEtZDZmMWYyMWY0NDUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqFf4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA50OkGwrt+ZnHM7S7CVw5C2fx9c9HkCosGKRcWnKaxsK+lcE0Dr+UMQ ar8yWz7/PZmK2Op7ArZm/xZlut46iiIYV9dNY9pts9bHj1M3fyHueXWmvq1Sz6N8 3iXCBGddZuGZisDyzuUd6BjZ6UcfHzsHy2YtWHOZYnXjx9rb6w/tNHngTcmFrNEj o5ptX4eM46RBwVSu3CFgWh/FGaQDBzArfKW1dPFXoRrTs7jEvL/JHAgt5+jtiSaC QKuk2k65QlmUm7qqP8VVsmiCLrpsAWKKsD5g+Of5jJOTHaR5TUqnh+wW7ImYM/g3 0QUsW9A3/CjpdkdgixV9MMsxtdvZ2LM= -----END CERTIFICATE-----Generated at Sun Apr 27 01:11:27 2025 by rpki-client