$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d9636a6f-3592-376c-90d3-b77ba2b2de79.roa File: d9636a6f-3592-376c-90d3-b77ba2b2de79.roa (raw, json) Hash identifier: 3KkzKHD4rEoArs8x0ZB8bRjUTYsnbMYD2C1R69BsK5M= Subject key identifier: 5A:04:A5:AD:8B:A5:C8:74:AE:72:13:A2:58:C2:44:0F:1B:BD:E4:D6 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858498A34616D4CC1605DE8AC7AC0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d9636a6f-3592-376c-90d3-b77ba2b2de79.roa Signing time: Wed 16 Apr 2025 01:00:48 +0000 ROA not before: Wed 16 Apr 2025 01:00:48 +0000 ROA not after: Tue 15 Jul 2025 01:00:48 +0000 asID: 3360 IP address blocks: 168.87.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8a:34:61:6d:4c:c1:60:5d:e8:ac:7a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 16 01:00:48 2025 GMT Not After : Jul 15 01:00:48 2025 GMT Subject: CN=75793561-0a53-468d-99b9-cd44446f358c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f5:a1:36:94:ac:1d:2c:f6:68:10:97:d2:80: 21:39:ee:e8:d3:8a:e0:bd:64:46:b4:74:0d:8f:e2: de:ce:5e:05:23:29:1c:95:af:ff:f5:51:e5:2c:b2: 62:78:d7:7f:2c:03:5c:23:14:c3:bb:5c:83:b4:b3: bd:76:02:6e:e8:8f:f5:a2:ae:f7:61:df:d7:7a:b4: 39:de:96:65:3b:29:1b:e6:0d:cf:88:0b:9a:6a:d5: 03:16:4b:68:36:8c:12:c0:d9:fe:8b:f2:8f:e3:2c: 1c:e5:9e:79:57:6a:6b:e5:ae:38:7c:7d:7b:3a:8e: 12:fe:b2:1e:90:cb:67:6c:ee:df:b3:81:d1:11:33: 71:6b:96:a3:10:9b:9f:f2:54:1a:8b:c2:1f:4a:dc: ac:47:d6:5f:0e:06:a2:09:c0:6e:4f:82:dd:8a:63: 76:59:3c:8f:e4:1e:65:2e:da:91:f2:02:b7:63:ee: f1:d8:a5:b4:40:e3:90:24:af:4c:5d:21:16:d6:23: 8a:bb:02:9b:c0:5c:80:f5:d2:01:6d:48:3c:e6:30: 80:76:42:38:3e:20:a7:34:17:b6:5c:ac:f8:e5:17: 3c:7c:9c:a0:7e:1c:1c:02:09:90:c0:da:3f:2f:81: d0:66:78:15:94:22:19:9b:95:c8:2c:4a:cc:f7:8b: 28:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:04:A5:AD:8B:A5:C8:74:AE:72:13:A2:58:C2:44:0F:1B:BD:E4:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d9636a6f-3592-376c-90d3-b77ba2b2de79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:bd:c4:39:46:cf:e0:00:cb:7a:00:92:71:52:ed:d9:59:5a: e4:28:b5:5a:84:ae:2e:b0:88:9e:e8:76:7e:0f:53:33:2e:7b: 97:86:1c:ca:4f:21:2d:eb:89:52:e3:4a:03:89:64:dc:94:21: a4:c5:32:58:94:2d:d5:f4:18:de:8c:b3:08:2e:8a:09:91:2d: 01:ff:0b:14:8a:8b:cc:2d:e6:ab:d1:7d:e9:93:f3:a4:4e:e0: f3:ee:2b:dd:49:3d:ae:24:e7:cc:dc:21:82:f1:12:c5:cc:ad: b7:3e:9a:10:f6:ab:26:dc:44:a3:5d:be:e2:64:ab:4c:27:ce: 3e:e8:c3:3a:02:3d:81:e8:23:4c:ad:47:e0:e6:52:cd:ed:83: f4:32:73:f8:2e:11:74:67:e9:8d:79:bf:4c:b7:e7:a9:11:4a: c4:48:3a:1f:53:20:d2:87:8b:73:f6:4b:84:7e:41:ff:f5:17: f5:c5:9d:d5:f3:e8:d5:82:d4:72:e5:10:bd:6b:41:83:85:42: e6:8f:79:ef:4c:97:b7:8b:d1:ce:43:eb:b0:af:9c:29:82:0d: c0:d3:3e:d0:eb:56:da:2d:2a:9e:01:97:2b:9d:cc:fb:86:23: b8:9d:16:7a:f7:f8:8c:75:23:f2:0d:26:09:4a:d9:71:6d:f5: e5:ce:b0:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmKNGFtTMFgXeisesAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDQxNjAxMDA0OFoXDTI1MDcxNTAxMDA0OFowLzEtMCsGA1UEAxMk NzU3OTM1NjEtMGE1My00NjhkLTk5YjktY2Q0NDQ0NmYzNThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfWhNpSsHSz2aBCX0oAhOe7o04rgvWRGtHQN j+Lezl4FIykcla//9VHlLLJieNd/LANcIxTDu1yDtLO9dgJu6I/1oq73Yd/XerQ5 3pZlOykb5g3PiAuaatUDFktoNowSwNn+i/KP4ywc5Z55V2pr5a44fH17Oo4S/rIe kMtnbO7fs4HRETNxa5ajEJuf8lQai8IfStysR9ZfDgaiCcBuT4LdimN2WTyP5B5l LtqR8gK3Y+7x2KW0QOOQJK9MXSEW1iOKuwKbwFyA9dIBbUg85jCAdkI4PiCnNBe2 XKz45Rc8fJygfhwcAgmQwNo/L4HQZngVlCIZm5XILErM94soswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFoEpa2Lpch0rnIToljCRA8bveTWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZDk2MzZhNmYtMzU5Mi0z NzZjLTkwZDMtYjc3YmEyYjJkZTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFdWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+9xDlGz+AAy3oAknFS7dlZWuQotVqEri6wiJ7odn4PUzMue5eGHMpP IS3riVLjSgOJZNyUIaTFMliULdX0GN6MswguigmRLQH/CxSKi8wt5qvRfemT86RO 4PPuK91JPa4k58zcIYLxEsXMrbc+mhD2qybcRKNdvuJkq0wnzj7owzoCPYHoI0yt R+DmUs3tg/Qyc/guEXRn6Y15v0y356kRSsRIOh9TINKHi3P2S4R+Qf/1F/XFndXz 6NWC1HLlEL1rQYOFQuaPee9Ml7eL0c5D67CvnCmCDcDTPtDrVtotKp4BlyudzPuG I7idFnr3+Ix1I/INJglK2XFt9eXOsAQ= -----END CERTIFICATE-----Generated at Sun Apr 27 19:46:12 2025 by rpki-client