$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e4f6a5a5-bea9-322a-9fab-0663b5137b6e.roa File: e4f6a5a5-bea9-322a-9fab-0663b5137b6e.roa (raw, json) Hash identifier: mXgIy/AzbLqjwmYWQSEvOf5Arbfbo4VM4PIQX/YIHQ4= Subject key identifier: 08:4B:2A:93:9B:2D:F6:5A:E5:72:6C:30:FF:7C:9F:72:63:E6:9D:71 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858499DBF32ABF3E5DD2D3B49EB80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e4f6a5a5-bea9-322a-9fab-0663b5137b6e.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 3360 IP address blocks: 168.87.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:32:ab:f3:e5:dd:2d:3b:49:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=dcc4c8a5-34ae-42c7-83c5-9405e0b21651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:d8:11:5f:5c:d4:5a:e1:cf:49:f6:bf:b9:89: 36:1e:4a:a4:6a:1d:4f:95:5b:85:62:15:7f:03:cd: de:72:c3:77:af:d6:54:03:48:f0:05:71:5e:c6:60: a2:18:38:9e:f1:62:b8:48:5b:ec:23:94:43:4f:38: f9:5a:d1:2e:76:fb:20:48:6d:cb:53:67:85:29:0e: a2:c0:a4:87:cb:48:4f:7f:ac:f1:e2:7e:35:79:34: 78:71:d7:56:7b:61:fd:6a:7b:1d:f5:05:3b:c7:ee: 57:60:e3:f7:7b:92:8f:cd:e4:eb:b4:83:ee:8d:c1: fa:dc:72:91:34:b0:be:fb:23:10:30:54:29:9c:0a: 63:ee:13:8b:48:b1:76:33:b0:e0:ee:06:63:6d:f0: 9f:88:f9:bf:d6:a4:42:7f:a4:89:b8:01:20:bb:97: fd:d0:dc:e3:f4:cf:df:46:0d:11:ed:a5:fe:82:16: da:34:70:63:70:5d:a8:a4:ac:bc:00:2a:e8:89:19: 93:df:83:22:db:40:f6:2d:e7:c6:38:df:c9:9a:22: be:7c:ce:53:c7:11:1c:85:fb:8e:91:dd:18:2b:48: 12:cd:ee:a0:71:9b:e3:04:c3:2b:28:06:d1:fa:f9: 0b:cd:a7:2b:30:df:61:d4:5f:4d:fe:c0:1b:cc:d3: e8:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:4B:2A:93:9B:2D:F6:5A:E5:72:6C:30:FF:7C:9F:72:63:E6:9D:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e4f6a5a5-bea9-322a-9fab-0663b5137b6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:b3:f9:4f:ad:c6:c9:9a:0a:c2:a2:f3:c6:2e:91:04:d0:68: db:a2:e6:2e:2a:82:94:84:7d:6c:23:97:cc:1d:94:dd:b1:b3: b6:89:1a:f2:b0:9e:10:ca:db:df:49:8e:37:90:39:dc:fc:92: 6f:3e:fe:72:75:d7:90:a4:2d:01:5b:31:d2:07:77:d2:8f:25: 4a:4e:7d:78:f5:1f:e6:bd:ff:fe:20:b1:b3:a9:1c:b3:b4:91: 9a:bf:04:82:8f:1d:93:dc:d2:d8:89:e6:1c:a2:ba:db:56:6c: 01:cc:e8:79:84:ec:4b:ac:0f:67:0e:37:28:50:5c:bd:5b:d9: 46:ff:d1:31:50:65:63:b2:ed:d2:81:63:f9:7c:b2:43:aa:4d: 75:a4:ae:5f:79:db:24:82:88:f5:ea:39:a9:c8:93:e3:52:c6: 3c:88:a0:11:7c:b0:ca:5b:51:86:90:e8:c4:81:b4:1a:9b:e7: f0:e8:9f:cd:78:8a:44:b9:c5:b5:cc:83:3d:23:76:3a:70:ee: 3a:13:33:0b:c3:b9:aa:b5:25:66:ea:15:83:80:a7:dd:7d:16: 75:59:f1:40:cc:33:5c:53:fb:b4:3c:97:93:07:f1:bd:d4:8e: 19:5c:c2:92:2b:cc:2c:de:17:7b:da:6d:98:5d:7b:f4:87:25: c4:9d:e6:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdvzKr8+XdLTtJ64AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk ZGNjNGM4YTUtMzRhZS00MmM3LTgzYzUtOTQwNWUwYjIxNjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9gRX1zUWuHPSfa/uYk2Hkqkah1PlVuFYhV/ A83ecsN3r9ZUA0jwBXFexmCiGDie8WK4SFvsI5RDTzj5WtEudvsgSG3LU2eFKQ6i wKSHy0hPf6zx4n41eTR4cddWe2H9ansd9QU7x+5XYOP3e5KPzeTrtIPujcH63HKR NLC++yMQMFQpnApj7hOLSLF2M7Dg7gZjbfCfiPm/1qRCf6SJuAEgu5f90Nzj9M/f Rg0R7aX+ghbaNHBjcF2opKy8ACroiRmT34Mi20D2LefGON/JmiK+fM5TxxEchfuO kd0YK0gSze6gcZvjBMMrKAbR+vkLzacrMN9h1F9N/sAbzNPorQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAhLKpObLfZa5XJsMP98n3Jj5p1xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZTRmNmE1YTUtYmVhOS0z MjJhLTlmYWItMDY2M2I1MTM3YjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqFcQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGWz+U+txsmaCsKi88YukQTQaNui5i4qgpSEfWwjl8wdlN2xs7aJGvKw nhDK299JjjeQOdz8km8+/nJ115CkLQFbMdIHd9KPJUpOfXj1H+a9//4gsbOpHLO0 kZq/BIKPHZPc0tiJ5hyiuttWbAHM6HmE7EusD2cONyhQXL1b2Ub/0TFQZWOy7dKB Y/l8skOqTXWkrl952ySCiPXqOanIk+NSxjyIoBF8sMpbUYaQ6MSBtBqb5/Don814 ikS5xbXMgz0jdjpw7joTMwvDuaq1JWbqFYOAp919FnVZ8UDMM1xT+7Q8l5MH8b3U jhlcwpIrzCzeF3vabZhde/SHJcSd5jk= -----END CERTIFICATE-----Generated at Sun Apr 27 19:47:01 2025 by rpki-client