$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e94bbb52-0d0b-3e8d-aca3-b8ad6f3f4ab5.roa File: e94bbb52-0d0b-3e8d-aca3-b8ad6f3f4ab5.roa (raw, json) Hash identifier: S77/FxDmQnHjBT18ytgYy5VljMhrG+g+qeXfEx81LR8= Subject key identifier: DC:71:A4:11:20:DD:22:A9:0E:C9:E0:64:9F:6A:D4:AF:77:DB:DB:AE Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858498CFF12D0CED286F0C33EC180 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e94bbb52-0d0b-3e8d-aca3-b8ad6f3f4ab5.roa Signing time: Thu 17 Apr 2025 01:00:45 +0000 ROA not before: Thu 17 Apr 2025 01:00:45 +0000 ROA not after: Wed 16 Jul 2025 01:00:45 +0000 asID: 203 IP address blocks: 168.87.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:ff:12:d0:ce:d2:86:f0:c3:3e:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 17 01:00:45 2025 GMT Not After : Jul 16 01:00:45 2025 GMT Subject: CN=164d8896-8ec9-438c-8a5d-291f25fb250d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:05:33:ce:7d:44:4a:9e:27:7b:bb:dd:7c:36: bb:11:91:bc:aa:8f:53:97:ed:85:c5:73:32:3c:2c: 5d:1a:4f:e7:8c:67:81:06:b3:f3:f5:f4:cf:7f:8c: 1b:57:d5:79:c4:61:78:24:5d:57:3b:3a:21:d1:b6: 54:96:b2:97:5c:93:26:aa:0b:42:a0:ef:5a:68:27: 48:c4:0c:45:cb:84:af:75:48:fd:f1:3e:cf:f1:2e: 62:ba:45:ab:17:00:c9:2e:e9:00:08:2a:d1:e8:e4: a0:90:be:69:7c:09:67:26:f8:f9:37:ba:43:0e:c3: 2c:94:75:eb:59:4d:50:b2:83:11:7c:86:8a:76:46: c6:a9:4a:21:c5:bf:d2:7d:4f:3d:b5:92:99:50:18: d5:3e:51:52:52:21:26:b1:27:75:5f:38:e4:17:b4: fe:7d:60:65:56:c6:06:0f:0c:2b:e3:04:13:a9:0d: 0d:8d:20:5e:31:3f:ad:bd:60:74:ee:d6:01:47:63: 17:4c:d9:b3:c6:6e:ae:89:b3:88:ae:0c:df:61:71: 13:2f:02:52:80:5d:02:41:77:2a:b4:6e:57:25:0f: 77:04:97:f4:91:26:22:0a:47:c5:d1:ff:f7:e6:11: 60:52:79:56:b5:99:65:22:69:8c:1d:f7:0b:31:c3: 09:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:71:A4:11:20:DD:22:A9:0E:C9:E0:64:9F:6A:D4:AF:77:DB:DB:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e94bbb52-0d0b-3e8d-aca3-b8ad6f3f4ab5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:2d:d0:28:d6:bc:96:18:27:d7:bc:bd:69:45:7b:5f:c9:f4: b0:4e:82:2c:1f:0b:49:1d:42:a6:fe:dd:d1:5e:8e:ed:3d:35: 58:3b:d5:b0:a0:1a:03:57:f5:55:10:fe:85:3d:06:ee:6a:7b: e2:37:59:4c:51:7d:cf:7a:74:6f:45:92:46:0c:b9:dd:a5:d6: 7d:cd:bc:14:a4:4e:31:f1:a5:27:d0:ad:9e:53:b9:45:0c:7e: 6b:3c:33:a9:df:2d:62:2d:86:57:7f:af:c4:26:c5:ab:2b:d9: 29:b5:c9:21:a7:2d:f9:97:9e:be:72:4e:9d:10:60:90:66:d0: 50:53:35:d0:a8:f9:b3:93:93:87:45:c8:3d:97:4a:da:df:09: dc:78:89:aa:31:d9:10:32:a5:93:35:11:60:87:6b:38:23:02: 3d:68:97:9b:98:c1:8b:c8:77:ce:27:30:22:65:49:e9:f7:e4: 73:c7:6e:16:57:c3:c1:31:89:ca:56:0b:2e:26:83:55:06:5b: 72:42:8a:0e:67:01:1e:0a:f1:ca:87:2a:8f:48:bb:e7:aa:d6: ca:60:e2:63:84:e4:9e:3f:68:f5:8f:7a:94:00:40:18:93:41: e2:bf:5e:71:46:db:8a:ec:7d:a1:d0:27:da:53:3f:6d:3c:32: a5:4b:98:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmM/xLQztKG8MM+wYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk MTY0ZDg4OTYtOGVjOS00MzhjLThhNWQtMjkxZjI1ZmIyNTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgUzzn1ESp4ne7vdfDa7EZG8qo9Tl+2FxXMy PCxdGk/njGeBBrPz9fTPf4wbV9V5xGF4JF1XOzoh0bZUlrKXXJMmqgtCoO9aaCdI xAxFy4SvdUj98T7P8S5iukWrFwDJLukACCrR6OSgkL5pfAlnJvj5N7pDDsMslHXr WU1QsoMRfIaKdkbGqUohxb/SfU89tZKZUBjVPlFSUiEmsSd1XzjkF7T+fWBlVsYG Dwwr4wQTqQ0NjSBeMT+tvWB07tYBR2MXTNmzxm6uibOIrgzfYXETLwJSgF0CQXcq tG5XJQ93BJf0kSYiCkfF0f/35hFgUnlWtZllImmMHfcLMcMJhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNxxpBEg3SKpDsngZJ9q1K9329uuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZTk0YmJiNTItMGQwYi0z ZThkLWFjYTMtYjhhZDZmM2Y0YWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqFecMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAkt0CjWvJYYJ9e8vWlFe1/J9LBOgiwfC0kdQqb+3dFeju09NVg71bCg GgNX9VUQ/oU9Bu5qe+I3WUxRfc96dG9FkkYMud2l1n3NvBSkTjHxpSfQrZ5TuUUM fms8M6nfLWIthld/r8Qmxasr2Sm1ySGnLfmXnr5yTp0QYJBm0FBTNdCo+bOTk4dF yD2XStrfCdx4iaox2RAypZM1EWCHazgjAj1ol5uYwYvId84nMCJlSen35HPHbhZX w8ExicpWCy4mg1UGW3JCig5nAR4K8cqHKo9Iu+eq1spg4mOE5J4/aPWPepQAQBiT QeK/XnFG24rsfaHQJ9pTP208MqVLmHs= -----END CERTIFICATE-----Generated at Sat Apr 26 19:16:03 2025 by rpki-client