$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ef8d7cdf-a9c5-3d5e-bb2f-39647d41300b.roa File: ef8d7cdf-a9c5-3d5e-bb2f-39647d41300b.roa (raw, json) Hash identifier: O4Nx4rtu8eUNuLh9cpOJm4W/bOOrt8yyQDT7J8ObtGQ= Subject key identifier: 9C:85:0E:67:7A:30:50:B1:48:22:00:86:D0:79:47:E3:5C:B2:22:B8 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858498CFF1230E7789A5824829500 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ef8d7cdf-a9c5-3d5e-bb2f-39647d41300b.roa Signing time: Thu 17 Apr 2025 01:00:45 +0000 ROA not before: Thu 17 Apr 2025 01:00:45 +0000 ROA not after: Wed 16 Jul 2025 01:00:45 +0000 asID: 3356 IP address blocks: 168.87.146.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:ff:12:30:e7:78:9a:58:24:82:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 17 01:00:45 2025 GMT Not After : Jul 16 01:00:45 2025 GMT Subject: CN=ba46b9db-bb19-48c2-b23d-5b6519281ab8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:40:4e:14:ff:d4:f3:49:87:c5:30:90:f9:b2: f1:bf:19:c9:c7:fa:51:c1:64:d4:de:37:05:db:1e: 62:ce:67:f9:3f:f4:9d:3a:4d:b0:22:92:6d:dc:0a: 61:30:e0:52:25:cf:35:c0:96:97:72:97:cd:34:22: e9:b0:d1:e5:5a:af:67:b5:4b:17:cb:49:18:42:23: 50:91:7d:b0:a8:cf:69:c0:f2:ae:e1:ed:c7:fe:3e: 9c:70:8b:c1:46:11:4f:ba:ea:5d:7c:52:f2:73:aa: 8e:d4:72:b7:8f:2d:f1:69:8b:2d:aa:93:95:f2:21: 53:33:a6:c1:12:2e:77:c8:5e:cb:f6:f0:0b:37:a0: 7d:92:8e:4e:3c:5a:85:21:54:f2:45:20:74:0d:b8: 4b:3b:f6:05:92:b5:40:a6:f6:0f:fe:e6:73:9a:00: 1e:50:5a:15:e0:82:9e:ef:6f:1d:0d:c1:b2:5b:71: de:f3:4c:e8:e4:f0:0a:99:82:98:63:3d:6b:bf:d0: e9:65:b3:3c:d0:7c:ec:9a:ee:cc:a8:45:9f:2f:78: 03:5a:53:d2:46:ad:9b:19:bf:ae:09:2d:dc:f1:05: 7f:14:f0:36:b6:2a:2b:75:cc:db:a3:44:cf:8e:f9: dc:ee:bf:89:08:21:5c:dc:7b:f6:fb:8e:06:92:a4: 23:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:85:0E:67:7A:30:50:B1:48:22:00:86:D0:79:47:E3:5C:B2:22:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ef8d7cdf-a9c5-3d5e-bb2f-39647d41300b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.146.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:56:2a:a4:65:d6:60:b3:0b:c6:a9:a7:bb:45:ce:58:9a:5e: a8:01:ac:d9:e2:52:b4:41:12:91:d5:7a:c9:a7:4f:bc:93:f0: 60:dd:41:2a:7c:dd:eb:40:e1:0b:9d:39:b6:56:c8:d2:bd:db: be:39:04:d7:d8:c1:f1:e2:0d:dd:e8:4f:fe:1b:75:d6:05:47: 7b:c3:d3:c6:cc:30:14:d6:81:bc:8d:a2:3a:93:19:cd:67:1a: 33:39:5e:4c:61:a2:7f:aa:7a:66:63:74:f3:f9:e1:a8:13:a0: c9:d4:cd:63:5d:67:40:0f:d6:79:dd:f6:a3:b7:b6:87:c2:e2: 6c:51:65:12:fe:92:a0:f2:bc:b9:ee:0b:59:84:c1:cb:4f:3d: e5:30:fe:1d:b5:9a:db:9c:83:3c:11:ce:ab:b8:d1:d9:ed:b5: 63:7b:08:54:25:1a:c1:55:86:28:ca:46:67:e9:4a:19:05:7b: 3d:77:21:08:00:48:8f:f7:2b:5a:7a:16:d7:f9:70:ec:41:06: 0a:d6:17:b7:75:4c:65:72:fa:a8:5c:0e:61:b9:71:cd:f8:b8: 27:e8:d5:67:e8:23:1e:18:35:6a:7b:ec:e3:7a:81:3c:95:4e: b7:e3:10:70:fe:91:56:f6:f3:7c:dc:bf:25:a4:06:b8:13:cb: ea:c1:82:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmM/xIw53iaWCSClQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk YmE0NmI5ZGItYmIxOS00OGMyLWIyM2QtNWI2NTE5MjgxYWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEBOFP/U80mHxTCQ+bLxvxnJx/pRwWTU3jcF 2x5izmf5P/SdOk2wIpJt3AphMOBSJc81wJaXcpfNNCLpsNHlWq9ntUsXy0kYQiNQ kX2wqM9pwPKu4e3H/j6ccIvBRhFPuupdfFLyc6qO1HK3jy3xaYstqpOV8iFTM6bB Ei53yF7L9vALN6B9ko5OPFqFIVTyRSB0DbhLO/YFkrVApvYP/uZzmgAeUFoV4IKe 728dDcGyW3He80zo5PAKmYKYYz1rv9DpZbM80Hzsmu7MqEWfL3gDWlPSRq2bGb+u CS3c8QV/FPA2tiordczbo0TPjvnc7r+JCCFc3Hv2+44GkqQjWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJyFDmd6MFCxSCIAhtB5R+NcsiK4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZWY4ZDdjZGYtYTljNS0z ZDVlLWJiMmYtMzk2NDdkNDEzMDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqFeSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABZWKqRl1mCzC8app7tFzliaXqgBrNniUrRBEpHVesmnT7yT8GDdQSp8 3etA4QudObZWyNK92745BNfYwfHiDd3oT/4bddYFR3vD08bMMBTWgbyNojqTGc1n GjM5Xkxhon+qemZjdPP54agToMnUzWNdZ0AP1nnd9qO3tofC4mxRZRL+kqDyvLnu C1mEwctPPeUw/h21mtucgzwRzqu40dnttWN7CFQlGsFVhijKRmfpShkFez13IQgA SI/3K1p6Ftf5cOxBBgrWF7d1TGVy+qhcDmG5cc34uCfo1WfoIx4YNWp77ON6gTyV TrfjEHD+kVb283zcvyWkBrgTy+rBggQ= -----END CERTIFICATE-----Generated at Sat Apr 26 19:09:03 2025 by rpki-client