$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f7b850e2-2e5a-344f-98bc-404bef00ba9c.roa File: f7b850e2-2e5a-344f-98bc-404bef00ba9c.roa (raw, json) Hash identifier: QJta8WGm2/n59J8l1sBn2qVZCvwiAHhGAAJmU1rCBPg= Subject key identifier: C0:D6:3E:4F:87:F6:3B:37:1E:F8:E7:4C:29:94:4B:68:77:62:4C:28 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858494733E77DF42C1054683C4880 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f7b850e2-2e5a-344f-98bc-404bef00ba9c.roa Signing time: Sun 23 Mar 2025 01:00:39 +0000 ROA not before: Sun 23 Mar 2025 01:00:39 +0000 ROA not after: Sat 21 Jun 2025 01:00:39 +0000 asID: 3360 IP address blocks: 168.87.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:47:33:e7:7d:f4:2c:10:54:68:3c:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 23 01:00:39 2025 GMT Not After : Jun 21 01:00:39 2025 GMT Subject: CN=bad31ce9-872d-4ca7-b8d7-0baa03e577ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:5a:0d:a6:c9:8f:2e:97:61:e1:4e:6d:ff:c6: ed:35:5c:ba:4a:3f:a0:58:ad:c9:ad:fc:76:7e:bb: 17:12:ab:aa:59:01:c5:9b:ea:9f:c4:cd:5d:01:0e: 9c:78:db:93:69:08:31:30:3e:76:49:3d:f7:d2:57: 74:c3:13:f6:41:0d:da:50:c5:c6:f8:f1:8f:e9:9f: 50:69:28:82:95:7a:ad:8f:8f:d6:79:79:c4:97:bd: d8:a1:16:30:a7:57:76:40:ed:b5:ce:32:1b:72:d6: d8:fb:0f:e3:80:30:b8:a1:4a:45:75:71:8c:4a:27: f4:fb:2e:df:e2:9c:d3:47:b4:ac:8d:4e:b4:24:39: db:29:17:9d:a9:65:76:a0:08:f9:68:5c:a5:da:f7: df:8d:94:b7:e5:cd:06:69:bd:93:1c:9d:30:3a:6d: 41:bc:91:4c:c4:06:63:3c:9c:3e:fe:ec:f3:d3:1d: 62:80:d1:05:6f:f9:78:a9:f1:ae:78:65:21:7c:c8: 1f:37:9d:67:64:10:db:28:6b:be:78:24:f5:ab:e5: b5:07:20:eb:16:36:26:03:d6:3e:b7:18:e1:ce:9f: e7:a6:f9:cc:49:ca:8f:60:38:1b:14:46:03:8d:2c: 86:49:a4:cb:bc:a2:67:5e:5c:fa:c6:b8:b5:2c:2f: 78:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:D6:3E:4F:87:F6:3B:37:1E:F8:E7:4C:29:94:4B:68:77:62:4C:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f7b850e2-2e5a-344f-98bc-404bef00ba9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.55.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:11:ff:c2:17:1a:58:f1:93:41:b8:98:1a:53:90:1b:07:e4: 10:c0:1b:6c:68:a0:19:5d:e2:17:27:22:de:ce:45:b0:e6:1f: 46:6a:6a:fd:cc:93:9f:5a:d9:02:a8:96:41:1f:e8:4b:5e:69: ea:51:c2:9e:70:89:84:cc:bf:39:a1:7f:91:83:a6:22:3c:09: 0c:21:c7:c3:6e:80:a3:0c:4c:d6:75:bf:03:73:a0:c3:2b:06: ea:27:88:48:8c:0a:4c:3b:d5:49:dc:41:ff:62:89:38:e3:63: 4a:b6:4c:d3:a9:de:5f:5d:60:31:a4:ae:e0:9c:a6:44:26:ae: c8:2d:95:ab:ff:45:e2:3b:d2:5f:8b:dc:e2:0a:5a:95:7a:7c: ad:aa:8e:3f:4e:2f:7e:96:87:b4:c1:37:ff:d4:0d:18:19:10: 4a:f9:a1:97:c0:83:c2:78:d5:bd:35:d6:8d:74:db:7c:b0:64: f3:86:90:df:cb:d6:af:fc:cc:a9:8d:58:8b:72:5f:f6:af:ae: 71:f1:3f:ca:54:5a:fb:4c:38:f3:f2:bb:f9:3d:0a:fc:eb:a8: dc:41:23:9a:94:d4:63:d1:aa:05:77:e4:64:48:c6:1e:a9:8f: f7:d6:b0:13:53:5c:de:e1:93:8e:10:da:39:da:4c:3d:19:14: f0:17:b3:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElHM+d99CwQVGg8SIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDMyMzAxMDAzOVoXDTI1MDYyMTAxMDAzOVowLzEtMCsGA1UEAxMk YmFkMzFjZTktODcyZC00Y2E3LWI4ZDctMGJhYTAzZTU3N2FkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1oNpsmPLpdh4U5t/8btNVy6Sj+gWK3Jrfx2 frsXEquqWQHFm+qfxM1dAQ6ceNuTaQgxMD52ST330ld0wxP2QQ3aUMXG+PGP6Z9Q aSiClXqtj4/WeXnEl73YoRYwp1d2QO21zjIbctbY+w/jgDC4oUpFdXGMSif0+y7f 4pzTR7SsjU60JDnbKRedqWV2oAj5aFyl2vffjZS35c0Gab2THJ0wOm1BvJFMxAZj PJw+/uzz0x1igNEFb/l4qfGueGUhfMgfN51nZBDbKGu+eCT1q+W1ByDrFjYmA9Y+ txjhzp/npvnMScqPYDgbFEYDjSyGSaTLvKJnXlz6xri1LC94owIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMDWPk+H9js3HvjnTCmUS2h3YkwoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZjdiODUwZTItMmU1YS0z NDRmLTk4YmMtNDA0YmVmMDBiYTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFc3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADAR/8IXGljxk0G4mBpTkBsH5BDAG2xooBld4hcnIt7ORbDmH0Zqav3M k59a2QKolkEf6EteaepRwp5wiYTMvzmhf5GDpiI8CQwhx8NugKMMTNZ1vwNzoMMr BuoniEiMCkw71UncQf9iiTjjY0q2TNOp3l9dYDGkruCcpkQmrsgtlav/ReI70l+L 3OIKWpV6fK2qjj9OL36Wh7TBN//UDRgZEEr5oZfAg8J41b011o1023ywZPOGkN/L 1q/8zKmNWItyX/avrnHxP8pUWvtMOPPyu/k9CvzrqNxBI5qU1GPRqgV35GRIxh6p j/fWsBNTXN7hk44Q2jnaTD0ZFPAXs2M= -----END CERTIFICATE-----Generated at Sun Apr 27 02:09:10 2025 by rpki-client