$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5847517f-210b-3788-9466-d5cb48274a43.roa File: 5847517f-210b-3788-9466-d5cb48274a43.roa (raw, json) Hash identifier: 2GsXAkyn++uMVM0KQXgN7Imq+uKVXDIS2E9D+7T8Nz0= Subject key identifier: 21:C1:B6:DB:75:7F:7D:6E:C3:0E:E5:24:39:DD:4B:99:51:C0:BC:60 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285849CBCFA0E7D7A6D367A947FA00 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5847517f-210b-3788-9466-d5cb48274a43.roa Signing time: Fri 09 May 2025 13:01:00 +0000 ROA not before: Fri 09 May 2025 13:01:00 +0000 ROA not after: Thu 07 Aug 2025 13:01:00 +0000 asID: 3356 IP address blocks: 168.87.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cb:cf:a0:e7:d7:a6:d3:67:a9:47:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: May 9 13:01:00 2025 GMT Not After : Aug 7 13:01:00 2025 GMT Subject: CN=f918e07b-3677-48d0-8c32-3d7450796977 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:d7:31:7a:b0:f8:e9:ba:22:59:b7:99:95:1f: 09:40:58:5c:e4:19:42:de:a4:7f:af:cb:1e:7d:ee: 5a:1a:39:3d:04:1b:a6:32:a6:22:77:49:c7:ff:d9: df:a6:0f:b3:dd:37:f1:d8:04:ca:27:de:79:0e:2f: c9:fa:fd:40:a8:d9:1d:cf:cf:d3:a1:34:8b:ad:a1: 64:be:82:a1:51:26:3e:5c:48:c9:6d:c6:48:1c:a0: bf:40:79:6e:be:e7:d2:b9:24:08:3b:c0:59:63:6b: e6:6b:1f:18:61:38:04:c9:c9:f5:2a:f7:b9:4e:0c: bf:ed:4c:58:dc:74:7b:39:ac:49:b7:d0:51:ad:85: 45:c5:61:8b:b9:bd:61:8a:7f:8f:3a:4d:46:8f:01: dc:d2:9f:15:1e:46:05:7b:e7:b3:95:08:b7:ef:57: 84:7b:69:f3:1c:a3:a4:17:30:a0:bd:66:fa:39:3b: 18:2f:71:1e:eb:f6:ab:10:84:36:a6:c9:6c:02:6a: 1f:8c:91:b3:5c:f2:d7:7a:dc:29:0a:49:d7:a6:62: 3c:29:53:a9:6e:36:88:af:93:c7:8c:b5:7a:5b:46: 2e:5f:67:58:0e:fb:f6:2b:08:b5:aa:02:72:3c:6e: e6:45:03:26:9a:f5:9f:6f:48:84:7b:d2:47:a8:27: 04:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:C1:B6:DB:75:7F:7D:6E:C3:0E:E5:24:39:DD:4B:99:51:C0:BC:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5847517f-210b-3788-9466-d5cb48274a43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:ff:ea:4f:a6:be:07:8a:c9:b1:1d:09:dc:ee:75:e3:b3:08: 91:4b:20:0d:f3:01:3b:9e:02:49:00:67:01:a9:95:33:73:82: b9:d1:2b:df:e9:8e:46:39:51:ac:86:76:07:f7:90:79:32:c0: e5:46:32:72:b0:58:22:37:c2:86:bc:9e:76:74:27:8c:71:74: 2b:de:26:f8:6d:f8:a9:c1:c0:74:12:66:a0:a6:87:89:e5:44: 94:9b:df:92:ff:9e:fe:14:3b:44:14:39:ea:2a:f8:73:08:33: 43:41:8c:e6:0e:b8:e5:5c:cd:a0:94:b7:14:16:0b:28:ad:84: 03:fd:3b:92:52:d3:cb:be:d6:8c:2d:60:3f:57:86:ae:66:6f: 85:83:20:04:67:16:9c:86:54:5f:ff:dd:f1:85:d0:fb:25:2d: 0f:ad:ad:59:b0:dd:89:cb:b7:87:d2:b9:f4:5d:17:e1:46:13: 49:63:2f:11:01:09:83:06:75:b2:d5:c2:9f:93:bf:61:e1:5c: 44:15:ac:b7:44:a9:73:01:3d:9f:be:c5:ee:f6:33:c3:da:9f: 05:86:99:9f:98:7b:8f:61:46:e6:15:d4:34:6c:d5:a6:c8:c2: 3e:40:0b:14:25:b7:1b:be:cf:c4:06:98:8c:70:31:21:39:e0: fe:40:9b:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnLz6Dn16bTZ6lH+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDUwOTEzMDEwMFoXDTI1MDgwNzEzMDEwMFowLzEtMCsGA1UEAxMk ZjkxOGUwN2ItMzY3Ny00OGQwLThjMzItM2Q3NDUwNzk2OTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdcxerD46boiWbeZlR8JQFhc5BlC3qR/r8se fe5aGjk9BBumMqYid0nH/9nfpg+z3Tfx2ATKJ955Di/J+v1AqNkdz8/ToTSLraFk voKhUSY+XEjJbcZIHKC/QHluvufSuSQIO8BZY2vmax8YYTgEycn1Kve5Tgy/7UxY 3HR7OaxJt9BRrYVFxWGLub1hin+POk1GjwHc0p8VHkYFe+ezlQi371eEe2nzHKOk FzCgvWb6OTsYL3Ee6/arEIQ2pslsAmofjJGzXPLXetwpCknXpmI8KVOpbjaIr5PH jLV6W0YuX2dYDvv2Kwi1qgJyPG7mRQMmmvWfb0iEe9JHqCcEfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCHBttt1f31uww7lJDndS5lRwLxgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNTg0NzUxN2YtMjEwYi0z Nzg4LTk0NjYtZDVjYjQ4Mjc0YTQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqFcIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHz/6k+mvgeKybEdCdzudeOzCJFLIA3zATueAkkAZwGplTNzgrnRK9/p jkY5UayGdgf3kHkywOVGMnKwWCI3woa8nnZ0J4xxdCveJvht+KnBwHQSZqCmh4nl RJSb35L/nv4UO0QUOeoq+HMIM0NBjOYOuOVczaCUtxQWCyithAP9O5JS08u+1owt YD9Xhq5mb4WDIARnFpyGVF//3fGF0PslLQ+trVmw3YnLt4fSufRdF+FGE0ljLxEB CYMGdbLVwp+Tv2HhXEQVrLdEqXMBPZ++xe72M8PanwWGmZ+Ye49hRuYV1DRs1abI wj5ACxQltxu+z8QGmIxwMSE54P5Am64= -----END CERTIFICATE-----Generated at Tue May 13 14:15:00 2025 by rpki-client