$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/db9a5c89-a8ed-3494-9c0c-50c19474fd10.roa File: db9a5c89-a8ed-3494-9c0c-50c19474fd10.roa (raw, json) Hash identifier: MqqlL+FaDDzAB6S2bqns9vqsWONxK0YtQxhFqsQgQTE= Subject key identifier: 28:B9:56:89:90:D1:9F:E2:83:D6:9A:5D:F8:EE:2B:81:CA:D7:BD:26 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285849AD1A1119A07E2E0C9AED6458 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/db9a5c89-a8ed-3494-9c0c-50c19474fd10.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 16509 IP address blocks: 168.87.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:11:19:a0:7e:2e:0c:9a:ed:64:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=a5f379f7-b869-44dc-a15a-5d323f1a5677 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d0:b8:92:f1:2b:5b:eb:6e:e9:f5:21:44:7c: 74:08:d6:a3:ea:41:5b:3a:4b:6a:9e:e4:2b:42:4e: dd:c1:30:b1:d7:62:bb:9e:0d:e2:47:26:ac:93:32: eb:39:41:c1:f0:43:e2:e7:c4:6a:4b:da:93:2b:5a: f9:e1:3a:9d:95:37:a7:91:2f:e2:aa:74:d7:fd:87: d8:22:a0:8d:6f:a9:df:a2:c1:91:4f:56:88:12:0f: 38:73:c3:42:0e:9d:44:62:79:75:6e:b1:b6:1d:f8: bd:19:67:bc:f5:dd:4c:ce:c7:26:cf:d2:d2:55:61: 62:97:cc:59:4f:e1:9f:cc:b4:ca:62:62:ec:d8:08: 79:0e:f3:bf:e3:97:27:fc:3c:f6:89:45:ed:a0:c4: b5:bb:b2:27:9f:d9:25:c6:75:f9:f7:94:59:8f:f9: e4:1f:09:0a:ca:c2:47:d8:b8:3f:7b:29:bb:ae:eb: ac:c9:7c:28:d8:fd:23:43:07:d0:b0:43:44:a4:99: b6:92:2f:bd:23:49:f2:cc:3e:0f:71:7a:7d:95:2a: 46:4c:4b:c6:e8:bd:2c:29:67:47:63:1f:30:ad:5b: b6:ac:a5:e0:7e:04:41:5a:dc:d7:70:65:b2:0c:ae: 42:8d:f5:e4:9c:74:b2:a1:de:c2:9d:c6:d8:0a:1c: d0:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:B9:56:89:90:D1:9F:E2:83:D6:9A:5D:F8:EE:2B:81:CA:D7:BD:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/db9a5c89-a8ed-3494-9c0c-50c19474fd10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:06:5a:eb:a2:d8:5e:f4:d1:e9:61:07:17:07:e0:cd:95:ac: 41:82:6b:96:76:5b:37:65:1b:c7:a4:81:23:6f:14:a2:f8:3f: de:ac:49:e1:11:e1:d7:18:70:dc:80:54:22:26:ea:02:68:d0: 06:c7:87:f8:30:03:2e:42:a6:ea:97:86:72:16:cc:99:08:a5: 62:28:6d:ff:30:3b:55:1d:98:8b:eb:bb:b8:9e:66:d3:50:a4: 1a:94:09:1f:02:28:d0:d9:6f:42:15:32:a8:b2:0a:e8:04:eb: 25:da:e0:42:c0:25:a7:69:69:96:01:64:b5:a0:ac:cf:fa:3d: 4f:e4:9f:02:1d:be:78:37:06:24:78:2b:5f:3a:be:1c:2b:bc: c7:28:b4:38:93:cb:42:a3:70:75:01:f5:8c:ee:fe:b3:b6:70: 94:21:da:80:99:cd:3c:36:f6:b7:9e:b1:a2:f7:a0:31:10:ce: 4d:ce:ef:f9:5c:c2:61:fa:c0:fa:cb:50:df:a4:f3:86:b8:5e: 47:d6:36:65:ba:06:06:76:4f:61:a9:29:c3:39:8f:8c:58:37: 39:e2:71:cf:12:3a:d0:58:8e:ec:36:64:71:fd:f5:e4:9a:23: 2d:61:d5:d0:4e:a6:04:4a:11:f9:cf:91:f8:50:fc:72:ff:a2: 3f:11:65:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmtGhEZoH4uDJrtZFgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk YTVmMzc5ZjctYjg2OS00NGRjLWExNWEtNWQzMjNmMWE1Njc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tC4kvErW+tu6fUhRHx0CNaj6kFbOktqnuQr Qk7dwTCx12K7ng3iRyaskzLrOUHB8EPi58RqS9qTK1r54TqdlTenkS/iqnTX/YfY IqCNb6nfosGRT1aIEg84c8NCDp1EYnl1brG2Hfi9GWe89d1Mzscmz9LSVWFil8xZ T+GfzLTKYmLs2Ah5DvO/45cn/Dz2iUXtoMS1u7Inn9klxnX595RZj/nkHwkKysJH 2Lg/eym7ruusyXwo2P0jQwfQsENEpJm2ki+9I0nyzD4PcXp9lSpGTEvG6L0sKWdH Yx8wrVu2rKXgfgRBWtzXcGWyDK5CjfXknHSyod7CncbYChzQVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCi5VomQ0Z/ig9aaXfjuK4HK170mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZGI5YTVjODktYThlZC0z NDk0LTljMGMtNTBjMTk0NzRmZDEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFccMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADIGWuui2F700elhBxcH4M2VrEGCa5Z2WzdlG8ekgSNvFKL4P96sSeER 4dcYcNyAVCIm6gJo0AbHh/gwAy5CpuqXhnIWzJkIpWIobf8wO1UdmIvru7ieZtNQ pBqUCR8CKNDZb0IVMqiyCugE6yXa4ELAJadpaZYBZLWgrM/6PU/knwIdvng3BiR4 K186vhwrvMcotDiTy0KjcHUB9Yzu/rO2cJQh2oCZzTw29reesaL3oDEQzk3O7/lc wmH6wPrLUN+k84a4XkfWNmW6BgZ2T2GpKcM5j4xYNznicc8SOtBYjuw2ZHH99eSa Iy1h1dBOpgRKEfnPkfhQ/HL/oj8RZaE= -----END CERTIFICATE-----Generated at Mon May 5 08:11:42 2025 by rpki-client