$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/eb8aa76e-7d88-310f-a8ab-eda0f9fe0a8d.roa File: eb8aa76e-7d88-310f-a8ab-eda0f9fe0a8d.roa (raw, json) Hash identifier: 9OAJG0pE63rXIOBmkG0LvFLr6wDmTODrcWowz2fJFk8= Subject key identifier: 1C:3F:23:04:3B:E1:50:1F:20:A4:22:AF:65:1C:7E:3C:04:5A:13:B3 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285849AD1A110B086FC7C7BE101280 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/eb8aa76e-7d88-310f-a8ab-eda0f9fe0a8d.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 14618 IP address blocks: 168.87.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:11:0b:08:6f:c7:c7:be:10:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=bc6598fd-f54a-4538-8684-9ec6614757e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:02:a1:96:fe:51:56:bf:37:bf:87:3f:5e:c3: 1b:99:a3:71:7c:a2:de:28:7c:7d:b6:90:cd:cd:08: 1d:22:cb:df:0c:d5:20:6d:89:48:00:de:d8:6f:84: 1c:4c:12:f6:cd:f3:a8:47:ab:b4:50:fb:de:2b:e4: 42:1a:ef:25:65:a9:5e:3c:4e:a5:15:72:69:05:da: 9b:74:b4:d2:3b:13:9b:05:7f:38:1a:71:ca:c8:1f: a7:84:0f:cd:a5:23:09:45:7f:b7:3c:d3:95:2d:2b: fc:8a:60:02:1e:4c:f4:52:95:20:2a:e6:99:c8:99: 58:57:0f:a7:2d:ba:22:d7:63:9b:eb:06:f3:5f:5b: ba:21:05:22:6f:98:d2:70:9b:dc:af:26:78:f9:84: a1:02:9a:ff:2c:e7:2f:27:1d:53:c4:e6:78:48:6c: 1d:b4:8f:21:25:26:76:01:5e:c8:37:dc:90:1c:8e: 96:4d:b4:87:e9:e2:b8:ae:87:d0:e7:47:a3:3a:bb: 01:bf:02:ed:85:b4:93:f2:41:c6:f9:c1:54:d0:d2: db:4e:36:25:5b:6c:cb:1f:5e:55:51:ab:8c:ac:02: f9:3e:bf:1c:c5:8e:00:d1:71:20:9c:f4:17:49:32: f5:9e:ee:8e:57:d2:aa:7a:34:f4:83:fe:e8:41:fe: 9c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:3F:23:04:3B:E1:50:1F:20:A4:22:AF:65:1C:7E:3C:04:5A:13:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/eb8aa76e-7d88-310f-a8ab-eda0f9fe0a8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:a0:1c:8f:b3:58:48:5d:7f:5c:dc:1d:79:55:1f:5f:d4:81: d0:0e:80:cd:7c:79:7b:7f:4f:5c:83:52:31:c0:b3:fb:54:79: 67:f5:20:22:8e:2c:8b:de:3e:bf:bc:c1:30:db:fe:60:d5:2d: aa:73:21:1a:84:a5:2f:b8:d4:0c:af:6d:95:30:23:04:07:3b: c9:5b:66:be:3c:6d:c4:c2:60:78:6a:e0:58:3b:6a:aa:3c:1f: c6:d4:06:b3:c3:20:35:09:22:f5:97:4c:35:e6:a4:6c:71:92: 14:cf:43:41:06:82:ee:62:f8:fd:90:ce:9f:db:4e:bf:7e:ff: 14:1e:6a:18:37:bc:3c:9b:81:bb:02:2f:49:f4:a9:4b:c8:56: b5:e4:ca:f5:06:e1:99:2d:d1:b4:31:ee:93:f5:89:14:db:d8: 85:e3:26:db:22:42:28:a8:a8:dc:e2:18:28:81:0c:fa:e2:20: 3f:b1:c9:bc:67:5c:44:51:ce:c0:b3:91:6e:81:c2:43:50:4a: 9d:1d:02:0a:74:1c:a5:bd:5f:12:c5:e8:65:46:9b:0f:38:c2: 46:d4:54:55:7a:b9:42:29:60:b7:8a:51:c7:43:e9:9c:1a:12: 1d:18:14:d7:13:d0:9d:0f:0a:01:eb:09:70:01:de:d5:1e:a5: 2a:c2:9b:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmtGhELCG/Hx74QEoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk YmM2NTk4ZmQtZjU0YS00NTM4LTg2ODQtOWVjNjYxNDc1N2UxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQKhlv5RVr83v4c/XsMbmaNxfKLeKHx9tpDN zQgdIsvfDNUgbYlIAN7Yb4QcTBL2zfOoR6u0UPveK+RCGu8lZalePE6lFXJpBdqb dLTSOxObBX84GnHKyB+nhA/NpSMJRX+3PNOVLSv8imACHkz0UpUgKuaZyJlYVw+n Lboi12Ob6wbzX1u6IQUib5jScJvcryZ4+YShApr/LOcvJx1TxOZ4SGwdtI8hJSZ2 AV7IN9yQHI6WTbSH6eK4rofQ50ejOrsBvwLthbST8kHG+cFU0NLbTjYlW2zLH15V UauMrAL5Pr8cxY4A0XEgnPQXSTL1nu6OV9KqejT0g/7oQf6cfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBw/IwQ74VAfIKQir2UcfjwEWhOzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZWI4YWE3NmUtN2Q4OC0z MTBmLWE4YWItZWRhMGY5ZmUwYThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFccMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJugHI+zWEhdf1zcHXlVH1/UgdAOgM18eXt/T1yDUjHAs/tUeWf1ICKO LIvePr+8wTDb/mDVLapzIRqEpS+41AyvbZUwIwQHO8lbZr48bcTCYHhq4Fg7aqo8 H8bUBrPDIDUJIvWXTDXmpGxxkhTPQ0EGgu5i+P2Qzp/bTr9+/xQeahg3vDybgbsC L0n0qUvIVrXkyvUG4Zkt0bQx7pP1iRTb2IXjJtsiQiioqNziGCiBDPriID+xybxn XERRzsCzkW6BwkNQSp0dAgp0HKW9XxLF6GVGmw84wkbUVFV6uUIpYLeKUcdD6Zwa Eh0YFNcT0J0PCgHrCXAB3tUepSrCmyQ= -----END CERTIFICATE-----Generated at Wed May 7 08:38:28 2025 by rpki-client