$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1e7a122e-8f96-3840-9f7c-661fb9a52a75.roa File: 1e7a122e-8f96-3840-9f7c-661fb9a52a75.roa (raw, json) Hash identifier: rbYwxN1PuV+0KwwXLs4W6jPIR+dadM/lkhqYYgQ55zA= Subject key identifier: 4D:F7:9A:09:0E:D1:49:09:CB:DE:41:BE:87:C1:E8:36:01:8E:D9:9D Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584A0C056A74A454A4D817070700 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1e7a122e-8f96-3840-9f7c-661fb9a52a75.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 203 IP address blocks: 15.176.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:6a:74:a4:54:a4:d8:17:07:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=25f81ad5-fb1f-4147-b2d8-bae768c6dbf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:db:b1:fd:30:90:73:02:3f:ea:b6:c1:d6:1f: a0:b6:7e:bb:ed:d4:be:4f:6b:f1:72:e5:eb:e4:cb: 42:43:65:b9:e4:cd:dd:23:62:28:0f:b1:10:66:d6: a9:8a:d5:af:98:1c:38:d7:e0:aa:92:9a:53:a2:a1: 5e:ce:b6:84:c0:1c:fe:ad:6c:a0:3b:d9:51:df:60: c6:27:39:52:05:34:56:fc:cb:53:31:69:e3:d2:89: 36:f1:59:a1:17:ff:bb:7f:10:1b:7b:b9:29:75:17: 30:2b:db:29:9d:fd:12:5c:6e:74:97:ee:ed:67:b3: 7d:e4:ca:16:ef:5d:bb:a6:61:01:6c:82:a6:cb:26: 86:ec:57:bc:a9:fd:7d:9f:52:f8:e9:c6:96:1c:19: 6e:55:fe:f4:82:65:45:e3:d8:6e:ac:92:08:f7:56: ff:3e:17:f9:c1:9d:6e:9b:68:89:89:5d:93:85:69: 8d:ba:ca:28:fd:5b:0b:e7:fb:85:80:6e:b5:43:7f: 7f:06:be:e5:bd:5d:f5:3c:2c:f8:58:3a:ac:59:d3: e7:52:f8:03:bd:42:6c:27:7a:73:af:bb:92:3f:de: 52:70:97:c5:71:0d:dc:ff:c4:74:e2:2e:e1:01:83: 79:e7:e5:3a:91:43:d2:1d:68:ca:6b:8a:ff:f6:df: 70:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:F7:9A:09:0E:D1:49:09:CB:DE:41:BE:87:C1:E8:36:01:8E:D9:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1e7a122e-8f96-3840-9f7c-661fb9a52a75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 15.176.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:f8:03:74:30:ae:78:19:eb:63:c6:e5:90:b0:a0:09:57:c5: 02:d2:4d:65:0a:0c:fe:6f:cc:a4:d0:fc:f2:8c:5c:b8:6f:57: 79:74:c5:29:2f:96:d0:4f:08:93:54:9b:10:84:69:f3:97:d6: ee:0f:10:2a:6e:8f:4a:c3:84:c2:ea:c4:70:9e:8a:c1:79:43: f4:74:ab:c3:ee:e4:e9:bf:b8:86:32:72:b3:5b:17:f2:4c:4d: d0:18:ff:e0:38:38:8a:c5:50:bc:f8:47:44:2d:ed:8f:71:45: 5e:af:e3:85:ca:53:ea:4a:e6:8e:9b:bd:1a:3b:ee:ac:9b:db: 8b:fd:c4:b8:80:52:a4:24:a5:f8:ee:97:b8:db:c8:80:b8:d7: b5:7f:f4:07:1d:f1:48:68:de:cf:38:b2:d2:63:d7:a3:f3:ba: ce:88:44:f0:64:ab:b6:3e:f1:82:df:56:20:06:58:0a:f4:b5: 1b:14:80:45:fb:0d:1c:b0:3b:4b:01:38:01:06:46:32:0a:ea: 84:ab:b3:2d:67:47:39:43:2a:d5:43:ae:87:9d:44:c7:c1:22: 3e:9a:35:cc:7c:1f:0b:86:37:a2:37:d2:2f:72:76:f4:7a:dc: 87:ba:27:b8:ac:1e:91:83:95:2f:c6:04:5b:21:0f:c8:65:57: 34:12:9a:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBWp0pFSk2BcHBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk MjVmODFhZDUtZmIxZi00MTQ3LWIyZDgtYmFlNzY4YzZkYmY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdux/TCQcwI/6rbB1h+gtn677dS+T2vxcuXr 5MtCQ2W55M3dI2IoD7EQZtapitWvmBw41+CqkppToqFezraEwBz+rWygO9lR32DG JzlSBTRW/MtTMWnj0ok28VmhF/+7fxAbe7kpdRcwK9spnf0SXG50l+7tZ7N95MoW 7127pmEBbIKmyyaG7Fe8qf19n1L46caWHBluVf70gmVF49hurJII91b/Phf5wZ1u m2iJiV2ThWmNusoo/VsL5/uFgG61Q39/Br7lvV31PCz4WDqsWdPnUvgDvUJsJ3pz r7uSP95ScJfFcQ3c/8R04i7hAYN55+U6kUPSHWjKa4r/9t9wuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE33mgkO0UkJy95BvofB6DYBjtmdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMWU3YTEyMmUtOGY5Ni0z ODQwLTlmN2MtNjYxZmI5YTUyYTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQED7AgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHH4A3QwrngZ62PG5ZCwoAlXxQLSTWUKDP5vzKTQ/PKMXLhvV3l0xSkv ltBPCJNUmxCEafOX1u4PECpuj0rDhMLqxHCeisF5Q/R0q8Pu5Om/uIYycrNbF/JM TdAY/+A4OIrFULz4R0Qt7Y9xRV6v44XKU+pK5o6bvRo77qyb24v9xLiAUqQkpfju l7jbyIC417V/9Acd8Uho3s84stJj16Pzus6IRPBkq7Y+8YLfViAGWAr0tRsUgEX7 DRywO0sBOAEGRjIK6oSrsy1nRzlDKtVDroedRMfBIj6aNcx8HwuGN6I30i9ydvR6 3Ie6J7isHpGDlS/GBFshD8hlVzQSmpA= -----END CERTIFICATE-----Generated at Tue Jul 1 05:58:51 2025 by rpki-client