$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/48529b48-e02e-3ba6-87a0-38a733adde1c.roa File: 48529b48-e02e-3ba6-87a0-38a733adde1c.roa (raw, json) Hash identifier: z8A3E9s8PeHWtZRC7BE6a8bexXCNJFHSPHkJFNcNR/4= Subject key identifier: 79:88:DE:BA:D0:2C:25:41:60:02:82:76:F1:B4:D9:C4:54:FA:CF:45 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285849F17FD59C4D05732DFDE057F4 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/48529b48-e02e-3ba6-87a0-38a733adde1c.roa Signing time: Fri 23 May 2025 01:00:49 +0000 ROA not before: Fri 23 May 2025 01:00:49 +0000 ROA not after: Thu 21 Aug 2025 01:00:49 +0000 asID: 203 IP address blocks: 168.87.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:7f:d5:9c:4d:05:73:2d:fd:e0:57:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: May 23 01:00:49 2025 GMT Not After : Aug 21 01:00:49 2025 GMT Subject: CN=4b7839bc-29b2-42b7-b2dd-d7a7a5a7f899 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6a:de:c2:26:2e:56:d4:c1:3d:cf:22:e3:50: 1e:9e:1f:0e:82:1d:a3:81:6f:9b:0a:5a:c3:f5:5c: 9c:bb:dc:de:b3:5b:18:e2:fd:cd:4e:9e:82:a2:f5: 33:bb:3e:eb:94:42:cc:85:79:86:a3:33:f2:85:8a: 92:69:41:8a:5d:de:12:d9:62:e5:a8:19:3e:59:af: 00:f5:39:58:d0:a4:2c:f7:d9:be:d6:50:63:54:b8: 97:e9:a7:27:d6:02:cc:22:5e:69:f3:9a:e3:a2:d6: 7f:63:f2:80:1c:f9:f5:a0:0b:f1:33:33:5d:0a:a0: 48:d5:aa:39:1e:90:07:77:1f:d6:6f:11:4b:61:3c: 19:8c:4a:89:44:98:f0:33:54:d7:0d:e8:8a:8c:19: 1a:ce:aa:8c:83:bd:5d:d9:74:fa:02:fd:f2:7a:79: 69:d8:60:e5:dd:67:f2:0b:ee:cc:b6:0a:74:53:ff: 35:86:83:d6:11:81:05:81:48:56:70:b0:7a:54:af: 91:6e:dc:79:29:6d:72:77:6f:62:49:96:cd:68:2b: c1:2e:a7:07:6c:8d:a9:3f:c2:b1:04:59:e8:ee:85: e9:7d:9b:3c:23:f3:6d:21:fb:8c:33:f0:31:bc:3b: 3e:1c:8f:6c:71:5d:79:22:a6:bd:3a:11:d6:14:aa: 32:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:88:DE:BA:D0:2C:25:41:60:02:82:76:F1:B4:D9:C4:54:FA:CF:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/48529b48-e02e-3ba6-87a0-38a733adde1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:fd:d6:35:14:58:44:00:00:78:71:55:d3:2e:31:fd:06:8d: 39:6f:27:4a:2d:7a:06:7f:dc:85:9a:60:ab:ef:98:c7:5e:29: 54:eb:35:0e:a6:95:be:f2:93:7b:12:db:a7:6d:6c:13:63:09: 81:2a:6e:74:49:dd:04:e8:e8:1a:3f:22:9c:33:f0:a5:0e:d8: d6:e4:0e:04:ab:9c:88:85:e5:e2:7f:0b:b6:d8:a4:ea:3d:ad: f2:ab:f4:67:be:05:d7:8f:36:9b:19:02:5d:fc:94:a4:a2:f7: b7:47:7d:81:c4:84:89:8f:d1:8b:b2:45:f4:c1:d2:70:0e:98: 58:f1:d1:5d:4f:67:94:c5:53:61:a2:6b:40:c4:0f:36:e0:cd: 66:11:4e:91:63:23:1c:cf:b7:1b:3f:8f:a6:65:eb:08:2f:8d: fb:90:20:bb:22:90:ef:5d:d0:fa:27:78:aa:be:62:e0:14:25: f8:4b:25:ad:92:07:85:4a:12:1d:37:cc:6f:33:f0:1f:6c:50: 8a:2b:5c:8c:62:34:19:35:97:30:98:11:34:c8:fd:bf:c3:c0: a1:06:06:d2:2e:fa:a3:23:75:bb:bf:d5:d4:c2:d4:11:d2:1d: f8:9d:2d:94:f3:cc:36:2a:93:89:3d:29:2d:ba:28:4b:71:7c: 33:f3:f5:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxf9WcTQVzLf3gV/QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk NGI3ODM5YmMtMjliMi00MmI3LWIyZGQtZDdhN2E1YTdmODk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmrewiYuVtTBPc8i41Aenh8Ogh2jgW+bClrD 9Vycu9zes1sY4v3NTp6CovUzuz7rlELMhXmGozPyhYqSaUGKXd4S2WLlqBk+Wa8A 9TlY0KQs99m+1lBjVLiX6acn1gLMIl5p85rjotZ/Y/KAHPn1oAvxMzNdCqBI1ao5 HpAHdx/WbxFLYTwZjEqJRJjwM1TXDeiKjBkazqqMg71d2XT6Av3yenlp2GDl3Wfy C+7Mtgp0U/81hoPWEYEFgUhWcLB6VK+Rbtx5KW1yd29iSZbNaCvBLqcHbI2pP8Kx BFno7oXpfZs8I/NtIfuMM/AxvDs+HI9scV15Iqa9OhHWFKoy/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHmI3rrQLCVBYAKCdvG02cRU+s9FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNDg1MjliNDgtZTAyZS0z YmE2LTg3YTAtMzhhNzMzYWRkZTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqFeIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADb91jUUWEQAAHhxVdMuMf0GjTlvJ0otegZ/3IWaYKvvmMdeKVTrNQ6m lb7yk3sS26dtbBNjCYEqbnRJ3QTo6Bo/Ipwz8KUO2NbkDgSrnIiF5eJ/C7bYpOo9 rfKr9Ge+BdePNpsZAl38lKSi97dHfYHEhImP0YuyRfTB0nAOmFjx0V1PZ5TFU2Gi a0DEDzbgzWYRTpFjIxzPtxs/j6Zl6wgvjfuQILsikO9d0PoneKq+YuAUJfhLJa2S B4VKEh03zG8z8B9sUIorXIxiNBk1lzCYETTI/b/DwKEGBtIu+qMjdbu/1dTC1BHS HfidLZTzzDYqk4k9KS26KEtxfDPz9dw= -----END CERTIFICATE-----Generated at Mon Jun 30 20:29:54 2025 by rpki-client