$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/48529b48-e02e-3ba6-87a0-38a733adde1c.roa File: 48529b48-e02e-3ba6-87a0-38a733adde1c.roa (raw, json) Hash identifier: xBL3kAk/ytYezPPSlBsxoBeAZ+lQC+/DiLaHZAgiQ0A= Subject key identifier: D3:42:D7:F5:D4:2F:00:33:64:29:8A:33:9A:73:8C:13:12:A7:4F:A9 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584AD23BD6E6CC8EDABFCE7EBB00 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/48529b48-e02e-3ba6-87a0-38a733adde1c.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 203 IP address blocks: 168.87.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:d6:e6:cc:8e:da:bf:ce:7e:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=5fb06277-7d1b-4143-bdd9-438534120c17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:6e:34:68:11:87:23:3b:ec:bd:0c:2c:df:06: 4e:80:07:d2:74:4c:36:0a:99:d6:1a:03:3b:d5:9f: 84:63:5c:e9:bd:ce:73:8b:33:aa:37:b8:76:fb:9e: 14:ea:1b:7b:92:be:44:84:9c:e7:78:0f:08:ea:2f: ef:2c:85:0a:39:36:ae:91:ed:b9:b6:6a:2b:8c:a1: 50:ec:d3:f4:2e:e8:0b:7a:d1:f7:23:b4:7d:30:23: 1c:40:45:64:cc:34:73:e7:f4:1a:4f:52:3f:1e:90: 90:b0:52:38:4d:f9:bd:71:fb:b8:26:29:4d:42:17: 9f:2a:35:df:c1:79:ff:c4:d7:e0:fe:c2:cb:13:bd: 11:e0:dd:e5:49:47:2d:77:e6:54:87:19:b5:96:a1: 46:1e:8b:8e:84:74:d1:20:46:14:82:3e:ce:fc:a8: ed:a6:ff:80:3d:64:7e:d2:c1:d6:43:66:3d:53:be: 3e:7a:3e:0b:69:a5:df:37:b4:ad:e0:35:f4:e7:87: e2:d7:4b:ef:31:80:30:2b:35:d3:7a:70:bd:ee:7a: 4e:fc:bf:10:3f:4a:56:16:1b:d6:4d:2e:5e:c5:c7: 84:80:5b:cc:2d:83:51:97:b7:9a:86:50:72:d6:00: fc:37:ba:d5:86:7d:39:78:bd:d2:13:bf:a0:c0:d1: 86:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:42:D7:F5:D4:2F:00:33:64:29:8A:33:9A:73:8C:13:12:A7:4F:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/48529b48-e02e-3ba6-87a0-38a733adde1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:56:85:26:4b:b0:d1:5c:6e:a0:82:54:14:9b:02:33:0f:ac: 89:00:63:fd:ce:39:4d:f1:4d:98:a4:0e:20:4b:04:87:90:07: 55:98:30:fb:40:43:bf:e6:5d:0e:2d:7b:5c:14:97:28:6d:5a: 20:7f:a8:8a:3f:e9:c0:60:db:f5:58:d5:aa:0b:e6:00:1c:a2: 7c:17:08:93:43:06:63:b0:d0:ef:b6:82:95:04:99:c3:65:d4: 7a:ac:16:7b:14:54:b6:76:5f:34:56:99:da:13:d9:40:8b:09: e7:6d:69:db:7c:da:43:71:ac:91:da:1d:d4:95:e6:77:bc:11: 3a:09:3a:96:ef:20:8b:75:f1:c0:a4:53:39:7f:f0:d7:98:4d: 3c:9b:85:a4:ff:f8:a0:ea:ee:ac:ac:ba:9d:02:fd:7c:ee:10: f6:76:62:39:1a:c6:4f:79:ec:c0:ef:9f:db:a1:7a:80:61:e0: 28:4c:20:ca:c1:d0:98:8b:bb:52:93:c9:b1:6b:c0:56:68:0a: 23:97:a8:3e:26:7c:7f:9b:11:df:67:28:5c:7c:b5:9b:da:70: d9:14:69:56:05:48:37:12:9c:da:20:1b:41:3e:fa:cf:f5:64: a2:e8:83:7f:02:d7:7b:75:60:a2:af:77:9d:d6:54:d3:b5:05: 98:8f:40:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO9bmzI7av85+uwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk NWZiMDYyNzctN2QxYi00MTQzLWJkZDktNDM4NTM0MTIwYzE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArG40aBGHIzvsvQws3wZOgAfSdEw2CpnWGgM7 1Z+EY1zpvc5zizOqN7h2+54U6ht7kr5EhJzneA8I6i/vLIUKOTauke25tmorjKFQ 7NP0LugLetH3I7R9MCMcQEVkzDRz5/QaT1I/HpCQsFI4Tfm9cfu4JilNQhefKjXf wXn/xNfg/sLLE70R4N3lSUctd+ZUhxm1lqFGHouOhHTRIEYUgj7O/Kjtpv+APWR+ 0sHWQ2Y9U74+ej4LaaXfN7St4DX054fi10vvMYAwKzXTenC97npO/L8QP0pWFhvW TS5exceEgFvMLYNRl7eahlBy1gD8N7rVhn05eL3SE7+gwNGGGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNNC1/XULwAzZCmKM5pzjBMSp0+pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNDg1MjliNDgtZTAyZS0z YmE2LTg3YTAtMzhhNzMzYWRkZTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqFeIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEBWhSZLsNFcbqCCVBSbAjMPrIkAY/3OOU3xTZikDiBLBIeQB1WYMPtA Q7/mXQ4te1wUlyhtWiB/qIo/6cBg2/VY1aoL5gAconwXCJNDBmOw0O+2gpUEmcNl 1HqsFnsUVLZ2XzRWmdoT2UCLCedtadt82kNxrJHaHdSV5ne8EToJOpbvIIt18cCk Uzl/8NeYTTybhaT/+KDq7qysup0C/XzuEPZ2Yjkaxk957MDvn9uheoBh4ChMIMrB 0JiLu1KTybFrwFZoCiOXqD4mfH+bEd9nKFx8tZvacNkUaVYFSDcSnNogG0E++s/1 ZKLog38C13t1YKKvd53WVNO1BZiPQNM= -----END CERTIFICATE-----Generated at Sat Aug 23 15:12:13 2025 by rpki-client