$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4fdabd5b-65fb-3fe2-9eaa-9c093f7c4f9b.roa File: 4fdabd5b-65fb-3fe2-9eaa-9c093f7c4f9b.roa (raw, json) Hash identifier: SGGtRG0BHXCAjnbwPD1zXs3o0qL4pfMSJxc5ooP8PVY= Subject key identifier: BD:1A:8D:4A:38:43:53:6D:D7:89:C5:41:50:1D:A6:AB:56:5F:EC:FD Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584AD23BD7403FF85AA8F7AA9680 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4fdabd5b-65fb-3fe2-9eaa-9c093f7c4f9b.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 3356 IP address blocks: 168.87.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:d7:40:3f:f8:5a:a8:f7:aa:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=af3febab-9de9-4718-ade4-be1fd3290274 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:49:5b:67:e8:ab:37:be:66:b9:b1:2f:ea:5c: b4:05:05:fb:da:b9:24:bf:a1:1d:0d:78:11:2e:52: 2b:63:b3:96:a1:df:05:57:65:12:4e:c4:5d:d9:fb: e7:15:81:7c:58:a3:bd:c0:06:ac:23:62:9b:6d:9a: dd:24:2b:7f:04:18:26:bb:f1:04:ee:32:25:76:c6: b8:cb:3a:89:01:3d:c1:bf:ca:a8:c7:54:16:32:ff: 69:08:2d:2c:c9:b3:b0:67:3d:e4:b2:3c:cc:1a:27: 0b:16:c2:1f:fb:4f:4c:e2:8c:86:a7:18:c9:7f:fa: a1:a4:12:9c:4f:eb:04:e1:a9:93:f0:d7:56:ae:e6: f0:aa:2e:38:83:78:93:d5:a9:99:b4:63:73:59:e7: ba:a7:33:d3:8c:bd:07:33:28:c1:30:76:06:c2:38: 7e:71:1b:4e:d3:45:42:03:c8:6f:74:c6:f4:27:d5: ae:12:fa:f9:3c:85:17:58:e5:02:a7:e7:5a:92:1b: db:55:39:f8:b5:88:34:99:42:02:b8:2d:79:ed:67: e9:35:b1:87:0a:51:2b:31:27:63:85:54:20:77:51: 90:3d:f8:33:89:01:44:ca:2a:c1:62:5c:e1:fa:b2: 72:4a:5a:93:c6:1d:4a:8a:22:1c:90:fd:13:0b:16: 69:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:1A:8D:4A:38:43:53:6D:D7:89:C5:41:50:1D:A6:AB:56:5F:EC:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4fdabd5b-65fb-3fe2-9eaa-9c093f7c4f9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:b2:5d:5c:14:5b:e9:ee:5d:a8:da:c5:3e:fc:d2:c4:9b:49: b4:77:ca:a5:6f:b9:a3:92:e9:a7:e3:b0:34:4e:72:ea:eb:fb: 0d:d4:f7:00:8c:f1:7b:5a:25:79:52:73:77:39:32:45:c9:3e: 6c:ba:2f:eb:be:0a:67:5c:87:2d:0b:d8:f5:e5:d9:20:0f:53: 28:f1:08:2f:db:50:48:05:b2:a9:40:9d:92:cd:b0:82:38:bf: a8:a7:14:6b:f1:68:5d:0e:34:27:e6:b9:7d:cf:47:65:2e:c2: 26:03:07:c1:3b:3c:d2:e2:7d:b2:f0:7f:5b:f9:21:35:b0:af: 89:5b:b1:22:f5:e0:81:12:50:7d:e1:17:dc:00:34:39:9a:4f: ee:df:95:61:28:ed:f9:f3:ba:54:93:81:e0:d3:1b:f4:b3:92: f8:8d:56:c6:1c:6f:08:e0:d0:b6:82:27:3b:32:07:9a:f4:aa: 3e:e9:ff:e4:a7:7e:ff:bf:56:89:60:90:17:a2:79:a4:80:ce: 5d:c4:c1:12:b6:9d:06:00:e5:ff:30:c7:bc:8d:b0:c3:ae:24: 78:aa:d6:b6:ba:2e:ff:0e:ad:ed:f1:ff:6e:9c:09:95:ad:0d: 7b:9a:06:44:3b:e2:d7:f9:28:9f:fb:d0:01:6f:9e:74:37:3d: cf:da:5d:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO9dAP/haqPeqloAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk YWYzZmViYWItOWRlOS00NzE4LWFkZTQtYmUxZmQzMjkwMjc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlElbZ+irN75mubEv6ly0BQX72rkkv6EdDXgR LlIrY7OWod8FV2USTsRd2fvnFYF8WKO9wAasI2KbbZrdJCt/BBgmu/EE7jIldsa4 yzqJAT3Bv8qox1QWMv9pCC0sybOwZz3ksjzMGicLFsIf+09M4oyGpxjJf/qhpBKc T+sE4amT8NdWrubwqi44g3iT1amZtGNzWee6pzPTjL0HMyjBMHYGwjh+cRtO00VC A8hvdMb0J9WuEvr5PIUXWOUCp+dakhvbVTn4tYg0mUICuC157WfpNbGHClErMSdj hVQgd1GQPfgziQFEyirBYlzh+rJySlqTxh1KiiIckP0TCxZpJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL0ajUo4Q1Nt14nFQVAdpqtWX+z9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNGZkYWJkNWItNjVmYi0z ZmUyLTllYWEtOWMwOTNmN2M0ZjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFeOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG2yXVwUW+nuXajaxT780sSbSbR3yqVvuaOS6afjsDROcurr+w3U9wCM 8XtaJXlSc3c5MkXJPmy6L+u+Cmdchy0L2PXl2SAPUyjxCC/bUEgFsqlAnZLNsII4 v6inFGvxaF0ONCfmuX3PR2UuwiYDB8E7PNLifbLwf1v5ITWwr4lbsSL14IESUH3h F9wANDmaT+7flWEo7fnzulSTgeDTG/SzkviNVsYcbwjg0LaCJzsyB5r0qj7p/+Sn fv+/VolgkBeieaSAzl3EwRK2nQYA5f8wx7yNsMOuJHiq1ra6Lv8Ore3x/26cCZWt DXuaBkQ74tf5KJ/70AFvnnQ3Pc/aXWE= -----END CERTIFICATE-----Generated at Sat Aug 23 14:58:18 2025 by rpki-client