$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5db721f0-41f0-3884-abef-c8d193e99ca5.roa File: 5db721f0-41f0-3884-abef-c8d193e99ca5.roa (raw, json) Hash identifier: h8b3DHqOWQU4u+Z/9NWEmZOWcputLaMJ6o6CG8Gh5es= Subject key identifier: 00:5B:BD:5D:79:3B:76:EE:C4:1D:A6:54:17:11:3D:46:96:E8:62:2E Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584A268AC529994F7565CCB35800 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5db721f0-41f0-3884-abef-c8d193e99ca5.roa Signing time: Wed 11 Jun 2025 01:00:50 +0000 ROA not before: Wed 11 Jun 2025 01:00:50 +0000 ROA not after: Tue 09 Sep 2025 01:00:50 +0000 asID: 202 IP address blocks: 168.87.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:26:8a:c5:29:99:4f:75:65:cc:b3:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jun 11 01:00:50 2025 GMT Not After : Sep 9 01:00:50 2025 GMT Subject: CN=cf858af5-5be1-46a2-af26-a760fb31c35e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:31:69:e8:68:86:3a:1e:a9:5d:a2:a3:c2:2d: 31:92:1e:ad:f3:83:33:e0:f2:63:91:aa:4f:bb:cc: 19:b9:fa:22:80:19:af:87:5a:f1:f5:44:1a:59:91: f0:ea:c9:21:a3:49:be:8e:bf:11:7d:a3:de:93:db: e1:bd:3c:76:01:86:80:86:e3:a3:c2:0c:9f:5e:57: 51:69:f7:cd:1d:2a:c0:75:3a:a1:96:aa:c5:42:a3: ad:fc:d3:88:84:f1:7a:63:a2:30:bb:d9:97:13:fb: e0:ae:82:0e:91:ad:a4:aa:7f:61:e0:68:67:b3:0d: 28:25:36:70:47:ea:25:8c:3f:27:e2:b3:8e:08:f8: 63:39:59:17:d5:af:f3:5f:de:0f:b1:6c:d9:ef:3e: c2:1f:d4:82:be:31:10:5d:ab:72:41:1b:37:5b:e2: 79:10:2b:c5:20:83:51:38:ae:98:f6:90:7e:66:fe: 96:9c:fe:94:78:8f:69:c7:3e:b7:91:b1:12:39:d6: a5:25:a9:e6:95:fe:26:23:dd:f8:2a:5c:00:65:fd: 54:f8:23:35:13:f2:05:96:eb:ef:cd:c4:65:92:5a: 70:45:a3:f2:26:1d:fe:df:d7:74:0d:3d:38:f7:6d: ed:cc:3f:93:c5:ac:07:30:36:00:27:f6:12:20:64: ea:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:5B:BD:5D:79:3B:76:EE:C4:1D:A6:54:17:11:3D:46:96:E8:62:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5db721f0-41f0-3884-abef-c8d193e99ca5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:8e:c5:62:d9:2b:6d:71:c6:3b:02:f8:0b:c9:ce:02:73:d3: db:ca:4a:5f:f7:37:d6:b7:98:e5:d0:dd:bc:3c:20:ba:07:d6: 29:78:ac:0a:31:12:9e:2b:e8:ae:1a:ec:3c:9e:2b:2d:24:d6: 27:a8:94:e9:04:a6:76:0d:e3:5c:8b:68:e1:34:ff:b6:4c:b5: 25:92:03:1c:45:1a:cc:bd:2f:12:ba:a1:55:7a:f6:c2:94:ec: 9d:f4:fb:f5:f7:c1:9a:94:79:05:7e:4d:a5:93:b9:3a:bb:a6: 73:f6:79:d3:6b:10:75:b7:d8:bb:4b:88:d3:18:36:51:a0:d0: 38:25:2c:5d:9b:cd:a1:48:78:e6:f4:de:3b:c5:ba:88:d2:c1: bb:2d:e0:16:5d:50:ed:13:96:08:08:9e:4b:c6:fd:0d:08:d1: b9:08:1c:89:af:de:33:89:59:d3:10:c3:10:7f:6b:0e:50:8b: ed:fe:02:4e:c5:d1:03:b9:df:1f:2f:e5:ff:06:11:82:1a:d7: 52:2e:37:bc:21:08:08:4c:c8:bd:6b:47:d5:ce:56:c5:27:9b: a6:f8:5c:ef:1f:e7:76:f3:41:9d:89:57:e0:34:a7:e6:73:f1: 26:d2:5f:24:e4:45:70:b5:9f:fe:03:fc:e2:cb:31:c8:80:b2: 80:b8:9d:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEomisUpmU91ZcyzWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDYxMTAxMDA1MFoXDTI1MDkwOTAxMDA1MFowLzEtMCsGA1UEAxMk Y2Y4NThhZjUtNWJlMS00NmEyLWFmMjYtYTc2MGZiMzFjMzVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizFp6GiGOh6pXaKjwi0xkh6t84Mz4PJjkapP u8wZufoigBmvh1rx9UQaWZHw6skho0m+jr8RfaPek9vhvTx2AYaAhuOjwgyfXldR affNHSrAdTqhlqrFQqOt/NOIhPF6Y6Iwu9mXE/vgroIOka2kqn9h4Ghnsw0oJTZw R+oljD8n4rOOCPhjOVkX1a/zX94PsWzZ7z7CH9SCvjEQXatyQRs3W+J5ECvFIINR OK6Y9pB+Zv6WnP6UeI9pxz63kbESOdalJanmlf4mI934KlwAZf1U+CM1E/IFluvv zcRlklpwRaPyJh3+39d0DT04923tzD+TxawHMDYAJ/YSIGTqKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFABbvV15O3buxB2mVBcRPUaW6GIuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNWRiNzIxZjAtNDFmMC0z ODg0LWFiZWYtYzhkMTkzZTk5Y2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqFcUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACyOxWLZK21xxjsC+AvJzgJz09vKSl/3N9a3mOXQ3bw8ILoH1il4rAox Ep4r6K4a7DyeKy0k1ieolOkEpnYN41yLaOE0/7ZMtSWSAxxFGsy9LxK6oVV69sKU 7J30+/X3wZqUeQV+TaWTuTq7pnP2edNrEHW32LtLiNMYNlGg0DglLF2bzaFIeOb0 3jvFuojSwbst4BZdUO0TlggInkvG/Q0I0bkIHImv3jOJWdMQwxB/aw5Qi+3+Ak7F 0QO53x8v5f8GEYIa11IuN7whCAhMyL1rR9XOVsUnm6b4XO8f53bzQZ2JV+A0p+Zz 8SbSXyTkRXC1n/4D/OLLMciAsoC4nVg= -----END CERTIFICATE-----Generated at Mon Jun 30 20:35:29 2025 by rpki-client