$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6e44105a-85f2-3d27-ab06-3fc731523234.roa File: 6e44105a-85f2-3d27-ab06-3fc731523234.roa (raw, json) Hash identifier: 5MmDLAyIkhrdPqGH+cpXWEKMO9EP0KlYChl70ZQ9M+g= Subject key identifier: F3:7D:E3:72:06:A2:A7:B9:8B:72:35:D1:91:0F:E2:CA:89:C2:7E:5B Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584A5765D24FB943CEA1CA7F3080 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6e44105a-85f2-3d27-ab06-3fc731523234.roa Signing time: Sat 28 Jun 2025 13:01:02 +0000 ROA not before: Sat 28 Jun 2025 13:01:02 +0000 ROA not after: Fri 26 Sep 2025 13:01:02 +0000 asID: 203 IP address blocks: 168.87.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:57:65:d2:4f:b9:43:ce:a1:ca:7f:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jun 28 13:01:02 2025 GMT Not After : Sep 26 13:01:02 2025 GMT Subject: CN=50fa4f56-4b92-4432-ad00-9a1ce7d6d4d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:fa:90:7a:2d:57:08:12:9a:0d:61:8b:1d:df: f8:9f:74:76:da:a2:b3:b8:06:09:59:d7:43:7a:d1: af:b5:55:0f:c8:35:70:ee:fe:5a:d2:ce:b6:a2:a4: 72:72:17:50:eb:53:24:af:9a:da:1e:77:4e:04:ce: 18:83:d6:4d:83:fe:e5:21:9a:32:be:68:0a:fc:d4: b1:96:50:e1:d6:9b:b1:5f:2c:51:5b:72:63:71:d3: 16:ba:64:3a:03:f0:93:af:89:6d:86:c7:98:f9:95: 7f:eb:fb:18:b0:3d:4f:fb:3d:b9:39:c6:d9:bb:2b: 72:66:b7:9d:48:d6:1f:d2:4b:bf:91:7c:22:f4:2b: 1d:c9:c6:a9:d0:4b:d1:db:6f:4e:06:84:bf:e4:b3: 4f:d2:65:6f:50:37:89:e8:e1:be:ea:88:fb:1b:9a: b0:9f:d7:6f:32:e5:ec:b1:7a:60:d1:34:9f:74:21: e6:ee:28:06:08:7f:88:7b:f1:7a:7e:8b:f4:93:61: 2a:b3:28:6b:06:fc:d7:9b:da:76:59:2d:e2:ea:b8: 09:cf:4c:48:e9:a5:5b:3f:05:e1:ca:ba:c6:c2:dd: c3:61:e8:ed:a6:75:91:99:a0:9a:90:58:9a:6f:7e: 86:14:e6:ae:22:46:ce:20:16:58:01:ba:d1:5b:98: 76:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:7D:E3:72:06:A2:A7:B9:8B:72:35:D1:91:0F:E2:CA:89:C2:7E:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6e44105a-85f2-3d27-ab06-3fc731523234.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.6.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:19:71:82:e2:61:a8:9a:d9:a6:07:49:e3:79:2c:5b:b3:92: 79:d1:87:77:4a:1a:bc:2c:98:40:5d:65:48:87:0c:1b:e3:28: e3:72:5f:cf:89:e9:a8:60:7d:c6:d4:ee:21:c7:19:16:a0:18: 98:72:8a:a7:78:d4:8e:6b:17:a1:09:c8:b1:1f:28:e9:6b:35: a1:1d:fd:90:b8:42:ff:01:ed:7e:48:0a:8d:79:23:c1:f2:a4: 4c:f4:9c:d6:b6:71:f0:a4:6c:fb:0c:51:2e:5f:ce:70:c8:82: 3c:b2:30:cb:23:8e:46:c4:80:63:af:12:dc:f7:a3:6e:45:2e: 06:f7:49:5c:b6:c0:c2:50:88:22:d7:a4:6f:10:d6:83:70:cf: 92:21:e7:81:f2:6e:2e:53:20:ff:2e:e2:23:45:41:e8:3e:36: c6:6e:6c:96:1c:d0:73:ec:92:e7:15:38:bf:75:87:0c:f9:e6: e1:d0:3c:86:f0:01:4c:d5:a7:2e:32:3c:a0:46:09:28:31:d6: a7:29:ce:2c:1d:b1:9f:c0:d0:8f:0d:78:00:fb:c5:0e:2b:35: db:5f:41:10:e5:a3:b5:d7:14:67:e3:65:91:7a:b0:dd:2f:07: 97:ad:12:41:d7:1d:4f:f4:69:93:cc:ce:7d:a3:7a:ab:be:39: 63:d9:d5:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpXZdJPuUPOocp/MIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDYyODEzMDEwMloXDTI1MDkyNjEzMDEwMlowLzEtMCsGA1UEAxMk NTBmYTRmNTYtNGI5Mi00NDMyLWFkMDAtOWExY2U3ZDZkNGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvqQei1XCBKaDWGLHd/4n3R22qKzuAYJWddD etGvtVUPyDVw7v5a0s62oqRychdQ61Mkr5raHndOBM4Yg9ZNg/7lIZoyvmgK/NSx llDh1puxXyxRW3JjcdMWumQ6A/CTr4lthseY+ZV/6/sYsD1P+z25OcbZuytyZred SNYf0ku/kXwi9Csdycap0EvR229OBoS/5LNP0mVvUDeJ6OG+6oj7G5qwn9dvMuXs sXpg0TSfdCHm7igGCH+Ie/F6fov0k2EqsyhrBvzXm9p2WS3i6rgJz0xI6aVbPwXh yrrGwt3DYejtpnWRmaCakFiab36GFOauIkbOIBZYAbrRW5h2fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPN943IGoqe5i3I10ZEP4sqJwn5bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNmU0NDEwNWEtODVmMi0z ZDI3LWFiMDYtM2ZjNzMxNTIzMjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFcGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADwZcYLiYaia2aYHSeN5LFuzknnRh3dKGrwsmEBdZUiHDBvjKONyX8+J 6ahgfcbU7iHHGRagGJhyiqd41I5rF6EJyLEfKOlrNaEd/ZC4Qv8B7X5ICo15I8Hy pEz0nNa2cfCkbPsMUS5fznDIgjyyMMsjjkbEgGOvEtz3o25FLgb3SVy2wMJQiCLX pG8Q1oNwz5Ih54Hybi5TIP8u4iNFQeg+NsZubJYc0HPskucVOL91hwz55uHQPIbw AUzVpy4yPKBGCSgx1qcpziwdsZ/A0I8NeAD7xQ4rNdtfQRDlo7XXFGfjZZF6sN0v B5etEkHXHU/0aZPMzn2jequ+OWPZ1aE= -----END CERTIFICATE-----Generated at Sun Jun 29 18:02:22 2025 by rpki-client