$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/77b373dc-b957-3ae4-85d5-a0587d14d9bb.roa File: 77b373dc-b957-3ae4-85d5-a0587d14d9bb.roa (raw, json) Hash identifier: 3tZDL9MO9AVf9if7bva2WpGBvuRQFd5HiBlpuiMNn7k= Subject key identifier: 4A:05:39:D4:E8:F2:E7:A7:70:0A:A2:1D:E0:F2:29:1D:F6:F2:C2:67 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584AD23BC07032E9C81A732D9E00 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/77b373dc-b957-3ae4-85d5-a0587d14d9bb.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 3360 IP address blocks: 168.87.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:c0:70:32:e9:c8:1a:73:2d:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=bb559374-3e5b-41e4-86ce-da17f4fac947 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:cd:b8:2c:63:b3:4f:5c:44:7e:0d:db:92:76: 6c:c5:b4:8e:53:a7:90:a4:1f:8c:80:b9:70:41:8c: a5:9e:b2:82:d8:96:76:78:5e:1c:9c:af:73:5d:38: 78:61:f8:17:78:9b:6a:f2:c7:ce:f5:50:07:d1:e8: 35:b8:1b:ec:c8:64:97:fb:55:21:11:02:9d:35:51: 03:33:d7:c0:d4:bd:7d:03:a3:9b:9d:c9:a9:9b:75: 0f:95:20:76:98:1b:e5:97:62:c0:12:d5:f0:12:4b: 2e:bc:c4:7a:75:bb:3c:ea:fd:b0:bb:91:0b:08:09: 1b:6a:91:8b:ab:b8:88:7a:db:38:e1:3a:4f:00:f2: 13:6e:44:e5:a1:53:bf:ff:34:1f:7f:70:14:42:90: 54:61:97:8f:11:87:78:ea:f6:d9:56:e6:50:93:22: b9:65:68:cd:a5:47:f8:b3:04:dd:9f:6e:68:d8:10: 63:e9:39:07:4b:80:c1:0a:57:b6:b4:4c:4f:db:33: da:b4:77:1c:32:17:ae:28:13:91:a9:3b:b1:24:5a: 2c:c1:08:cf:fe:0a:9f:58:0c:92:08:8a:4a:40:da: 6c:2f:1a:c6:c5:ed:84:0b:2b:25:e0:28:19:31:aa: 14:4b:11:e8:5f:94:8e:a3:7b:5d:4b:57:13:a8:37: 3a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:05:39:D4:E8:F2:E7:A7:70:0A:A2:1D:E0:F2:29:1D:F6:F2:C2:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/77b373dc-b957-3ae4-85d5-a0587d14d9bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:c0:85:81:ca:44:4f:50:a5:fa:23:3b:6b:b6:3f:c9:ba:ca: d5:5c:17:7f:fb:8b:2f:31:88:ec:dc:81:4e:25:57:ed:a8:e6: b8:a5:0a:3b:70:e9:3f:ab:ea:2b:f9:9e:6e:c7:40:90:98:99: eb:f2:10:7a:92:5b:36:e1:1e:e6:ba:d4:c6:76:ac:1f:97:1f: 2f:46:dc:5c:89:22:9b:61:95:0b:bb:12:aa:71:09:be:20:69: 8d:54:f0:8a:67:ea:5b:d2:ea:ee:e9:1c:1e:72:ac:9d:16:17: 45:75:b2:bb:e2:58:66:b7:96:37:05:1b:20:f7:3c:a6:3e:64: e3:4a:3f:a6:c5:da:3d:72:f2:99:f8:17:78:97:7d:d9:69:35: 9f:bf:dc:a1:26:96:7e:07:40:f4:a6:d6:5e:c8:25:22:83:78: a2:d4:18:8a:46:5e:d2:a0:96:af:32:aa:ca:f6:41:38:82:58: 24:9b:38:ef:2b:b9:62:05:85:54:ab:11:d7:81:c8:aa:60:5e: 66:15:70:9d:45:27:d3:04:5a:57:34:e6:8a:14:32:a6:29:96: fd:75:7f:9e:f5:8f:65:03:95:d1:70:31:d2:7b:44:2d:65:67: 64:74:33:61:64:df:5e:b9:1d:2c:57:1f:c6:40:fd:f1:9c:cc: ce:39:6d:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO8BwMunIGnMtngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk YmI1NTkzNzQtM2U1Yi00MWU0LTg2Y2UtZGExN2Y0ZmFjOTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkc24LGOzT1xEfg3bknZsxbSOU6eQpB+MgLlw QYylnrKC2JZ2eF4cnK9zXTh4YfgXeJtq8sfO9VAH0eg1uBvsyGSX+1UhEQKdNVED M9fA1L19A6Obncmpm3UPlSB2mBvll2LAEtXwEksuvMR6dbs86v2wu5ELCAkbapGL q7iIets44TpPAPITbkTloVO//zQff3AUQpBUYZePEYd46vbZVuZQkyK5ZWjNpUf4 swTdn25o2BBj6TkHS4DBCle2tExP2zPatHccMheuKBORqTuxJFoswQjP/gqfWAyS CIpKQNpsLxrGxe2ECysl4CgZMaoUSxHoX5SOo3tdS1cTqDc63wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEoFOdTo8uencAqiHeDyKR328sJnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNzdiMzczZGMtYjk1Ny0z YWU0LTg1ZDUtYTA1ODdkMTRkOWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFcYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABDAhYHKRE9QpfojO2u2P8m6ytVcF3/7iy8xiOzcgU4lV+2o5rilCjtw 6T+r6iv5nm7HQJCYmevyEHqSWzbhHua61MZ2rB+XHy9G3FyJIpthlQu7EqpxCb4g aY1U8Ipn6lvS6u7pHB5yrJ0WF0V1srviWGa3ljcFGyD3PKY+ZONKP6bF2j1y8pn4 F3iXfdlpNZ+/3KEmln4HQPSm1l7IJSKDeKLUGIpGXtKglq8yqsr2QTiCWCSbOO8r uWIFhVSrEdeByKpgXmYVcJ1FJ9MEWlc05ooUMqYplv11f571j2UDldFwMdJ7RC1l Z2R0M2Fk3165HSxXH8ZA/fGczM45beI= -----END CERTIFICATE-----Generated at Sat Aug 23 14:58:47 2025 by rpki-client