$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/78648d11-2f6f-3a66-8f68-3edfca0d6da9.roa File: 78648d11-2f6f-3a66-8f68-3edfca0d6da9.roa (raw, json) Hash identifier: iUoPQTdfg2YnLwqmIgaDNU/yQQMTw3aK/68xIDI/Ah8= Subject key identifier: CA:31:46:A8:0C:3D:6F:8A:2E:D7:DB:94:9C:C2:38:F1:E2:BE:FB:3E Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584AD23BD434B32AD232770AE780 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/78648d11-2f6f-3a66-8f68-3edfca0d6da9.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 202 IP address blocks: 168.87.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:d4:34:b3:2a:d2:32:77:0a:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=7a6f91b8-0ae2-4de3-9bce-ad0f7be71b11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:7f:19:98:86:c8:24:95:d7:d0:36:01:fd:ee: 04:20:91:60:ec:8c:69:e0:fd:32:50:93:dd:cd:df: 84:cd:82:a6:09:c4:1f:3b:d6:8e:3e:a3:cf:37:a1: 09:9d:e6:50:56:9a:88:56:ef:81:d3:43:0c:06:11: bb:aa:e1:96:b1:e1:02:c3:33:02:a0:66:ef:31:e1: 56:2b:9a:bd:ea:d3:bc:71:85:4b:34:da:e3:48:0a: ce:cb:c4:9e:4f:0f:ab:02:5b:26:e0:e4:10:f6:a4: 03:b3:07:8c:b6:e2:42:2f:3d:25:2b:5e:64:97:ad: 23:03:c0:b5:db:ec:dd:2a:04:4c:6b:12:8c:51:26: a0:f4:ef:51:d7:8a:e8:98:11:60:d0:1c:64:b3:81: e1:e7:45:5f:9f:d0:72:ef:3c:86:57:e7:11:64:d4: f0:87:fd:44:48:3b:b2:07:7f:87:39:a1:06:03:ef: 80:c3:90:2e:cf:74:86:41:d1:dc:aa:d4:a8:ae:92: 77:01:fe:e8:4c:72:fb:f7:3f:e0:4a:1f:ac:f5:9b: d7:e2:34:b4:b2:9a:de:e0:f7:bc:f4:e5:c9:b4:d3: 04:b1:29:7f:a8:b2:3b:28:40:43:ca:16:69:37:d7: 5d:fb:20:f8:84:c4:f5:38:91:04:58:22:d2:86:a0: db:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:31:46:A8:0C:3D:6F:8A:2E:D7:DB:94:9C:C2:38:F1:E2:BE:FB:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/78648d11-2f6f-3a66-8f68-3edfca0d6da9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:85:da:93:21:8d:b4:60:78:70:24:84:b6:c1:89:be:15:88: c9:a3:dd:a6:09:98:d1:f4:57:c4:33:0a:e6:2b:73:6c:2e:eb: ca:06:46:60:ee:24:4b:25:f1:b0:2c:1a:6d:6b:84:79:d7:69: 88:dc:36:5e:aa:4d:c2:4f:fe:37:8b:19:8c:66:a2:3b:1e:d2: 46:5e:ef:99:80:c2:ca:9e:dc:a0:0c:8f:07:9c:84:89:1d:20: 35:95:c2:1f:79:88:8c:c0:3a:bc:26:89:45:f9:d3:b4:e0:8b: c8:40:06:29:6c:73:11:a6:d3:c1:f9:21:c5:4e:de:03:70:68: 24:3d:75:1a:d6:71:12:ef:22:9c:c5:89:24:6b:c0:77:e7:ad: 5e:1f:57:5b:b5:75:b4:79:5d:db:f1:1c:05:29:60:6b:47:2c: dd:cc:2f:92:90:63:de:30:ee:f6:77:9c:3f:f5:77:c3:13:3a: 94:a7:56:2e:c7:b4:a7:04:a4:c1:a3:4e:14:0a:0e:52:42:aa: 7b:31:f8:56:16:7b:87:8f:13:80:ef:35:52:ab:bd:2d:cf:59: 0f:28:37:44:d4:98:c3:10:1b:52:a1:55:56:c9:df:9d:7c:97: 8f:4f:f6:de:65:af:89:43:a1:4a:5b:37:9b:4a:7f:ff:0f:bd: 7e:22:27:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO9Q0syrSMncK54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk N2E2ZjkxYjgtMGFlMi00ZGUzLTliY2UtYWQwZjdiZTcxYjExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA138ZmIbIJJXX0DYB/e4EIJFg7Ixp4P0yUJPd zd+EzYKmCcQfO9aOPqPPN6EJneZQVpqIVu+B00MMBhG7quGWseECwzMCoGbvMeFW K5q96tO8cYVLNNrjSArOy8SeTw+rAlsm4OQQ9qQDsweMtuJCLz0lK15kl60jA8C1 2+zdKgRMaxKMUSag9O9R14romBFg0Bxks4Hh50Vfn9By7zyGV+cRZNTwh/1ESDuy B3+HOaEGA++Aw5Auz3SGQdHcqtSorpJ3Af7oTHL79z/gSh+s9ZvX4jS0spre4Pe8 9OXJtNMEsSl/qLI7KEBDyhZpN9dd+yD4hMT1OJEEWCLShqDbXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMoxRqgMPW+KLtfblJzCOPHivvs+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNzg2NDhkMTEtMmY2Zi0z YTY2LThmNjgtM2VkZmNhMGQ2ZGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFeCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFKF2pMhjbRgeHAkhLbBib4ViMmj3aYJmNH0V8QzCuYrc2wu68oGRmDu JEsl8bAsGm1rhHnXaYjcNl6qTcJP/jeLGYxmojse0kZe75mAwsqe3KAMjwechIkd IDWVwh95iIzAOrwmiUX507Tgi8hABilscxGm08H5IcVO3gNwaCQ9dRrWcRLvIpzF iSRrwHfnrV4fV1u1dbR5XdvxHAUpYGtHLN3ML5KQY94w7vZ3nD/1d8MTOpSnVi7H tKcEpMGjThQKDlJCqnsx+FYWe4ePE4DvNVKrvS3PWQ8oN0TUmMMQG1KhVVbJ3518 l49P9t5lr4lDoUpbN5tKf/8PvX4iJyE= -----END CERTIFICATE-----Generated at Sat Aug 23 19:51:41 2025 by rpki-client