$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/843b1e5e-e2ac-3a59-9b60-32f66c34a3b1.roa File: 843b1e5e-e2ac-3a59-9b60-32f66c34a3b1.roa (raw, json) Hash identifier: iU4oPOEJvN00dRxIuRp5tgiCUBw4UcNZndy2sdi1k3k= Subject key identifier: 7A:A0:27:DC:FD:2E:32:45:58:59:DE:75:CB:12:7A:83:54:16:29:7F Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584AD23BD903CE4CC4CEA6299200 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/843b1e5e-e2ac-3a59-9b60-32f66c34a3b1.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 3360 IP address blocks: 206.164.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:d9:03:ce:4c:c4:ce:a6:29:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=1ef8c7b7-ad55-49a8-8d9d-5442b5b8553b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:cb:c3:34:5a:d9:25:17:9e:d8:48:04:9b:1b: c1:b0:37:db:33:07:8b:c7:29:62:2c:c5:a9:0d:1a: 9d:ad:df:8f:9a:cb:e6:b8:01:ce:b8:82:3d:4d:cb: 06:dd:3a:a9:b0:25:bf:a5:d2:c4:24:f1:7c:4f:b5: b6:d9:39:d8:47:92:f7:ee:a5:74:0a:d2:ca:7a:3c: c4:85:c3:6c:68:e7:ea:e6:d3:3a:cf:e7:52:46:9d: 65:5d:9b:ec:06:67:a0:d5:a7:f4:2d:3e:8f:13:21: b0:28:70:43:eb:14:a2:d6:5c:f9:01:5a:e1:8a:dd: e1:86:3a:e5:cf:b4:ff:3d:df:a8:0a:0d:fc:12:30: bb:ba:ee:b4:27:7b:ec:c1:a7:35:bf:b2:0c:4e:b2: be:e2:9e:83:7c:c1:2d:3d:d0:c5:d5:65:02:1a:f9: 2a:eb:8a:c3:b3:7e:aa:68:56:ce:9a:88:0a:34:e4: 67:7f:c6:12:ba:c4:aa:ea:c6:13:5d:af:58:b6:9c: 78:88:1c:80:5e:2c:4c:1e:f1:df:71:03:8b:5f:7a: 6f:e0:7b:7b:72:37:de:b3:50:7e:4e:31:28:0e:bb: 7f:93:ae:d4:52:43:ab:c8:15:06:79:ea:48:dc:32: 8e:69:a5:84:8e:3a:0b:47:4f:3e:45:e3:4d:cc:7f: de:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:A0:27:DC:FD:2E:32:45:58:59:DE:75:CB:12:7A:83:54:16:29:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/843b1e5e-e2ac-3a59-9b60-32f66c34a3b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 206.164.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:37:1c:e4:3f:94:4e:84:a9:0f:c2:35:a4:b1:c2:57:23:31: 7d:1e:74:ec:f4:9d:86:d5:48:3e:9d:55:70:06:ce:89:07:ef: 86:34:a2:18:42:46:f9:ac:22:d6:10:c5:f8:45:9b:dc:ea:45: bb:f0:84:0d:b6:14:2d:01:ea:33:4a:24:7f:f9:49:ca:38:8d: d7:9d:c7:fa:10:be:fa:76:41:da:8e:c2:f9:2a:6a:16:40:a7: 3f:8c:3a:b4:1a:5e:c1:f2:9c:c4:78:7f:c3:ec:ce:35:ae:51: ec:fb:f6:c4:a9:7a:08:08:48:0b:48:ae:30:1b:bd:5a:d2:c2: 43:85:37:93:7d:1b:ac:f5:88:e7:1f:f0:75:3c:b3:43:33:06: 8f:ec:7b:3b:d9:c1:32:e9:49:8e:36:18:4e:86:57:42:c1:d2: 1b:99:d7:0f:db:bb:50:a3:2d:ee:f6:b5:36:92:5f:39:38:03: 53:95:f8:1b:31:ab:3b:38:80:da:08:33:e7:ea:9f:cd:ea:26: 6b:9e:ea:8e:0e:86:68:aa:f3:01:5c:9e:9e:2f:8f:92:e0:82: c7:5b:3e:e5:94:cd:38:5a:95:ad:57:66:66:b5:2c:c6:86:b7: 13:fc:85:b4:7c:61:d6:c7:83:0c:e4:53:e1:d8:0c:90:b2:4d: c4:89:c5:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO9kDzkzEzqYpkgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk MWVmOGM3YjctYWQ1NS00OWE4LThkOWQtNTQ0MmI1Yjg1NTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMvDNFrZJRee2EgEmxvBsDfbMweLxyliLMWp DRqdrd+PmsvmuAHOuII9TcsG3TqpsCW/pdLEJPF8T7W22TnYR5L37qV0CtLKejzE hcNsaOfq5tM6z+dSRp1lXZvsBmeg1af0LT6PEyGwKHBD6xSi1lz5AVrhit3hhjrl z7T/Pd+oCg38EjC7uu60J3vswac1v7IMTrK+4p6DfMEtPdDF1WUCGvkq64rDs36q aFbOmogKNORnf8YSusSq6sYTXa9Ytpx4iByAXixMHvHfcQOLX3pv4Ht7cjfes1B+ TjEoDrt/k67UUkOryBUGeepI3DKOaaWEjjoLR08+ReNNzH/eewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHqgJ9z9LjJFWFnedcsSeoNUFil/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvODQzYjFlNWUtZTJhYy0z YTU5LTliNjAtMzJmNjZjMzRhM2IxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzqSoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAU3HOQ/lE6EqQ/CNaSxwlcjMX0edOz0nYbVSD6dVXAGzokH74Y0ohhC RvmsItYQxfhFm9zqRbvwhA22FC0B6jNKJH/5Sco4jdedx/oQvvp2QdqOwvkqahZA pz+MOrQaXsHynMR4f8PszjWuUez79sSpeggISAtIrjAbvVrSwkOFN5N9G6z1iOcf 8HU8s0MzBo/sezvZwTLpSY42GE6GV0LB0huZ1w/bu1CjLe72tTaSXzk4A1OV+Bsx qzs4gNoIM+fqn83qJmue6o4Ohmiq8wFcnp4vj5LggsdbPuWUzThala1XZma1LMaG txP8hbR8YdbHgwzkU+HYDJCyTcSJxcM= -----END CERTIFICATE-----Generated at Sat Aug 23 18:04:51 2025 by rpki-client