$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8b41c2fa-e50f-3a94-9a50-475a88935f33.roa File: 8b41c2fa-e50f-3a94-9a50-475a88935f33.roa (raw, json) Hash identifier: z86DMDkv5rz81JYSPUnlxFhvYO6X+2Z7lFKj8d391eU= Subject key identifier: 38:D6:1C:E2:F7:64:59:C4:7E:73:92:1B:0F:E4:D3:1B:7A:46:EF:49 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584AD23BC1BE20249972F6B28800 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8b41c2fa-e50f-3a94-9a50-475a88935f33.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 203 IP address blocks: 168.87.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:c1:be:20:24:99:72:f6:b2:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=5635f03a-9e15-4382-8d57-1f43a153c8f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:63:80:44:fd:86:f4:b7:e7:80:b6:6e:95:01: 73:31:3d:1b:bf:3c:84:d2:41:01:2f:17:01:c6:59: 02:0f:e1:e2:c6:05:7d:cc:37:4c:37:66:d8:3d:b4: 22:c1:52:e4:f4:28:76:54:52:cd:fa:a7:f1:05:68: 80:82:9a:dd:a2:79:46:a2:ba:cb:9c:a1:c1:49:47: 46:15:b5:ef:dd:6f:42:b0:35:7e:10:2c:ec:f0:b8: bb:25:7c:a7:00:ec:3f:54:cc:12:b3:fd:84:e7:45: ca:b7:cf:05:99:aa:56:f4:f6:42:f2:2d:1e:5d:45: 54:29:07:24:ed:73:fa:08:0c:b9:97:24:e3:c6:cd: c8:c4:8a:d7:95:28:3f:f1:49:32:dc:26:04:eb:b5: a4:a3:55:c2:3b:86:ea:39:48:01:04:31:79:59:fa: f1:a2:9b:a5:0a:86:de:ac:24:22:7e:de:70:ab:68: 70:16:55:2e:36:8d:4d:71:c0:69:ef:91:2b:03:3f: b1:01:b2:09:0d:6c:67:0e:ec:90:a3:a2:60:cc:30: 45:24:e5:77:0e:e1:af:ba:84:4d:7d:7a:39:a4:f6: 44:10:2d:70:46:81:e0:04:bd:98:e8:e6:bb:0c:8f: 15:a9:e5:8c:75:97:99:cc:29:b0:21:e0:0e:ec:85: 4a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:D6:1C:E2:F7:64:59:C4:7E:73:92:1B:0F:E4:D3:1B:7A:46:EF:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8b41c2fa-e50f-3a94-9a50-475a88935f33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:6d:f4:10:8d:f5:8f:98:9d:2e:65:66:1f:07:e2:bc:99:55: 39:85:21:83:8d:bf:ef:01:c2:47:02:00:17:13:c9:49:e3:11: cd:53:47:c3:31:fb:a6:5d:97:35:29:26:d1:b4:ae:73:5f:15: d5:a9:67:d2:9d:37:b9:5d:e0:8c:23:40:e2:24:4f:8e:64:75: 6c:fc:5a:74:1c:e3:54:33:cc:3a:0d:7d:3a:06:a1:87:b0:c9: 5b:b9:33:cb:ee:6f:71:7a:49:31:96:da:0e:41:3b:19:f6:55: 65:60:f5:8b:88:1c:58:5b:f8:92:1a:b6:20:e6:b9:00:66:81: b4:a9:b5:36:8a:29:57:f0:72:eb:56:8c:d1:57:73:3d:41:2a: 19:65:b7:7e:56:b0:92:98:f1:98:1a:2d:fd:32:85:7f:e7:c5: cd:7a:46:78:5e:58:99:be:27:03:56:c0:0a:52:28:3c:3c:b3: f5:b4:8f:b8:5d:09:05:96:af:c8:b7:a6:fe:bb:db:39:0f:61: 9c:01:cb:50:64:3d:c8:63:ca:6f:92:a4:e7:5f:bf:3d:36:43: 0d:38:6a:da:2a:1f:bf:29:4f:4f:e6:01:aa:87:b6:d3:83:82: fa:db:9e:1b:ef:e2:4d:b2:5a:9e:55:d2:4e:32:af:dd:7d:d3: 2f:36:cf:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO8G+ICSZcvayiAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk NTYzNWYwM2EtOWUxNS00MzgyLThkNTctMWY0M2ExNTNjOGY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmOARP2G9LfngLZulQFzMT0bvzyE0kEBLxcB xlkCD+HixgV9zDdMN2bYPbQiwVLk9Ch2VFLN+qfxBWiAgprdonlGorrLnKHBSUdG FbXv3W9CsDV+ECzs8Li7JXynAOw/VMwSs/2E50XKt88FmapW9PZC8i0eXUVUKQck 7XP6CAy5lyTjxs3IxIrXlSg/8Uky3CYE67Wko1XCO4bqOUgBBDF5WfrxopulCobe rCQift5wq2hwFlUuNo1NccBp75ErAz+xAbIJDWxnDuyQo6JgzDBFJOV3DuGvuoRN fXo5pPZEEC1wRoHgBL2Y6Oa7DI8VqeWMdZeZzCmwIeAO7IVK3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDjWHOL3ZFnEfnOSGw/k0xt6Ru9JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvOGI0MWMyZmEtZTUwZi0z YTk0LTlhNTAtNDc1YTg4OTM1ZjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqFeeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABRt9BCN9Y+YnS5lZh8H4ryZVTmFIYONv+8BwkcCABcTyUnjEc1TR8Mx +6ZdlzUpJtG0rnNfFdWpZ9KdN7ld4IwjQOIkT45kdWz8WnQc41QzzDoNfToGoYew yVu5M8vub3F6STGW2g5BOxn2VWVg9YuIHFhb+JIatiDmuQBmgbSptTaKKVfwcutW jNFXcz1BKhllt35WsJKY8ZgaLf0yhX/nxc16RnheWJm+JwNWwApSKDw8s/W0j7hd CQWWr8i3pv672zkPYZwBy1BkPchjym+SpOdfvz02Qw04atoqH78pT0/mAaqHttOD gvrbnhvv4k2yWp5V0k4yr9190y82z3s= -----END CERTIFICATE-----Generated at Sat Aug 23 15:11:32 2025 by rpki-client