$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9b298238-0699-38a3-b6f8-c3d43911f009.roa File: 9b298238-0699-38a3-b6f8-c3d43911f009.roa (raw, json) Hash identifier: 0iGmNk3PR6HHvDCZsQGzKYKCF+Bm+HK5UnR1MuUqibo= Subject key identifier: EE:FB:D4:FD:41:DC:DA:C8:19:5D:F4:2E:29:C1:25:51:3B:76:DC:C8 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285849DD48AC6873E2F8C7D730CA70 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9b298238-0699-38a3-b6f8-c3d43911f009.roa Signing time: Thu 15 May 2025 19:13:54 +0000 ROA not before: Thu 15 May 2025 19:13:54 +0000 ROA not after: Wed 13 Aug 2025 19:13:54 +0000 asID: 202 IP address blocks: 168.87.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dd:48:ac:68:73:e2:f8:c7:d7:30:ca:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: May 15 19:13:54 2025 GMT Not After : Aug 13 19:13:54 2025 GMT Subject: CN=c03987d8-868c-4929-99bb-9508cfd3fc67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:0c:b4:c1:5f:95:47:02:ea:48:1d:88:ef:69: 41:d5:9c:ce:e1:c7:20:73:70:83:66:f0:32:d8:2e: 2c:b7:98:7f:6c:70:e9:c0:37:28:40:d2:22:51:13: 3f:6f:51:59:ca:62:45:e4:5d:6e:20:44:85:9a:37: 0b:6f:77:37:5a:c0:18:33:93:1a:20:4c:29:8d:64: a6:25:1f:12:28:8d:fe:da:45:1d:6d:38:81:46:fb: 2d:1e:e4:ee:a9:d9:b4:0a:db:98:d5:35:91:f6:a0: 26:7d:84:07:25:89:95:0d:ad:84:71:16:c3:39:2b: 24:9a:af:f3:cf:37:35:aa:0d:1e:e9:c7:87:a1:a8: b4:a6:d6:ad:84:55:08:4c:08:fc:2c:be:ea:90:e2: e5:1e:5d:7c:58:da:4b:e1:d1:a7:51:85:62:01:c4: 05:20:4e:d2:36:db:a9:e4:55:7a:c0:19:75:d4:62: 9d:0a:27:77:a1:25:5e:ed:d5:ea:26:cb:37:8d:67: be:b3:52:e9:14:05:f3:0f:2e:af:f0:fc:96:23:c2: 85:36:ff:ff:89:df:e8:ce:5d:40:cc:c0:a1:9f:e9: 9f:cb:c1:76:8b:23:d8:eb:fd:e0:12:4f:8f:32:cc: fd:ab:25:85:8b:98:59:8e:09:e9:2f:1d:97:e8:9f: 7d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:FB:D4:FD:41:DC:DA:C8:19:5D:F4:2E:29:C1:25:51:3B:76:DC:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9b298238-0699-38a3-b6f8-c3d43911f009.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:af:6a:6c:e5:a5:2c:73:e4:d9:8a:b0:7e:36:57:2c:c3:44: e5:0f:8a:2c:3c:f2:9c:65:9f:9d:7a:bb:c4:6e:26:50:0e:d9: f5:35:7b:21:22:58:e3:f5:8c:5b:86:01:b2:15:c3:bc:fc:2e: 1d:26:17:01:55:08:dc:d3:1f:42:80:fd:5e:02:31:7b:7b:02: 01:b8:40:e2:5f:ab:85:4d:7a:c9:89:b6:4b:be:e6:82:d5:17: 91:14:1d:44:a7:84:3f:5d:37:c9:0f:4c:c9:8a:6d:e3:59:22: 9b:38:41:b1:30:ba:dc:6f:49:fe:48:29:65:a5:30:1b:08:44: 15:54:a3:0a:13:5b:fa:39:4b:3c:a1:0d:10:b0:e0:b4:29:15: bb:df:02:e3:ca:5b:c7:e5:28:93:0a:44:65:3b:fb:5e:a4:35: 1f:bb:f6:33:46:36:99:26:e4:ae:1a:fe:64:e0:ca:44:69:f7: c1:cb:e1:ac:f8:0e:be:bc:57:0b:5c:22:e4:b8:97:ca:60:36: 87:db:81:75:69:f5:b4:7c:fb:21:37:e4:a6:13:d3:0a:35:78: 41:a8:b0:20:8c:fb:59:ea:d6:1b:e1:ae:2e:06:c7:a8:1d:a4: 16:61:99:2d:87:a0:18:07:d5:c8:05:ac:ea:ad:8c:ab:48:1e: 80:7d:e7:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEndSKxoc+L4x9cwynAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDUxNTE5MTM1NFoXDTI1MDgxMzE5MTM1NFowLzEtMCsGA1UEAxMk YzAzOTg3ZDgtODY4Yy00OTI5LTk5YmItOTUwOGNmZDNmYzY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQy0wV+VRwLqSB2I72lB1ZzO4ccgc3CDZvAy 2C4st5h/bHDpwDcoQNIiURM/b1FZymJF5F1uIESFmjcLb3c3WsAYM5MaIEwpjWSm JR8SKI3+2kUdbTiBRvstHuTuqdm0CtuY1TWR9qAmfYQHJYmVDa2EcRbDOSskmq/z zzc1qg0e6ceHoai0ptathFUITAj8LL7qkOLlHl18WNpL4dGnUYViAcQFIE7SNtup 5FV6wBl11GKdCid3oSVe7dXqJss3jWe+s1LpFAXzDy6v8PyWI8KFNv//id/ozl1A zMChn+mfy8F2iyPY6/3gEk+PMsz9qyWFi5hZjgnpLx2X6J993QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO771P1B3NrIGV30LinBJVE7dtzIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvOWIyOTgyMzgtMDY5OS0z OGEzLWI2ZjgtYzNkNDM5MTFmMDA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFeAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJWvamzlpSxz5NmKsH42VyzDROUPiiw88pxln516u8RuJlAO2fU1eyEi WOP1jFuGAbIVw7z8Lh0mFwFVCNzTH0KA/V4CMXt7AgG4QOJfq4VNesmJtku+5oLV F5EUHUSnhD9dN8kPTMmKbeNZIps4QbEwutxvSf5IKWWlMBsIRBVUowoTW/o5Szyh DRCw4LQpFbvfAuPKW8flKJMKRGU7+16kNR+79jNGNpkm5K4a/mTgykRp98HL4az4 Dr68VwtcIuS4l8pgNofbgXVp9bR8+yE35KYT0wo1eEGosCCM+1nq1hvhri4Gx6gd pBZhmS2HoBgH1cgFrOqtjKtIHoB95zU= -----END CERTIFICATE-----Generated at Mon Jun 30 21:06:15 2025 by rpki-client