$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a4ef094a-4e51-382c-adef-2ef2da93ad78.roa File: a4ef094a-4e51-382c-adef-2ef2da93ad78.roa (raw, json) Hash identifier: MCy3n32exs+Tm9hgg3lneaMzQK8KLsxmQx4Td20LSbA= Subject key identifier: 75:CF:CB:79:13:23:39:BB:90:F6:28:2E:DA:02:B6:17:D4:80:C6:BA Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584AD23BC186CD1BAB002125D1E0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a4ef094a-4e51-382c-adef-2ef2da93ad78.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 3356 IP address blocks: 168.87.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:c1:86:cd:1b:ab:00:21:25:d1:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=e763b6dc-d51d-4715-9990-d03e5b550b61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ab:d6:16:0c:e9:e9:0b:bc:7e:ef:7e:64:37: e8:f7:e0:18:9a:f2:a6:5a:72:10:79:ab:f5:9d:3a: a6:1b:5f:db:e5:d1:ac:b9:34:53:94:a1:4d:a1:71: 3e:0b:3d:1d:78:e5:c9:23:d6:01:ac:31:79:80:d3: 5e:9d:b0:06:29:ba:55:66:c6:1b:8b:b2:72:81:ff: b2:b5:ce:ec:13:7d:25:27:1f:c0:fc:09:3c:c2:33: 4a:85:fc:cb:f8:63:c5:a0:aa:ca:70:b3:7f:31:f9: 57:97:a7:52:bf:f1:d9:34:30:53:08:9f:80:c9:f4: e9:6a:70:01:d9:99:2d:e7:9b:b9:bb:dc:e8:6d:d7: 12:3a:00:c5:09:3b:13:22:dc:61:fb:5e:5b:1a:e5: 5a:04:c3:39:0f:f2:5a:62:1a:fb:64:e4:53:1b:e3: 24:05:7f:d7:e6:5f:85:c6:64:3f:19:56:70:45:84: db:0a:84:ec:c1:7f:a8:04:d1:ac:7a:63:72:7f:1a: c7:c8:da:23:e3:87:df:e3:54:87:cd:07:bb:87:1f: 02:d6:fb:4f:17:2c:37:f0:80:6e:63:54:b3:1b:d5: 3d:cc:cd:05:d9:c8:b5:58:03:08:b9:7e:07:66:99: a0:5b:a6:3b:70:3a:98:e5:b3:0e:ea:0f:ec:d4:cf: 78:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:CF:CB:79:13:23:39:BB:90:F6:28:2E:DA:02:B6:17:D4:80:C6:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a4ef094a-4e51-382c-adef-2ef2da93ad78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:97:43:61:c3:c8:91:59:87:c4:00:a8:e5:a3:8a:83:86:de: fa:22:6e:35:ac:d0:48:86:00:75:d8:4c:3c:11:08:d7:b6:88: 44:1f:ed:c2:90:4b:08:d3:95:a5:4e:3f:20:66:99:6f:16:e8: a8:49:cd:6b:2a:3a:71:87:e1:b3:fd:b0:e2:f2:d5:f9:25:25: 9d:fc:37:86:9e:cf:f8:d0:d2:7b:0e:ce:d9:ec:49:e8:42:51: 1e:e5:ea:ef:88:cb:35:df:be:1e:75:27:65:20:2f:f4:d0:53: b8:fb:f6:3f:bf:43:8a:d4:d6:fb:22:97:b6:34:12:8d:36:6e: 4f:7c:5b:40:42:be:87:ef:aa:69:7c:b2:de:ac:5e:af:b1:da: a6:f7:49:c0:7c:d3:c1:93:8e:f4:e2:c3:61:fa:7d:61:22:e6: cc:84:f5:63:03:f1:83:5e:ca:0c:b4:04:f0:f8:a8:ea:15:80: c1:07:4b:0d:0c:90:97:d7:2f:a0:ee:57:6f:9b:21:b4:5c:79: 9a:94:3f:7d:0e:b0:48:c4:f9:5a:44:0a:a4:58:5b:e1:b6:00: e6:bf:81:d5:83:06:cb:62:61:5a:41:4e:82:2b:33:15:96:ae: 42:6a:74:10:34:be:fc:29:24:d2:c5:70:74:cb:08:9c:52:a0: 50:e1:f4:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO8GGzRurACEl0eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk ZTc2M2I2ZGMtZDUxZC00NzE1LTk5OTAtZDAzZTViNTUwYjYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6vWFgzp6Qu8fu9+ZDfo9+AYmvKmWnIQeav1 nTqmG1/b5dGsuTRTlKFNoXE+Cz0deOXJI9YBrDF5gNNenbAGKbpVZsYbi7Jygf+y tc7sE30lJx/A/Ak8wjNKhfzL+GPFoKrKcLN/MflXl6dSv/HZNDBTCJ+AyfTpanAB 2Zkt55u5u9zobdcSOgDFCTsTItxh+15bGuVaBMM5D/JaYhr7ZORTG+MkBX/X5l+F xmQ/GVZwRYTbCoTswX+oBNGsemNyfxrHyNoj44ff41SHzQe7hx8C1vtPFyw38IBu Y1SzG9U9zM0F2ci1WAMIuX4HZpmgW6Y7cDqY5bMO6g/s1M94zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHXPy3kTIzm7kPYoLtoCthfUgMa6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYTRlZjA5NGEtNGU1MS0z ODJjLWFkZWYtMmVmMmRhOTNhZDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqFeeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACmXQ2HDyJFZh8QAqOWjioOG3voibjWs0EiGAHXYTDwRCNe2iEQf7cKQ SwjTlaVOPyBmmW8W6KhJzWsqOnGH4bP9sOLy1fklJZ38N4aez/jQ0nsOztnsSehC UR7l6u+IyzXfvh51J2UgL/TQU7j79j+/Q4rU1vsil7Y0Eo02bk98W0BCvofvqml8 st6sXq+x2qb3ScB808GTjvTiw2H6fWEi5syE9WMD8YNeygy0BPD4qOoVgMEHSw0M kJfXL6DuV2+bIbRceZqUP30OsEjE+VpECqRYW+G2AOa/gdWDBstiYVpBToIrMxWW rkJqdBA0vvwpJNLFcHTLCJxSoFDh9Jg= -----END CERTIFICATE-----Generated at Sat Aug 23 18:10:22 2025 by rpki-client