$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bd21da79-c196-325c-9eec-91498463fd08.roa File: bd21da79-c196-325c-9eec-91498463fd08.roa (raw, json) Hash identifier: jHlM6kFJ5M5fEBJM8z+03ehRWWVwma3bL+9DkmA1338= Subject key identifier: A2:8E:E6:CA:4C:A8:28:B6:35:2B:62:C0:A8:C9:2D:49:E6:FB:95:2B Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584B004BE24F5A579D76D09FB100 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bd21da79-c196-325c-9eec-91498463fd08.roa Signing time: Thu 28 Aug 2025 01:00:33 +0000 ROA not before: Thu 28 Aug 2025 01:00:33 +0000 ROA not after: Wed 26 Nov 2025 02:00:33 +0000 asID: 14618 IP address blocks: 168.87.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:00:4b:e2:4f:5a:57:9d:76:d0:9f:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 28 01:00:33 2025 GMT Not After : Nov 26 02:00:33 2025 GMT Subject: CN=648f65e4-08ac-4d4f-8029-3c93812a3db8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:bd:32:88:01:d5:7d:57:11:d2:8c:4f:30:59: b1:3a:7c:e6:36:43:27:09:7d:9b:a4:24:e0:1b:3a: a6:9f:bb:7d:95:f5:2d:2b:f1:14:6f:65:93:f8:81: f9:a8:d2:c5:ff:26:bb:f3:aa:62:e1:2c:68:40:15: 85:6b:c9:2d:46:07:a7:dd:08:aa:5f:3d:f2:7b:92: 9a:f9:5a:f2:c7:16:45:4d:ce:65:27:a8:a7:0b:e6: 0d:3a:55:8f:97:79:30:2e:d2:2f:7a:5a:78:2a:b1: f2:69:6f:da:61:eb:f3:ca:dc:5e:a9:d2:1d:f4:b3: 65:a1:68:9b:a6:31:da:8a:31:80:ca:07:9b:d9:18: de:c9:84:03:00:b7:13:f5:a7:57:af:38:e7:f7:95: ad:e9:41:f1:df:38:61:f2:45:0e:a6:0d:28:f9:5a: 3e:e5:17:a4:8e:e7:4e:be:0c:e8:58:02:fb:ea:ad: c6:05:1e:69:fd:7e:1c:bc:81:62:d2:00:1a:86:9d: 7f:6b:c3:47:c8:cc:7f:ef:59:72:5a:8c:28:8e:49: c0:a3:98:6c:8b:28:b8:41:7f:cf:3d:b1:38:69:58: 36:37:69:2d:f6:bd:f6:a3:d3:a5:10:0d:d8:91:b2: 99:d2:00:3c:3b:c6:8e:4d:95:f9:9b:32:b3:74:70: 10:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:8E:E6:CA:4C:A8:28:B6:35:2B:62:C0:A8:C9:2D:49:E6:FB:95:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bd21da79-c196-325c-9eec-91498463fd08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.181.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:f0:58:6b:dd:dd:77:44:4d:d4:ea:41:82:e8:d3:68:75:76: 71:3c:08:c8:cd:f8:3e:0c:c1:a4:05:c8:91:6a:6d:db:bf:b0: 8c:ef:26:2c:44:7f:56:9c:0d:b6:73:5e:f6:e4:1d:4d:ed:60: 49:59:20:81:e7:8d:0f:c9:2b:d4:ac:bb:52:db:ce:a5:11:a2: 9c:c3:1b:e2:d4:9a:8c:bb:31:fa:3c:a6:f6:18:0c:11:7c:d6: d3:44:80:b0:0b:5d:25:c5:fe:25:8e:b2:eb:d9:26:25:45:38: ec:56:04:a1:48:82:60:46:70:c2:5c:8c:5c:72:a3:3b:d2:9b: c3:c1:63:ff:57:14:69:bc:7d:bc:28:4c:88:6e:de:fc:65:21: a0:01:1f:86:62:87:fc:5e:c5:3b:be:42:d4:1c:7a:48:ce:0b: a5:c0:a1:64:44:c9:69:1c:5f:35:70:1f:2f:37:31:f7:cd:09: 41:1e:7f:ed:2a:3d:a0:1b:8e:18:ee:1b:e8:15:b8:d1:fb:89: d4:8b:b1:25:1d:6d:85:d2:39:d0:b0:38:73:31:70:f2:2a:e1: 9a:10:54:09:46:c4:e3:5d:9d:d3:f4:50:dd:76:7b:e9:49:03: e5:c2:af:ad:e6:d9:f6:d0:95:36:8d:ef:f8:9d:84:26:db:bf: 97:6f:2a:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsAS+JPWleddtCfsQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk NjQ4ZjY1ZTQtMDhhYy00ZDRmLTgwMjktM2M5MzgxMmEzZGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzb0yiAHVfVcR0oxPMFmxOnzmNkMnCX2bpCTg Gzqmn7t9lfUtK/EUb2WT+IH5qNLF/ya786pi4SxoQBWFa8ktRgen3QiqXz3ye5Ka +VryxxZFTc5lJ6inC+YNOlWPl3kwLtIvelp4KrHyaW/aYevzytxeqdId9LNloWib pjHaijGAygeb2RjeyYQDALcT9adXrzjn95Wt6UHx3zhh8kUOpg0o+Vo+5RekjudO vgzoWAL76q3GBR5p/X4cvIFi0gAahp1/a8NHyMx/71lyWowojknAo5hsiyi4QX/P PbE4aVg2N2kt9r32o9OlEA3YkbKZ0gA8O8aOTZX5mzKzdHAQxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKKO5spMqCi2NStiwKjJLUnm+5UrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYmQyMWRhNzktYzE5Ni0z MjVjLTllZWMtOTE0OTg0NjNmZDA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFe1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABPwWGvd3XdETdTqQYLo02h1dnE8CMjN+D4MwaQFyJFqbdu/sIzvJixE f1acDbZzXvbkHU3tYElZIIHnjQ/JK9Ssu1LbzqURopzDG+LUmoy7Mfo8pvYYDBF8 1tNEgLALXSXF/iWOsuvZJiVFOOxWBKFIgmBGcMJcjFxyozvSm8PBY/9XFGm8fbwo TIhu3vxlIaABH4Zih/xexTu+QtQcekjOC6XAoWREyWkcXzVwHy83MffNCUEef+0q PaAbjhjuG+gVuNH7idSLsSUdbYXSOdCwOHMxcPIq4ZoQVAlGxONdndP0UN12e+lJ A+XCr63m2fbQlTaN7/idhCbbv5dvKjQ= -----END CERTIFICATE-----Generated at Sun Oct 19 20:41:37 2025 by rpki-client