$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bfce70a6-ea5e-3841-b180-fedb11670175.roa File: bfce70a6-ea5e-3841-b180-fedb11670175.roa (raw, json) Hash identifier: 1kvJO68rG3nIMErfopojTp9nCpfCsdCCtCfltBbHi+4= Subject key identifier: 12:69:AF:0F:C1:A6:7B:F4:1E:A4:D9:FF:63:D4:BE:BC:B0:DC:43:3F Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584AD23BD8F5B8A6B8B1F3CBDA00 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bfce70a6-ea5e-3841-b180-fedb11670175.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 3356 IP address blocks: 206.164.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:d8:f5:b8:a6:b8:b1:f3:cb:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=f71271b7-2354-465b-85dc-3962bc3b9b00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:27:82:cf:9c:78:0c:e4:bf:fe:14:8a:45:57: 71:f8:72:30:f7:7c:2f:bd:12:73:a3:84:64:99:7e: 79:8c:a9:6f:f6:18:e2:e2:87:dd:02:b1:17:1b:b2: 73:d0:48:51:9f:8d:1b:56:b2:0f:53:52:d9:ce:0d: 2c:10:23:b9:0c:19:41:5c:54:7f:f9:ee:ad:df:e6: 2f:58:8b:b9:d4:6d:6d:89:d7:fb:a5:b8:82:28:65: 6c:55:13:ce:12:e5:47:92:40:4e:a1:28:4b:b3:53: 70:bc:a1:bb:d2:80:63:31:cd:1a:91:fa:de:59:ea: f3:b5:88:37:1b:86:70:85:b7:85:e5:e6:66:2c:e2: 8a:36:71:41:5c:5e:04:b1:62:61:2a:a8:66:bf:96: f3:5d:51:4e:a2:04:75:4f:97:1f:ab:23:2e:ee:39: e5:33:28:18:6b:95:8b:cb:2a:9f:be:d2:ad:fe:9b: 54:a4:46:33:04:5a:eb:b0:cd:07:b0:7c:bd:e4:29: 9e:2e:52:77:09:d4:f3:e9:45:24:11:52:66:88:89: df:60:4a:b6:02:2f:b4:89:1c:27:f5:1e:b0:8c:6b: d5:f5:55:9b:f2:32:d7:e8:18:90:9c:b0:63:9a:83: ac:79:a3:57:7e:25:d5:3d:05:6a:a4:41:3a:6c:a6: c9:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:69:AF:0F:C1:A6:7B:F4:1E:A4:D9:FF:63:D4:BE:BC:B0:DC:43:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bfce70a6-ea5e-3841-b180-fedb11670175.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 206.164.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:17:c7:46:1f:35:bb:3c:a2:a3:bc:e4:e1:ce:1d:13:2a:20: dc:0d:fc:23:8b:81:94:54:61:0d:c3:db:7e:69:f7:e6:ba:72: e1:ca:21:36:b3:11:19:5f:c5:3a:a3:84:ac:95:f0:8d:51:c0: 35:fb:2e:f0:db:fd:92:e3:45:4b:30:2c:8f:45:2d:26:ed:3c: 85:00:3f:71:e2:58:70:06:74:80:6c:83:7d:7d:f0:85:c5:6d: ab:ba:ee:f3:21:ae:e0:4d:54:55:39:4f:c8:bb:e9:ab:49:ec: df:49:2c:ad:29:8a:b9:8f:a4:67:8d:ce:de:e3:61:44:12:9a: fb:b3:5f:0f:58:9a:f4:3b:87:41:c9:97:15:37:c5:a6:1d:18: 10:1a:22:2a:a5:16:8c:2b:d1:85:be:f9:20:c1:7f:d1:3a:48: 27:23:01:61:c2:03:87:82:90:27:a1:e7:44:52:a0:0d:2b:cd: d3:8d:f2:7a:28:ab:b3:47:67:30:85:f9:1e:f3:c9:6d:d7:03: 59:ae:d6:fd:4f:48:64:d3:45:33:58:2f:54:6c:c0:e2:13:5d: 0a:b1:2b:01:19:05:45:b0:6e:98:72:43:57:fa:d8:c9:e7:b2: fd:8f:72:7f:e5:89:43:03:71:b5:f3:7c:84:0b:98:3a:a6:3f: f0:ad:4b:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO9j1uKa4sfPL2gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk ZjcxMjcxYjctMjM1NC00NjViLTg1ZGMtMzk2MmJjM2I5YjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyeCz5x4DOS//hSKRVdx+HIw93wvvRJzo4Rk mX55jKlv9hji4ofdArEXG7Jz0EhRn40bVrIPU1LZzg0sECO5DBlBXFR/+e6t3+Yv WIu51G1tidf7pbiCKGVsVRPOEuVHkkBOoShLs1NwvKG70oBjMc0akfreWerztYg3 G4ZwhbeF5eZmLOKKNnFBXF4EsWJhKqhmv5bzXVFOogR1T5cfqyMu7jnlMygYa5WL yyqfvtKt/ptUpEYzBFrrsM0HsHy95CmeLlJ3CdTz6UUkEVJmiInfYEq2Ai+0iRwn 9R6wjGvV9VWb8jLX6BiQnLBjmoOseaNXfiXVPQVqpEE6bKbJywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBJprw/Bpnv0HqTZ/2PUvryw3EM/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYmZjZTcwYTYtZWE1ZS0z ODQxLWIxODAtZmVkYjExNjcwMTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzqSoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJwXx0YfNbs8oqO85OHOHRMqINwN/COLgZRUYQ3D235p9+a6cuHKITaz ERlfxTqjhKyV8I1RwDX7LvDb/ZLjRUswLI9FLSbtPIUAP3HiWHAGdIBsg3198IXF bau67vMhruBNVFU5T8i76atJ7N9JLK0pirmPpGeNzt7jYUQSmvuzXw9YmvQ7h0HJ lxU3xaYdGBAaIiqlFowr0YW++SDBf9E6SCcjAWHCA4eCkCeh50RSoA0rzdON8noo q7NHZzCF+R7zyW3XA1mu1v1PSGTTRTNYL1RswOITXQqxKwEZBUWwbphyQ1f62Mnn sv2Pcn/liUMDcbXzfIQLmDqmP/CtS1o= -----END CERTIFICATE-----Generated at Sat Aug 23 15:16:56 2025 by rpki-client