$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d489a435-f9e6-39ac-a136-0c755944b063.roa File: d489a435-f9e6-39ac-a136-0c755944b063.roa (raw, json) Hash identifier: GS09BSx3KtibS7pI8kpm0v6XADqUNiNyApxokslXSm0= Subject key identifier: F0:F5:F1:98:E8:47:2D:6E:09:21:CA:DD:EE:A9:02:AC:E8:BD:1E:63 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285849CBCFA0D792E74CB245EB6AC0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d489a435-f9e6-39ac-a136-0c755944b063.roa Signing time: Fri 09 May 2025 13:01:00 +0000 ROA not before: Fri 09 May 2025 13:01:00 +0000 ROA not after: Thu 07 Aug 2025 13:01:00 +0000 asID: 3360 IP address blocks: 168.87.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cb:cf:a0:d7:92:e7:4c:b2:45:eb:6a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: May 9 13:01:00 2025 GMT Not After : Aug 7 13:01:00 2025 GMT Subject: CN=3d416cf0-7f23-4b25-9de0-e0ce0c4801a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f0:e1:b9:ee:d4:e9:07:66:b9:cd:12:1e:9f: ea:2d:73:fa:fa:96:48:11:f7:d5:4a:1b:08:99:e3: 36:1b:eb:df:33:c4:95:4d:98:d6:76:93:00:65:d2: b4:c0:a9:9a:59:e0:5b:de:9e:93:25:35:fa:0b:29: 27:ae:52:ec:65:6d:86:57:24:2a:96:98:06:cb:bf: c4:cd:dc:aa:0f:c7:ba:0b:ab:e7:8a:e8:c7:54:c2: 30:60:a9:91:a5:e2:7d:f5:f0:7e:e3:47:3e:8d:67: 31:50:30:4b:6d:0b:f3:ab:f5:7c:26:e4:25:85:ec: 43:38:eb:34:86:7b:14:21:b3:4c:ca:b8:1b:58:d4: 62:ff:68:2d:bb:86:31:a6:d1:b3:db:93:f9:7b:87: 4e:9c:d3:fe:12:0e:91:8f:fc:9a:76:94:82:33:dd: db:d2:f0:53:53:bc:a7:48:cc:6d:72:8a:78:c7:6e: cf:37:66:7b:a0:93:bb:ab:91:4e:02:3e:46:15:8a: 8c:26:3e:d8:12:13:7e:b7:9e:04:71:2e:ba:23:5e: 3e:9a:97:90:70:16:3f:13:b0:95:d9:f9:1d:00:70: dc:5d:d1:0b:ac:49:5f:8c:28:00:d5:86:21:c3:54: 52:da:d1:b2:c5:b5:d3:5c:b7:01:f0:da:e4:b8:7c: 44:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:F5:F1:98:E8:47:2D:6E:09:21:CA:DD:EE:A9:02:AC:E8:BD:1E:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d489a435-f9e6-39ac-a136-0c755944b063.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:45:eb:8b:6e:12:dd:26:e1:b0:8d:7d:fe:92:72:db:19:4c: 34:e2:b6:1a:7a:97:80:3b:9c:05:2c:3a:3e:d4:cc:15:75:6b: 67:32:5e:76:06:ea:88:ca:69:fd:fb:cc:48:4e:03:fa:4a:da: 0b:6d:22:5f:63:59:fa:63:55:03:c2:f9:a9:e0:47:21:77:88: ac:ef:ef:6a:cb:8f:86:ad:7b:89:0d:fd:49:de:df:11:b0:c1: a9:6b:6b:33:e4:0e:20:98:95:10:48:1c:0f:4f:a9:85:c3:c7: 2e:87:1b:17:9c:0f:53:aa:e6:78:64:aa:b9:e5:17:d9:7d:23: 05:63:1a:21:89:24:72:38:55:d0:93:a8:e2:ef:28:3a:42:12: 3f:a4:b1:06:a8:91:35:d5:0b:76:1f:49:46:7d:e8:82:6e:9b: 89:bd:93:0e:ee:c7:e3:17:5e:e9:ec:a7:eb:f8:30:c6:61:ef: 50:e1:d7:1d:da:e1:49:15:75:1d:25:39:2d:f6:35:9e:23:45: 94:3f:eb:48:77:d8:ce:b0:dc:6e:e3:f3:1d:9a:a9:bd:96:bc: fe:88:bd:84:91:4c:3d:90:d2:b1:e6:ec:fa:15:e0:34:11:95: 45:f4:b7:86:49:aa:18:15:1b:63:f4:2a:23:47:33:cb:94:5e: 53:be:24:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnLz6DXkudMskXrasAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDUwOTEzMDEwMFoXDTI1MDgwNzEzMDEwMFowLzEtMCsGA1UEAxMk M2Q0MTZjZjAtN2YyMy00YjI1LTlkZTAtZTBjZTBjNDgwMWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfDhue7U6Qdmuc0SHp/qLXP6+pZIEffVShsI meM2G+vfM8SVTZjWdpMAZdK0wKmaWeBb3p6TJTX6CyknrlLsZW2GVyQqlpgGy7/E zdyqD8e6C6vniujHVMIwYKmRpeJ99fB+40c+jWcxUDBLbQvzq/V8JuQlhexDOOs0 hnsUIbNMyrgbWNRi/2gtu4YxptGz25P5e4dOnNP+Eg6Rj/yadpSCM93b0vBTU7yn SMxtcop4x27PN2Z7oJO7q5FOAj5GFYqMJj7YEhN+t54EcS66I14+mpeQcBY/E7CV 2fkdAHDcXdELrElfjCgA1YYhw1RS2tGyxbXTXLcB8NrkuHxEYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPD18ZjoRy1uCSHK3e6pAqzovR5jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZDQ4OWE0MzUtZjllNi0z OWFjLWExMzYtMGM3NTU5NDRiMDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqFcIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA1F64tuEt0m4bCNff6SctsZTDTithp6l4A7nAUsOj7UzBV1a2cyXnYG 6ojKaf37zEhOA/pK2gttIl9jWfpjVQPC+angRyF3iKzv72rLj4ate4kN/Une3xGw walrazPkDiCYlRBIHA9PqYXDxy6HGxecD1Oq5nhkqrnlF9l9IwVjGiGJJHI4VdCT qOLvKDpCEj+ksQaokTXVC3YfSUZ96IJum4m9kw7ux+MXXunsp+v4MMZh71Dh1x3a 4UkVdR0lOS32NZ4jRZQ/60h32M6w3G7j8x2aqb2WvP6IvYSRTD2Q0rHm7PoV4DQR lUX0t4ZJqhgVG2P0KiNHM8uUXlO+JNs= -----END CERTIFICATE-----Generated at Sat May 10 09:46:23 2025 by rpki-client