$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f408855e-9251-37a2-9fb5-4cba259a98d2.roa File: f408855e-9251-37a2-9fb5-4cba259a98d2.roa (raw, json) Hash identifier: WrpEA14Jrbv0wnoyfkVd6m6fvf/vWSuekivDxJDEVJE= Subject key identifier: 3E:42:BE:4D:A2:0C:35:CF:16:8E:21:4B:D5:0F:B7:92:30:48:39:8D Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285849F17FD57E7D7CF6F3B4EA0F20 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f408855e-9251-37a2-9fb5-4cba259a98d2.roa Signing time: Fri 23 May 2025 01:00:49 +0000 ROA not before: Fri 23 May 2025 01:00:49 +0000 ROA not after: Thu 21 Aug 2025 01:00:49 +0000 asID: 202 IP address blocks: 168.87.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:7f:d5:7e:7d:7c:f6:f3:b4:ea:0f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: May 23 01:00:49 2025 GMT Not After : Aug 21 01:00:49 2025 GMT Subject: CN=7c6be30a-1998-43cb-a7d5-4c450cfc2e8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:86:bb:e4:8b:f7:ef:6f:16:2c:76:5d:94:54: 3c:1d:41:78:f0:11:ec:46:ff:cd:02:ba:c0:e7:e5: a7:f7:60:7a:44:ba:cb:e1:82:c4:01:ab:e5:52:7f: 8d:5a:92:48:a2:0e:a3:80:88:43:83:01:15:49:dd: 2e:cf:e9:35:7d:7c:f4:43:8a:c9:d7:a3:f8:43:fa: b0:ca:8f:10:2d:66:d3:07:fc:ac:e6:ce:ff:42:3f: 62:91:15:f5:f0:23:54:af:28:5a:a1:1f:36:18:fe: 25:c5:71:87:f4:25:fb:cd:3c:a3:ad:6c:dd:42:39: 7d:28:f8:3f:55:a5:8f:39:43:9d:61:60:f6:0e:33: 0b:1b:03:b3:8b:3e:b5:ab:1a:b7:ca:a8:c0:0a:5a: c9:ab:fd:0c:8d:99:c7:21:f2:d5:d9:cd:d1:48:4a: 84:8c:51:14:b3:d7:e1:16:6c:2a:3b:4a:1b:66:bd: ec:04:de:c7:1f:aa:92:7d:43:66:98:c8:06:ca:79: 17:47:7a:e0:47:fd:5d:12:95:9b:ac:80:a9:c5:97: 7e:db:dc:c2:c9:f1:c5:49:c7:54:e0:ac:f4:88:52: 58:46:e1:19:59:2c:25:df:91:07:ec:46:4d:d0:85: 42:6e:17:61:6a:41:86:05:9d:29:3c:07:2a:cc:cf: b2:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:42:BE:4D:A2:0C:35:CF:16:8E:21:4B:D5:0F:B7:92:30:48:39:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f408855e-9251-37a2-9fb5-4cba259a98d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:d1:61:7a:06:d7:e6:35:c7:de:ac:91:20:60:78:32:a7:e3: df:a5:89:38:02:43:2f:66:49:be:87:d7:3e:bf:7e:d3:cc:aa: 4c:60:42:ac:69:b4:a5:1d:a5:56:f5:59:64:78:7f:86:aa:4a: 7f:fb:a3:44:f8:87:ac:7a:41:f4:71:63:8d:77:9a:b1:2a:6c: 33:36:52:5c:e8:77:38:a0:d4:c1:c3:54:95:0b:f4:de:60:57: 4a:3f:a7:59:14:42:82:65:73:84:87:ff:54:2a:47:1b:f3:f6: 90:a5:9f:a1:3f:89:56:eb:ef:6b:7e:44:27:97:df:a6:47:ab: 3c:79:fb:7f:ae:43:a2:be:34:b3:7e:aa:f9:c9:de:f4:05:ff: 26:49:ec:2c:ae:a3:84:45:2d:75:c8:52:48:ed:aa:d2:4e:e0: ea:b3:34:a2:ac:58:fe:92:a4:2e:17:37:c3:41:e7:ca:02:95: 36:5a:a4:81:14:d3:95:89:c5:8b:49:c5:ad:a2:96:12:74:a2: 57:06:03:95:1d:ec:41:bb:de:f8:20:5a:7c:cd:0d:1d:69:10: ba:ec:da:69:36:66:91:5e:33:99:e3:7a:7b:86:c8:ea:f3:da: a5:b1:c0:a8:00:33:64:34:84:f6:4b:31:84:0a:74:89:59:91: 1c:8e:08:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxf9V+fXz287TqDyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk N2M2YmUzMGEtMTk5OC00M2NiLWE3ZDUtNGM0NTBjZmMyZThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYa75Iv3728WLHZdlFQ8HUF48BHsRv/NArrA 5+Wn92B6RLrL4YLEAavlUn+NWpJIog6jgIhDgwEVSd0uz+k1fXz0Q4rJ16P4Q/qw yo8QLWbTB/ys5s7/Qj9ikRX18CNUryhaoR82GP4lxXGH9CX7zTyjrWzdQjl9KPg/ VaWPOUOdYWD2DjMLGwOziz61qxq3yqjAClrJq/0MjZnHIfLV2c3RSEqEjFEUs9fh FmwqO0obZr3sBN7HH6qSfUNmmMgGynkXR3rgR/1dEpWbrICpxZd+29zCyfHFScdU 4Kz0iFJYRuEZWSwl35EH7EZN0IVCbhdhakGGBZ0pPAcqzM+y6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD5Cvk2iDDXPFo4hS9UPt5IwSDmNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZjQwODg1NWUtOTI1MS0z N2EyLTlmYjUtNGNiYTI1OWE5OGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqFeIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIvRYXoG1+Y1x96skSBgeDKn49+liTgCQy9mSb6H1z6/ftPMqkxgQqxp tKUdpVb1WWR4f4aqSn/7o0T4h6x6QfRxY413mrEqbDM2Ulzodzig1MHDVJUL9N5g V0o/p1kUQoJlc4SH/1QqRxvz9pCln6E/iVbr72t+RCeX36ZHqzx5+3+uQ6K+NLN+ qvnJ3vQF/yZJ7Cyuo4RFLXXIUkjtqtJO4OqzNKKsWP6SpC4XN8NB58oClTZapIEU 05WJxYtJxa2ilhJ0olcGA5Ud7EG73vggWnzNDR1pELrs2mk2ZpFeM5njenuGyOrz 2qWxwKgAM2Q0hPZLMYQKdIlZkRyOCEM= -----END CERTIFICATE-----Generated at Mon Jun 30 18:13:20 2025 by rpki-client