$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2f927d95-8e81-345f-b68d-ca1e773ce7f3.roa File: 2f927d95-8e81-345f-b68d-ca1e773ce7f3.roa (raw, json) Hash identifier: Q7eXAItTzCdihfYERCi8+v33EYgMl3qqIXIUn2BggRs= Subject key identifier: A4:A3:51:05:CB:D6:DC:4C:CA:4D:AD:65:B8:54:86:3A:AD:F3:0E:F2 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584A77808F85BDF11C748DF29E10 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2f927d95-8e81-345f-b68d-ca1e773ce7f3.roa Signing time: Thu 10 Jul 2025 01:00:51 +0000 ROA not before: Thu 10 Jul 2025 01:00:51 +0000 ROA not after: Wed 08 Oct 2025 01:00:51 +0000 asID: 202 IP address blocks: 168.87.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:77:80:8f:85:bd:f1:1c:74:8d:f2:9e:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jul 10 01:00:51 2025 GMT Not After : Oct 8 01:00:51 2025 GMT Subject: CN=a660eaa5-1cae-48c1-81cc-b9bffc26ff86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:5b:20:89:49:b2:0e:25:31:75:be:3c:ed:90: 31:86:5d:37:87:50:f8:7e:61:b4:bf:b1:b6:32:74: ac:59:3c:47:dc:94:c5:fd:e1:5e:64:d3:01:03:6f: c9:c6:96:21:e9:50:db:f9:a8:9e:09:c5:7c:79:30: ca:5a:9e:dd:11:f0:05:a7:50:47:46:2a:b6:09:cd: 54:ab:b8:9d:71:1c:03:90:45:29:d7:f9:7f:1b:92: 2a:52:e4:20:0b:bf:d6:ad:46:23:e3:fd:11:db:22: 9d:a7:53:29:ae:a2:15:ad:fa:4b:51:be:04:32:38: d0:92:3b:49:b5:8d:0b:ab:b7:72:58:06:8f:be:c1: b7:1b:4d:8b:fa:21:77:25:5a:b1:17:d9:b8:f3:78: 03:e0:07:be:60:91:8a:2f:2d:84:8d:4a:7f:80:0c: 5d:bf:61:cf:9e:fb:e3:73:9b:06:a6:ae:f1:05:5f: a5:91:66:56:c1:4d:2a:c8:52:11:fc:05:e1:5d:65: 25:66:7b:64:81:41:9c:e9:08:db:31:c1:f1:10:3c: a5:1a:8e:0c:2f:cf:d3:f7:e1:1f:a9:9f:61:c8:68: 36:59:e6:be:ec:b3:fc:98:12:1c:25:cf:69:82:fd: c2:3a:09:a3:f2:d1:36:29:24:ef:8a:98:10:00:ae: 6d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:A3:51:05:CB:D6:DC:4C:CA:4D:AD:65:B8:54:86:3A:AD:F3:0E:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2f927d95-8e81-345f-b68d-ca1e773ce7f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:da:8b:d9:e9:b3:91:cd:db:21:d5:e4:a1:a9:47:2e:be:f1: 59:4b:17:3e:68:43:e1:95:92:b9:4a:bd:36:a8:7a:4d:96:68: 00:13:95:fb:29:58:e0:8d:de:5c:83:fe:35:35:94:13:18:25: 69:2c:f2:de:73:1d:ff:47:f0:1c:1a:c3:a5:f6:47:7e:01:cc: d9:78:1f:0d:ee:2f:36:df:10:19:68:9b:47:42:7b:c5:0e:c9: 5f:24:3e:59:43:60:56:55:4e:d3:31:e8:1b:5b:3a:55:93:c3: 8d:ab:b4:20:8c:01:8a:0e:c5:7f:ea:0d:ae:ab:d9:7f:e8:f4: 83:06:b7:ce:0c:89:d4:8f:58:3c:8c:c3:83:47:c9:e3:f2:4e: e8:11:fd:46:1e:5f:d8:32:8c:98:15:38:e2:d2:9d:12:16:6b: 17:6b:bc:df:83:cb:f9:45:bd:4f:aa:47:12:5b:94:e2:d7:c1: 59:e2:91:2f:37:4e:49:7c:52:e8:11:81:04:75:4e:5f:42:e6: 3f:44:2b:3c:74:e9:9b:a3:f6:77:7d:af:ab:b7:78:0c:cb:fe: d6:56:06:b8:27:4c:31:b0:ac:55:70:f0:37:37:73:a3:17:c6: 2a:e1:e6:8b:c0:e6:d7:57:d8:bd:76:14:f4:23:a3:b2:aa:9c: 81:00:2f:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp3gI+FvfEcdI3ynhAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDcxMDAxMDA1MVoXDTI1MTAwODAxMDA1MVowLzEtMCsGA1UEAxMk YTY2MGVhYTUtMWNhZS00OGMxLTgxY2MtYjliZmZjMjZmZjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1sgiUmyDiUxdb487ZAxhl03h1D4fmG0v7G2 MnSsWTxH3JTF/eFeZNMBA2/JxpYh6VDb+aieCcV8eTDKWp7dEfAFp1BHRiq2Cc1U q7idcRwDkEUp1/l/G5IqUuQgC7/WrUYj4/0R2yKdp1MprqIVrfpLUb4EMjjQkjtJ tY0Lq7dyWAaPvsG3G02L+iF3JVqxF9m483gD4Ae+YJGKLy2EjUp/gAxdv2HPnvvj c5sGpq7xBV+lkWZWwU0qyFIR/AXhXWUlZntkgUGc6QjbMcHxEDylGo4ML8/T9+Ef qZ9hyGg2Wea+7LP8mBIcJc9pgv3COgmj8tE2KSTvipgQAK5tnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKSjUQXL1txMyk2tZbhUhjqt8w7yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMmY5MjdkOTUtOGU4MS0z NDVmLWI2OGQtY2ExZTc3M2NlN2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFeoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEPai9nps5HN2yHV5KGpRy6+8VlLFz5oQ+GVkrlKvTaoek2WaAATlfsp WOCN3lyD/jU1lBMYJWks8t5zHf9H8Bwaw6X2R34BzNl4Hw3uLzbfEBlom0dCe8UO yV8kPllDYFZVTtMx6BtbOlWTw42rtCCMAYoOxX/qDa6r2X/o9IMGt84MidSPWDyM w4NHyePyTugR/UYeX9gyjJgVOOLSnRIWaxdrvN+Dy/lFvU+qRxJblOLXwVnikS83 Tkl8UugRgQR1Tl9C5j9EKzx06Zuj9nd9r6u3eAzL/tZWBrgnTDGwrFVw8Dc3c6MX xirh5ovA5tdX2L12FPQjo7KqnIEAL0Q= -----END CERTIFICATE-----Generated at Mon Jul 21 08:03:28 2025 by rpki-client