$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/34510429-d958-3a78-990a-f80264d9221e.roa File: 34510429-d958-3a78-990a-f80264d9221e.roa (raw, json) Hash identifier: HYD17iJgXyVFBj9v5PyGRJz+v8k0pgC/gdSs7mf5aMg= Subject key identifier: FA:BB:EF:34:C0:C7:DB:85:FE:8B:E6:0A:EF:9E:43:49:CF:88:56:C3 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584A6826042C4BF63B6030EE3960 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/34510429-d958-3a78-990a-f80264d9221e.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 3360 IP address blocks: 168.87.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:26:04:2c:4b:f6:3b:60:30:ee:39:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=5579ea05-ebee-477e-a757-6a68e8399828 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:cc:85:90:cd:40:5d:e4:ce:4d:79:d1:8b:58: 23:bc:ee:f0:4f:d7:cf:b3:1d:72:5f:af:e8:df:15: 04:6a:9e:82:ce:8b:56:e7:5d:3e:21:02:02:01:cc: 51:70:c5:19:e8:14:7f:5f:9e:4e:3c:36:8f:33:4b: bc:04:86:34:da:2b:84:eb:3b:ba:e4:56:01:53:17: fb:57:20:ef:6d:0d:45:58:7f:6c:95:6c:50:99:2f: 93:8f:8a:af:68:1a:73:b7:db:f1:b0:a1:fb:ce:5b: 0d:67:2e:de:7a:f4:92:8f:5f:3d:50:bb:cc:a3:63: 68:3f:6a:d7:2f:ad:d2:28:df:82:79:60:e7:72:4d: d1:9d:7e:e4:37:51:0f:14:ce:1e:93:ef:ec:04:c0: 01:e5:fd:1d:3a:58:29:99:e0:96:d7:a1:f0:6e:92: fc:78:74:66:f0:f2:36:e3:f7:c3:23:4f:a5:00:b2: 1a:97:c9:07:b0:cf:1e:62:ae:05:40:a9:a9:2b:7b: 28:b5:ad:4b:d3:3c:d9:15:01:0c:ad:76:a9:94:a3: 56:06:d5:40:a3:df:4a:91:35:01:c1:bb:7c:43:fe: e4:78:c9:f6:3a:41:5b:b1:d6:36:2c:62:4f:33:4d: 7e:08:0b:da:ea:08:07:04:c6:4a:82:76:d8:91:31: 5f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:BB:EF:34:C0:C7:DB:85:FE:8B:E6:0A:EF:9E:43:49:CF:88:56:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/34510429-d958-3a78-990a-f80264d9221e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:34:00:5b:3e:8d:bf:11:a9:d1:fd:1c:88:84:31:0b:ad:95: da:5c:d0:7c:93:c5:c3:03:9f:0d:bb:b8:59:a2:82:12:de:77: 40:62:9d:6c:f7:ab:70:cc:1c:d4:65:3d:76:89:a6:85:99:8c: b8:3b:73:11:c4:ff:e2:83:57:0e:69:16:74:8e:ea:7f:e2:4f: e9:1d:73:10:87:33:d1:12:3f:a0:87:a6:90:67:57:28:5c:f1: 75:d4:b4:cd:90:07:db:85:8e:dd:6c:16:62:2f:e0:69:a6:b7: 4b:6e:b1:cf:fa:5b:ee:62:fa:e2:8c:a6:f0:bf:41:9b:66:bc: 61:1f:8f:f1:70:56:73:56:dc:6b:56:a5:87:35:15:bb:2b:db: c3:ad:8b:03:60:13:54:c2:32:3c:c5:26:c7:7a:a3:c5:da:e1: 57:01:40:23:34:e7:6c:42:78:48:3d:16:16:f6:3f:76:03:c9: 31:fe:40:a9:cf:1f:b7:f0:c6:b1:db:08:b1:8d:af:51:d5:40: 7e:cc:c8:81:ee:f1:fa:a1:c4:a3:89:76:33:4c:84:99:6c:e2: 5b:0d:75:84:89:1b:1e:f8:c0:a9:53:76:62:c3:6e:1d:7a:af: cd:62:d0:48:ff:39:dd:60:54:df:f9:49:8c:23:2d:a5:cc:16: e2:aa:bb:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpoJgQsS/Y7YDDuOWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk NTU3OWVhMDUtZWJlZS00NzdlLWE3NTctNmE2OGU4Mzk5ODI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsyFkM1AXeTOTXnRi1gjvO7wT9fPsx1yX6/o 3xUEap6CzotW510+IQICAcxRcMUZ6BR/X55OPDaPM0u8BIY02iuE6zu65FYBUxf7 VyDvbQ1FWH9slWxQmS+Tj4qvaBpzt9vxsKH7zlsNZy7eevSSj189ULvMo2NoP2rX L63SKN+CeWDnck3RnX7kN1EPFM4ek+/sBMAB5f0dOlgpmeCW16HwbpL8eHRm8PI2 4/fDI0+lALIal8kHsM8eYq4FQKmpK3sota1L0zzZFQEMrXaplKNWBtVAo99KkTUB wbt8Q/7keMn2OkFbsdY2LGJPM01+CAva6ggHBMZKgnbYkTFfIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPq77zTAx9uF/ovmCu+eQ0nPiFbDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMzQ1MTA0MjktZDk1OC0z YTc4LTk5MGEtZjgwMjY0ZDkyMjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqFdIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHQ0AFs+jb8RqdH9HIiEMQutldpc0HyTxcMDnw27uFmighLed0BinWz3 q3DMHNRlPXaJpoWZjLg7cxHE/+KDVw5pFnSO6n/iT+kdcxCHM9ESP6CHppBnVyhc 8XXUtM2QB9uFjt1sFmIv4Gmmt0tusc/6W+5i+uKMpvC/QZtmvGEfj/FwVnNW3GtW pYc1Fbsr28OtiwNgE1TCMjzFJsd6o8Xa4VcBQCM052xCeEg9Fhb2P3YDyTH+QKnP H7fwxrHbCLGNr1HVQH7MyIHu8fqhxKOJdjNMhJls4lsNdYSJGx74wKlTdmLDbh16 r81i0Ej/Od1gVN/5SYwjLaXMFuKqu4k= -----END CERTIFICATE-----Generated at Sun Jul 27 01:45:10 2025 by rpki-client