$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3e9825d2-b9e7-35c9-a9e7-98d7aeffb375.roa File: 3e9825d2-b9e7-35c9-a9e7-98d7aeffb375.roa (raw, json) Hash identifier: SjSKLmr/fqSagYQjc1wxIZgyROBRPjxxmQLxC3WhhHM= Subject key identifier: AC:55:87:94:82:2D:7C:C2:BC:7A:98:A8:87:D3:E2:93:21:C7:EF:AC Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584A6C55D73A519919E02485AC00 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3e9825d2-b9e7-35c9-a9e7-98d7aeffb375.roa Signing time: Sun 06 Jul 2025 01:00:49 +0000 ROA not before: Sun 06 Jul 2025 01:00:49 +0000 ROA not after: Sat 04 Oct 2025 01:00:49 +0000 asID: 202 IP address blocks: 168.87.146.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6c:55:d7:3a:51:99:19:e0:24:85:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jul 6 01:00:49 2025 GMT Not After : Oct 4 01:00:49 2025 GMT Subject: CN=45a1233b-cb1f-45ec-9b9d-8337c4264a67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:74:24:3f:33:ef:89:7f:22:5c:c3:8b:39:4d: a3:91:0f:5a:f8:05:87:c9:c4:ea:e1:2f:1b:0b:29: ad:0e:49:cb:ff:27:90:88:42:51:4e:83:6b:d3:7a: 02:57:7e:eb:47:7c:9a:5e:76:30:68:74:50:c1:73: af:e3:ea:bc:cb:77:c1:d5:fb:ce:fc:0f:00:e2:54: d2:d7:ed:e5:4c:b5:c1:2e:68:13:4f:84:90:7e:d0: 05:2d:a1:96:a0:9c:6f:94:c1:95:2c:43:c5:22:a0: 99:a0:ca:19:3f:72:8e:be:f9:48:9e:3d:d0:ec:11: 43:4d:fc:4e:ed:76:56:f4:a5:2d:fc:0b:f8:9d:0f: 3c:4f:5a:30:73:b0:00:83:4b:42:f4:8d:fe:45:5e: 1b:56:15:d9:0f:8d:51:ef:6a:60:1c:b5:d1:5b:d0: c9:84:a3:4f:e8:e5:16:65:8d:a3:7c:40:79:64:d4: df:1e:5e:fa:69:5f:52:e9:0d:ed:d0:65:e0:eb:a7: 26:12:89:b3:f4:85:4f:09:71:a0:64:28:34:bb:64: 14:67:0b:96:62:61:6e:4d:2a:e2:98:a9:4a:8d:3a: c4:30:82:40:69:d3:60:be:93:f7:bb:62:03:c6:9f: cc:c2:11:60:cc:33:52:0f:12:00:d5:31:56:72:5f: fc:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:55:87:94:82:2D:7C:C2:BC:7A:98:A8:87:D3:E2:93:21:C7:EF:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3e9825d2-b9e7-35c9-a9e7-98d7aeffb375.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.146.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:98:3e:88:e2:04:e5:7a:9b:37:1d:19:18:cc:20:d4:fe:11: 00:4e:f5:fa:e4:77:8b:7d:c7:0f:88:1e:46:20:e9:a5:2a:d2: fd:ed:02:19:13:93:07:fd:b3:38:5e:55:8b:4e:42:3a:e9:9e: 66:d4:c8:a0:16:48:45:af:0d:96:5e:39:01:85:c2:41:5d:00: 22:64:f6:0d:e9:16:6d:82:f3:5c:d5:ed:31:d5:71:1a:c5:46: dc:e6:3a:05:31:65:f4:f0:04:3b:e7:9d:17:59:ea:f1:ee:3d: f9:be:e3:a9:1d:55:c3:82:f1:43:20:4c:18:53:6f:20:1a:ed: d6:ed:2d:b7:f8:be:cd:58:5a:0b:06:f4:3a:a0:f5:2c:ff:95: 92:a6:9a:c2:b5:a5:07:a6:6f:80:dc:ca:b3:37:79:20:98:83: 67:96:5b:1c:73:91:25:48:db:6d:90:a0:30:2c:8f:31:fc:d8: 5f:6a:61:aa:be:72:3d:cf:3d:d8:6a:df:c8:b5:84:7e:30:39: e2:a9:e0:5c:f3:7a:7b:5a:41:7e:8b:a7:76:df:c5:f4:22:0f: 19:cd:6e:54:3b:17:f6:f4:8b:62:34:02:76:eb:89:bf:e4:35: b7:18:1c:a0:92:30:88:c5:c0:0a:57:d5:b7:ee:93:ac:35:01: 2b:3d:0c:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpsVdc6UZkZ4CSFrAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDcwNjAxMDA0OVoXDTI1MTAwNDAxMDA0OVowLzEtMCsGA1UEAxMk NDVhMTIzM2ItY2IxZi00NWVjLTliOWQtODMzN2M0MjY0YTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnQkPzPviX8iXMOLOU2jkQ9a+AWHycTq4S8b CymtDknL/yeQiEJRToNr03oCV37rR3yaXnYwaHRQwXOv4+q8y3fB1fvO/A8A4lTS 1+3lTLXBLmgTT4SQftAFLaGWoJxvlMGVLEPFIqCZoMoZP3KOvvlInj3Q7BFDTfxO 7XZW9KUt/Av4nQ88T1owc7AAg0tC9I3+RV4bVhXZD41R72pgHLXRW9DJhKNP6OUW ZY2jfEB5ZNTfHl76aV9S6Q3t0GXg66cmEomz9IVPCXGgZCg0u2QUZwuWYmFuTSri mKlKjTrEMIJAadNgvpP3u2IDxp/MwhFgzDNSDxIA1TFWcl/8lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKxVh5SCLXzCvHqYqIfT4pMhx++sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvM2U5ODI1ZDItYjllNy0z NWM5LWE5ZTctOThkN2FlZmZiMzc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqFeSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACWYPojiBOV6mzcdGRjMINT+EQBO9frkd4t9xw+IHkYg6aUq0v3tAhkT kwf9szheVYtOQjrpnmbUyKAWSEWvDZZeOQGFwkFdACJk9g3pFm2C81zV7THVcRrF RtzmOgUxZfTwBDvnnRdZ6vHuPfm+46kdVcOC8UMgTBhTbyAa7dbtLbf4vs1YWgsG 9Dqg9Sz/lZKmmsK1pQemb4DcyrM3eSCYg2eWWxxzkSVI222QoDAsjzH82F9qYaq+ cj3PPdhq38i1hH4wOeKp4FzzentaQX6Lp3bfxfQiDxnNblQ7F/b0i2I0Anbrib/k NbcYHKCSMIjFwApX1bfuk6w1ASs9DHo= -----END CERTIFICATE-----Generated at Mon Jul 21 18:08:26 2025 by rpki-client