$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/651c78c9-0fab-33dc-9853-a471d8f178c1.roa File: 651c78c9-0fab-33dc-9853-a471d8f178c1.roa (raw, json) Hash identifier: LkdFJ8yDcP5411wX/l5uPhQbntd9VwMNM/7Hk5JEwu8= Subject key identifier: E6:76:0D:37:D7:94:54:4F:D0:3A:F5:8F:F7:99:87:16:7E:98:3C:B1 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584B047C0BF2342C251830C723C0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/651c78c9-0fab-33dc-9853-a471d8f178c1.roa Signing time: Fri 29 Aug 2025 13:00:41 +0000 ROA not before: Fri 29 Aug 2025 13:00:41 +0000 ROA not after: Thu 27 Nov 2025 14:00:41 +0000 asID: 3356 IP address blocks: 168.87.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Sep 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:7c:0b:f2:34:2c:25:18:30:c7:23:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 29 13:00:41 2025 GMT Not After : Nov 27 14:00:41 2025 GMT Subject: CN=8f87a8a2-bd39-45b0-99b8-d20721d422bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:09:6d:62:22:bf:5c:27:da:9a:76:ce:ae:30: d4:f0:25:0c:ec:1b:06:ef:97:0d:f7:ff:74:e7:16: 13:d8:5f:af:fd:b3:36:81:90:77:2a:94:a2:aa:c5: 48:0d:70:79:66:6e:32:0e:9b:46:56:bb:3d:1e:ae: 34:76:0c:5b:56:7b:c0:a5:8d:13:7c:e0:9f:89:02: e1:f7:19:7d:1a:b4:8e:b4:9d:03:d6:e6:ba:99:a1: 87:cc:05:84:27:98:3b:4d:9e:ef:b8:23:19:21:16: 4f:94:f9:8a:b0:a4:51:35:5a:0f:37:e5:9f:74:fe: d6:0a:73:30:38:0c:2a:4f:ab:ab:d1:04:0c:9d:af: 2d:3c:dc:83:a4:26:a3:a6:7d:b9:28:c2:43:70:0e: f1:8a:ec:79:4b:fa:19:8e:83:92:bd:0a:ac:3b:ba: 9a:e8:37:12:f7:d2:b0:f7:41:66:84:50:29:aa:e5: 00:6c:c3:63:43:9d:8c:11:97:19:68:4c:61:59:7e: 81:b4:0d:66:75:c0:cd:29:a9:49:2c:99:8b:fc:25: 8a:b8:dc:2f:f8:39:71:41:51:ce:3d:2a:c0:55:3a: 31:39:90:9a:ab:09:5d:64:bf:a4:5c:a7:51:f8:07: 31:3c:fc:f1:98:51:18:9d:f1:c2:88:0c:82:85:8d: 18:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:76:0D:37:D7:94:54:4F:D0:3A:F5:8F:F7:99:87:16:7E:98:3C:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/651c78c9-0fab-33dc-9853-a471d8f178c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:f3:24:6f:35:52:fc:df:c0:24:0d:7b:e0:00:82:50:c9:ed: a6:fe:18:29:33:c2:a1:d4:34:4f:6f:81:20:fe:90:d8:39:1d: cd:5f:62:66:d9:15:f6:69:76:ce:f1:30:01:bc:8c:b1:d2:e3: db:5b:b1:aa:0a:55:9c:bd:3c:ec:e4:2a:84:12:20:76:4c:93: 00:4f:01:14:e2:c9:7f:b6:95:ec:d5:23:65:8b:b8:50:0b:ab: 0a:ab:d3:72:fe:69:33:b3:e2:e1:e2:09:3f:dc:27:f7:6a:f5: ff:b8:04:6a:54:82:8c:8f:5c:db:ee:95:cb:cf:fe:dc:f2:fa: 0b:d4:25:7d:9f:e9:9f:9c:1d:e6:d2:17:ce:35:5a:c8:4a:f2: 02:db:3e:85:39:c3:d7:1a:29:32:ba:97:f3:08:c7:6f:32:cb: 82:fa:c7:65:23:79:61:ed:52:96:c6:ca:16:82:b2:d3:7f:ba: 66:ce:87:7a:53:b0:d4:d6:0f:58:a1:4a:38:1c:cc:5f:d4:b0: fe:0a:8f:34:c9:a7:02:59:24:4f:1e:cb:7d:d3:80:ec:8e:e0: d2:be:9e:f7:50:56:50:be:d1:97:dc:5b:ca:31:6a:ce:e9:69: 5b:60:33:41:be:b8:44:a9:05:b5:82:05:c1:7b:26:82:3f:ba: d5:e6:23:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsEfAvyNCwlGDDHI8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk OGY4N2E4YTItYmQzOS00NWIwLTk5YjgtZDIwNzIxZDQyMmJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAltYiK/XCfamnbOrjDU8CUM7BsG75cN9/90 5xYT2F+v/bM2gZB3KpSiqsVIDXB5Zm4yDptGVrs9Hq40dgxbVnvApY0TfOCfiQLh 9xl9GrSOtJ0D1ua6maGHzAWEJ5g7TZ7vuCMZIRZPlPmKsKRRNVoPN+WfdP7WCnMw OAwqT6ur0QQMna8tPNyDpCajpn25KMJDcA7xiux5S/oZjoOSvQqsO7qa6DcS99Kw 90FmhFApquUAbMNjQ52MEZcZaExhWX6BtA1mdcDNKalJLJmL/CWKuNwv+DlxQVHO PSrAVToxOZCaqwldZL+kXKdR+AcxPPzxmFEYnfHCiAyChY0YmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOZ2DTfXlFRP0Dr1j/eZhxZ+mDyxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNjUxYzc4YzktMGZhYi0z M2RjLTk4NTMtYTQ3MWQ4ZjE3OGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqFdEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEbzJG81UvzfwCQNe+AAglDJ7ab+GCkzwqHUNE9vgSD+kNg5Hc1fYmbZ FfZpds7xMAG8jLHS49tbsaoKVZy9POzkKoQSIHZMkwBPARTiyX+2lezVI2WLuFAL qwqr03L+aTOz4uHiCT/cJ/dq9f+4BGpUgoyPXNvulcvP/tzy+gvUJX2f6Z+cHebS F841WshK8gLbPoU5w9caKTK6l/MIx28yy4L6x2UjeWHtUpbGyhaCstN/umbOh3pT sNTWD1ihSjgczF/UsP4KjzTJpwJZJE8ey33TgOyO4NK+nvdQVlC+0ZfcW8oxas7p aVtgM0G+uESpBbWCBcF7JoI/utXmI+s= -----END CERTIFICATE-----Generated at Wed Sep 17 03:59:38 2025 by rpki-client