$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a1d0d491-fe6e-38a5-87b7-0a94cc1a0825.roa File: a1d0d491-fe6e-38a5-87b7-0a94cc1a0825.roa (raw, json) Hash identifier: fKAKMJZIcjyIcbpsbsLxuJPhxABSmeBqKN6fKmOSP6A= Subject key identifier: C5:77:5B:78:E7:B1:00:0A:C1:DC:28:44:F5:CA:77:A2:47:16:4D:90 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584A6826044AB13B32BC3B06FD80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a1d0d491-fe6e-38a5-87b7-0a94cc1a0825.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 202 IP address blocks: 168.87.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:26:04:4a:b1:3b:32:bc:3b:06:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=d5859020-b904-4685-9971-1e83618411e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:30:6b:68:df:94:0a:dc:80:4f:3f:a3:59:13: 75:5e:de:66:c1:9e:c5:06:34:25:b8:49:20:ee:42: 40:23:a2:df:7e:f7:5e:57:2f:72:4a:22:ba:dd:2b: 36:d8:98:81:4c:64:40:bf:a5:6a:8c:17:6b:44:ed: 86:29:23:d1:5b:0d:3d:59:fb:63:c7:33:47:81:55: 55:6a:16:9e:f4:cd:f6:a1:fb:6e:aa:5f:12:71:09: a0:22:2c:23:83:37:44:89:78:90:cf:37:3a:c8:bf: c2:89:e4:1d:0a:41:19:c2:b1:e9:1a:a3:5f:af:19: d0:3d:ea:67:33:af:ba:c6:c5:06:ed:81:b0:61:e6: d2:90:11:c3:05:61:fd:8b:d5:d6:d5:73:59:10:af: 17:6c:02:6c:dc:3e:89:0d:ab:04:96:a2:4d:e6:f9: 66:a4:8e:dd:81:17:91:a9:f0:82:da:bc:1f:31:7f: d4:e7:a5:0d:0d:30:8f:55:a4:4e:83:5e:40:24:5e: b4:d7:b2:e2:d9:52:96:22:5a:af:0a:c8:57:f3:1e: f2:7e:03:07:e2:6e:32:d7:9d:7c:3e:2f:83:46:d8: 66:01:ad:d7:c4:d7:09:ee:ed:0d:ef:e0:44:32:02: e6:26:8f:64:83:30:c5:d1:7e:03:31:c5:e6:c0:35: 27:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:77:5B:78:E7:B1:00:0A:C1:DC:28:44:F5:CA:77:A2:47:16:4D:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a1d0d491-fe6e-38a5-87b7-0a94cc1a0825.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:19:20:2c:da:c3:65:af:1a:81:73:8b:bb:ff:f6:fe:20:67: 13:15:f2:4e:7f:a0:34:29:c3:35:1d:7d:4a:77:88:60:e5:12: 2f:1b:7e:41:fc:b4:48:58:f6:7c:cf:46:d2:98:75:c0:95:88: 90:a7:ad:b3:b4:f6:b1:30:c9:05:6d:0b:46:32:45:23:c6:33: 87:f9:71:78:36:87:ee:e1:ad:53:32:3e:e4:f9:78:b5:b0:1c: 62:8a:69:61:a9:75:61:8b:43:59:36:4c:47:3e:fc:52:bd:c2: 94:59:e1:27:00:17:0b:a5:5d:23:52:ab:13:0f:d9:a5:d2:c3: 2b:0a:e4:6f:2c:44:50:b4:e9:59:7f:a2:96:cf:30:38:00:db: 26:81:f1:34:f6:cf:0f:20:15:1d:e7:c2:89:e5:80:e8:5c:05: c6:cd:02:f6:36:66:1a:8f:b5:15:4c:6d:91:8b:fa:f9:ea:60: 0b:3b:23:f2:c6:25:4d:06:11:37:3c:d1:dd:6c:d1:7a:cc:92: c6:4b:30:3a:6a:75:ab:aa:14:83:9f:3b:15:0f:4a:e1:9c:b7: db:e1:c2:1b:d0:58:13:5d:00:87:80:d4:dd:81:65:37:7b:75: 9e:1d:26:1d:db:af:7a:68:27:ca:02:1d:d1:58:fc:b4:8e:45: 00:94:57:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpoJgRKsTsyvDsG/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk ZDU4NTkwMjAtYjkwNC00Njg1LTk5NzEtMWU4MzYxODQxMWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTBraN+UCtyATz+jWRN1Xt5mwZ7FBjQluEkg 7kJAI6LffvdeVy9ySiK63Ss22JiBTGRAv6VqjBdrRO2GKSPRWw09WftjxzNHgVVV ahae9M32oftuql8ScQmgIiwjgzdEiXiQzzc6yL/CieQdCkEZwrHpGqNfrxnQPepn M6+6xsUG7YGwYebSkBHDBWH9i9XW1XNZEK8XbAJs3D6JDasElqJN5vlmpI7dgReR qfCC2rwfMX/U56UNDTCPVaROg15AJF6017Li2VKWIlqvCshX8x7yfgMH4m4y1518 Pi+DRthmAa3XxNcJ7u0N7+BEMgLmJo9kgzDF0X4DMcXmwDUnpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMV3W3jnsQAKwdwoRPXKd6JHFk2QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYTFkMGQ0OTEtZmU2ZS0z OGE1LTg3YjctMGE5NGNjMWEwODI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqFdIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHcZICzaw2WvGoFzi7v/9v4gZxMV8k5/oDQpwzUdfUp3iGDlEi8bfkH8 tEhY9nzPRtKYdcCViJCnrbO09rEwyQVtC0YyRSPGM4f5cXg2h+7hrVMyPuT5eLWw HGKKaWGpdWGLQ1k2TEc+/FK9wpRZ4ScAFwulXSNSqxMP2aXSwysK5G8sRFC06Vl/ opbPMDgA2yaB8TT2zw8gFR3nwonlgOhcBcbNAvY2ZhqPtRVMbZGL+vnqYAs7I/LG JU0GETc80d1s0XrMksZLMDpqdauqFIOfOxUPSuGct9vhwhvQWBNdAIeA1N2BZTd7 dZ4dJh3br3poJ8oCHdFY/LSORQCUV6A= -----END CERTIFICATE-----Generated at Mon Jul 21 08:02:30 2025 by rpki-client