$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bd1b116a-8a05-3b2b-a4c1-f34519b35ee7.roa File: bd1b116a-8a05-3b2b-a4c1-f34519b35ee7.roa (raw, json) Hash identifier: HJiXVZar3INlu8R9fuhOuQrPEALJwkLYOA7dEQhdmIg= Subject key identifier: 79:21:BE:F1:6E:1F:C5:11:5D:8D:8B:21:F3:C9:92:DA:BE:AF:F9:36 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584A7D1603042D7969B4C2822E00 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bd1b116a-8a05-3b2b-a4c1-f34519b35ee7.roa Signing time: Sat 12 Jul 2025 01:00:50 +0000 ROA not before: Sat 12 Jul 2025 01:00:50 +0000 ROA not after: Fri 10 Oct 2025 01:00:50 +0000 asID: 3360 IP address blocks: 168.87.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7d:16:03:04:2d:79:69:b4:c2:82:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jul 12 01:00:50 2025 GMT Not After : Oct 10 01:00:50 2025 GMT Subject: CN=1007de16-2ccd-4052-8be0-1b6133adf3aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:3d:f3:8a:79:ed:03:e4:ff:6a:d3:d1:71:49: d6:ad:49:10:a6:0a:d7:2a:8a:20:93:2f:82:e5:27: f3:29:87:42:48:06:6b:27:4c:f4:c1:09:28:07:d9: f8:62:f4:fe:88:30:47:e2:2e:df:11:e9:df:9c:38: 3f:67:16:3a:b8:63:be:42:d6:1a:9f:97:72:ec:c3: aa:96:6f:99:7b:55:65:45:68:b0:05:7a:62:16:8d: ba:49:ab:bd:0b:87:67:12:3d:c3:d3:7e:1e:c4:39: ff:e2:db:c4:fc:3a:fd:89:05:65:6b:71:de:4b:fb: 0d:3f:aa:8a:f9:99:fd:dc:21:b0:c2:b8:e4:dc:3d: af:66:f9:d4:d6:c6:6c:e9:ec:e8:6f:40:29:64:2f: 5e:d4:4c:44:17:f5:e6:15:ec:f5:a5:2a:3b:59:f2: ae:02:45:d6:14:3f:aa:ed:95:0a:cf:e0:3b:27:cc: 2d:ab:12:8d:43:75:ae:26:4a:b0:01:ba:4f:c8:e6: 7b:2f:47:6c:2e:70:c0:6c:b8:ec:64:d5:92:c1:ac: 38:a8:39:f8:46:eb:ac:38:ed:69:49:8b:02:47:7b: 44:aa:c8:1a:77:ab:b8:60:70:67:dd:b7:65:ec:bf: 65:e2:d0:ff:67:55:ac:4a:e3:32:67:61:7e:e0:91: 85:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:21:BE:F1:6E:1F:C5:11:5D:8D:8B:21:F3:C9:92:DA:BE:AF:F9:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bd1b116a-8a05-3b2b-a4c1-f34519b35ee7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:e0:a0:ba:c3:21:64:df:51:47:a5:9d:7c:34:3a:d5:68:18: 9d:0d:62:f3:50:95:bb:65:a2:d4:d5:39:c1:92:53:4d:9d:4d: 42:1e:ee:e7:e1:64:b0:63:78:42:8a:70:2b:10:fc:99:41:e2: 52:d1:36:9c:12:26:73:be:39:f4:02:b4:d7:21:83:97:a6:c3: 52:60:76:4e:84:96:6a:e0:d4:91:0e:62:a3:ce:fc:d6:4c:70: ee:f7:e6:3f:ee:03:32:6f:c0:92:97:ca:85:30:27:af:5f:55: 48:cf:35:8c:20:f8:a0:97:d3:7b:6f:e8:24:ae:60:be:7a:10: a5:85:b6:0e:c9:c9:10:eb:1e:23:53:66:24:9c:2b:76:ea:7f: 77:a8:ec:3d:be:c1:8d:bc:45:a8:02:10:c0:3c:88:6c:83:20: c7:dd:94:c5:cb:09:ed:88:c9:6e:80:3b:95:85:c7:ab:fd:b9: 53:e4:f0:65:5b:5c:12:e2:20:c9:b7:78:17:6b:9b:00:37:29: b5:58:47:3f:0d:8e:5e:85:72:24:d2:b3:a2:d6:d3:c5:55:2c: df:07:22:8b:c8:f7:1c:63:20:f2:bc:65:45:99:80:65:8e:52: 01:07:5c:de:fe:9b:af:7f:8a:cd:e6:03:54:26:84:e6:56:ad: 58:47:01:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp9FgMELXlptMKCLgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDcxMjAxMDA1MFoXDTI1MTAxMDAxMDA1MFowLzEtMCsGA1UEAxMk MTAwN2RlMTYtMmNjZC00MDUyLThiZTAtMWI2MTMzYWRmM2FhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3D3zinntA+T/atPRcUnWrUkQpgrXKoogky+C 5SfzKYdCSAZrJ0z0wQkoB9n4YvT+iDBH4i7fEenfnDg/ZxY6uGO+QtYan5dy7MOq lm+Ze1VlRWiwBXpiFo26Sau9C4dnEj3D034exDn/4tvE/Dr9iQVla3HeS/sNP6qK +Zn93CGwwrjk3D2vZvnU1sZs6ezob0ApZC9e1ExEF/XmFez1pSo7WfKuAkXWFD+q 7ZUKz+A7J8wtqxKNQ3WuJkqwAbpPyOZ7L0dsLnDAbLjsZNWSwaw4qDn4RuusOO1p SYsCR3tEqsgad6u4YHBn3bdl7L9l4tD/Z1WsSuMyZ2F+4JGFxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHkhvvFuH8URXY2LIfPJktq+r/k2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYmQxYjExNmEtOGEwNS0z YjJiLWE0YzEtZjM0NTE5YjM1ZWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqFf4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFDgoLrDIWTfUUelnXw0OtVoGJ0NYvNQlbtlotTVOcGSU02dTUIe7ufh ZLBjeEKKcCsQ/JlB4lLRNpwSJnO+OfQCtNchg5emw1Jgdk6Elmrg1JEOYqPO/NZM cO735j/uAzJvwJKXyoUwJ69fVUjPNYwg+KCX03tv6CSuYL56EKWFtg7JyRDrHiNT ZiScK3bqf3eo7D2+wY28RagCEMA8iGyDIMfdlMXLCe2IyW6AO5WFx6v9uVPk8GVb XBLiIMm3eBdrmwA3KbVYRz8Njl6FciTSs6LW08VVLN8HIovI9xxjIPK8ZUWZgGWO UgEHXN7+m69/is3mA1QmhOZWrVhHAbY= -----END CERTIFICATE-----Generated at Sun Jul 27 01:39:14 2025 by rpki-client