$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1e7c432f-0fc1-3e4b-9fc9-031d2b984510.roa File: 1e7c432f-0fc1-3e4b-9fc9-031d2b984510.roa (raw, json) Hash identifier: PmYNZLap+202ZJZSJQ5x6ycS/O4FOgyiQfKHpmEM9Kc= Subject key identifier: CD:B8:C1:4E:A0:F9:D1:B6:8C:60:D4:CA:97:7B:41:BA:48:8D:B6:CE Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584A7A4B430BB7FECF5F557C5240 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1e7c432f-0fc1-3e4b-9fc9-031d2b984510.roa Signing time: Fri 11 Jul 2025 01:00:51 +0000 ROA not before: Fri 11 Jul 2025 01:00:51 +0000 ROA not after: Thu 09 Oct 2025 01:00:51 +0000 asID: 203 IP address blocks: 168.87.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 01 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7a:4b:43:0b:b7:fe:cf:5f:55:7c:52:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jul 11 01:00:51 2025 GMT Not After : Oct 9 01:00:51 2025 GMT Subject: CN=b2176b8a-8aaf-40cf-8bcc-472c9f6a6357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:cf:ab:f0:f1:e7:f8:bf:f2:14:b3:b5:06:c6: 02:ef:98:80:80:d0:b5:a6:fe:83:27:39:26:be:f0: 0b:4c:81:80:d6:6c:ed:8f:c9:b0:6e:0b:84:97:0e: 16:7f:18:30:42:c9:46:a0:4c:28:18:d8:40:64:26: fc:c7:07:19:9c:f5:b5:48:1d:4c:5e:07:6b:ae:82: 25:86:49:d4:13:37:2c:39:37:da:40:ca:02:6e:37: e5:41:c8:77:2c:bf:69:12:00:d0:9d:3f:35:79:2c: 01:e6:83:6b:f7:d7:a2:3b:69:08:7d:04:20:69:72: 99:5c:a9:29:0e:0e:61:89:98:9f:ea:1c:72:2c:81: 06:6f:97:ed:cf:6d:39:7c:e9:7b:49:cc:e5:11:11: 1a:67:44:2a:df:d9:77:72:e5:bf:75:36:f5:a7:6b: 28:34:11:99:89:93:ef:83:ea:a3:f6:a5:31:19:6b: b3:35:ba:28:b5:2d:43:15:2a:9c:f8:42:f6:eb:a9: 1e:fe:dc:99:71:54:7a:4b:13:85:f1:0c:50:ee:12: d8:70:7b:8d:41:e7:97:16:25:be:51:0a:f4:3d:9f: 54:67:63:e3:ae:8c:1a:07:da:1a:f2:00:06:c7:ef: b5:d2:a6:2f:8c:b9:ef:ed:ac:fe:36:fa:c7:6d:3f: 4b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:B8:C1:4E:A0:F9:D1:B6:8C:60:D4:CA:97:7B:41:BA:48:8D:B6:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1e7c432f-0fc1-3e4b-9fc9-031d2b984510.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:2c:ec:9a:75:c1:16:6e:69:ad:6c:45:a8:e8:c9:b4:72:af: 55:5b:c5:e9:82:63:e9:4a:58:63:ad:c3:37:a8:c8:3f:aa:a3: 49:3a:7d:e1:f7:ed:0c:00:88:88:03:14:42:fb:2e:e2:e1:48: ca:4d:03:84:72:13:f7:5d:8b:59:05:b7:63:94:24:ff:ad:c2: f8:3f:88:d8:55:72:a2:4d:d3:b6:9a:06:18:14:08:03:23:35: 84:79:e5:42:48:5d:f1:7c:69:16:56:55:a9:f9:45:0a:c9:9b: fb:10:95:c0:ae:0d:f4:32:98:bd:2c:b2:b5:bc:37:a4:6d:c4: db:9b:d3:39:10:0f:8b:a4:a6:04:fd:e2:27:eb:0e:44:ba:06: 2c:31:56:d6:16:7e:e9:f5:9e:bd:9b:21:cd:49:af:88:c7:ef: d5:ee:63:d4:26:cf:12:2a:3e:e4:63:3c:2e:d2:e8:c0:8a:74: 96:a5:60:59:05:0d:27:ab:46:cc:1a:0a:97:9f:58:9b:c0:ef: c0:98:b2:b1:66:98:34:75:f3:8e:83:36:69:e1:d5:9c:38:be: b2:34:54:80:2b:72:84:ca:45:06:89:06:36:7f:e7:0e:03:69: 3c:0a:e5:a8:a6:a2:67:5a:88:d2:dd:33:d7:f4:2f:5d:28:ca: 44:c5:66:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp6S0MLt/7PX1V8UkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDcxMTAxMDA1MVoXDTI1MTAwOTAxMDA1MVowLzEtMCsGA1UEAxMk YjIxNzZiOGEtOGFhZi00MGNmLThiY2MtNDcyYzlmNmE2MzU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnM+r8PHn+L/yFLO1BsYC75iAgNC1pv6DJzkm vvALTIGA1mztj8mwbguElw4WfxgwQslGoEwoGNhAZCb8xwcZnPW1SB1MXgdrroIl hknUEzcsOTfaQMoCbjflQch3LL9pEgDQnT81eSwB5oNr99eiO2kIfQQgaXKZXKkp Dg5hiZif6hxyLIEGb5ftz205fOl7SczlEREaZ0Qq39l3cuW/dTb1p2soNBGZiZPv g+qj9qUxGWuzNbootS1DFSqc+EL266ke/tyZcVR6SxOF8QxQ7hLYcHuNQeeXFiW+ UQr0PZ9UZ2PjrowaB9oa8gAGx++10qYvjLnv7az+NvrHbT9LEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM24wU6g+dG2jGDUypd7QbpIjbbOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMWU3YzQzMmYtMGZjMS0z ZTRiLTlmYzktMDMxZDJiOTg0NTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFekMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH0s7Jp1wRZuaa1sRajoybRyr1VbxemCY+lKWGOtwzeoyD+qo0k6feH3 7QwAiIgDFEL7LuLhSMpNA4RyE/ddi1kFt2OUJP+twvg/iNhVcqJN07aaBhgUCAMj NYR55UJIXfF8aRZWVan5RQrJm/sQlcCuDfQymL0ssrW8N6RtxNub0zkQD4ukpgT9 4ifrDkS6BiwxVtYWfun1nr2bIc1Jr4jH79XuY9QmzxIqPuRjPC7S6MCKdJalYFkF DSerRswaCpefWJvA78CYsrFmmDR1846DNmnh1Zw4vrI0VIArcoTKRQaJBjZ/5w4D aTwK5aimomdaiNLdM9f0L10oykTFZvI= -----END CERTIFICATE-----Generated at Wed Jul 30 23:40:50 2025 by rpki-client