$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2c0628e4-c490-354d-accf-4bfe429e59c1.roa File: 2c0628e4-c490-354d-accf-4bfe429e59c1.roa (raw, json) Hash identifier: LyNk50R7E/uQ3KzzvqzBV0GsS0jn4l2BMEfslJ7G3aI= Subject key identifier: 54:22:BD:55:F0:DA:86:DE:28:67:2F:F5:B0:33:1B:98:A5:4C:B2:56 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584B047C0BFFC86ED348998D3CC0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2c0628e4-c490-354d-accf-4bfe429e59c1.roa Signing time: Fri 29 Aug 2025 13:00:41 +0000 ROA not before: Fri 29 Aug 2025 13:00:41 +0000 ROA not after: Thu 27 Nov 2025 14:00:41 +0000 asID: 202 IP address blocks: 168.87.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:7c:0b:ff:c8:6e:d3:48:99:8d:3c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 29 13:00:41 2025 GMT Not After : Nov 27 14:00:41 2025 GMT Subject: CN=df12f4cb-984e-4c3b-9ce1-15c2fc880fe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:10:9c:fa:4e:24:85:ca:b4:40:ac:9a:f2:63: 3c:14:8d:17:66:0d:a6:9d:d8:d5:3c:33:9b:18:d5: c8:fc:67:f8:df:fe:92:79:e8:28:6b:7c:c0:0a:d9: b6:9d:c9:16:3f:ef:43:99:bc:a2:95:67:25:5d:b0: e9:70:7a:15:6f:51:af:a9:78:0b:fd:08:6f:7b:1e: 71:7a:b2:05:54:3f:20:8b:a7:ff:a3:bb:e8:d4:da: 02:17:63:91:8f:5b:4b:43:25:8e:85:aa:79:24:2d: 34:f4:63:e9:d0:06:ae:04:bc:69:6f:3f:73:2d:6b: 8e:39:bc:05:63:14:07:ee:18:00:85:11:7b:d4:f0: de:44:e0:8c:cf:14:62:6d:fc:d6:b1:76:a6:bb:fa: 1d:ea:45:5b:0f:a7:92:69:ce:61:d9:fc:0e:1a:37: 29:04:32:6f:a6:3a:73:00:06:30:cd:c3:1e:d7:88: ca:06:35:3a:ae:7e:0f:17:e6:fd:30:30:fd:0b:60: c6:7d:59:21:df:6c:e3:0e:4f:36:33:81:cc:31:9f: 62:11:51:04:8f:ea:af:fd:f7:09:c8:52:a7:91:5a: 35:4e:ab:6a:dd:fa:61:ef:08:a2:74:e5:e0:12:08: 9c:4c:98:a1:b8:54:ab:42:7a:ae:0b:39:1d:77:aa: b5:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:22:BD:55:F0:DA:86:DE:28:67:2F:F5:B0:33:1B:98:A5:4C:B2:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2c0628e4-c490-354d-accf-4bfe429e59c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:ea:34:d0:cc:96:59:ef:e1:20:6d:fb:1c:59:0c:77:76:f2: cc:a4:54:24:7f:d2:8e:0a:42:04:3f:91:38:fc:14:c1:ec:b9: b6:a2:21:32:89:f3:21:32:cd:88:70:53:4e:3f:b8:c1:8d:d5: ac:74:f5:18:d7:ff:b3:dd:69:08:a9:f1:ef:8d:16:74:84:58: 93:79:67:6d:65:31:80:a6:6d:44:65:c0:98:d0:63:ed:2a:e7: f3:ec:03:b0:70:90:46:ba:d8:c3:04:55:65:63:84:d2:18:93: 3a:9c:1f:78:52:d2:fd:ad:6a:94:ef:0a:62:a6:8e:b6:55:05: fa:8b:5a:b4:bd:76:1c:27:77:55:f4:e6:c6:1f:dd:37:2d:39: c6:99:9b:b1:d2:28:c3:4f:ff:9f:49:d5:8c:2c:31:0d:29:83: c7:32:5a:6d:e3:46:d7:93:ea:99:96:43:01:cd:48:64:80:34: d3:e6:67:17:e0:25:11:c2:30:01:5c:20:f6:4b:8d:87:71:47: fc:63:53:70:d2:23:63:21:92:bb:1d:3e:a3:a1:97:fc:75:7d: ac:d9:8a:c9:13:02:ba:16:c5:cb:bf:ef:fe:42:b0:86:97:86: db:e3:cf:b9:a1:ca:1d:01:31:53:10:33:c9:2a:1c:4d:64:3b: fb:8e:d1:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsEfAv/yG7TSJmNPMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk ZGYxMmY0Y2ItOTg0ZS00YzNiLTljZTEtMTVjMmZjODgwZmUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshCc+k4khcq0QKya8mM8FI0XZg2mndjVPDOb GNXI/Gf43/6Seegoa3zACtm2nckWP+9DmbyilWclXbDpcHoVb1GvqXgL/Qhvex5x erIFVD8gi6f/o7vo1NoCF2ORj1tLQyWOhap5JC009GPp0AauBLxpbz9zLWuOObwF YxQH7hgAhRF71PDeROCMzxRibfzWsXamu/od6kVbD6eSac5h2fwOGjcpBDJvpjpz AAYwzcMe14jKBjU6rn4PF+b9MDD9C2DGfVkh32zjDk82M4HMMZ9iEVEEj+qv/fcJ yFKnkVo1Tqtq3fph7wiidOXgEgicTJihuFSrQnquCzkdd6q1JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFQivVXw2obeKGcv9bAzG5ilTLJWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMmMwNjI4ZTQtYzQ5MC0z NTRkLWFjY2YtNGJmZTQyOWU1OWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqFdEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACfqNNDMllnv4SBt+xxZDHd28sykVCR/0o4KQgQ/kTj8FMHsubaiITKJ 8yEyzYhwU04/uMGN1ax09RjX/7PdaQip8e+NFnSEWJN5Z21lMYCmbURlwJjQY+0q 5/PsA7BwkEa62MMEVWVjhNIYkzqcH3hS0v2tapTvCmKmjrZVBfqLWrS9dhwnd1X0 5sYf3TctOcaZm7HSKMNP/59J1YwsMQ0pg8cyWm3jRteT6pmWQwHNSGSANNPmZxfg JRHCMAFcIPZLjYdxR/xjU3DSI2MhkrsdPqOhl/x1fazZiskTAroWxcu/7/5CsIaX htvjz7mhyh0BMVMQM8kqHE1kO/uO0Yw= -----END CERTIFICATE-----Generated at Sat Sep 6 12:24:32 2025 by rpki-client