$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/55683f09-f3e6-35c6-bf48-a4a791b6c0fe.roa File: 55683f09-f3e6-35c6-bf48-a4a791b6c0fe.roa (raw, json) Hash identifier: qrYQkVwoZFxk/ag2mTiv9jBsfSg9QjcUN0VfG1nwlf4= Subject key identifier: 28:10:87:53:A0:D5:72:C8:D1:34:E6:69:F1:6B:CD:B6:1B:B9:B5:2C Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285849F17FC3D2AF6EC7B86D7C4700 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/55683f09-f3e6-35c6-bf48-a4a791b6c0fe.roa Signing time: Fri 23 May 2025 01:00:49 +0000 ROA not before: Fri 23 May 2025 01:00:49 +0000 ROA not after: Thu 21 Aug 2025 01:00:49 +0000 asID: 202 IP address blocks: 168.87.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:7f:c3:d2:af:6e:c7:b8:6d:7c:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: May 23 01:00:49 2025 GMT Not After : Aug 21 01:00:49 2025 GMT Subject: CN=92c807b6-6531-48d0-8a5d-ac9932a9f886 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e2:39:67:c0:10:13:29:d7:48:8d:f0:91:e4: 18:5d:36:e6:fa:e0:48:45:89:e3:6a:fc:d4:84:0c: 61:68:ce:ba:d7:a0:c2:87:81:46:b0:e5:85:82:4e: c9:75:51:90:9b:86:c0:66:5b:e4:98:ec:7f:61:88: 25:07:3a:7b:66:69:50:07:dc:7a:a7:5b:12:a3:4e: 91:35:90:ee:c1:19:d3:78:5b:96:86:8d:12:f7:49: 73:15:d4:10:94:0a:ef:5a:02:14:1e:04:c3:35:da: e9:5a:d1:6b:b8:06:fe:2c:00:8f:2a:2b:5b:ef:a2: c6:0d:5e:0d:f0:70:a7:d6:dc:75:63:1d:66:4f:01: 5b:a9:b8:85:73:c3:b8:8a:00:c8:50:11:36:18:41: 80:b1:48:58:87:3c:ce:15:47:d0:1a:2d:fe:78:fb: ac:e1:98:fe:b5:89:4f:95:9a:22:36:13:59:cb:09: c0:80:c9:0f:da:d7:97:dd:4a:3e:c8:b1:1d:0f:0f: 31:95:7d:c5:71:3f:9e:e8:f1:15:26:ab:b2:5d:f9: 04:42:bf:6c:13:4a:c4:0b:82:48:c6:f1:b5:f6:7f: 4e:b9:f3:61:7b:53:99:68:20:6f:f9:9c:79:b2:0c: 36:b7:8d:f3:89:a7:55:47:66:4a:23:7c:cd:32:8f: a4:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:10:87:53:A0:D5:72:C8:D1:34:E6:69:F1:6B:CD:B6:1B:B9:B5:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/55683f09-f3e6-35c6-bf48-a4a791b6c0fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:3d:e9:95:12:1f:dc:1e:0c:09:0b:c7:25:2a:75:7f:c0:8f: db:92:03:62:3a:08:41:e6:6f:86:b2:3d:c7:60:9e:b2:5b:8d: e8:fc:52:69:ac:7f:e9:b2:88:e6:5f:d1:c8:81:cc:8a:bb:e6: 3d:c0:34:0c:c1:9f:a2:2c:cb:45:66:3c:0f:0f:e2:41:0d:29: ed:99:c8:ef:b6:43:20:27:0e:39:18:4a:61:88:28:d7:4e:98: ea:a3:cd:9d:16:d9:e7:d8:09:ca:8f:bb:f8:3d:6d:f7:68:91: 5f:b1:dd:7f:8c:d3:ef:74:91:2a:54:8d:d2:cc:60:72:24:20: 0b:e0:fc:d9:11:42:43:e9:f1:4f:4d:88:51:88:ed:6f:53:63: 4b:3e:0e:e0:a0:68:dd:7f:91:c4:05:88:ac:56:3b:2c:c7:3f: 6a:7b:69:1d:cd:c5:f0:18:a0:a9:17:e9:ff:40:87:39:be:5e: b9:1a:e2:a6:df:9d:95:63:13:8d:e6:9e:7f:9c:4e:cc:07:84: 93:81:e0:c2:ae:46:0b:4a:2c:78:99:54:53:1b:3d:a0:c7:fa: 86:82:a7:4d:7c:3e:16:e3:51:0f:e6:a4:70:b8:f4:e4:db:33: 0a:c9:de:af:71:1a:64:6d:df:c8:ee:54:28:85:42:d4:e3:cd: 8a:9c:e3:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxf8PSr27HuG18RwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk OTJjODA3YjYtNjUzMS00OGQwLThhNWQtYWM5OTMyYTlmODg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+I5Z8AQEynXSI3wkeQYXTbm+uBIRYnjavzU hAxhaM6616DCh4FGsOWFgk7JdVGQm4bAZlvkmOx/YYglBzp7ZmlQB9x6p1sSo06R NZDuwRnTeFuWho0S90lzFdQQlArvWgIUHgTDNdrpWtFruAb+LACPKitb76LGDV4N 8HCn1tx1Yx1mTwFbqbiFc8O4igDIUBE2GEGAsUhYhzzOFUfQGi3+ePus4Zj+tYlP lZoiNhNZywnAgMkP2teX3Uo+yLEdDw8xlX3FcT+e6PEVJquyXfkEQr9sE0rEC4JI xvG19n9OufNhe1OZaCBv+Zx5sgw2t43ziadVR2ZKI3zNMo+kYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCgQh1Og1XLI0TTmafFrzbYbubUsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNTU2ODNmMDktZjNlNi0z NWM2LWJmNDgtYTRhNzkxYjZjMGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqFeeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFg96ZUSH9weDAkLxyUqdX/Aj9uSA2I6CEHmb4ayPcdgnrJbjej8Umms f+myiOZf0ciBzIq75j3ANAzBn6Isy0VmPA8P4kENKe2ZyO+2QyAnDjkYSmGIKNdO mOqjzZ0W2efYCcqPu/g9bfdokV+x3X+M0+90kSpUjdLMYHIkIAvg/NkRQkPp8U9N iFGI7W9TY0s+DuCgaN1/kcQFiKxWOyzHP2p7aR3NxfAYoKkX6f9Ahzm+Xrka4qbf nZVjE43mnn+cTswHhJOB4MKuRgtKLHiZVFMbPaDH+oaCp018PhbjUQ/mpHC49OTb MwrJ3q9xGmRt38juVCiFQtTjzYqc44Q= -----END CERTIFICATE-----Generated at Sat Jun 7 00:00:42 2025 by rpki-client