$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6c7c0aa8-3479-31d2-bbe3-1470d1c21b2f.roa File: 6c7c0aa8-3479-31d2-bbe3-1470d1c21b2f.roa (raw, json) Hash identifier: kk1zPsaOyoD1uBiIbfna3uNcrwwl+qJ58SoVJs4xsBg= Subject key identifier: D0:EF:48:76:11:D6:C1:4E:43:61:30:5A:EA:F9:44:48:12:2F:F9:64 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584AAB2662E40B7D34A456D0AB80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6c7c0aa8-3479-31d2-bbe3-1470d1c21b2f.roa Signing time: Mon 28 Jul 2025 13:01:04 +0000 ROA not before: Mon 28 Jul 2025 13:01:04 +0000 ROA not after: Sun 26 Oct 2025 13:01:04 +0000 asID: 203 IP address blocks: 168.87.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 01 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ab:26:62:e4:0b:7d:34:a4:56:d0:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jul 28 13:01:04 2025 GMT Not After : Oct 26 13:01:04 2025 GMT Subject: CN=996f63c1-867f-4509-9ad4-c3178694e4ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:88:ba:1f:ec:81:7d:ba:41:33:04:5e:58:3e: cc:83:f4:7c:37:0c:ea:49:b1:a2:16:83:33:22:1a: 77:72:ec:4d:7b:b8:3e:66:41:97:cb:ac:cc:5a:2d: b3:d1:7c:dc:4f:ac:3b:b6:a2:ff:89:a6:ae:68:dd: d2:8d:9a:a0:cb:c6:ae:ad:d0:19:ec:fe:5f:74:9c: 31:24:9b:6a:b5:14:16:6e:2e:c1:4e:8b:5d:5a:0d: c7:7a:a4:2e:6d:01:79:4e:1e:b7:80:a4:61:b2:78: 1d:98:44:9e:2c:f9:24:4f:d6:39:32:c4:f0:5d:b4: ee:3f:9f:ce:eb:f7:83:87:ed:f4:93:5b:64:62:ef: 1e:f0:74:6b:5b:19:00:40:75:b2:d8:87:4a:0f:05: 84:cf:eb:79:ce:bd:fa:f6:36:01:db:69:86:9f:81: a0:51:e7:a3:8b:03:cb:e2:6f:b0:c1:3d:a9:57:0e: 5e:e4:c0:08:08:b3:a0:45:da:09:32:1c:dd:1d:3c: 11:8c:b3:11:fd:15:f3:3b:ed:2a:63:c2:ec:4a:ae: 93:95:ec:2d:b7:f8:1a:aa:d3:31:be:35:de:c9:dc: 4d:00:cd:23:7f:b5:47:30:06:45:34:28:b1:86:e3: 88:7f:70:53:ff:81:27:59:08:12:9e:9e:87:c7:23: 25:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:EF:48:76:11:D6:C1:4E:43:61:30:5A:EA:F9:44:48:12:2F:F9:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6c7c0aa8-3479-31d2-bbe3-1470d1c21b2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:ed:86:8b:a3:08:da:0c:3f:db:be:49:f2:07:d3:c4:cd:6a: 7f:26:85:a1:de:b1:57:ac:9f:4f:61:ae:b7:fc:53:34:6f:0f: a9:1d:a2:5c:3c:08:56:e6:2c:e7:90:6f:7f:5e:40:42:67:36: 25:45:01:38:fe:85:37:6a:00:f6:22:6a:12:6c:ee:c4:d2:fe: 01:58:88:08:c3:a9:44:5a:c2:5c:d1:20:1c:c1:00:8d:4e:41: 6d:42:81:c2:9c:70:23:2f:09:ca:11:b5:b5:75:cd:3c:26:1f: 6c:94:b2:79:6b:2e:09:29:dd:2b:6b:03:6a:02:1b:92:de:6b: 05:a3:08:02:7c:8c:a6:10:f3:dd:41:5b:bc:4d:f8:2d:ec:e1: 93:07:25:7f:aa:ed:7b:1d:38:18:b8:74:ec:2f:bf:17:0f:f8: fa:e7:be:01:bc:11:27:7e:b1:9f:9d:43:a8:96:5d:ac:e9:76: 0c:dc:66:cb:99:a6:e9:05:ba:3f:ee:5c:9b:3a:f8:97:69:aa: e1:7e:29:92:28:95:1f:f9:60:ed:ed:c9:aa:d6:6f:3d:fa:6e: 1c:59:05:1e:d9:4d:e7:3c:4b:14:54:b0:3e:26:ae:5d:7e:54: 66:69:df:1b:28:99:d3:58:8d:75:bb:e8:4d:90:84:18:32:49: b3:7e:93:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqrJmLkC300pFbQq4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDcyODEzMDEwNFoXDTI1MTAyNjEzMDEwNFowLzEtMCsGA1UEAxMk OTk2ZjYzYzEtODY3Zi00NTA5LTlhZDQtYzMxNzg2OTRlNGZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIi6H+yBfbpBMwReWD7Mg/R8NwzqSbGiFoMz Ihp3cuxNe7g+ZkGXy6zMWi2z0XzcT6w7tqL/iaauaN3SjZqgy8aurdAZ7P5fdJwx JJtqtRQWbi7BTotdWg3HeqQubQF5Th63gKRhsngdmESeLPkkT9Y5MsTwXbTuP5/O 6/eDh+30k1tkYu8e8HRrWxkAQHWy2IdKDwWEz+t5zr369jYB22mGn4GgUeejiwPL 4m+wwT2pVw5e5MAICLOgRdoJMhzdHTwRjLMR/RXzO+0qY8LsSq6Tlewtt/gaqtMx vjXeydxNAM0jf7VHMAZFNCixhuOIf3BT/4EnWQgSnp6HxyMltwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNDvSHYR1sFOQ2EwWur5REgSL/lkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNmM3YzBhYTgtMzQ3OS0z MWQyLWJiZTMtMTQ3MGQxYzIxYjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqFcIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADPthoujCNoMP9u+SfIH08TNan8mhaHesVesn09hrrf8UzRvD6kdolw8 CFbmLOeQb39eQEJnNiVFATj+hTdqAPYiahJs7sTS/gFYiAjDqURawlzRIBzBAI1O QW1CgcKccCMvCcoRtbV1zTwmH2yUsnlrLgkp3StrA2oCG5LeawWjCAJ8jKYQ891B W7xN+C3s4ZMHJX+q7XsdOBi4dOwvvxcP+PrnvgG8ESd+sZ+dQ6iWXazpdgzcZsuZ pukFuj/uXJs6+JdpquF+KZIolR/5YO3tyarWbz36bhxZBR7ZTec8SxRUsD4mrl1+ VGZp3xsomdNYjXW76E2QhBgySbN+k9A= -----END CERTIFICATE-----Generated at Wed Jul 30 23:43:16 2025 by rpki-client