$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/7f2faf09-7fbe-3385-9764-a7fba2fd53ff.roa File: 7f2faf09-7fbe-3385-9764-a7fba2fd53ff.roa (raw, json) Hash identifier: qiGRllflxuGVYUkqgIt2HYKoLZ5R8HdljcDCuoNiMuI= Subject key identifier: 2F:4E:C5:4B:E3:F5:4B:C7:1A:B2:F7:B2:0E:FD:A9:FE:F6:27:88:E5 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584A00E79F3B93347FA5BCC3D100 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/7f2faf09-7fbe-3385-9764-a7fba2fd53ff.roa Signing time: Wed 28 May 2025 13:27:27 +0000 ROA not before: Wed 28 May 2025 13:27:27 +0000 ROA not after: Tue 26 Aug 2025 13:27:27 +0000 asID: 3360 IP address blocks: 168.87.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:00:e7:9f:3b:93:34:7f:a5:bc:c3:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: May 28 13:27:27 2025 GMT Not After : Aug 26 13:27:27 2025 GMT Subject: CN=a1321100-e7d5-4bad-b94d-b5a0d862a2f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:8b:54:b3:ab:5b:60:f0:e6:5e:88:0d:8f:9a: cf:3a:c0:c0:4b:97:6d:eb:16:ab:e2:7b:0d:de:cc: 78:8e:e8:cf:9c:e2:48:37:2c:11:dd:e5:12:98:f5: 69:51:0b:e4:c0:db:b0:e0:b1:7f:1c:84:33:59:de: 5f:01:23:9d:a5:0a:2e:6f:95:ab:2f:43:ec:82:cf: 1f:2e:8b:92:b7:75:fa:be:74:53:85:d4:f0:50:d5: c2:5b:dc:0d:49:59:0d:af:75:04:2a:1d:e4:4a:f4: 3e:15:2a:54:71:75:a1:f6:1c:6a:ab:b3:d8:59:23: ec:22:7b:dd:be:46:03:a6:f0:21:fb:50:6b:f6:f2: 40:2c:c8:09:f7:e8:05:bc:a2:42:98:23:07:69:c3: 77:64:78:56:de:74:0a:86:71:58:ab:ae:1b:c8:76: e5:42:27:14:d0:98:be:2c:6f:ee:fb:0c:51:36:1e: c4:dd:f6:70:e5:f4:ec:9d:c3:e2:82:b0:53:71:4d: c8:81:c2:c6:22:0c:74:a5:04:6a:63:73:fc:fa:e1: 10:04:97:80:25:74:54:6d:30:38:2f:fa:ab:a2:57: 49:63:ea:de:49:56:5f:fb:ff:7a:20:04:c1:bf:1d: c0:e3:38:58:fa:ae:c3:d0:48:76:8d:da:ae:b3:d5: f5:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:4E:C5:4B:E3:F5:4B:C7:1A:B2:F7:B2:0E:FD:A9:FE:F6:27:88:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/7f2faf09-7fbe-3385-9764-a7fba2fd53ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:ca:3a:eb:1d:0f:70:5e:d8:ea:7f:3f:3b:63:cf:2f:c8:3e: 29:7c:1e:38:c2:63:b8:4c:fe:d0:2e:75:ff:7a:a2:d2:df:12: 74:ec:7d:37:ca:24:63:09:f8:a3:07:72:19:41:32:85:d5:48: df:3d:11:3e:80:86:8d:78:24:5a:08:0a:6d:99:27:08:2b:fa: 8b:20:95:b4:94:df:6d:b6:a7:5f:29:20:a3:66:fb:8b:22:91: 76:57:5c:80:cb:34:fc:30:e5:be:d8:8c:79:d8:27:53:13:8d: 50:84:c5:51:2f:5a:0f:f9:74:bf:44:40:a3:25:a0:47:43:e0: d9:dd:c1:b3:36:9c:9c:31:49:eb:6b:94:f7:6b:f8:ce:b8:a2: 67:90:30:74:a6:f6:d5:ae:0e:03:83:03:fd:82:ea:6c:c1:38: ad:39:1f:a9:c0:63:fd:40:0b:65:81:a4:9f:46:6a:34:35:35: 9d:1f:ff:55:ea:06:06:78:5f:d1:55:f0:fc:84:b0:59:fd:ff: 80:a3:f3:0e:47:27:7e:3b:fd:8b:03:1b:e7:ad:65:eb:48:83: 55:42:9b:65:2f:d1:51:3c:e4:43:cb:8c:a6:91:61:1c:09:ee: 40:a2:59:01:52:b1:0d:d8:68:1a:38:9f:8c:c5:e6:81:33:06: 38:4e:56:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoA5587kzR/pbzD0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDUyODEzMjcyN1oXDTI1MDgyNjEzMjcyN1owLzEtMCsGA1UEAxMk YTEzMjExMDAtZTdkNS00YmFkLWI5NGQtYjVhMGQ4NjJhMmY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ItUs6tbYPDmXogNj5rPOsDAS5dt6xar4nsN 3sx4jujPnOJINywR3eUSmPVpUQvkwNuw4LF/HIQzWd5fASOdpQoub5WrL0Psgs8f LouSt3X6vnRThdTwUNXCW9wNSVkNr3UEKh3kSvQ+FSpUcXWh9hxqq7PYWSPsInvd vkYDpvAh+1Br9vJALMgJ9+gFvKJCmCMHacN3ZHhW3nQKhnFYq64byHblQicU0Ji+ LG/u+wxRNh7E3fZw5fTsncPigrBTcU3IgcLGIgx0pQRqY3P8+uEQBJeAJXRUbTA4 L/qroldJY+reSVZf+/96IATBvx3A4zhY+q7D0Eh2jdqus9X1WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC9OxUvj9UvHGrL3sg79qf72J4jlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvN2YyZmFmMDktN2ZiZS0z Mzg1LTk3NjQtYTdmYmEyZmQ1M2ZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFcgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABzKOusdD3Be2Op/Pztjzy/IPil8HjjCY7hM/tAudf96otLfEnTsfTfK JGMJ+KMHchlBMoXVSN89ET6Aho14JFoICm2ZJwgr+osglbSU3222p18pIKNm+4si kXZXXIDLNPww5b7YjHnYJ1MTjVCExVEvWg/5dL9EQKMloEdD4NndwbM2nJwxSetr lPdr+M64omeQMHSm9tWuDgODA/2C6mzBOK05H6nAY/1AC2WBpJ9GajQ1NZ0f/1Xq BgZ4X9FV8PyEsFn9/4Cj8w5HJ347/YsDG+etZetIg1VCm2Uv0VE85EPLjKaRYRwJ 7kCiWQFSsQ3YaBo4n4zF5oEzBjhOVjE= -----END CERTIFICATE-----Generated at Sun Jun 8 14:37:56 2025 by rpki-client