$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b2a9ff29-d3bf-302e-be61-1f49ba6e87b0.roa File: b2a9ff29-d3bf-302e-be61-1f49ba6e87b0.roa (raw, json) Hash identifier: rK4oztB7lcdJlGA1ovLst1y6fbbPBTUPiC54Birqpl0= Subject key identifier: 6A:3D:F1:93:62:60:16:3D:46:DF:BD:2E:BC:56:2F:7E:2E:82:46:28 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584B0746C4F3ABEB921565E93430 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b2a9ff29-d3bf-302e-be61-1f49ba6e87b0.roa Signing time: Sat 30 Aug 2025 13:00:42 +0000 ROA not before: Sat 30 Aug 2025 13:00:42 +0000 ROA not after: Fri 28 Nov 2025 14:00:42 +0000 asID: 203 IP address blocks: 168.87.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Sep 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:07:46:c4:f3:ab:eb:92:15:65:e9:34:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 30 13:00:42 2025 GMT Not After : Nov 28 14:00:42 2025 GMT Subject: CN=30fda9d3-6140-4ea6-ae96-2c12621fc599 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:7d:15:6c:cd:6b:35:04:ec:60:63:65:94:cc: ec:aa:97:c0:19:4d:23:47:a5:e6:67:5a:6a:25:6f: 9e:ea:38:02:a2:f1:30:47:fa:59:91:bb:2c:bd:13: 3c:77:8b:e1:b6:84:e1:8c:9b:07:9f:7c:3c:b1:a3: 23:fa:ac:82:30:80:bc:94:72:8f:b5:91:cb:2e:e3: 75:44:47:2b:7f:63:74:64:28:3e:9a:73:ed:09:38: 53:15:23:3f:ba:83:21:1d:11:41:e2:57:20:e7:c9: ab:94:b6:11:e3:8e:a6:75:83:06:64:d2:28:1a:5f: 49:bd:55:35:2f:2b:9f:75:5f:16:cb:ec:5f:17:79: a0:57:1e:71:30:0e:0d:1c:de:0c:6d:5f:59:8d:3d: 0e:71:aa:6d:cf:e3:43:73:79:b3:a1:23:0b:b8:32: 79:2c:ca:2a:85:2e:40:5d:79:88:9e:11:94:30:3b: 35:d1:f7:ba:fe:71:82:bf:88:e2:ff:4b:cc:b6:c8: ac:19:46:49:72:4b:c3:17:03:8d:2f:54:02:48:3f: 6f:1a:f4:29:39:8c:4d:31:bb:2f:7c:15:ab:b5:d9: 27:13:e7:f3:06:9b:8f:95:49:c8:e1:c1:a6:b4:b3: 0a:73:69:8d:ce:43:2c:be:1c:d1:ed:de:53:7c:d9: 7a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:3D:F1:93:62:60:16:3D:46:DF:BD:2E:BC:56:2F:7E:2E:82:46:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b2a9ff29-d3bf-302e-be61-1f49ba6e87b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.51.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:2d:b8:e2:01:e2:ad:22:82:09:47:4b:3b:0c:b3:8a:e4:3b: 3a:e7:a2:a4:4b:12:e2:c3:0d:b9:30:b0:b3:44:68:15:5c:25: 1a:2f:0d:8f:6e:f2:14:9f:63:30:c5:93:bf:ce:97:2a:47:ac: 81:46:f3:54:d8:81:cf:88:7b:21:65:70:15:44:ba:81:f7:78: 9e:c7:f4:5f:56:ec:12:b1:93:2e:33:9e:e1:50:5b:21:ec:7b: 1f:d9:13:96:53:a4:55:0b:d9:60:d9:91:fd:02:55:75:65:fe: 11:fb:2e:fa:7b:dc:69:e7:dc:b5:d5:e6:ec:34:92:9e:c5:0c: 8a:42:3c:b9:a8:3d:a4:e3:05:94:60:33:96:7a:5d:e3:be:29: 46:f9:e7:01:55:f4:91:c4:e9:23:e9:f2:75:a0:98:07:59:06: 59:9a:2d:c9:11:d1:1e:4d:70:96:4e:05:b9:fd:ce:ad:73:f8: 64:dd:6d:ad:71:b0:18:53:95:ba:b6:46:f4:4f:7d:73:9f:9a: 4d:b0:4f:36:e3:64:50:b2:f1:9c:ee:ae:5d:43:0c:a0:48:c3: 05:8d:32:7d:15:69:9d:67:dd:6e:55:02:5e:3a:29:e3:a5:79: 8d:fe:cb:7c:43:36:9a:1d:10:61:32:d4:48:34:23:eb:52:a8: d5:0f:6f:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsHRsTzq+uSFWXpNDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDgzMDEzMDA0MloXDTI1MTEyODE0MDA0MlowLzEtMCsGA1UEAxMk MzBmZGE5ZDMtNjE0MC00ZWE2LWFlOTYtMmMxMjYyMWZjNTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoH0VbM1rNQTsYGNllMzsqpfAGU0jR6XmZ1pq JW+e6jgCovEwR/pZkbssvRM8d4vhtoThjJsHn3w8saMj+qyCMIC8lHKPtZHLLuN1 REcrf2N0ZCg+mnPtCThTFSM/uoMhHRFB4lcg58mrlLYR446mdYMGZNIoGl9JvVU1 LyufdV8Wy+xfF3mgVx5xMA4NHN4MbV9ZjT0Ocaptz+NDc3mzoSMLuDJ5LMoqhS5A XXmInhGUMDs10fe6/nGCv4ji/0vMtsisGUZJckvDFwONL1QCSD9vGvQpOYxNMbsv fBWrtdknE+fzBpuPlUnI4cGmtLMKc2mNzkMsvhzR7d5TfNl6cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGo98ZNiYBY9Rt+9LrxWL34ugkYoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYjJhOWZmMjktZDNiZi0z MDJlLWJlNjEtMWY0OWJhNmU4N2IwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFczMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGItuOIB4q0igglHSzsMs4rkOzrnoqRLEuLDDbkwsLNEaBVcJRovDY9u 8hSfYzDFk7/OlypHrIFG81TYgc+IeyFlcBVEuoH3eJ7H9F9W7BKxky4znuFQWyHs ex/ZE5ZTpFUL2WDZkf0CVXVl/hH7Lvp73Gnn3LXV5uw0kp7FDIpCPLmoPaTjBZRg M5Z6XeO+KUb55wFV9JHE6SPp8nWgmAdZBlmaLckR0R5NcJZOBbn9zq1z+GTdba1x sBhTlbq2RvRPfXOfmk2wTzbjZFCy8Zzurl1DDKBIwwWNMn0VaZ1n3W5VAl46KeOl eY3+y3xDNpodEGEy1Eg0I+tSqNUPbzI= -----END CERTIFICATE-----Generated at Fri Sep 5 10:05:04 2025 by rpki-client