$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c433f047-2803-321c-8761-48aeeba70555.roa File: c433f047-2803-321c-8761-48aeeba70555.roa (raw, json) Hash identifier: Pt39ks0/18TIXNTGRaWbuWz0smyjdIDJq2KlpcTv0EE= Subject key identifier: A0:B8:80:65:88:7C:84:B4:03:78:E0:A9:95:5D:53:4C:DD:D4:1C:23 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584A8575F861DA128E15934429B8 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c433f047-2803-321c-8761-48aeeba70555.roa Signing time: Tue 15 Jul 2025 01:00:49 +0000 ROA not before: Tue 15 Jul 2025 01:00:49 +0000 ROA not after: Mon 13 Oct 2025 01:00:49 +0000 asID: 14618 IP address blocks: 168.87.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 01 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:85:75:f8:61:da:12:8e:15:93:44:29:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jul 15 01:00:49 2025 GMT Not After : Oct 13 01:00:49 2025 GMT Subject: CN=b4bd4736-1eeb-435a-9ac4-73f2919c7e51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:17:a8:c2:78:4b:46:a7:b3:d9:c3:13:24:1d: 27:9a:96:2c:9d:3c:b6:ed:ad:e6:45:a2:ae:de:52: a5:74:c2:a3:64:fa:75:6e:e9:d7:97:42:9d:3a:20: 4d:51:c0:09:05:c0:bf:fc:88:03:f7:aa:dc:57:16: 19:d5:d6:ac:36:81:36:69:82:b4:8c:67:b9:90:c7: 7a:42:20:c1:6e:ae:55:f1:f7:a9:45:6f:6b:dd:8b: 22:69:0d:49:d9:09:9f:ea:55:7b:2c:25:65:2f:dd: d9:41:c2:c0:c7:32:ab:84:c9:17:23:18:7a:d6:55: a3:67:71:f2:05:92:11:85:8e:4a:8f:f2:00:1f:7f: 77:59:ae:b4:52:fe:34:7c:2b:f3:6c:d6:d4:33:b4: fa:85:55:0a:9c:77:ef:76:a7:a5:79:f2:a2:9d:eb: da:35:c8:a1:51:a4:9a:f9:15:ca:8b:a3:b2:40:62: 49:5f:07:cc:13:54:be:9a:14:76:65:28:33:d5:d3: 97:14:37:19:d3:70:71:ce:f7:ec:1c:5e:d4:88:76: 36:22:3f:8e:2f:46:a0:25:9e:4b:1e:6a:fd:29:15: d0:a4:55:cb:cb:98:ee:cb:7d:8d:5c:12:53:d8:39: 54:87:4c:58:be:ff:d8:49:6d:65:fe:a8:bd:4e:34: b6:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:B8:80:65:88:7C:84:B4:03:78:E0:A9:95:5D:53:4C:DD:D4:1C:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c433f047-2803-321c-8761-48aeeba70555.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:53:a2:20:33:98:f1:dc:cf:03:e5:fe:4e:4d:73:ce:e4:9b: bf:7a:06:d2:f9:d1:44:ff:64:bb:66:8c:93:74:af:b8:93:d4: e2:95:69:df:b2:19:ac:ce:b3:ab:e5:3c:19:9c:81:94:af:cc: 65:41:cf:b2:cf:7a:c0:43:5b:ac:fc:58:60:fe:29:90:8b:59: 0d:75:dc:ad:36:d0:52:92:9a:a5:f4:33:63:8e:9e:96:9c:26: f5:00:01:5a:32:c5:a6:72:75:df:ea:0d:db:1b:2c:ff:27:59: 88:b3:3e:f5:6a:8b:35:1d:d4:d3:96:56:61:60:2f:24:50:24: f4:01:54:be:40:34:7e:57:41:85:ec:76:f4:bc:78:0e:ed:0b: 2b:13:05:e8:83:76:0f:f6:0a:32:64:7a:ac:87:8f:b7:59:df: 4c:37:a6:09:a8:4d:93:0e:61:41:5d:9e:1a:b4:fc:2a:5c:be: 75:c1:30:f7:f2:43:43:75:49:38:21:f3:7a:50:21:2a:f8:4f: f0:92:7b:c1:30:e6:e3:48:f4:bc:cf:c4:b6:f2:a1:62:bb:35: 9f:1c:fe:7a:14:b6:fe:d1:cf:71:7c:24:94:c9:31:14:56:83: 3e:60:3b:a1:49:52:c6:a2:c3:8d:69:0d:fe:c5:0b:19:f2:4c: d3:18:54:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqFdfhh2hKOFZNEKbgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDcxNTAxMDA0OVoXDTI1MTAxMzAxMDA0OVowLzEtMCsGA1UEAxMk YjRiZDQ3MzYtMWVlYi00MzVhLTlhYzQtNzNmMjkxOWM3ZTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlReownhLRqez2cMTJB0nmpYsnTy27a3mRaKu 3lKldMKjZPp1bunXl0KdOiBNUcAJBcC//IgD96rcVxYZ1dasNoE2aYK0jGe5kMd6 QiDBbq5V8fepRW9r3YsiaQ1J2Qmf6lV7LCVlL93ZQcLAxzKrhMkXIxh61lWjZ3Hy BZIRhY5Kj/IAH393Wa60Uv40fCvzbNbUM7T6hVUKnHfvdqelefKinevaNcihUaSa +RXKi6OyQGJJXwfME1S+mhR2ZSgz1dOXFDcZ03BxzvfsHF7UiHY2Ij+OL0agJZ5L Hmr9KRXQpFXLy5juy32NXBJT2DlUh0xYvv/YSW1l/qi9TjS2KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKC4gGWIfIS0A3jgqZVdU0zd1BwjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYzQzM2YwNDctMjgwMy0z MjFjLTg3NjEtNDhhZWViYTcwNTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFePMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH9ToiAzmPHczwPl/k5Nc87km796BtL50UT/ZLtmjJN0r7iT1OKVad+y GazOs6vlPBmcgZSvzGVBz7LPesBDW6z8WGD+KZCLWQ113K020FKSmqX0M2OOnpac JvUAAVoyxaZydd/qDdsbLP8nWYizPvVqizUd1NOWVmFgLyRQJPQBVL5ANH5XQYXs dvS8eA7tCysTBeiDdg/2CjJkeqyHj7dZ30w3pgmoTZMOYUFdnhq0/CpcvnXBMPfy Q0N1STgh83pQISr4T/CSe8Ew5uNI9LzPxLbyoWK7NZ8c/noUtv7Rz3F8JJTJMRRW gz5gO6FJUsaiw41pDf7FCxnyTNMYVGc= -----END CERTIFICATE-----Generated at Wed Jul 30 23:46:36 2025 by rpki-client