$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/db9a5c89-a8ed-3494-9c0c-50c19474fd10.roa File: db9a5c89-a8ed-3494-9c0c-50c19474fd10.roa (raw, json) Hash identifier: Ao3PXFJyntOCPQ6rA9cwkI0/lYshPZ8foGGfdCbOx98= Subject key identifier: AD:5D:75:B9:56:43:C7:1B:6F:2C:0A:A5:22:A2:51:A1:1C:B4:3E:EB Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584A8C70D2076184C2E47C71FA80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/db9a5c89-a8ed-3494-9c0c-50c19474fd10.roa Signing time: Thu 17 Jul 2025 13:01:04 +0000 ROA not before: Thu 17 Jul 2025 13:01:04 +0000 ROA not after: Wed 15 Oct 2025 13:01:04 +0000 asID: 16509 IP address blocks: 168.87.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 01 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:70:d2:07:61:84:c2:e4:7c:71:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jul 17 13:01:04 2025 GMT Not After : Oct 15 13:01:04 2025 GMT Subject: CN=b65ad325-7a60-4106-b614-6a6bbd7123a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:78:5f:3f:1d:d5:b1:b5:53:8d:0e:c1:bd:f5: 77:7b:6a:d6:e1:d3:88:28:7f:15:2c:96:a3:93:04: 8b:22:7c:ed:c5:ae:a0:6a:d8:1a:e9:ab:83:69:19: ad:de:52:e0:05:3e:c3:1d:8d:74:3a:7a:e0:2f:9f: 3d:f9:8c:e8:1a:ba:8c:52:5c:1a:e2:76:ab:fb:8b: b4:17:bc:6e:e7:d6:bb:af:55:ad:41:d4:4c:39:75: 2a:6d:5e:33:0d:20:3c:cd:3c:a8:ea:54:a8:be:99: f4:02:79:24:da:86:b2:56:6b:f0:e5:28:89:de:fa: a3:c7:ef:66:a1:9e:d8:a7:26:b3:0a:0f:da:e4:ea: 7f:e1:ab:8f:6b:ac:21:67:e6:15:cf:1d:8a:44:0a: bf:b7:32:80:e1:ef:33:5f:c4:9c:05:be:f3:d8:a5: 3a:80:39:5d:43:34:1c:24:5c:6a:1b:b2:f1:23:f8: ab:2f:04:66:86:b1:1f:1c:1b:eb:4a:dd:ed:18:78: 45:26:19:7d:69:b8:1a:73:9d:06:a5:00:83:6c:79: 15:49:e1:ce:f6:42:4e:ff:e7:08:17:77:d6:ef:2b: 60:ae:c6:b1:c9:49:23:c5:62:e3:fd:bb:d1:31:0e: 9c:ae:8b:d2:31:28:42:ba:99:d2:12:c2:88:a0:c8: 6b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:5D:75:B9:56:43:C7:1B:6F:2C:0A:A5:22:A2:51:A1:1C:B4:3E:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/db9a5c89-a8ed-3494-9c0c-50c19474fd10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:89:fe:e0:cd:42:d9:d9:54:59:2f:89:a4:55:c7:bc:89:22: 2c:dd:20:76:d8:86:18:64:ae:a2:4e:12:5f:36:91:40:1d:55: 78:88:c9:ca:9d:68:16:cb:17:d3:86:9b:cd:84:c8:53:18:88: 67:99:03:2f:30:06:ca:ae:eb:f0:50:43:e8:45:be:cf:fe:5b: af:f5:45:c2:6d:ef:18:9a:cf:de:0d:f4:af:87:a8:bb:3e:09: ef:c9:47:1b:ed:eb:46:44:5b:19:f1:39:1b:5d:ee:f3:3e:ad: 8a:95:eb:9b:71:e4:ff:f0:c7:91:fb:f0:20:f0:20:e5:6c:76: cf:f3:4d:31:19:92:fa:b0:da:37:d5:c9:3c:4b:f8:6d:e7:f6: 0b:1c:95:03:8e:19:4c:e0:af:12:bb:c8:8a:d8:c0:f4:fe:c2: c8:1a:3d:b8:b3:d6:38:b1:07:c0:0a:97:ef:c9:56:9c:49:c4: 23:6f:88:1c:ae:37:ee:01:3f:5f:07:72:d2:16:2a:33:42:a7: 60:39:9e:12:3a:e9:ef:18:58:c9:28:f4:87:a4:9f:3a:72:c7: a9:ec:85:99:34:5d:d9:2e:71:4b:37:4e:85:db:0c:47:42:f9: 29:53:27:86:21:1b:73:80:3c:e7:71:69:b7:3f:61:96:f9:93: 33:04:ad:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMcNIHYYTC5Hxx+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk YjY1YWQzMjUtN2E2MC00MTA2LWI2MTQtNmE2YmJkNzEyM2E4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HhfPx3VsbVTjQ7BvfV3e2rW4dOIKH8VLJaj kwSLInztxa6gatga6auDaRmt3lLgBT7DHY10OnrgL589+YzoGrqMUlwa4nar+4u0 F7xu59a7r1WtQdRMOXUqbV4zDSA8zTyo6lSovpn0Ankk2oayVmvw5SiJ3vqjx+9m oZ7YpyazCg/a5Op/4auPa6whZ+YVzx2KRAq/tzKA4e8zX8ScBb7z2KU6gDldQzQc JFxqG7LxI/irLwRmhrEfHBvrSt3tGHhFJhl9abgac50GpQCDbHkVSeHO9kJO/+cI F3fW7ytgrsaxyUkjxWLj/bvRMQ6crovSMShCupnSEsKIoMhr0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK1ddblWQ8cbbywKpSKiUaEctD7rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZGI5YTVjODktYThlZC0z NDk0LTljMGMtNTBjMTk0NzRmZDEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFccMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEuJ/uDNQtnZVFkviaRVx7yJIizdIHbYhhhkrqJOEl82kUAdVXiIycqd aBbLF9OGm82EyFMYiGeZAy8wBsqu6/BQQ+hFvs/+W6/1RcJt7xiaz94N9K+HqLs+ Ce/JRxvt60ZEWxnxORtd7vM+rYqV65tx5P/wx5H78CDwIOVsds/zTTEZkvqw2jfV yTxL+G3n9gsclQOOGUzgrxK7yIrYwPT+wsgaPbiz1jixB8AKl+/JVpxJxCNviByu N+4BP18HctIWKjNCp2A5nhI66e8YWMko9Ieknzpyx6nshZk0XdkucUs3ToXbDEdC +SlTJ4YhG3OAPOdxabc/YZb5kzMErUY= -----END CERTIFICATE-----Generated at Wed Jul 30 23:44:04 2025 by rpki-client