$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ef8d7cdf-a9c5-3d5e-bb2f-39647d41300b.roa File: ef8d7cdf-a9c5-3d5e-bb2f-39647d41300b.roa (raw, json) Hash identifier: nDND9BMYxf9TSpYlOF2UTrBUi2Ci66+ip3B3h8WJ4G0= Subject key identifier: 1C:F6:35:CF:2A:2F:49:27:DA:B5:57:CC:E9:07:82:46:61:5A:53:19 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584A6C55D72C38EEA3EB6C835700 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ef8d7cdf-a9c5-3d5e-bb2f-39647d41300b.roa Signing time: Sun 06 Jul 2025 01:00:49 +0000 ROA not before: Sun 06 Jul 2025 01:00:49 +0000 ROA not after: Sat 04 Oct 2025 01:00:49 +0000 asID: 3356 IP address blocks: 168.87.146.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 01 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6c:55:d7:2c:38:ee:a3:eb:6c:83:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jul 6 01:00:49 2025 GMT Not After : Oct 4 01:00:49 2025 GMT Subject: CN=7d4ffdc4-875b-4ea0-98e6-1ab9734efecb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e6:a4:97:eb:a2:f0:e4:c9:60:41:c2:32:57: 1a:db:df:ca:da:04:81:3f:fb:95:e7:36:79:02:dc: e8:30:fa:8e:87:35:4e:7b:67:9c:63:a0:4f:f9:2f: 6c:d3:51:2c:52:8d:d3:a5:32:47:46:63:ad:a6:1d: 6f:ea:69:4d:e4:d4:77:21:b1:58:d4:ab:6b:c2:f5: a2:24:4b:04:e6:ac:f6:20:35:7a:ac:e5:8f:82:27: dc:ab:58:0b:cc:85:d3:3b:4d:8a:c0:f3:44:27:51: af:8c:2a:3e:ab:d6:e1:e4:4d:ec:fe:c9:29:65:6b: f4:dc:b4:68:72:0f:d9:94:df:4f:9d:ed:99:60:73: 8c:25:45:08:34:a0:a3:41:62:f6:6f:28:b9:9a:64: aa:f8:d6:8f:56:92:ff:8c:0c:14:78:20:22:87:69: bd:7c:44:8a:d0:f4:36:21:33:c0:fc:9b:dd:81:c1: a5:6c:8b:c0:5a:74:1b:82:d0:70:6f:3f:54:3c:a8: b8:61:c7:40:b0:1f:ae:6e:69:7f:6c:0e:23:bb:20: a5:a1:cd:ee:d6:83:65:61:a9:19:6f:08:bf:59:31: 10:ef:5c:00:f1:a0:17:58:9a:9d:2b:33:c1:b1:6d: a9:43:89:8c:32:da:03:48:66:a0:c8:2b:17:14:5d: be:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:F6:35:CF:2A:2F:49:27:DA:B5:57:CC:E9:07:82:46:61:5A:53:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ef8d7cdf-a9c5-3d5e-bb2f-39647d41300b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.146.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:7f:3d:44:e8:6f:bb:6f:aa:a1:ac:f3:17:01:fa:33:d1:20: 6b:6f:72:01:c4:ef:d8:42:e0:f2:cc:30:72:69:7d:d6:fe:1f: 58:35:1b:9b:e9:a7:ef:da:58:af:51:2c:d3:b8:c6:8d:64:79: e6:33:04:36:9f:19:67:2f:3a:e2:c5:b4:6a:13:1c:b0:d9:95: 32:d3:1b:30:43:3e:11:f9:13:e8:a1:9e:39:df:37:8b:26:11: 5d:9f:fc:03:dc:2d:fa:a1:80:1b:50:9e:96:81:11:e0:39:47: 07:16:9c:95:cf:f5:e6:07:77:0c:e7:c0:be:d1:6c:7f:4c:87: c4:7b:fa:60:37:dc:49:b9:9e:cb:40:30:ac:c9:11:91:94:d1: 32:3f:48:2d:e8:2c:53:67:6c:86:6f:43:2e:83:57:09:52:9f: 70:c8:79:97:e7:da:2b:70:26:69:44:e5:8d:52:3c:a4:1d:3d: 75:d9:24:00:08:f9:22:22:96:b6:c2:7d:fa:1a:eb:bb:8c:50: e1:4f:2b:05:ea:cc:a4:e1:ba:14:0f:42:83:0a:9d:c2:c9:ec: 61:30:a0:6a:0b:0a:f4:35:a0:18:ff:32:2d:ab:8c:1b:76:38: 67:cb:df:3c:b7:40:ed:5b:a5:6a:4f:80:f4:a6:e0:33:cc:3c: 4e:7f:56:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpsVdcsOO6j62yDVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDcwNjAxMDA0OVoXDTI1MTAwNDAxMDA0OVowLzEtMCsGA1UEAxMk N2Q0ZmZkYzQtODc1Yi00ZWEwLTk4ZTYtMWFiOTczNGVmZWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreakl+ui8OTJYEHCMlca29/K2gSBP/uV5zZ5 AtzoMPqOhzVOe2ecY6BP+S9s01EsUo3TpTJHRmOtph1v6mlN5NR3IbFY1KtrwvWi JEsE5qz2IDV6rOWPgifcq1gLzIXTO02KwPNEJ1GvjCo+q9bh5E3s/skpZWv03LRo cg/ZlN9Pne2ZYHOMJUUINKCjQWL2byi5mmSq+NaPVpL/jAwUeCAih2m9fESK0PQ2 ITPA/JvdgcGlbIvAWnQbgtBwbz9UPKi4YcdAsB+ubml/bA4juyCloc3u1oNlYakZ bwi/WTEQ71wA8aAXWJqdKzPBsW2pQ4mMMtoDSGagyCsXFF2+RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBz2Nc8qL0kn2rVXzOkHgkZhWlMZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZWY4ZDdjZGYtYTljNS0z ZDVlLWJiMmYtMzk2NDdkNDEzMDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqFeSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH9/PUTob7tvqqGs8xcB+jPRIGtvcgHE79hC4PLMMHJpfdb+H1g1G5vp p+/aWK9RLNO4xo1keeYzBDafGWcvOuLFtGoTHLDZlTLTGzBDPhH5E+ihnjnfN4sm EV2f/APcLfqhgBtQnpaBEeA5RwcWnJXP9eYHdwznwL7RbH9Mh8R7+mA33Em5nstA MKzJEZGU0TI/SC3oLFNnbIZvQy6DVwlSn3DIeZfn2itwJmlE5Y1SPKQdPXXZJAAI +SIilrbCffoa67uMUOFPKwXqzKThuhQPQoMKncLJ7GEwoGoLCvQ1oBj/Mi2rjBt2 OGfL3zy3QO1bpWpPgPSm4DPMPE5/VrE= -----END CERTIFICATE-----Generated at Wed Jul 30 23:39:41 2025 by rpki-client