$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2df95585-ce30-38a7-8aba-14f782b87a34.roa File: 2df95585-ce30-38a7-8aba-14f782b87a34.roa (raw, json) Hash identifier: aH1NQPSO6iriHyCakRJZ709XCA7va5kpy3dMNsYJRkU= Subject key identifier: 4A:87:39:FF:11:9E:B1:F3:11:4F:5E:B8:90:9D:02:E6:64:DB:70:3B Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584AC0F3BA11565762FDF1F59500 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2df95585-ce30-38a7-8aba-14f782b87a34.roa Signing time: Tue 05 Aug 2025 08:27:03 +0000 ROA not before: Tue 05 Aug 2025 08:27:03 +0000 ROA not after: Mon 03 Nov 2025 09:27:03 +0000 asID: 16509 IP address blocks: 168.87.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c0:f3:ba:11:56:57:62:fd:f1:f5:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 5 08:27:03 2025 GMT Not After : Nov 3 09:27:03 2025 GMT Subject: CN=dd6ff393-827a-4232-a5ae-6ccbb9323ddd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ed:4b:88:15:51:25:c6:b6:c7:e3:84:2b:a3: 40:d6:0a:e9:05:53:1b:23:b2:1e:88:45:6f:09:4f: e6:ae:27:17:b0:8c:ff:6b:f4:32:ab:0f:9e:f1:eb: d4:81:f8:fb:89:e3:36:ef:00:17:a9:66:7f:8d:26: bb:29:5b:f8:1a:b5:60:b6:bc:5b:3f:32:44:7a:3b: a5:5c:b4:38:4d:d2:5a:80:73:57:24:b7:46:67:79: 28:89:d4:20:40:6a:c3:6d:55:e9:13:52:62:dd:4a: 91:7d:7e:97:5d:95:2e:f2:ad:6c:ec:79:cb:f1:04: 1a:75:d1:c3:0d:6b:d0:5d:89:38:80:eb:b0:ec:ae: d0:a7:69:51:eb:18:86:54:80:9e:b5:41:d8:61:7d: 71:21:2b:68:06:5e:09:73:b3:c3:b6:1d:c3:ef:d7: 14:4e:e0:bf:f4:4b:f4:5a:43:b4:54:c6:86:2b:a7: 8a:e7:19:ba:3a:a6:32:b8:f9:8b:fc:34:2c:b4:e2: 26:98:2e:da:a2:b7:2d:09:a9:40:e3:35:d9:65:38: d8:e1:70:98:0f:e3:97:8e:01:04:01:4a:a7:08:4d: b9:54:3e:94:da:64:37:a4:50:d7:13:8a:7a:8b:58: 1a:e4:23:20:bb:8f:dd:c3:d0:e1:19:c4:fc:a1:dc: fb:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:87:39:FF:11:9E:B1:F3:11:4F:5E:B8:90:9D:02:E6:64:DB:70:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2df95585-ce30-38a7-8aba-14f782b87a34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:ab:7e:31:00:10:68:29:28:fe:03:85:da:c4:0d:fd:1f:ae: 6c:4f:bf:da:97:34:29:a3:25:bd:fe:2e:37:e9:b3:3b:f6:e7: 49:5d:0a:d9:5f:66:7f:83:5c:7a:d1:26:88:6e:71:d9:f2:18: a5:05:6a:f2:53:bd:e8:72:6a:56:37:b5:ba:c1:74:31:a4:7a: 5f:68:8d:c8:1f:f1:2a:aa:7d:94:63:a2:fb:66:00:7f:8e:73: d6:3b:fc:8e:92:ea:63:44:67:0e:e3:9a:ea:56:e6:79:4e:e5: 6a:d6:a6:eb:68:d6:b1:dd:d4:ee:c6:1a:a5:48:b7:fd:7a:c4: 9a:6e:4b:4d:a8:85:ab:27:b4:47:00:36:3c:4e:76:f6:70:68: 18:27:0c:44:41:75:a9:47:e2:7b:9c:c8:f8:3b:3b:28:af:9d: e3:13:3a:7f:2f:36:22:ff:5f:d9:24:86:8d:43:2b:79:da:f4: 61:35:1c:d8:1a:33:cc:b4:12:9f:51:e3:78:27:42:03:65:b0: 2c:ee:96:df:3f:a5:39:37:94:6e:15:7d:e2:0f:9c:0e:2c:92: b5:fd:d1:22:db:c7:95:b7:14:e0:9c:72:9a:e6:7b:b8:0a:08: b5:1a:80:a0:52:35:3c:7a:9b:fb:ab:ab:e3:7d:e1:c3:cf:5d: fe:eb:ae:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErA87oRVldi/fH1lQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDgwNTA4MjcwM1oXDTI1MTEwMzA5MjcwM1owLzEtMCsGA1UEAxMk ZGQ2ZmYzOTMtODI3YS00MjMyLWE1YWUtNmNjYmI5MzIzZGRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+1LiBVRJca2x+OEK6NA1grpBVMbI7IeiEVv CU/mricXsIz/a/Qyqw+e8evUgfj7ieM27wAXqWZ/jSa7KVv4GrVgtrxbPzJEejul XLQ4TdJagHNXJLdGZ3koidQgQGrDbVXpE1Ji3UqRfX6XXZUu8q1s7HnL8QQaddHD DWvQXYk4gOuw7K7Qp2lR6xiGVICetUHYYX1xIStoBl4Jc7PDth3D79cUTuC/9Ev0 WkO0VMaGK6eK5xm6OqYyuPmL/DQstOImmC7aorctCalA4zXZZTjY4XCYD+OXjgEE AUqnCE25VD6U2mQ3pFDXE4p6i1ga5CMgu4/dw9DhGcT8odz7BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEqHOf8RnrHzEU9euJCdAuZk23A7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMmRmOTU1ODUtY2UzMC0z OGE3LThhYmEtMTRmNzgyYjg3YTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFesMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACWrfjEAEGgpKP4DhdrEDf0frmxPv9qXNCmjJb3+Ljfpszv250ldCtlf Zn+DXHrRJohucdnyGKUFavJTvehyalY3tbrBdDGkel9ojcgf8SqqfZRjovtmAH+O c9Y7/I6S6mNEZw7jmupW5nlO5WrWputo1rHd1O7GGqVIt/16xJpuS02ohasntEcA NjxOdvZwaBgnDERBdalH4nucyPg7OyivneMTOn8vNiL/X9kkho1DK3na9GE1HNga M8y0Ep9R43gnQgNlsCzult8/pTk3lG4VfeIPnA4skrX90SLbx5W3FOCccprme7gK CLUagKBSNTx6m/urq+N94cPPXf7rrjA= -----END CERTIFICATE-----Generated at Sun Aug 10 03:44:40 2025 by rpki-client