$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/303db212-0e6c-33fd-9b3f-8ebb3865217f.roa File: 303db212-0e6c-33fd-9b3f-8ebb3865217f.roa (raw, json) Hash identifier: AGtNhAMV2N6tUO32ZGVvKznQ0Ojl+Y2TLluOXi7ZLV0= Subject key identifier: 2D:53:EF:53:65:26:76:39:3B:39:8F:1E:33:1A:01:42:53:14:58:A4 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584A23C00E93C278C0880E54F380 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/303db212-0e6c-33fd-9b3f-8ebb3865217f.roa Signing time: Tue 10 Jun 2025 01:00:50 +0000 ROA not before: Tue 10 Jun 2025 01:00:50 +0000 ROA not after: Mon 08 Sep 2025 01:00:50 +0000 asID: 3360 IP address blocks: 168.87.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:23:c0:0e:93:c2:78:c0:88:0e:54:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jun 10 01:00:50 2025 GMT Not After : Sep 8 01:00:50 2025 GMT Subject: CN=2db767ef-b469-4bfe-ab0b-06a295569d98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:52:46:a5:4d:cc:fa:12:6f:07:3f:58:8f:b5: 7d:30:75:92:87:1f:0e:31:ee:26:82:e0:c3:fa:9e: 30:50:f7:ce:0b:0b:f2:8e:da:99:7f:9f:f6:5e:b5: 36:62:2b:6c:f2:4e:b1:9d:6c:b7:f0:b5:52:28:5f: df:f9:b7:82:9f:bb:5d:6f:34:32:3c:d0:0a:f1:95: 9a:de:ac:1f:c8:7c:f4:9e:f9:cf:0d:db:04:f3:74: e7:83:90:f5:d9:f2:a8:89:6a:ba:ec:a4:05:ee:88: f4:27:3d:b9:31:23:95:f0:dc:6f:68:94:2e:9a:2f: c4:c5:94:dc:e6:6e:dc:77:14:b6:4b:78:30:b1:70: dc:a5:05:66:97:f5:23:cc:82:cd:14:81:be:31:ad: 9b:61:3b:4a:27:00:e8:b4:59:21:42:c3:90:f9:6a: e3:ce:38:b8:dd:a9:29:2e:58:bf:e2:41:84:ad:e1: 35:37:3c:b1:38:c4:f5:cd:48:e5:42:cc:66:1b:ba: 7a:11:e2:06:b2:e4:20:c4:08:23:a1:b7:b1:1c:e1: 3e:b0:7a:64:e4:25:4d:5a:a9:09:4e:f5:2c:58:f0: 0a:7d:37:7b:65:f1:3c:c0:0f:f5:fe:80:bb:61:36: aa:07:eb:6a:f8:06:2e:29:10:60:47:46:f9:7e:25: cf:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:53:EF:53:65:26:76:39:3B:39:8F:1E:33:1A:01:42:53:14:58:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/303db212-0e6c-33fd-9b3f-8ebb3865217f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:84:d8:95:de:8a:52:e7:6e:64:b6:4f:ac:c7:3a:2e:d1:81: 98:1a:b5:f8:4c:e6:d2:f7:4f:15:b9:a8:64:83:56:c5:7b:3b: 25:71:f9:7b:0e:91:a0:47:87:58:f7:5c:bf:98:4a:ba:76:8e: 7f:9c:15:86:32:4d:b1:34:93:7e:62:05:c0:e6:3b:36:36:06: b0:f1:e5:e8:a1:eb:0e:2e:94:8e:c4:11:ee:e2:8c:84:4a:14: 0b:4c:85:fc:8c:da:49:23:83:d6:c2:21:66:a0:2f:ee:c7:6f: 2c:81:91:36:b1:2b:ef:60:29:28:be:78:59:5d:3b:2d:52:4d: cf:4e:09:14:2c:3a:aa:cf:71:9b:95:84:33:bd:75:8b:14:65: e0:cf:33:c4:44:d7:5b:16:e2:3c:b2:17:72:c0:8d:f7:ca:16: 39:06:c5:20:9e:69:7d:ce:8a:a3:0e:30:5d:d4:8b:6c:12:c0: 90:11:8d:87:28:74:0f:b5:b3:26:04:9a:d1:b6:5e:e4:9c:ae: 33:c2:4f:a7:19:5a:f2:26:02:9e:7b:ef:0f:15:8e:12:42:9b: 1e:2b:84:c5:73:e0:ce:a5:28:f0:0c:72:a3:48:32:4d:1c:91: 64:ea:e2:fe:30:35:a8:a0:f9:4c:3b:42:ec:7b:84:49:9a:a4: 85:e3:ac:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEojwA6TwnjAiA5U84AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDYxMDAxMDA1MFoXDTI1MDkwODAxMDA1MFowLzEtMCsGA1UEAxMk MmRiNzY3ZWYtYjQ2OS00YmZlLWFiMGItMDZhMjk1NTY5ZDk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFJGpU3M+hJvBz9Yj7V9MHWShx8OMe4mguDD +p4wUPfOCwvyjtqZf5/2XrU2Yits8k6xnWy38LVSKF/f+beCn7tdbzQyPNAK8ZWa 3qwfyHz0nvnPDdsE83Tng5D12fKoiWq67KQF7oj0Jz25MSOV8NxvaJQumi/ExZTc 5m7cdxS2S3gwsXDcpQVml/UjzILNFIG+Ma2bYTtKJwDotFkhQsOQ+Wrjzji43akp Lli/4kGEreE1NzyxOMT1zUjlQsxmG7p6EeIGsuQgxAgjobexHOE+sHpk5CVNWqkJ TvUsWPAKfTd7ZfE8wA/1/oC7YTaqB+tq+AYuKRBgR0b5fiXPgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC1T71NlJnY5OzmPHjMaAUJTFFikMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMzAzZGIyMTItMGU2Yy0z M2ZkLTliM2YtOGViYjM4NjUyMTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqFdEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGqE2JXeilLnbmS2T6zHOi7RgZgatfhM5tL3TxW5qGSDVsV7OyVx+XsO kaBHh1j3XL+YSrp2jn+cFYYyTbE0k35iBcDmOzY2BrDx5eih6w4ulI7EEe7ijIRK FAtMhfyM2kkjg9bCIWagL+7HbyyBkTaxK+9gKSi+eFldOy1STc9OCRQsOqrPcZuV hDO9dYsUZeDPM8RE11sW4jyyF3LAjffKFjkGxSCeaX3OiqMOMF3Ui2wSwJARjYco dA+1syYEmtG2XuScrjPCT6cZWvImAp577w8VjhJCmx4rhMVz4M6lKPAMcqNIMk0c kWTq4v4wNaig+Uw7Qux7hEmapIXjrEg= -----END CERTIFICATE-----Generated at Mon Jun 16 20:03:57 2025 by rpki-client