$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4053caf1-3eed-37e3-a52a-760e48ba45ea.roa File: 4053caf1-3eed-37e3-a52a-760e48ba45ea.roa (raw, json) Hash identifier: yznrrjculEQZ/YBlzfgLPS0oo4LshPDE9gsV/+ZBbXM= Subject key identifier: 0B:D7:C8:FB:85:DE:EA:5C:63:FA:93:9C:A0:B6:09:BA:E1:3B:6F:E2 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584AB7B623D855A70B1231BE4780 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4053caf1-3eed-37e3-a52a-760e48ba45ea.roa Signing time: Sat 02 Aug 2025 01:00:32 +0000 ROA not before: Sat 02 Aug 2025 01:00:32 +0000 ROA not after: Fri 31 Oct 2025 01:00:32 +0000 asID: 60204 IP address blocks: 168.87.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b7:b6:23:d8:55:a7:0b:12:31:be:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 2 01:00:32 2025 GMT Not After : Oct 31 01:00:32 2025 GMT Subject: CN=aca5c43e-e818-42af-a2c6-8bdcb51f28e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:91:83:d3:bb:46:6a:99:c2:26:66:ba:cb:df: f9:cd:97:26:c1:f0:66:a9:13:e0:97:24:3c:29:81: ff:f4:e6:62:45:54:c4:66:ba:63:ed:06:19:32:f9: 8d:66:48:26:8f:a9:05:80:97:67:8c:89:7a:96:97: 80:02:2d:c6:89:bc:16:50:ec:86:59:3d:8a:de:72: fb:1d:24:0a:90:d9:3c:40:aa:2a:60:3a:dd:27:cf: d6:87:21:8a:a4:05:d4:31:7a:ee:1e:2b:ec:c8:a8: c7:72:84:32:c8:ce:97:89:ae:2b:13:22:ae:be:93: 01:2f:d3:33:6d:0e:af:e9:db:68:63:7d:a7:ba:c1: 9d:a4:0e:d4:4d:a9:c8:23:41:d5:3e:4b:02:1b:ed: 3c:b4:cf:61:12:3c:9e:be:40:cc:f3:a9:7b:1b:21: 2e:a5:b0:90:79:4d:f3:85:60:82:a0:62:11:43:55: 17:03:b8:79:b7:28:b9:af:94:6d:94:a7:5a:5c:33: 34:4a:6c:cc:19:09:25:f9:45:ae:7a:3f:98:7e:b7: e5:5a:f1:0d:0e:ce:ad:18:50:11:e7:ea:dd:86:3d: 19:43:0b:3f:34:f6:4f:e3:cd:ed:1c:e3:c7:6c:82: 13:58:e6:cf:03:78:ef:7f:3f:76:e0:5b:06:16:a1: 6e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:D7:C8:FB:85:DE:EA:5C:63:FA:93:9C:A0:B6:09:BA:E1:3B:6F:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4053caf1-3eed-37e3-a52a-760e48ba45ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:2c:97:2c:eb:28:aa:7e:b0:81:72:b8:8f:d5:a0:4f:33:55: 33:fc:4e:da:b1:0f:3e:57:ca:ba:82:17:a6:97:74:a9:74:f6: 37:86:8f:e5:9a:08:c5:24:2c:89:0a:5d:e1:4c:47:49:d0:5e: 62:63:98:18:20:9a:02:74:e3:f3:20:1c:31:e0:1a:2c:7a:7e: e4:ba:2d:39:44:39:d0:7b:6f:cc:54:67:80:66:a8:f5:a1:aa: 29:f1:8c:22:b6:6e:fb:ea:f4:a7:5a:0e:76:7e:a8:89:8a:10: c5:a8:09:18:05:03:7d:6c:11:dd:fa:f1:1d:38:1c:88:60:14: e3:7b:4d:2b:34:44:37:be:06:70:e0:ef:33:10:42:aa:13:1d: 49:e9:5c:00:ce:29:79:c7:5f:a7:9b:26:b8:2f:8c:0a:36:ac: ff:56:6a:b0:aa:8c:a9:33:67:44:b6:f7:bc:18:c0:9a:ef:ad: 7a:dd:0c:f0:da:ad:20:29:03:91:0e:63:94:47:e8:1e:64:ca: 91:ba:1a:cc:40:7d:a4:98:dc:a2:5a:f3:ad:3f:2d:65:85:6a: 93:6c:5f:f1:5c:12:90:5f:fe:ab:fd:3b:3b:7b:32:d9:b6:ef: e0:82:16:b7:f6:18:82:06:3b:48:4f:b6:c2:8e:e9:d4:86:87: 69:f4:eb:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq3tiPYVacLEjG+R4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDgwMjAxMDAzMloXDTI1MTAzMTAxMDAzMlowLzEtMCsGA1UEAxMk YWNhNWM0M2UtZTgxOC00MmFmLWEyYzYtOGJkY2I1MWYyOGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5GD07tGapnCJma6y9/5zZcmwfBmqRPglyQ8 KYH/9OZiRVTEZrpj7QYZMvmNZkgmj6kFgJdnjIl6lpeAAi3GibwWUOyGWT2K3nL7 HSQKkNk8QKoqYDrdJ8/WhyGKpAXUMXruHivsyKjHcoQyyM6Xia4rEyKuvpMBL9Mz bQ6v6dtoY32nusGdpA7UTanII0HVPksCG+08tM9hEjyevkDM86l7GyEupbCQeU3z hWCCoGIRQ1UXA7h5tyi5r5RtlKdaXDM0SmzMGQkl+UWuej+YfrflWvENDs6tGFAR 5+rdhj0ZQws/NPZP483tHOPHbIITWObPA3jvfz924FsGFqFuKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAvXyPuF3upcY/qTnKC2CbrhO2/iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNDA1M2NhZjEtM2VlZC0z N2UzLWE1MmEtNzYwZTQ4YmE0NWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFeAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIQslyzrKKp+sIFyuI/VoE8zVTP8TtqxDz5XyrqCF6aXdKl09jeGj+Wa CMUkLIkKXeFMR0nQXmJjmBggmgJ04/MgHDHgGix6fuS6LTlEOdB7b8xUZ4BmqPWh qinxjCK2bvvq9KdaDnZ+qImKEMWoCRgFA31sEd368R04HIhgFON7TSs0RDe+BnDg 7zMQQqoTHUnpXADOKXnHX6ebJrgvjAo2rP9WarCqjKkzZ0S297wYwJrvrXrdDPDa rSApA5EOY5RH6B5kypG6GsxAfaSY3KJa860/LWWFapNsX/FcEpBf/qv9Ozt7Mtm2 7+CCFrf2GIIGO0hPtsKO6dSGh2n067Q= -----END CERTIFICATE-----Generated at Sun Aug 10 05:33:26 2025 by rpki-client