$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8843c9af-14b6-3c5a-92fe-77b2a6d68e34.roa File: 8843c9af-14b6-3c5a-92fe-77b2a6d68e34.roa (raw, json) Hash identifier: ExNT50fs5HHzWkZBEM+Vdoj0CeQ2xJQe8ERJTUCZlz0= Subject key identifier: F3:84:5C:B7:ED:90:A3:A3:EB:62:69:EB:3C:B6:4B:63:85:AD:95:BF Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584A268AC4F01902EA223EBFFC70 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8843c9af-14b6-3c5a-92fe-77b2a6d68e34.roa Signing time: Wed 11 Jun 2025 01:00:50 +0000 ROA not before: Wed 11 Jun 2025 01:00:50 +0000 ROA not after: Tue 09 Sep 2025 01:00:50 +0000 asID: 202 IP address blocks: 168.87.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:26:8a:c4:f0:19:02:ea:22:3e:bf:fc:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jun 11 01:00:50 2025 GMT Not After : Sep 9 01:00:50 2025 GMT Subject: CN=3d85f83b-7ffe-4e17-bd30-be10be6e9612 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:64:e1:02:3d:54:18:51:67:e1:d5:92:74:3a: c3:36:24:91:68:31:a3:a4:4f:cb:80:f9:ff:2d:53: d4:c1:b6:fc:a3:51:42:6f:77:7d:a6:d4:83:25:cf: 51:3c:64:88:10:d1:b2:3a:14:bd:6d:c7:db:90:57: 49:fe:f7:f2:e1:9d:cd:57:99:17:7f:4a:0e:9d:d5: 4c:6c:eb:9d:16:a0:bb:44:16:97:15:6f:28:88:23: b7:a9:b3:d7:58:f3:ff:ed:7e:f0:04:7a:0b:07:2b: 60:43:de:8a:ca:f0:b8:13:a1:7c:97:92:86:c4:9e: 50:c3:02:b5:11:6f:a1:c3:05:ac:b2:ee:a0:d9:a2: 97:6b:83:56:47:d2:44:9d:91:d0:1b:52:39:38:ff: 32:3d:34:18:12:62:65:ef:91:b8:59:52:d2:80:0d: d2:0d:2d:a2:66:28:22:d4:c4:ea:55:7a:82:56:2a: dc:08:24:c4:b9:55:56:cb:a8:51:4b:b9:f4:7d:ac: 31:12:59:cc:30:0a:2e:ac:0e:b1:3b:99:0e:81:74: 85:68:66:cd:c2:e6:0b:7b:2d:d6:bd:04:44:d3:e9: 5c:60:ed:9c:d7:ba:4b:e2:bd:1e:82:5f:53:bb:4f: d5:65:2c:30:3a:af:9e:03:ed:ba:e8:67:f1:9f:23: 79:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:84:5C:B7:ED:90:A3:A3:EB:62:69:EB:3C:B6:4B:63:85:AD:95:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8843c9af-14b6-3c5a-92fe-77b2a6d68e34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:b3:d0:3b:82:7b:ad:e1:79:fc:20:8b:1f:e3:3f:3e:6e:25: 1b:de:49:a1:4b:a4:f0:a0:24:ee:a6:3a:2c:60:a4:0b:c0:77: 5d:70:06:e0:cc:c1:ee:5d:87:56:76:c6:25:b4:c2:f3:f1:5a: ec:0e:cd:3b:9e:d0:c3:ac:b8:ec:34:29:14:6f:74:a3:cd:30: 49:b0:e1:08:4f:b6:96:f1:32:0d:67:98:0a:4d:72:da:97:76: be:52:2d:32:85:dd:b2:5d:2f:44:3a:94:80:9b:a0:8d:97:18: 52:07:2c:9b:a8:89:a9:d5:75:5c:fa:b5:7f:07:cf:90:f7:0d: 37:bb:fd:1f:30:cb:6f:6e:92:05:0a:35:86:13:f2:02:89:a8: 1d:48:cb:00:5a:db:65:d9:7a:91:37:ec:88:e1:61:a7:fc:a7: 04:a1:9f:7a:5c:a9:6e:0f:24:14:23:19:f5:fd:07:60:4b:8f: d0:02:3b:5e:9d:5c:f9:63:9e:f2:28:11:38:71:02:ae:54:96: a1:07:2d:7c:fd:fe:33:b5:02:8d:e5:e1:0c:fa:dd:1a:8d:6b: ab:d2:75:c4:99:ca:4f:fd:23:8d:02:da:7d:2f:b4:b4:6c:39: ba:91:fa:00:70:4e:28:18:bc:8b:50:4c:12:58:72:5c:40:af: 2e:59:8c:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEomisTwGQLqIj6//HAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDYxMTAxMDA1MFoXDTI1MDkwOTAxMDA1MFowLzEtMCsGA1UEAxMk M2Q4NWY4M2ItN2ZmZS00ZTE3LWJkMzAtYmUxMGJlNmU5NjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWThAj1UGFFn4dWSdDrDNiSRaDGjpE/LgPn/ LVPUwbb8o1FCb3d9ptSDJc9RPGSIENGyOhS9bcfbkFdJ/vfy4Z3NV5kXf0oOndVM bOudFqC7RBaXFW8oiCO3qbPXWPP/7X7wBHoLBytgQ96KyvC4E6F8l5KGxJ5QwwK1 EW+hwwWssu6g2aKXa4NWR9JEnZHQG1I5OP8yPTQYEmJl75G4WVLSgA3SDS2iZigi 1MTqVXqCVircCCTEuVVWy6hRS7n0fawxElnMMAourA6xO5kOgXSFaGbNwuYLey3W vQRE0+lcYO2c17pL4r0egl9Tu0/VZSwwOq+eA+266GfxnyN5rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPOEXLftkKOj62Jp6zy2S2OFrZW/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvODg0M2M5YWYtMTRiNi0z YzVhLTkyZmUtNzdiMmE2ZDY4ZTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqFcAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGz0DuCe63hefwgix/jPz5uJRveSaFLpPCgJO6mOixgpAvAd11wBuDM we5dh1Z2xiW0wvPxWuwOzTue0MOsuOw0KRRvdKPNMEmw4QhPtpbxMg1nmApNctqX dr5SLTKF3bJdL0Q6lICboI2XGFIHLJuoianVdVz6tX8Hz5D3DTe7/R8wy29ukgUK NYYT8gKJqB1IywBa22XZepE37IjhYaf8pwShn3pcqW4PJBQjGfX9B2BLj9ACO16d XPljnvIoEThxAq5UlqEHLXz9/jO1Ao3l4Qz63RqNa6vSdcSZyk/9I40C2n0vtLRs ObqR+gBwTigYvItQTBJYclxAry5ZjLA= -----END CERTIFICATE-----Generated at Sun Jun 15 06:43:03 2025 by rpki-client