$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8b3890fd-1aa0-3cae-827e-1384e95466a3.roa File: 8b3890fd-1aa0-3cae-827e-1384e95466a3.roa (raw, json) Hash identifier: fZ3QQI63xtrt+Mf8YH9XTqXmxSl8Ygl6TskhUBkRlZE= Subject key identifier: 44:ED:8A:D6:94:BF:3E:0B:3E:28:20:B3:91:23:16:21:C0:D1:25:0C Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584A268AC537ABB9C661A425C480 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8b3890fd-1aa0-3cae-827e-1384e95466a3.roa Signing time: Wed 11 Jun 2025 01:00:50 +0000 ROA not before: Wed 11 Jun 2025 01:00:50 +0000 ROA not after: Tue 09 Sep 2025 01:00:50 +0000 asID: 203 IP address blocks: 168.87.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:26:8a:c5:37:ab:b9:c6:61:a4:25:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jun 11 01:00:50 2025 GMT Not After : Sep 9 01:00:50 2025 GMT Subject: CN=aec98895-69cd-43f5-a320-99a96ab84d00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:02:9b:19:99:6e:49:07:0d:c9:63:aa:61:ed: 7d:54:7f:f4:ee:6e:02:43:55:e0:df:ba:ef:d8:78: 35:45:25:ab:f2:2a:bb:9f:f3:e2:28:0a:03:71:88: 87:a6:fb:28:62:0c:e7:e8:1a:53:76:bc:3d:8e:0b: 0d:8f:ad:9b:6d:cd:06:a0:f9:3d:7e:9e:f1:bc:7e: 42:d8:56:c8:19:20:2d:0e:0b:fd:30:79:e6:2f:57: cc:82:10:a6:b6:08:8f:52:04:08:38:52:4a:09:7c: c7:af:a7:da:ce:54:90:fb:5f:41:5f:9f:85:f3:9d: d3:2c:b2:45:5b:cb:43:6c:16:72:ec:ee:cb:2c:49: 3b:d7:df:c9:d2:14:fc:b1:1b:7b:ec:93:1e:a1:91: cb:97:40:d5:e0:f0:c7:80:7b:2e:ef:42:14:34:83: 69:ba:5a:d5:20:d7:79:d7:a4:2f:67:49:92:8c:2f: 5e:4b:94:64:fa:9e:73:f0:cf:a8:53:86:f9:94:d3: 56:d1:42:75:91:7d:3d:e7:c9:ba:1a:80:d6:52:c1: 19:a8:46:ad:7e:30:27:40:3f:58:46:98:93:7a:7a: ff:e8:ff:fd:a0:c2:fe:d8:2f:70:61:fd:2d:27:1f: 54:c3:23:0b:9c:e4:98:31:9a:73:03:c5:a5:b6:08: ac:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:ED:8A:D6:94:BF:3E:0B:3E:28:20:B3:91:23:16:21:C0:D1:25:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8b3890fd-1aa0-3cae-827e-1384e95466a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:19:43:51:c3:f7:6e:90:35:c0:04:e8:5a:36:8d:0d:29:d1: d5:9a:61:ba:8b:38:0b:26:3a:c2:fc:c9:4c:77:75:67:85:95: 1c:fb:29:bd:9c:d3:22:6d:86:f2:4d:f4:82:b9:f8:a3:f9:a9: 67:48:77:c8:18:de:7c:2f:c5:d9:1f:62:87:b5:48:d9:2b:af: c3:eb:46:58:64:01:50:db:81:6a:aa:95:6c:33:da:b2:27:1b: 8b:82:34:a7:05:58:02:76:07:16:9a:fe:29:cb:9a:e6:25:b3: 32:43:8e:65:cb:fa:18:b4:50:51:f8:36:2d:62:b3:fb:ad:22: 8b:2d:f5:97:ab:db:94:ef:a0:7c:01:f1:3f:ff:7a:95:53:c5: 5a:b6:cb:dc:af:f8:cc:8e:cc:7c:73:bf:91:b6:a0:f9:14:4e: 55:50:87:e2:42:09:c7:5c:75:0d:b1:bd:40:e7:ea:b8:98:04: 41:5e:6a:2f:73:b9:e5:1c:b8:b4:76:36:96:14:7f:9a:fd:bb: db:d0:6b:4e:b8:7a:e5:5b:12:2f:e7:32:18:91:c3:07:ba:d2: 11:4b:bc:3e:97:d5:80:43:22:7d:e9:ff:4a:db:4d:fe:48:a0: 88:e5:92:55:23:b5:25:1f:94:c2:86:25:0a:88:60:ae:85:4f: c8:80:87:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEomisU3q7nGYaQlxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDYxMTAxMDA1MFoXDTI1MDkwOTAxMDA1MFowLzEtMCsGA1UEAxMk YWVjOTg4OTUtNjljZC00M2Y1LWEzMjAtOTlhOTZhYjg0ZDAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQKbGZluSQcNyWOqYe19VH/07m4CQ1Xg37rv 2Hg1RSWr8iq7n/PiKAoDcYiHpvsoYgzn6BpTdrw9jgsNj62bbc0GoPk9fp7xvH5C 2FbIGSAtDgv9MHnmL1fMghCmtgiPUgQIOFJKCXzHr6fazlSQ+19BX5+F853TLLJF W8tDbBZy7O7LLEk719/J0hT8sRt77JMeoZHLl0DV4PDHgHsu70IUNINpulrVINd5 16QvZ0mSjC9eS5Rk+p5z8M+oU4b5lNNW0UJ1kX0958m6GoDWUsEZqEatfjAnQD9Y RpiTenr/6P/9oML+2C9wYf0tJx9UwyMLnOSYMZpzA8WltgisXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFETtitaUvz4LPiggs5EjFiHA0SUMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvOGIzODkwZmQtMWFhMC0z Y2FlLTgyN2UtMTM4NGU5NTQ2NmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqFcUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0ZQ1HD926QNcAE6Fo2jQ0p0dWaYbqLOAsmOsL8yUx3dWeFlRz7Kb2c 0yJthvJN9IK5+KP5qWdId8gY3nwvxdkfYoe1SNkrr8PrRlhkAVDbgWqqlWwz2rIn G4uCNKcFWAJ2Bxaa/inLmuYlszJDjmXL+hi0UFH4Ni1is/utIost9Zer25TvoHwB 8T//epVTxVq2y9yv+MyOzHxzv5G2oPkUTlVQh+JCCcdcdQ2xvUDn6riYBEFeai9z ueUcuLR2NpYUf5r9u9vQa064euVbEi/nMhiRwwe60hFLvD6X1YBDIn3p/0rbTf5I oIjlklUjtSUflMKGJQqIYK6FT8iAh34= -----END CERTIFICATE-----Generated at Sun Jun 15 06:43:27 2025 by rpki-client