$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/96cd1b3f-742b-32c2-b072-6ab171a49eed.roa File: 96cd1b3f-742b-32c2-b072-6ab171a49eed.roa (raw, json) Hash identifier: n0v2SZy846tQg4MATobdY075OgonqH36t4Fnrh0B2Mw= Subject key identifier: AE:68:64:87:EF:4A:1E:1E:45:70:0D:9D:3D:64:54:99:68:B8:B3:17 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584AC100E31355BC69654B47F440 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/96cd1b3f-742b-32c2-b072-6ab171a49eed.roa Signing time: Tue 05 Aug 2025 08:53:34 +0000 ROA not before: Tue 05 Aug 2025 08:53:34 +0000 ROA not after: Mon 03 Nov 2025 09:53:34 +0000 asID: 16509 IP address blocks: 168.87.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c1:00:e3:13:55:bc:69:65:4b:47:f4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 5 08:53:34 2025 GMT Not After : Nov 3 09:53:34 2025 GMT Subject: CN=d8fcad39-444a-42c6-8a41-aea30a0fa317 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:c4:1f:f0:67:85:6a:41:8c:fe:fb:82:3d:59: f1:6c:65:13:bb:be:40:12:04:2d:45:97:ec:51:93: 09:a4:61:65:b8:c1:48:0a:f4:9a:36:de:74:78:12: 35:fa:53:ec:c1:61:ba:5a:79:c0:1f:1b:ca:3c:b3: 05:ad:68:11:8d:ca:51:d8:b0:ed:ab:54:4a:f8:19: 57:bd:66:36:23:cf:a4:57:19:0c:1f:de:c1:ef:23: 3f:38:ed:cc:85:0d:ac:ce:2c:76:0f:d4:3e:62:3f: 3e:56:62:a7:47:9c:61:53:d7:f5:33:72:38:84:d3: 8c:21:28:92:de:16:d4:7f:d8:c1:07:f3:91:3e:85: e1:32:c6:03:c1:84:f7:5f:27:7a:09:d6:67:26:29: bd:6b:fe:59:3c:d1:fe:4c:0c:85:40:43:9a:a1:5f: 4a:b8:33:47:5e:81:96:8b:11:df:76:17:86:58:2f: 66:02:04:74:d8:90:e2:df:ba:1d:3d:68:9f:2a:78: d1:b7:fd:de:08:2d:a5:91:71:0c:e4:f3:3d:e1:6c: 0a:a2:11:f7:d6:71:3a:c6:6b:9e:08:09:d0:2d:b7: 43:41:3c:5e:b8:cd:72:f1:45:ce:46:0d:29:0d:d7: 0c:ce:81:3c:25:5a:8c:d9:59:55:44:d9:2b:90:da: 4e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:68:64:87:EF:4A:1E:1E:45:70:0D:9D:3D:64:54:99:68:B8:B3:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/96cd1b3f-742b-32c2-b072-6ab171a49eed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:64:80:0f:5f:ac:91:3b:a1:c9:4f:65:8b:5b:45:f2:0a:f7: a9:aa:ab:d4:7e:dd:33:9c:b7:6a:fe:bb:d0:37:52:a4:05:9a: ae:a5:20:8d:94:39:47:40:9b:4a:4e:b7:b5:a9:75:b1:5f:56: 01:66:e3:76:73:80:0f:b9:6d:fb:2a:59:fe:26:bd:a8:8e:8b: d4:91:fb:87:11:13:81:4c:7a:9f:34:bc:d8:29:dd:f1:29:c0: 73:e8:f7:26:35:77:b5:c8:f1:f1:0e:3d:63:1f:14:75:1c:7b: 1e:83:a2:b9:b6:32:eb:52:1f:a8:4a:c0:43:68:46:bd:02:20: 14:5f:76:76:47:37:3e:97:15:9a:73:c3:51:ea:bb:16:38:6d: 65:23:f7:84:de:ab:96:e0:22:01:1b:9d:bf:35:eb:60:4a:da: 8b:0b:81:71:f2:46:57:43:7a:4e:ff:b6:fc:5a:56:d8:1d:ff: 71:9b:c5:ff:2e:06:60:13:7c:c8:eb:66:7e:11:d2:53:4f:f3: a7:cf:ed:8b:22:8d:f8:bb:36:15:59:9b:d0:3a:f6:74:bf:20: b2:cd:13:61:01:32:65:f2:e6:3c:a2:ab:97:71:37:23:d4:62: d4:d7:9d:1c:5c:8b:9b:f8:0e:b7:84:7d:04:fa:16:8c:83:1a: a0:00:41:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErBAOMTVbxpZUtH9EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDgwNTA4NTMzNFoXDTI1MTEwMzA5NTMzNFowLzEtMCsGA1UEAxMk ZDhmY2FkMzktNDQ0YS00MmM2LThhNDEtYWVhMzBhMGZhMzE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcQf8GeFakGM/vuCPVnxbGUTu75AEgQtRZfs UZMJpGFluMFICvSaNt50eBI1+lPswWG6WnnAHxvKPLMFrWgRjcpR2LDtq1RK+BlX vWY2I8+kVxkMH97B7yM/OO3MhQ2szix2D9Q+Yj8+VmKnR5xhU9f1M3I4hNOMISiS 3hbUf9jBB/ORPoXhMsYDwYT3Xyd6CdZnJim9a/5ZPNH+TAyFQEOaoV9KuDNHXoGW ixHfdheGWC9mAgR02JDi37odPWifKnjRt/3eCC2lkXEM5PM94WwKohH31nE6xmue CAnQLbdDQTxeuM1y8UXORg0pDdcMzoE8JVqM2VlVRNkrkNpOtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK5oZIfvSh4eRXANnT1kVJlouLMXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvOTZjZDFiM2YtNzQyYi0z MmMyLWIwNzItNmFiMTcxYTQ5ZWVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFetMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADBkgA9frJE7oclPZYtbRfIK96mqq9R+3TOct2r+u9A3UqQFmq6lII2U OUdAm0pOt7WpdbFfVgFm43ZzgA+5bfsqWf4mvaiOi9SR+4cRE4FMep80vNgp3fEp wHPo9yY1d7XI8fEOPWMfFHUcex6Dorm2MutSH6hKwENoRr0CIBRfdnZHNz6XFZpz w1HquxY4bWUj94Teq5bgIgEbnb8162BK2osLgXHyRldDek7/tvxaVtgd/3Gbxf8u BmATfMjrZn4R0lNP86fP7Ysijfi7NhVZm9A69nS/ILLNE2EBMmXy5jyiq5dxNyPU YtTXnRxci5v4DreEfQT6FoyDGqAAQdE= -----END CERTIFICATE-----Generated at Sun Aug 10 03:45:10 2025 by rpki-client