$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9b298238-0699-38a3-b6f8-c3d43911f009.roa File: 9b298238-0699-38a3-b6f8-c3d43911f009.roa (raw, json) Hash identifier: B9OPpsudhQsRwgA08cbuyrKtnQZBoSx0eOF9EipNtPI= Subject key identifier: D8:01:91:97:28:E2:B0:56:DD:A6:20:AA:E6:FC:A2:39:20:83:45:10 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584ABD4BB3E603512C858C6D9D00 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9b298238-0699-38a3-b6f8-c3d43911f009.roa Signing time: Mon 04 Aug 2025 01:00:32 +0000 ROA not before: Mon 04 Aug 2025 01:00:32 +0000 ROA not after: Sun 02 Nov 2025 01:00:32 +0000 asID: 202 IP address blocks: 168.87.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bd:4b:b3:e6:03:51:2c:85:8c:6d:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 4 01:00:32 2025 GMT Not After : Nov 2 01:00:32 2025 GMT Subject: CN=eef29b0e-0436-4c44-b18b-870833345b44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:2a:6d:83:e8:a9:4d:8d:29:12:ec:b8:29:d2: 34:c7:b8:51:7c:58:1b:14:81:0e:e1:8d:3b:0c:52: f1:c2:ed:1c:d6:1f:ac:7f:92:ec:d1:4a:cf:0c:d3: fe:a9:a2:7e:ad:f2:87:ab:9c:1c:c1:82:07:ba:a0: 42:7a:d0:30:78:ce:36:64:8d:65:93:51:74:7e:80: 70:e7:b0:8b:3d:ff:e0:22:e9:19:01:09:66:54:46: 53:16:84:e3:85:35:4c:23:0e:0b:6e:04:83:8d:80: 92:47:92:3a:cf:1e:15:0b:da:79:e6:ed:5e:81:3d: 83:be:d4:50:75:b1:fb:f1:8d:97:8e:0f:b9:20:2a: 05:73:9a:a4:70:91:eb:b4:00:75:01:b2:8f:e3:8d: 83:bb:f5:ee:4d:c7:6d:98:ac:f1:ab:25:d0:36:e0: 1c:63:a8:a5:49:43:23:e4:4b:60:27:6f:4f:45:26: ec:63:69:f0:7f:bb:37:57:6b:e0:57:50:df:0b:f9: 55:ea:2d:30:2b:87:bc:09:42:91:1f:02:8f:c7:ea: 26:80:0d:e2:6e:2d:c7:f3:09:06:18:16:c4:5e:74: fa:2e:30:39:bf:03:0d:89:fc:c9:ee:62:cd:10:88: d1:eb:40:40:67:15:18:a2:6a:ad:12:cc:1e:b4:bd: c7:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:01:91:97:28:E2:B0:56:DD:A6:20:AA:E6:FC:A2:39:20:83:45:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9b298238-0699-38a3-b6f8-c3d43911f009.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:3c:f5:6d:e4:b6:c2:ef:79:a0:f3:64:80:c3:04:1b:6c:ef: fc:b7:88:a1:ba:25:40:b7:d9:a4:9c:93:cf:81:19:88:02:09: ed:b8:c6:77:86:7b:96:2e:5b:fc:4f:41:be:ee:c9:8e:03:46: 08:3c:2f:5a:54:c2:ab:a1:f2:8c:12:ea:35:e2:07:69:6e:6f: 3b:f8:da:2d:e7:db:1e:9b:23:90:03:33:05:4c:0e:7a:a3:01: 43:0d:d7:9a:67:ec:a1:f5:a6:5c:63:22:e8:cc:c9:66:57:84: 5e:39:38:06:ac:c5:e3:27:82:c7:0c:8f:14:d6:23:78:b7:3e: 9f:e0:fd:7e:f8:66:b2:52:fa:9a:36:17:e7:5f:f6:9d:81:89: 6c:a5:b3:25:3f:34:ca:32:df:f1:43:7b:c5:31:a6:79:9e:b0: d7:45:02:0d:0b:c5:6a:01:ec:69:16:77:cc:dd:42:46:ba:76: 7d:17:ec:3a:de:a9:80:33:88:cb:a7:9c:5d:a0:a5:27:f9:68: 66:26:61:24:f3:12:4c:c9:9f:7c:37:11:bb:f2:bd:8a:1e:09: e6:83:27:96:2e:ab:9e:b0:c8:d5:9c:cf:17:3c:9e:de:4d:c5: 6a:a5:83:bf:c3:59:91:82:23:73:c2:c7:12:00:cc:66:26:a9: c2:82:e1:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq9S7PmA1EshYxtnQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDgwNDAxMDAzMloXDTI1MTEwMjAxMDAzMlowLzEtMCsGA1UEAxMk ZWVmMjliMGUtMDQzNi00YzQ0LWIxOGItODcwODMzMzQ1YjQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiptg+ipTY0pEuy4KdI0x7hRfFgbFIEO4Y07 DFLxwu0c1h+sf5Ls0UrPDNP+qaJ+rfKHq5wcwYIHuqBCetAweM42ZI1lk1F0foBw 57CLPf/gIukZAQlmVEZTFoTjhTVMIw4LbgSDjYCSR5I6zx4VC9p55u1egT2DvtRQ dbH78Y2Xjg+5ICoFc5qkcJHrtAB1AbKP442Du/XuTcdtmKzxqyXQNuAcY6ilSUMj 5EtgJ29PRSbsY2nwf7s3V2vgV1DfC/lV6i0wK4e8CUKRHwKPx+omgA3ibi3H8wkG GBbEXnT6LjA5vwMNifzJ7mLNEIjR60BAZxUYomqtEswetL3HFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNgBkZco4rBW3aYgqub8ojkgg0UQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvOWIyOTgyMzgtMDY5OS0z OGEzLWI2ZjgtYzNkNDM5MTFmMDA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFeAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACY89W3ktsLveaDzZIDDBBts7/y3iKG6JUC32aSck8+BGYgCCe24xneG e5YuW/xPQb7uyY4DRgg8L1pUwquh8owS6jXiB2lubzv42i3n2x6bI5ADMwVMDnqj AUMN15pn7KH1plxjIujMyWZXhF45OAasxeMngscMjxTWI3i3Pp/g/X74ZrJS+po2 F+df9p2BiWylsyU/NMoy3/FDe8UxpnmesNdFAg0LxWoB7GkWd8zdQka6dn0X7Dre qYAziMunnF2gpSf5aGYmYSTzEkzJn3w3EbvyvYoeCeaDJ5Yuq56wyNWczxc8nt5N xWqlg7/DWZGCI3PCxxIAzGYmqcKC4UM= -----END CERTIFICATE-----Generated at Wed Aug 6 11:09:11 2025 by rpki-client