$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a4ef094a-4e51-382c-adef-2ef2da93ad78.roa File: a4ef094a-4e51-382c-adef-2ef2da93ad78.roa (raw, json) Hash identifier: aNSGu8IBXPBocAuzClfSmd89dC6APVEJJG5PiEZMDFg= Subject key identifier: 52:CE:47:D3:09:BE:15:26:E3:80:FE:9E:38:8C:E4:6A:68:46:8A:01 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285849F17FC3B7092E3622EABB1280 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a4ef094a-4e51-382c-adef-2ef2da93ad78.roa Signing time: Fri 23 May 2025 01:00:49 +0000 ROA not before: Fri 23 May 2025 01:00:49 +0000 ROA not after: Thu 21 Aug 2025 01:00:49 +0000 asID: 3356 IP address blocks: 168.87.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:7f:c3:b7:09:2e:36:22:ea:bb:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: May 23 01:00:49 2025 GMT Not After : Aug 21 01:00:49 2025 GMT Subject: CN=2445e035-7335-43f3-8bc8-c211c129865c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d1:cb:2d:98:8c:f6:00:2a:43:5d:06:e8:e7: b0:bf:e7:ab:94:ce:ce:6f:7c:df:1e:94:f1:3f:c3: 1d:9a:49:7c:22:01:09:74:b4:6b:a3:83:4e:65:ce: 12:df:07:c5:04:18:ff:c2:56:22:4c:46:9b:54:5d: ce:60:7b:93:4d:3c:60:67:d9:5c:5d:eb:63:81:0d: dc:81:f6:1d:e3:f0:27:fe:78:47:2f:06:fc:c0:1b: af:f8:46:b9:8b:bb:3c:0c:ee:1e:72:7c:9b:69:af: 18:6c:c1:34:21:f5:17:9b:50:2d:9e:9b:97:d8:b8: 44:2e:2e:f9:7b:97:dc:b0:6c:c0:75:14:9b:bd:c6: af:4b:40:3d:43:aa:c6:73:70:24:e9:6a:76:72:c5: 98:cb:0f:e5:51:69:29:18:a1:ed:9e:cf:52:31:01: e3:31:20:95:0e:83:55:52:6f:e7:1e:55:aa:b4:f7: 7c:53:b2:10:c9:a9:f8:ed:b2:60:24:fa:03:32:39: d0:60:59:6d:83:3b:20:9d:07:91:9f:72:2d:23:4e: de:aa:f3:ba:22:e1:fb:6f:79:f9:c0:0e:e3:bb:21: 36:5f:64:34:d6:e1:49:cd:f6:a8:2a:1f:c2:12:10: 5d:d7:46:b0:eb:7f:6f:ca:9e:62:bb:e6:ba:0e:a0: 31:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:CE:47:D3:09:BE:15:26:E3:80:FE:9E:38:8C:E4:6A:68:46:8A:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a4ef094a-4e51-382c-adef-2ef2da93ad78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:8e:f2:2c:5f:2f:3e:43:52:25:40:bc:18:58:fe:a3:b8:35: 6b:20:86:4d:fe:f0:d8:94:25:cc:5c:cf:02:d5:3a:32:83:05: b8:c7:dd:62:04:dd:f8:2c:26:2c:92:e8:73:04:6d:51:b1:fe: 9b:c3:9d:0a:aa:27:31:6a:e0:a0:44:ba:25:2c:22:7a:fa:fc: 59:53:d5:1b:6f:fa:c3:15:49:a2:51:d8:74:be:48:b3:2a:82: 58:c4:db:e2:18:f8:0e:9e:45:4d:9e:59:82:df:4c:c7:2c:8b: de:88:f2:c9:8c:6a:36:86:ff:be:d6:8a:ed:a7:f1:96:c6:ef: da:6d:c5:f2:5d:a4:2d:9d:e9:3c:00:6e:7e:7e:e4:20:87:e5: 0c:14:74:11:a8:1d:45:9c:5b:d7:1a:0d:e4:81:2b:28:4e:29: ab:3d:59:69:58:5f:71:85:34:01:59:e1:40:fa:7d:1e:85:92: b5:6d:d0:d8:d1:e4:df:35:b5:21:8a:3c:86:53:d4:c7:47:31: f9:e0:40:50:5c:0f:12:6b:3a:cf:f0:c8:7b:e8:be:31:b2:f0: 19:d8:3f:f1:6f:de:f5:73:9f:4c:4c:4b:0d:76:69:3d:f5:5f: 4a:55:5f:f6:a5:61:21:ed:31:1b:82:c9:14:90:4c:62:9f:99: 49:9b:c6:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxf8O3CS42Iuq7EoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk MjQ0NWUwMzUtNzMzNS00M2YzLThiYzgtYzIxMWMxMjk4NjVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodHLLZiM9gAqQ10G6Oewv+erlM7Ob3zfHpTx P8Mdmkl8IgEJdLRro4NOZc4S3wfFBBj/wlYiTEabVF3OYHuTTTxgZ9lcXetjgQ3c gfYd4/An/nhHLwb8wBuv+Ea5i7s8DO4ecnybaa8YbME0IfUXm1AtnpuX2LhELi75 e5fcsGzAdRSbvcavS0A9Q6rGc3Ak6Wp2csWYyw/lUWkpGKHtns9SMQHjMSCVDoNV Um/nHlWqtPd8U7IQyan47bJgJPoDMjnQYFltgzsgnQeRn3ItI07eqvO6IuH7b3n5 wA7juyE2X2Q01uFJzfaoKh/CEhBd10aw639vyp5iu+a6DqAxLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFLOR9MJvhUm44D+njiM5GpoRooBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYTRlZjA5NGEtNGU1MS0z ODJjLWFkZWYtMmVmMmRhOTNhZDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqFeeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEmO8ixfLz5DUiVAvBhY/qO4NWsghk3+8NiUJcxczwLVOjKDBbjH3WIE 3fgsJiyS6HMEbVGx/pvDnQqqJzFq4KBEuiUsInr6/FlT1Rtv+sMVSaJR2HS+SLMq gljE2+IY+A6eRU2eWYLfTMcsi96I8smMajaG/77Wiu2n8ZbG79ptxfJdpC2d6TwA bn5+5CCH5QwUdBGoHUWcW9caDeSBKyhOKas9WWlYX3GFNAFZ4UD6fR6FkrVt0NjR 5N81tSGKPIZT1MdHMfngQFBcDxJrOs/wyHvovjGy8BnYP/Fv3vVzn0xMSw12aT31 X0pVX/alYSHtMRuCyRSQTGKfmUmbxmE= -----END CERTIFICATE-----Generated at Sun Jun 15 06:42:00 2025 by rpki-client