$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ef1ebc6c-1ef3-37ae-a8dd-de87ca94e5c3.roa File: ef1ebc6c-1ef3-37ae-a8dd-de87ca94e5c3.roa (raw, json) Hash identifier: o6tjptJ+rEU2zoAP4sBjq0cLuiiE/m5xvhbYIg8JeEA= Subject key identifier: 15:3C:24:34:B7:D7:8B:A6:17:71:73:A3:9E:A8:B0:4F:A2:3E:BF:C4 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285849F17FD6164C12B48DC556BC40 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ef1ebc6c-1ef3-37ae-a8dd-de87ca94e5c3.roa Signing time: Fri 23 May 2025 01:00:49 +0000 ROA not before: Fri 23 May 2025 01:00:49 +0000 ROA not after: Thu 21 Aug 2025 01:00:49 +0000 asID: 202 IP address blocks: 168.87.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:7f:d6:16:4c:12:b4:8d:c5:56:bc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: May 23 01:00:49 2025 GMT Not After : Aug 21 01:00:49 2025 GMT Subject: CN=a98d0d1e-5138-4cc3-b631-1916cf169544 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:07:fd:02:74:6a:5b:9d:8d:49:39:27:05:51: e0:2d:21:3f:b7:61:87:19:24:41:54:e8:2f:c7:3a: ba:c5:4f:08:41:8d:9a:46:7d:36:a9:40:7a:cb:d4: fd:b1:8d:cc:e9:c6:8c:19:04:e8:b0:32:e2:04:99: f1:b0:76:fd:47:41:21:c4:b8:16:43:4f:69:1b:95: b2:ef:ab:23:91:13:64:95:87:71:19:f1:7a:35:03: c1:2b:84:77:5b:8e:fd:4d:1c:56:c7:fb:af:1e:78: 6d:18:14:f6:2e:07:f0:ec:3a:69:df:6a:8d:ff:1b: 15:ca:c3:25:f6:a1:db:da:35:12:52:18:3c:54:2c: b1:ea:4b:fb:33:19:2d:7e:d2:b4:da:ea:c2:48:82: f5:b0:87:ed:54:43:32:ec:f1:42:99:fe:25:96:2b: a9:48:a2:50:e8:25:89:87:95:a7:8b:c6:78:54:31: c2:19:41:d0:8c:b4:76:67:ed:be:3b:56:fe:a9:eb: 79:02:88:1c:61:42:d0:e6:91:42:d7:a0:85:83:e3: da:f7:6f:e8:49:41:fc:7f:22:d2:17:7c:7d:4e:33: 62:45:14:14:11:b7:e0:f6:7b:3f:3f:69:7a:b5:af: 1a:00:44:c1:1d:ed:2b:84:f7:80:89:2f:a4:f4:fe: 46:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:3C:24:34:B7:D7:8B:A6:17:71:73:A3:9E:A8:B0:4F:A2:3E:BF:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ef1ebc6c-1ef3-37ae-a8dd-de87ca94e5c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:8a:2e:c2:c4:a6:94:ad:63:79:ba:1f:d7:98:dc:8b:a3:ba: 01:6b:ad:6a:34:8d:16:f4:82:89:87:cb:87:3d:3c:f9:71:7a: 1c:e1:59:90:06:ec:2b:0a:09:2c:de:cf:c9:89:40:5b:c0:88: 1c:ce:fc:70:f5:2c:7c:2c:d3:7c:b9:49:82:c3:16:d5:25:fb: 25:ee:9d:ce:94:62:11:39:ca:fd:ab:13:2a:43:4e:46:49:43: c6:65:92:bc:c2:6d:4b:b4:00:4d:93:b6:7a:18:4a:60:f5:25: 83:5e:ce:7d:34:44:d0:47:58:1e:50:db:d3:60:e9:8b:e8:7a: f8:ae:f8:74:57:50:d9:84:f1:57:67:25:e7:af:b9:8a:91:cf: 29:e1:0c:5d:81:39:71:4f:4e:57:8c:6d:63:fb:3f:dc:9b:e4: ac:63:d5:87:ba:74:be:22:fe:ba:16:d3:7b:29:74:13:e4:6e: 6e:30:2c:67:5f:8f:cb:a7:ca:16:2b:7d:65:4e:43:82:2e:88: 1e:2a:a9:61:96:ed:46:a0:89:e7:f0:b2:7d:a3:e6:a2:28:e2: 95:5a:ee:91:32:1c:ff:82:40:dd:96:cf:0f:37:f4:82:56:1e: fd:8e:e6:76:9d:d0:a4:b3:cf:da:29:29:10:b2:bb:03:6f:8b: 30:ac:a9:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxf9YWTBK0jcVWvEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk YTk4ZDBkMWUtNTEzOC00Y2MzLWI2MzEtMTkxNmNmMTY5NTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQf9AnRqW52NSTknBVHgLSE/t2GHGSRBVOgv xzq6xU8IQY2aRn02qUB6y9T9sY3M6caMGQTosDLiBJnxsHb9R0EhxLgWQ09pG5Wy 76sjkRNklYdxGfF6NQPBK4R3W479TRxWx/uvHnhtGBT2Lgfw7Dpp32qN/xsVysMl 9qHb2jUSUhg8VCyx6kv7MxktftK02urCSIL1sIftVEMy7PFCmf4lliupSKJQ6CWJ h5Wni8Z4VDHCGUHQjLR2Z+2+O1b+qet5AogcYULQ5pFC16CFg+Pa92/oSUH8fyLS F3x9TjNiRRQUEbfg9ns/P2l6ta8aAETBHe0rhPeAiS+k9P5G8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBU8JDS314umF3Fzo56osE+iPr/EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZWYxZWJjNmMtMWVmMy0z N2FlLWE4ZGQtZGU4N2NhOTRlNWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFeOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAASKLsLEppStY3m6H9eY3IujugFrrWo0jRb0gomHy4c9PPlxehzhWZAG 7CsKCSzez8mJQFvAiBzO/HD1LHws03y5SYLDFtUl+yXunc6UYhE5yv2rEypDTkZJ Q8ZlkrzCbUu0AE2TtnoYSmD1JYNezn00RNBHWB5Q29Ng6Yvoeviu+HRXUNmE8Vdn JeevuYqRzynhDF2BOXFPTleMbWP7P9yb5Kxj1Ye6dL4i/roW03spdBPkbm4wLGdf j8unyhYrfWVOQ4IuiB4qqWGW7Uagiefwsn2j5qIo4pVa7pEyHP+CQN2Wzw839IJW Hv2O5nad0KSzz9opKRCyuwNvizCsqdI= -----END CERTIFICATE-----Generated at Sun Jun 15 06:19:22 2025 by rpki-client