$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0d6c09e8-2b13-365f-832e-baa9416ff23b.roa File: 0d6c09e8-2b13-365f-832e-baa9416ff23b.roa (raw, json) Hash identifier: e/HOC5h1+eky+1mDsnjP2j4E50vgRcmmpih5tCgP9CE= Subject key identifier: AA:69:0F:D9:B3:E9:D1:04:EA:C0:36:9B:2D:45:18:E2:6A:EB:BB:C4 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584B5DD1F139BA4DD09E4B843860 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0d6c09e8-2b13-365f-832e-baa9416ff23b.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 202 IP address blocks: 207.37.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d1:f1:39:ba:4d:d0:9e:4b:84:38:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=8f3a316f-295b-419d-94f0-e97f78ada105 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:84:f6:6d:85:79:fe:41:c3:81:55:ec:cb:b2: 9a:e0:13:49:c4:2a:e5:70:e6:39:4b:37:25:80:43: 43:cd:f0:91:ce:89:84:84:8a:c3:2a:b1:bb:4d:a1: 9f:e7:3a:fe:8b:d3:6e:3f:45:5c:0a:f4:3c:f1:06: cc:89:28:6a:83:03:80:1e:c6:8e:47:1c:7c:8d:ea: 4e:67:fd:6a:e4:59:41:5f:32:0e:ab:74:ee:da:a6: 0b:57:3a:58:af:25:36:9e:2f:f5:5a:62:59:fe:0b: 3b:3f:b7:14:05:53:9f:24:fe:52:c7:e1:45:a8:4d: 94:ac:db:39:ff:35:b7:c0:40:15:9c:d7:fd:28:8b: 42:32:59:93:9d:bd:ea:29:57:c6:be:11:6c:c9:ad: 08:4a:d2:20:89:ba:eb:fb:30:43:a1:08:4a:e1:76: 23:55:61:32:fa:4e:cb:81:aa:7c:60:f0:91:e9:06: ff:64:b3:2c:3c:9d:55:e7:ef:62:2f:48:12:48:20: 7a:72:74:3e:e5:11:95:3d:91:ba:e1:94:cb:bb:81: eb:44:fe:22:a0:47:5e:21:51:6b:00:d1:8a:bd:3b: 8a:4f:1e:73:da:af:45:3b:31:77:01:24:41:3b:62: 4a:2b:24:f7:d7:9f:17:f0:0c:39:86:b5:a7:d8:f2: 38:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:69:0F:D9:B3:E9:D1:04:EA:C0:36:9B:2D:45:18:E2:6A:EB:BB:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0d6c09e8-2b13-365f-832e-baa9416ff23b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 207.37.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:bd:61:84:1c:b8:cd:b7:e1:97:50:1a:78:2f:dc:39:d2:3b: a6:75:d4:bb:c4:e5:05:6a:e2:5b:c1:b1:ee:a8:0a:97:6a:55: 95:87:b1:ab:5a:c9:29:da:88:5a:f9:ab:91:76:92:35:6f:fb: c3:18:ee:b3:1a:56:0b:a2:5d:9f:3d:2d:a5:2c:65:79:9f:1d: ab:5c:a3:d9:26:55:fd:6a:90:ef:9b:1a:42:79:63:b1:f0:54: bc:0d:e8:8c:a0:8d:1d:dd:d1:24:49:e1:68:54:69:f5:d1:72: 64:d2:c2:34:64:e2:ad:97:03:99:50:07:de:21:aa:c7:a6:0d: 92:12:5b:9d:b4:72:76:ee:92:8f:77:8e:61:71:a9:3d:18:99: 2f:71:5d:0e:e3:e2:3d:a6:58:a3:62:0c:65:14:af:91:34:d9: f0:47:67:a4:00:dd:2f:4b:f8:12:9b:8e:76:18:b4:ca:52:44: ce:d9:e3:51:d9:9b:84:39:bf:f2:62:2c:68:96:c7:ef:2b:f1: d4:a7:cc:29:fd:30:4c:17:bc:1b:b3:08:ec:8e:8b:9d:16:e3: 03:bf:76:12:b8:13:0b:0a:d5:68:6c:c9:ee:18:08:6a:e2:5e: 2b:12:1b:64:89:f9:b5:6b:66:3d:7e:95:8f:d0:72:cf:d2:c7: dc:8a:ab:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0fE5uk3QnkuEOGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk OGYzYTMxNmYtMjk1Yi00MTlkLTk0ZjAtZTk3Zjc4YWRhMTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2oT2bYV5/kHDgVXsy7Ka4BNJxCrlcOY5Szcl gENDzfCRzomEhIrDKrG7TaGf5zr+i9NuP0VcCvQ88QbMiShqgwOAHsaORxx8jepO Z/1q5FlBXzIOq3Tu2qYLVzpYryU2ni/1WmJZ/gs7P7cUBVOfJP5Sx+FFqE2UrNs5 /zW3wEAVnNf9KItCMlmTnb3qKVfGvhFsya0IStIgibrr+zBDoQhK4XYjVWEy+k7L gap8YPCR6Qb/ZLMsPJ1V5+9iL0gSSCB6cnQ+5RGVPZG64ZTLu4HrRP4ioEdeIVFr ANGKvTuKTx5z2q9FOzF3ASRBO2JKKyT3158X8Aw5hrWn2PI4oQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKppD9mz6dEE6sA2my1FGOJq67vEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMGQ2YzA5ZTgtMmIxMy0z NjVmLTgzMmUtYmFhOTQxNmZmMjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzyXwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHu9YYQcuM234ZdQGngv3DnSO6Z11LvE5QVq4lvBse6oCpdqVZWHsata ySnaiFr5q5F2kjVv+8MY7rMaVguiXZ89LaUsZXmfHatco9kmVf1qkO+bGkJ5Y7Hw VLwN6IygjR3d0SRJ4WhUafXRcmTSwjRk4q2XA5lQB94hqsemDZISW520cnbuko93 jmFxqT0YmS9xXQ7j4j2mWKNiDGUUr5E02fBHZ6QA3S9L+BKbjnYYtMpSRM7Z41HZ m4Q5v/JiLGiWx+8r8dSnzCn9MEwXvBuzCOyOi50W4wO/dhK4EwsK1Whsye4YCGri XisSG2SJ+bVrZj1+lY/Qcs/Sx9yKq60= -----END CERTIFICATE-----Generated at Mon Oct 20 02:08:52 2025 by rpki-client