$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2153d3a6-ecc9-349e-a08d-595348d99222.roa File: 2153d3a6-ecc9-349e-a08d-595348d99222.roa (raw, json) Hash identifier: CyT4k6Gy2P8Om8nQkn03hQwTFS7a4L6g5kvnLJRPVyQ= Subject key identifier: 70:4C:47:01:4D:0E:1C:66:C6:83:5F:98:E7:54:96:FD:07:C9:EA:CF Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584B2331828AB32CEBD2590D58C0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2153d3a6-ecc9-349e-a08d-595348d99222.roa Signing time: Tue 09 Sep 2025 13:00:41 +0000 ROA not before: Tue 09 Sep 2025 13:00:41 +0000 ROA not after: Mon 08 Dec 2025 14:00:41 +0000 asID: 202 IP address blocks: 170.30.214.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:23:31:82:8a:b3:2c:eb:d2:59:0d:58:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 9 13:00:41 2025 GMT Not After : Dec 8 14:00:41 2025 GMT Subject: CN=fe7f375d-1782-41e4-ab87-eaa4d1723bb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:7c:df:7c:87:11:5d:18:ae:21:35:f7:0e:a9: 0e:e8:49:a7:19:3b:38:ef:0d:76:ff:d1:8f:d8:11: 7a:d5:e1:14:53:10:41:2d:39:55:cf:b4:62:d8:28: 39:e3:85:ee:e3:6a:0a:ec:06:0c:dc:91:53:5a:23: 9c:36:f7:f9:79:93:c1:83:8b:16:b9:a5:3b:4c:4b: 15:3b:6f:6f:ab:96:c3:ae:59:38:60:c5:b9:74:26: 12:79:54:7a:59:ee:8e:f1:62:ff:93:55:ec:57:bd: 64:99:15:c3:45:2e:a7:2b:3f:43:03:81:2d:e7:39: e3:20:18:ec:a7:bd:66:ad:05:9a:61:78:d7:ad:03: 11:e2:7d:da:72:4c:10:af:65:bb:92:41:1c:f8:f6: 13:f5:19:a7:49:c7:8e:24:1a:6d:80:6b:7c:33:81: 54:15:22:a9:97:e8:a3:22:a6:70:21:38:c8:4c:57: e5:fd:2d:33:4b:87:76:bd:2f:92:86:fa:ef:be:2d: ca:8b:26:8a:2f:bc:58:64:4d:c1:85:45:ae:a1:d6: 55:1e:28:9c:c2:c4:42:02:8e:1d:cd:84:04:31:4a: 43:36:3a:0c:f8:b0:6b:bd:75:36:db:02:7c:d5:f8: 36:d8:a9:3f:8f:30:56:cd:7e:bd:11:59:df:89:48: b8:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:4C:47:01:4D:0E:1C:66:C6:83:5F:98:E7:54:96:FD:07:C9:EA:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2153d3a6-ecc9-349e-a08d-595348d99222.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 170.30.214.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:61:80:8a:a4:a6:e7:09:c3:37:10:9b:66:81:92:0e:47:17: 0c:95:27:24:68:26:32:84:72:78:d5:b1:2c:77:45:38:fc:68: 27:04:13:90:8d:79:ca:b4:ea:5e:b8:c4:3b:7e:2d:da:a5:3a: 79:25:bc:68:7a:23:86:29:c3:b8:19:64:e5:68:f2:4b:e7:02: a7:f7:09:50:85:ab:f2:9d:bf:d1:94:9d:7f:0d:3b:5f:12:38: 63:87:b8:e6:44:f6:56:8f:cf:30:c0:05:08:5b:88:63:91:41: 46:3d:93:36:25:4b:c2:e0:75:bf:e7:14:e0:c8:11:90:19:04: 88:10:36:38:e7:97:c4:71:57:94:7a:90:72:39:2a:e2:dd:71: 46:84:fb:5c:b9:02:a4:50:f2:af:44:94:12:fc:06:11:5f:e2: 83:01:6e:ec:43:19:98:54:a5:d5:c9:dc:ba:fd:5e:fe:e5:02: a2:f5:d2:53:51:22:d8:0a:a5:84:50:11:d0:27:99:bd:23:5a: 21:44:f3:03:92:19:d2:86:71:5f:55:f2:85:6e:9f:44:fd:4a: c5:e3:46:41:b9:35:2a:23:04:d9:d5:5b:24:e3:59:ff:55:9b: 6f:bd:08:0e:b2:06:38:01:56:33:a3:f4:d3:90:1b:c9:b2:c1: 1e:29:01:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsjMYKKsyzr0lkNWMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDkwOTEzMDA0MVoXDTI1MTIwODE0MDA0MVowLzEtMCsGA1UEAxMk ZmU3ZjM3NWQtMTc4Mi00MWU0LWFiODctZWFhNGQxNzIzYmI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXzffIcRXRiuITX3DqkO6EmnGTs47w12/9GP 2BF61eEUUxBBLTlVz7Ri2Cg544Xu42oK7AYM3JFTWiOcNvf5eZPBg4sWuaU7TEsV O29vq5bDrlk4YMW5dCYSeVR6We6O8WL/k1XsV71kmRXDRS6nKz9DA4Et5znjIBjs p71mrQWaYXjXrQMR4n3ackwQr2W7kkEc+PYT9RmnSceOJBptgGt8M4FUFSKpl+ij IqZwITjITFfl/S0zS4d2vS+Shvrvvi3KiyaKL7xYZE3BhUWuodZVHiicwsRCAo4d zYQEMUpDNjoM+LBrvXU22wJ81fg22Kk/jzBWzX69EVnfiUi4/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHBMRwFNDhxmxoNfmOdUlv0HyerPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMjE1M2QzYTYtZWNjOS0z NDllLWEwOGQtNTk1MzQ4ZDk5MjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqh7WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFthgIqkpucJwzcQm2aBkg5HFwyVJyRoJjKEcnjVsSx3RTj8aCcEE5CN ecq06l64xDt+LdqlOnklvGh6I4Ypw7gZZOVo8kvnAqf3CVCFq/Kdv9GUnX8NO18S OGOHuOZE9laPzzDABQhbiGORQUY9kzYlS8Lgdb/nFODIEZAZBIgQNjjnl8RxV5R6 kHI5KuLdcUaE+1y5AqRQ8q9ElBL8BhFf4oMBbuxDGZhUpdXJ3Lr9Xv7lAqL10lNR ItgKpYRQEdAnmb0jWiFE8wOSGdKGcV9V8oVun0T9SsXjRkG5NSojBNnVWyTjWf9V m2+9CA6yBjgBVjOj9NOQG8mywR4pAS4= -----END CERTIFICATE-----Generated at Sun Oct 19 20:31:10 2025 by rpki-client