$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2f73d5ed-b536-301b-a009-8b4532add687.roa File: 2f73d5ed-b536-301b-a009-8b4532add687.roa (raw, json) Hash identifier: JYlnslWOfhLF/sB9GtbVkOo5YLz7LYLEenAQDg+vhyo= Subject key identifier: 9B:6F:A5:73:D7:6A:B7:EA:60:5F:6D:C7:A4:57:88:86:89:7C:14:5C Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584B4D11D79154D078035E3930F0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2f73d5ed-b536-301b-a009-8b4532add687.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 203 IP address blocks: 204.104.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:d7:91:54:d0:78:03:5e:39:30:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=e8c04466-4aef-4604-a843-d4675ca124c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:08:58:1e:10:c3:0b:12:6d:55:d1:4b:59:62: da:d3:1e:d9:82:0f:a1:b0:e2:4c:d5:93:c5:f7:27: 15:4a:e4:0b:8d:9c:b9:2f:3c:ab:c4:13:a6:a3:8a: ae:8e:3d:50:94:4f:e3:02:c5:ef:5e:12:82:00:7d: 42:7d:b0:bc:7c:0b:a8:99:be:7e:df:d5:3b:c9:4a: 12:15:11:4b:d4:4a:53:d7:e4:9e:da:6c:cf:b5:b5: 77:07:bf:7d:9a:f6:2f:af:87:fc:16:ce:33:d2:92: b8:a9:d3:68:13:b4:7f:c3:65:55:4e:5a:d1:82:69: 91:83:68:98:ba:1d:3f:04:76:5d:93:2a:ee:b1:11: e9:3e:b6:b9:ee:76:f2:7e:36:d3:8b:ca:02:10:d1: 09:91:ae:d5:ee:e9:88:f8:6e:cb:c8:5e:bb:fc:b4: ca:68:5f:0b:4c:1d:80:cc:db:1e:98:17:3b:56:98: f2:2a:5d:ba:b9:60:6c:ad:12:dd:b7:4e:25:18:93: 7f:e0:f8:88:0f:9b:e9:b9:c2:80:94:8d:5b:7f:c5: a3:ed:9b:dc:d3:0a:ae:d4:36:40:b8:f6:46:4d:01: 7b:a8:a4:b4:8b:d0:02:13:9c:9b:be:df:be:3e:18: 15:9b:7b:67:47:f6:f3:f2:40:11:60:ae:76:8f:14: 56:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:6F:A5:73:D7:6A:B7:EA:60:5F:6D:C7:A4:57:88:86:89:7C:14:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2f73d5ed-b536-301b-a009-8b4532add687.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 204.104.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:51:92:de:d5:77:3a:c1:c3:d3:8f:ef:3e:21:33:7e:9b:31: 04:fa:51:41:a8:a8:6f:07:ae:df:03:56:03:c6:8d:6a:9f:2e: c2:d4:70:e1:51:64:3b:da:89:92:59:37:c8:1f:41:7b:21:b9: 48:ea:93:d3:f8:ab:26:e4:ef:30:ae:23:d4:4b:93:93:ce:89: e2:57:f5:26:cd:1d:4f:0f:cf:0f:09:52:35:68:61:06:75:f7: a1:bc:07:19:1a:5c:ea:a4:96:65:43:6b:da:6b:36:61:e3:ff: ad:6e:a9:f1:6d:5b:7f:52:1d:09:5d:f6:96:3a:26:f2:b9:81: 1e:34:11:03:5b:68:a0:90:a1:2c:75:a8:0e:a0:51:fc:c0:9c: 9e:fd:80:39:5d:e6:66:1f:0b:ae:1e:14:82:d9:94:80:ee:ce: f7:5a:c4:91:ea:fa:9c:db:55:d0:e6:74:f2:f2:84:36:02:36: 6b:36:3d:1c:b0:74:f6:be:d5:18:1b:5f:83:f2:47:93:13:87: 58:7a:bf:de:85:91:23:67:28:42:29:26:8f:60:d8:bb:02:5b: f1:53:46:9e:4c:ad:0c:61:60:20:84:f2:d0:fa:55:a3:4d:5d: e5:f0:8e:0e:06:08:c1:aa:df:9d:36:0a:88:17:13:78:96:72: b1:ef:73:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNEdeRVNB4A145MPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk ZThjMDQ0NjYtNGFlZi00NjA0LWE4NDMtZDQ2NzVjYTEyNGMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwhYHhDDCxJtVdFLWWLa0x7Zgg+hsOJM1ZPF 9ycVSuQLjZy5LzyrxBOmo4qujj1QlE/jAsXvXhKCAH1CfbC8fAuomb5+39U7yUoS FRFL1EpT1+Se2mzPtbV3B799mvYvr4f8Fs4z0pK4qdNoE7R/w2VVTlrRgmmRg2iY uh0/BHZdkyrusRHpPra57nbyfjbTi8oCENEJka7V7umI+G7LyF67/LTKaF8LTB2A zNsemBc7VpjyKl26uWBsrRLdt04lGJN/4PiID5vpucKAlI1bf8Wj7Zvc0wqu1DZA uPZGTQF7qKS0i9ACE5ybvt++PhgVm3tnR/bz8kARYK52jxRWRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJtvpXPXarfqYF9tx6RXiIaJfBRcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMmY3M2Q1ZWQtYjUzNi0z MDFiLWEwMDktOGI0NTMyYWRkNjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGiFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJBRkt7VdzrBw9OP7z4hM36bMQT6UUGoqG8Hrt8DVgPGjWqfLsLUcOFR ZDvaiZJZN8gfQXshuUjqk9P4qybk7zCuI9RLk5POieJX9SbNHU8Pzw8JUjVoYQZ1 96G8BxkaXOqklmVDa9prNmHj/61uqfFtW39SHQld9pY6JvK5gR40EQNbaKCQoSx1 qA6gUfzAnJ79gDld5mYfC64eFILZlIDuzvdaxJHq+pzbVdDmdPLyhDYCNms2PRyw dPa+1RgbX4PyR5MTh1h6v96FkSNnKEIpJo9g2LsCW/FTRp5MrQxhYCCE8tD6VaNN XeXwjg4GCMGq3502CogXE3iWcrHvc8A= -----END CERTIFICATE-----Generated at Sun Oct 19 20:44:51 2025 by rpki-client