$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/36f93389-8f52-399c-a966-9d1b7848d465.roa File: 36f93389-8f52-399c-a966-9d1b7848d465.roa (raw, json) Hash identifier: pLnNlQZV7z+NQLGuPZXMDvNSrFbYYLjUNjH3UlVV+3I= Subject key identifier: 2C:37:9A:5D:1D:6E:D0:23:EE:44:A7:89:57:FB:57:9D:FC:FD:08:53 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584B4D11DECE4335B474F3935580 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/36f93389-8f52-399c-a966-9d1b7848d465.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 3360 IP address blocks: 206.164.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:de:ce:43:35:b4:74:f3:93:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=e4f3eb76-313c-4159-94b5-4346dc991897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:94:6e:80:4b:a1:c1:cf:0d:b1:ed:5c:54:f5: 8b:9e:64:fc:3a:59:07:1d:12:bc:f7:f4:87:7b:ec: a8:54:08:cf:a4:4f:d3:23:b4:16:13:a5:3b:b9:0f: dd:bd:f5:bc:24:9b:ba:a2:87:cf:52:81:f5:e6:83: 49:c1:6a:3e:87:18:76:dd:cf:ac:cb:9c:55:98:e6: 5a:1d:ea:b1:d6:86:b6:19:b6:3a:28:73:9e:46:fb: 03:37:9d:98:f4:34:bf:09:59:10:9d:6f:4c:ae:bd: ec:5a:ce:1b:82:00:ed:67:80:30:47:2f:69:f2:48: b3:21:f0:f7:9e:66:66:75:82:bd:a6:ee:15:63:6c: b9:2e:59:00:ea:c6:83:7f:c5:8e:4b:b2:69:09:52: 2f:0e:3f:ab:96:8e:68:9e:bf:c1:9b:e7:b4:c8:60: c6:5a:8c:ab:c1:3b:62:21:8c:42:d8:77:b3:56:54: 3f:22:9a:b6:d3:3f:b4:36:ef:a0:27:24:88:ba:b3: 7d:3c:30:8c:3c:40:af:ba:b8:ea:7d:cf:b2:09:a0: 25:34:29:6b:c1:78:60:4b:a7:53:dc:60:53:e8:b0: 09:89:84:44:d0:18:c7:60:39:cd:6b:ac:ed:9e:e0: 0e:87:28:7c:31:43:38:2d:b8:fe:d5:7b:64:1d:a9: e5:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:37:9A:5D:1D:6E:D0:23:EE:44:A7:89:57:FB:57:9D:FC:FD:08:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/36f93389-8f52-399c-a966-9d1b7848d465.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 206.164.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:31:8e:18:f7:7c:07:bf:93:a7:e2:41:63:81:bf:d0:89:db: a0:18:98:ab:67:57:9e:2a:58:c2:53:32:1c:d0:1c:98:cd:a5: 3b:84:af:a5:3a:29:65:d6:99:0f:6e:7a:51:be:79:0a:82:85: c7:00:54:d8:5f:69:62:85:c0:2e:dd:cb:61:01:1c:00:20:e8: 64:20:45:9d:1c:8b:89:30:58:29:d0:70:de:85:de:05:3a:d0: 9e:f5:8c:17:e8:07:72:17:7f:fd:0a:de:43:53:40:84:28:e0: 1b:dc:9d:de:8f:b3:60:55:a8:8b:b8:14:ee:cf:3e:e6:7f:0c: bb:c7:0f:2c:de:02:90:c7:93:02:6e:b8:4a:e5:96:cb:06:47: 15:29:78:89:bb:6b:8c:04:35:14:f1:4f:96:4a:98:9f:f7:c7: dd:ce:29:5f:07:4d:2c:4e:94:b1:de:00:a9:90:8d:3b:48:bb: c1:66:64:0a:6e:35:38:20:cc:40:14:00:a0:17:bc:68:91:bb: a7:f8:fc:27:b9:f4:d6:18:a6:5a:f6:f9:e6:cd:02:f5:fa:d2: 5d:8b:b0:20:b1:2a:76:5d:a8:a1:fc:47:e7:51:a1:36:5c:b7: df:25:0c:31:7c:e2:cf:73:fb:36:d6:c1:22:40:7b:98:a6:c3: 53:40:52:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNEd7OQzW0dPOTVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk ZTRmM2ViNzYtMzEzYy00MTU5LTk0YjUtNDM0NmRjOTkxODk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5RugEuhwc8Nse1cVPWLnmT8OlkHHRK89/SH e+yoVAjPpE/TI7QWE6U7uQ/dvfW8JJu6oofPUoH15oNJwWo+hxh23c+sy5xVmOZa Heqx1oa2GbY6KHOeRvsDN52Y9DS/CVkQnW9Mrr3sWs4bggDtZ4AwRy9p8kizIfD3 nmZmdYK9pu4VY2y5LlkA6saDf8WOS7JpCVIvDj+rlo5onr/Bm+e0yGDGWoyrwTti IYxC2HezVlQ/Ipq20z+0Nu+gJySIurN9PDCMPECvurjqfc+yCaAlNClrwXhgS6dT 3GBT6LAJiYRE0BjHYDnNa6ztnuAOhyh8MUM4Lbj+1XtkHanlYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCw3ml0dbtAj7kSniVf7V538/QhTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMzZmOTMzODktOGY1Mi0z OTljLWE5NjYtOWQxYjc4NDhkNDY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqToMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJcxjhj3fAe/k6fiQWOBv9CJ26AYmKtnV54qWMJTMhzQHJjNpTuEr6U6 KWXWmQ9uelG+eQqChccAVNhfaWKFwC7dy2EBHAAg6GQgRZ0ci4kwWCnQcN6F3gU6 0J71jBfoB3IXf/0K3kNTQIQo4Bvcnd6Ps2BVqIu4FO7PPuZ/DLvHDyzeApDHkwJu uErllssGRxUpeIm7a4wENRTxT5ZKmJ/3x93OKV8HTSxOlLHeAKmQjTtIu8FmZApu NTggzEAUAKAXvGiRu6f4/Ce59NYYplr2+ebNAvX60l2LsCCxKnZdqKH8R+dRoTZc t98lDDF84s9z+zbWwSJAe5imw1NAUpU= -----END CERTIFICATE-----Generated at Sun Oct 19 20:53:54 2025 by rpki-client