$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/36fff40a-5371-3197-864c-6f7ec60a819a.roa File: 36fff40a-5371-3197-864c-6f7ec60a819a.roa (raw, json) Hash identifier: /oCkAjEB0wJWc8/YlcE3hR5cqTUCqez/l4EMfNtQZQI= Subject key identifier: 18:E4:9F:26:DE:E3:57:85:41:46:92:42:E0:FA:E9:B7:E1:5E:84:70 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584B4D11E02EA15B1120D44E5F80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/36fff40a-5371-3197-864c-6f7ec60a819a.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 203 IP address blocks: 216.240.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:e0:2e:a1:5b:11:20:d4:4e:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=89cc734e-eaed-4225-93b3-4c406478ef65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:05:22:0e:78:6e:4e:b4:fd:86:0a:e9:ef:d7: 9d:5c:19:62:dd:60:ad:9b:a6:5a:0f:56:3d:1a:ad: 77:ed:a0:90:0f:60:a3:9a:52:12:36:4c:82:4e:82: f8:12:76:a6:f5:fb:24:08:6a:11:2b:c4:68:45:c7: b3:1b:a0:81:db:3c:e2:27:1b:02:c0:8a:32:ce:5e: 83:33:15:50:6a:ed:ae:15:00:ca:31:82:b6:5d:ec: 81:6d:f8:c9:f8:75:d7:d0:87:f6:db:9d:1a:f7:b9: 8a:37:e8:72:89:e2:7b:81:87:e2:fb:6b:66:86:1f: 08:d8:55:0e:48:93:25:f6:50:fa:10:91:2f:01:ba: 77:d1:a8:35:25:e1:a2:f8:8f:f6:ad:a8:6e:ac:36: 15:d3:c2:86:8a:f9:04:6d:10:17:c1:08:ec:bc:c3: 3c:db:d7:81:aa:7e:50:dd:f7:0f:60:42:95:fd:4c: 3f:af:af:b8:f8:ac:1f:5f:78:f9:8f:3c:76:cc:f7: 7a:55:c3:a2:ac:b3:b7:ff:59:40:ba:55:f3:bc:fb: fc:30:5a:8a:f0:af:33:d1:0e:8e:83:01:dd:fe:07: 31:ec:74:53:50:36:a2:a7:d2:17:6b:a3:5d:88:ff: 1e:f4:61:b5:94:d1:40:eb:19:22:4f:a9:33:10:85: 72:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:E4:9F:26:DE:E3:57:85:41:46:92:42:E0:FA:E9:B7:E1:5E:84:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/36fff40a-5371-3197-864c-6f7ec60a819a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 216.240.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:3b:5a:92:bf:a7:85:c4:7b:4f:af:e9:7e:9f:7b:1f:2d:76: 57:e2:f0:54:21:50:c4:34:ba:e8:51:a5:26:d5:43:56:4c:0d: 35:53:08:60:c2:80:e0:31:ce:cf:8e:cf:25:b8:bb:ef:f2:65: b6:03:72:d1:7b:61:7b:ef:be:06:46:3b:84:6a:ca:d2:fa:fc: a4:57:0f:73:6f:91:7b:cf:59:e3:53:cd:12:3a:26:87:7e:eb: 74:79:12:0e:61:c0:c1:2a:b3:10:35:da:67:67:92:3a:bb:f5: 8a:e0:32:92:4c:4b:d0:dc:9e:bc:f4:1c:7a:31:a4:f2:57:08: d4:85:f9:b9:3c:28:6e:ed:d9:bc:00:b5:a6:15:97:51:23:d8: 67:c9:3e:39:9f:bb:24:a9:1a:ab:17:7c:78:55:13:91:80:33: 16:70:43:87:ad:d4:21:ae:34:a5:09:a9:77:63:ce:aa:a6:3d: 2c:c8:c2:40:3f:d9:88:e6:07:7f:86:8a:d9:51:d0:fc:e8:20: 2b:84:bb:08:a2:41:3c:10:ee:13:ed:6d:94:d1:8f:1b:05:22: b9:4d:03:dd:a8:92:96:79:2e:a4:b9:b2:e7:82:e9:97:fa:aa: 4d:27:c4:e9:15:55:15:d3:8d:3e:75:a6:f9:82:f6:22:f4:04: 89:c1:d7:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNEeAuoVsRINROX4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk ODljYzczNGUtZWFlZC00MjI1LTkzYjMtNGM0MDY0NzhlZjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQUiDnhuTrT9hgrp79edXBli3WCtm6ZaD1Y9 Gq137aCQD2CjmlISNkyCToL4Enam9fskCGoRK8RoRcezG6CB2zziJxsCwIoyzl6D MxVQau2uFQDKMYK2XeyBbfjJ+HXX0If2250a97mKN+hyieJ7gYfi+2tmhh8I2FUO SJMl9lD6EJEvAbp30ag1JeGi+I/2rahurDYV08KGivkEbRAXwQjsvMM829eBqn5Q 3fcPYEKV/Uw/r6+4+KwfX3j5jzx2zPd6VcOirLO3/1lAulXzvPv8MFqK8K8z0Q6O gwHd/gcx7HRTUDaip9IXa6NdiP8e9GG1lNFA6xkiT6kzEIVydQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBjknybe41eFQUaSQuD66bfhXoRwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMzZmZmY0MGEtNTM3MS0z MTk3LTg2NGMtNmY3ZWM2MGE4MTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PDNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJU7WpK/p4XEe0+v6X6fex8tdlfi8FQhUMQ0uuhRpSbVQ1ZMDTVTCGDC gOAxzs+OzyW4u+/yZbYDctF7YXvvvgZGO4RqytL6/KRXD3NvkXvPWeNTzRI6Jod+ 63R5Eg5hwMEqsxA12mdnkjq79YrgMpJMS9Dcnrz0HHoxpPJXCNSF+bk8KG7t2bwA taYVl1Ej2GfJPjmfuySpGqsXfHhVE5GAMxZwQ4et1CGuNKUJqXdjzqqmPSzIwkA/ 2YjmB3+GitlR0PzoICuEuwiiQTwQ7hPtbZTRjxsFIrlNA92okpZ5LqS5sueC6Zf6 qk0nxOkVVRXTjT51pvmC9iL0BInB18U= -----END CERTIFICATE-----Generated at Sun Oct 19 20:44:43 2025 by rpki-client