$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/395e9672-0d4f-3770-ad00-14197b722cee.roa File: 395e9672-0d4f-3770-ad00-14197b722cee.roa (raw, json) Hash identifier: n98/ahXyTDzUkjZg74WfAxS3hOMOP5oPJEmiO8rrwno= Subject key identifier: 66:D4:6F:FC:9E:CD:C0:08:BA:4E:64:55:44:98:CE:00:8D:E5:1C:31 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584B4A471C46FB327AC3D8E1F200 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/395e9672-0d4f-3770-ad00-14197b722cee.roa Signing time: Tue 23 Sep 2025 13:00:40 +0000 ROA not before: Tue 23 Sep 2025 13:00:40 +0000 ROA not after: Mon 22 Dec 2025 14:00:40 +0000 asID: 203 IP address blocks: 66.54.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4a:47:1c:46:fb:32:7a:c3:d8:e1:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 23 13:00:40 2025 GMT Not After : Dec 22 14:00:40 2025 GMT Subject: CN=3352e322-fa85-44c5-9af0-1d13428bc3a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:3b:6c:55:ce:63:c6:5e:c5:bb:8b:bb:0b:13: 3c:7e:9d:d0:88:ff:4e:da:9f:ce:23:90:e1:ee:a8: 11:36:b9:bb:57:7c:b0:3a:f6:6d:5f:ae:68:0c:30: aa:06:c9:eb:92:ab:5d:a5:eb:14:de:d8:de:a3:85: cf:79:db:f1:27:23:0a:b5:85:6b:d4:fd:94:db:3d: 25:e8:c5:d2:93:a6:2f:52:91:b5:52:52:fe:c1:21: 02:12:6d:5c:9c:d8:12:4a:f7:b8:f2:80:9a:cd:67: 1d:11:d7:87:51:05:ce:ba:6f:27:64:8d:12:36:bb: 27:f8:e6:80:58:d6:a8:1e:49:aa:d6:8d:7f:15:49: 9a:31:f6:38:28:09:d3:50:c4:4d:9d:8b:a7:40:18: 36:85:2d:57:99:82:83:cc:bb:40:fc:f3:9f:a9:bb: 98:76:e5:68:cf:da:2e:22:9b:55:22:67:2e:7a:c1: 9f:fd:f7:74:c2:0a:bb:8c:32:55:f0:ae:17:b4:a0: 92:46:66:5b:61:0f:56:0c:c8:7f:6c:d2:ca:84:11: 7b:b5:d8:d4:89:77:73:9b:8b:3d:d1:54:c5:65:45: 99:96:63:3f:f7:32:a5:4b:0f:31:46:62:99:b9:3c: 19:84:f5:30:9f:ad:ec:8b:1e:4c:2c:78:fd:69:d9: 8f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:D4:6F:FC:9E:CD:C0:08:BA:4E:64:55:44:98:CE:00:8D:E5:1C:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/395e9672-0d4f-3770-ad00-14197b722cee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 66.54.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:69:3d:39:9f:04:33:30:c0:bb:35:e8:18:56:d1:3f:12:86: ec:d5:33:af:91:f3:f1:89:51:44:88:2f:34:a8:5d:35:ee:86: 35:91:f5:fe:f8:e2:df:fc:19:4b:4c:54:4b:34:43:9c:d8:4f: 68:ca:1c:d0:7d:19:e8:32:57:e7:73:b6:d4:dd:72:8b:13:ce: fb:29:9e:56:70:3a:fb:bf:fd:e2:d8:6e:96:0a:1a:72:46:9e: 8f:68:67:95:91:f5:da:ae:22:69:67:51:75:7d:63:5b:66:a7: 6a:38:34:44:d9:82:92:87:36:5d:f6:26:96:5b:bc:2b:6c:2f: 13:ff:e1:97:8c:85:2c:d9:c6:1d:ef:62:d0:a5:4b:09:8d:44: 77:6b:1a:a0:f4:27:3e:29:00:15:b7:54:33:63:35:4c:7b:1f: 3a:24:ef:5c:89:d6:2a:93:10:40:69:73:17:b0:50:98:70:65: f5:a5:31:de:10:14:0e:09:19:b3:fc:8c:7d:d9:d8:ba:1e:07: 1f:57:67:d6:d4:50:dc:84:36:d8:82:6b:a5:b1:06:26:04:c1: d1:9e:42:68:fd:12:c2:49:45:d3:27:ff:e5:b1:ed:56:1e:81: 9e:d6:0d:ac:03:b0:47:68:ae:4d:df:35:16:07:a4:7b:11:b0: 3a:1f:28:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtKRxxG+zJ6w9jh8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDkyMzEzMDA0MFoXDTI1MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk MzM1MmUzMjItZmE4NS00NGM1LTlhZjAtMWQxMzQyOGJjM2E3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDtsVc5jxl7Fu4u7CxM8fp3QiP9O2p/OI5Dh 7qgRNrm7V3ywOvZtX65oDDCqBsnrkqtdpesU3tjeo4XPedvxJyMKtYVr1P2U2z0l 6MXSk6YvUpG1UlL+wSECEm1cnNgSSve48oCazWcdEdeHUQXOum8nZI0SNrsn+OaA WNaoHkmq1o1/FUmaMfY4KAnTUMRNnYunQBg2hS1XmYKDzLtA/POfqbuYduVoz9ou IptVImcuesGf/fd0wgq7jDJV8K4XtKCSRmZbYQ9WDMh/bNLKhBF7tdjUiXdzm4s9 0VTFZUWZlmM/9zKlSw8xRmKZuTwZhPUwn63six5MLHj9admP3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGbUb/yezcAIuk5kVUSYzgCN5RwxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMzk1ZTk2NzItMGQ0Zi0z NzcwLWFkMDAtMTQxOTdiNzIyY2VlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQjYwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAABpPTmfBDMwwLs16BhW0T8ShuzVM6+R8/GJUUSILzSoXTXuhjWR9f74 4t/8GUtMVEs0Q5zYT2jKHNB9GegyV+dzttTdcosTzvspnlZwOvu//eLYbpYKGnJG no9oZ5WR9dquImlnUXV9Y1tmp2o4NETZgpKHNl32JpZbvCtsLxP/4ZeMhSzZxh3v YtClSwmNRHdrGqD0Jz4pABW3VDNjNUx7Hzok71yJ1iqTEEBpcxewUJhwZfWlMd4Q FA4JGbP8jH3Z2LoeBx9XZ9bUUNyENtiCa6WxBiYEwdGeQmj9EsJJRdMn/+Wx7VYe gZ7WDawDsEdork3fNRYHpHsRsDofKLo= -----END CERTIFICATE-----Generated at Sun Oct 19 20:41:11 2025 by rpki-client