$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3a01770b-3fb2-38c4-86b9-e9cf4e186c44.roa File: 3a01770b-3fb2-38c4-86b9-e9cf4e186c44.roa (raw, json) Hash identifier: jlwBdRlS1ryL5UR+osHCIuoLpSFkIQXj7mpAks2jlr4= Subject key identifier: 82:68:85:C9:CA:89:18:43:4F:19:5C:F2:DD:44:D4:74:D1:7E:1F:DE Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584B4A471C90AF7200EF53DD6D40 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3a01770b-3fb2-38c4-86b9-e9cf4e186c44.roa Signing time: Tue 23 Sep 2025 13:00:40 +0000 ROA not before: Tue 23 Sep 2025 13:00:40 +0000 ROA not after: Mon 22 Dec 2025 14:00:40 +0000 asID: 203 IP address blocks: 66.54.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4a:47:1c:90:af:72:00:ef:53:dd:6d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 23 13:00:40 2025 GMT Not After : Dec 22 14:00:40 2025 GMT Subject: CN=d9d9cbc1-4487-4dc0-935a-bf78164bd5cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:67:31:c5:3a:73:79:19:ac:90:29:16:ea:58: 43:b0:d9:c6:5d:22:25:d9:45:76:f0:65:58:2f:3d: 19:c3:8b:0d:6b:6e:a9:b0:17:9b:a0:18:76:b3:7a: 08:7e:9a:e1:73:6b:3d:4b:8f:0b:fa:23:7c:ac:bd: a4:d4:7a:eb:fe:5a:e3:b0:03:22:53:72:65:e3:a4: 3b:a4:5a:e4:4b:e9:36:63:b5:cc:d5:fe:2c:66:49: c6:32:c6:90:c9:50:76:7a:60:94:40:70:8e:9a:5a: ba:e2:7a:f4:d5:ab:59:a2:03:f7:9b:ba:8e:12:28: a7:df:63:d7:c3:4b:f1:98:f7:8f:8f:9c:09:08:55: 3d:b2:6a:12:65:6d:fc:58:8e:5e:50:68:42:74:9a: d3:ed:e8:4e:6c:ae:31:56:56:39:5e:1f:65:bd:a4: df:69:0b:b4:53:5e:17:20:5f:04:9f:48:dc:87:43: 90:40:d5:e0:ce:1b:c8:9c:7f:e3:df:46:68:8a:f9: 37:39:c6:f1:09:fc:1c:46:33:f2:a9:ae:4c:43:b3: 14:7c:11:7c:b3:5a:80:84:08:0d:dd:d7:60:33:1c: b2:25:df:67:23:37:71:6c:0f:b0:cb:b4:cc:18:25: dd:3a:99:b2:96:4a:a8:ff:8b:be:83:9e:d8:2e:cc: f3:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:68:85:C9:CA:89:18:43:4F:19:5C:F2:DD:44:D4:74:D1:7E:1F:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3a01770b-3fb2-38c4-86b9-e9cf4e186c44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 66.54.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:1d:74:bb:89:aa:a7:31:87:58:97:a0:f8:1b:49:3c:59:42: 5f:15:2a:68:c4:bd:5d:62:df:8d:72:5f:d2:17:7f:ad:24:ca: c9:fe:61:d8:e7:da:42:9b:8b:96:97:d6:02:76:db:9d:07:a2: 99:5e:32:ff:32:84:52:6c:f0:d4:69:76:ab:94:4e:a5:43:47: 3b:f9:72:0c:1d:7c:b1:45:b7:7f:a3:93:c3:26:c3:75:e6:5b: f7:5f:59:85:e9:cc:5c:a8:31:2a:97:8f:0d:46:66:d6:54:91: e4:87:bc:04:72:7a:7c:8e:c7:5f:fc:ef:5e:17:cf:56:da:c6: 41:f2:9a:64:ea:7a:1a:f0:4e:b2:9d:73:ef:4d:2e:f0:80:d9: dd:6c:bf:5b:b4:fa:bd:25:23:59:d1:91:22:ca:43:91:a2:c3: 4c:3f:c2:0f:11:8c:cf:40:a0:71:17:01:d9:1a:e1:09:8e:79: 51:51:11:df:4a:c1:c1:b5:4c:c0:a7:5b:d8:60:07:36:70:34: 4d:d2:28:1d:08:74:e9:3a:8e:30:94:6c:ee:44:0a:ce:fb:11: db:bd:96:33:34:d6:b8:74:ba:80:3f:92:3f:9e:b4:d0:5f:66: b4:b5:d4:9c:1c:c1:fc:4f:2f:bd:09:b1:14:66:20:0f:a0:d2: ef:9f:50:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtKRxyQr3IA71PdbUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDkyMzEzMDA0MFoXDTI1MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk ZDlkOWNiYzEtNDQ4Ny00ZGMwLTkzNWEtYmY3ODE2NGJkNWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGcxxTpzeRmskCkW6lhDsNnGXSIl2UV28GVY Lz0Zw4sNa26psBeboBh2s3oIfprhc2s9S48L+iN8rL2k1Hrr/lrjsAMiU3Jl46Q7 pFrkS+k2Y7XM1f4sZknGMsaQyVB2emCUQHCOmlq64nr01atZogP3m7qOEiin32PX w0vxmPePj5wJCFU9smoSZW38WI5eUGhCdJrT7ehObK4xVlY5Xh9lvaTfaQu0U14X IF8En0jch0OQQNXgzhvInH/j30Zoivk3OcbxCfwcRjPyqa5MQ7MUfBF8s1qAhAgN 3ddgMxyyJd9nIzdxbA+wy7TMGCXdOpmylkqo/4u+g57YLszzmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIJohcnKiRhDTxlc8t1E1HTRfh/eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvM2EwMTc3MGItM2ZiMi0z OGM0LTg2YjktZTljZjRlMTg2YzQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQjY8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHEddLuJqqcxh1iXoPgbSTxZQl8VKmjEvV1i341yX9IXf60kysn+Ydjn 2kKbi5aX1gJ2250HopleMv8yhFJs8NRpdquUTqVDRzv5cgwdfLFFt3+jk8Mmw3Xm W/dfWYXpzFyoMSqXjw1GZtZUkeSHvARyenyOx1/8714Xz1baxkHymmTqehrwTrKd c+9NLvCA2d1sv1u0+r0lI1nRkSLKQ5Giw0w/wg8RjM9AoHEXAdka4QmOeVFREd9K wcG1TMCnW9hgBzZwNE3SKB0IdOk6jjCUbO5ECs77Edu9ljM01rh0uoA/kj+etNBf ZrS11JwcwfxPL70JsRRmIA+g0u+fUIg= -----END CERTIFICATE-----Generated at Mon Oct 20 02:07:05 2025 by rpki-client