$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3d929172-8490-3bed-abfb-0c8f19e1c302.roa File: 3d929172-8490-3bed-abfb-0c8f19e1c302.roa (raw, json) Hash identifier: 90/xHFvTNDmOWXJYzDYuRuunGSYutsyw2aJKD29yHXY= Subject key identifier: 2E:CF:51:AD:0D:46:CF:B5:53:3B:DD:1B:3E:38:0E:99:BE:C1:7A:4E Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584B4A472FA590295EF1B9AA3340 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3d929172-8490-3bed-abfb-0c8f19e1c302.roa Signing time: Tue 23 Sep 2025 13:00:40 +0000 ROA not before: Tue 23 Sep 2025 13:00:40 +0000 ROA not after: Mon 22 Dec 2025 14:00:40 +0000 asID: 3360 IP address blocks: 206.164.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4a:47:2f:a5:90:29:5e:f1:b9:aa:33:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 23 13:00:40 2025 GMT Not After : Dec 22 14:00:40 2025 GMT Subject: CN=3e4b0f68-1624-48ea-b6a6-b57c07858d32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:64:ae:d1:be:85:6b:79:39:fe:9b:1b:69:4c: 2f:9c:d7:b0:10:8e:52:b1:11:5c:26:08:cb:b9:64: 95:27:0f:4a:96:82:fc:fc:f4:80:59:38:09:48:4f: c0:43:b9:6d:60:55:71:ba:7f:18:07:84:f5:95:ad: e8:d1:10:9d:11:96:0f:cb:e8:f7:61:fa:a2:d1:35: 2b:89:67:fa:0d:2f:70:ef:59:68:6a:b9:99:c7:91: b3:28:6d:66:5b:d9:d5:d1:b6:92:dc:1a:4c:ab:f1: c8:4d:d6:22:3a:6a:ea:6e:df:ac:05:47:5b:15:96: b0:55:91:d1:ba:79:6d:71:28:a3:b6:d4:72:8f:ce: fe:f2:5b:cf:a4:8a:a7:fa:c1:dc:69:36:ec:7b:ae: 7f:1d:c0:13:2e:2f:11:45:ae:15:01:3b:29:22:8a: bc:0b:46:51:cc:e9:f9:63:c7:74:d5:29:cd:36:c7: 9b:2a:d2:ae:cb:09:e7:7f:2f:78:86:f5:08:dd:b0: a0:5f:7e:a8:81:61:25:75:58:e3:21:25:8b:d9:46: a7:e5:69:e7:50:f1:f3:5a:08:38:1c:6a:f1:72:d9: 50:7b:59:5d:68:5a:06:50:f9:dd:f5:3d:41:26:0b: d7:ca:01:0d:fa:13:33:d6:57:8f:95:cf:3a:05:5f: 04:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:CF:51:AD:0D:46:CF:B5:53:3B:DD:1B:3E:38:0E:99:BE:C1:7A:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3d929172-8490-3bed-abfb-0c8f19e1c302.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 206.164.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:4f:d3:90:3d:1c:51:8c:30:3b:71:a8:3e:1e:68:23:bc:3e: 0d:46:b9:7e:c8:82:2a:59:ad:96:ad:d0:07:52:91:57:9f:b4: 18:86:ba:70:5d:ad:de:cf:b9:71:de:24:eb:da:5f:f9:2f:65: d2:42:c6:c1:57:ac:d1:c6:4d:59:74:99:fa:71:1b:32:61:c6: 93:99:ab:66:ab:80:98:ec:12:e3:c5:ee:c9:0d:08:01:2a:03: 1b:ba:07:92:99:48:b9:ed:35:71:d6:9c:a4:d0:35:80:f8:f5: 1e:88:74:ac:44:6b:10:dc:f9:71:a9:c1:42:84:fd:52:c2:19: 88:cb:3a:8b:1c:0a:dc:91:8b:87:0a:9c:18:8b:06:af:ef:c5: 13:a3:46:17:24:44:3d:9a:d5:58:37:ac:3b:9c:c5:ac:94:ef: 4e:a8:bc:0f:9a:b3:66:7e:92:cf:ed:92:95:d6:9c:24:92:99: 7d:a8:5b:bc:8d:68:70:d4:8f:3b:0d:46:9c:68:79:a4:00:64: 81:48:10:ff:5b:a2:fe:81:eb:de:4c:52:9f:27:e7:f3:74:4b: 7d:8e:71:d0:3e:43:7b:14:4a:ef:48:b9:5a:8e:83:8f:a0:8c: d6:a3:fd:05:82:53:15:3b:c3:d9:7f:8b:32:f1:c2:8a:60:9b: ad:f8:20:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtKRy+lkCle8bmqM0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDkyMzEzMDA0MFoXDTI1MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk M2U0YjBmNjgtMTYyNC00OGVhLWI2YTYtYjU3YzA3ODU4ZDMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGSu0b6Fa3k5/psbaUwvnNewEI5SsRFcJgjL uWSVJw9KloL8/PSAWTgJSE/AQ7ltYFVxun8YB4T1la3o0RCdEZYPy+j3Yfqi0TUr iWf6DS9w71loarmZx5GzKG1mW9nV0baS3BpMq/HITdYiOmrqbt+sBUdbFZawVZHR unltcSijttRyj87+8lvPpIqn+sHcaTbse65/HcATLi8RRa4VATspIoq8C0ZRzOn5 Y8d01SnNNsebKtKuywnnfy94hvUI3bCgX36ogWEldVjjISWL2Uan5WnnUPHzWgg4 HGrxctlQe1ldaFoGUPnd9T1BJgvXygEN+hMz1lePlc86BV8EfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC7PUa0NRs+1UzvdGz44Dpm+wXpOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvM2Q5MjkxNzItODQ5MC0z YmVkLWFiZmItMGM4ZjE5ZTFjMzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqRoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF1P05A9HFGMMDtxqD4eaCO8Pg1GuX7IgipZrZat0AdSkVeftBiGunBd rd7PuXHeJOvaX/kvZdJCxsFXrNHGTVl0mfpxGzJhxpOZq2argJjsEuPF7skNCAEq Axu6B5KZSLntNXHWnKTQNYD49R6IdKxEaxDc+XGpwUKE/VLCGYjLOoscCtyRi4cK nBiLBq/vxROjRhckRD2a1Vg3rDucxayU706ovA+as2Z+ks/tkpXWnCSSmX2oW7yN aHDUjzsNRpxoeaQAZIFIEP9bov6B695MUp8n5/N0S32OcdA+Q3sUSu9IuVqOg4+g jNaj/QWCUxU7w9l/izLxwopgm634IKg= -----END CERTIFICATE-----Generated at Sun Oct 19 23:20:45 2025 by rpki-client