$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/40b5c67a-9ac0-3589-acab-9c3b29acdede.roa File: 40b5c67a-9ac0-3589-acab-9c3b29acdede.roa (raw, json) Hash identifier: Ac0IaS5+R6+9k9NTghzs9A4aQSe+PPzUhi0YCaLKZIs= Subject key identifier: C6:09:FE:7D:40:CD:2F:C1:BE:AA:3E:3C:5A:F1:D4:86:92:BA:C6:4C Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584B48E1B0BD502A4AC2A803C480 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/40b5c67a-9ac0-3589-acab-9c3b29acdede.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 132121 IP address blocks: 168.87.80.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:b0:bd:50:2a:4a:c2:a8:03:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=956692f7-41d0-4d7a-bb54-c1b3499da52c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ee:0c:0d:70:64:e4:a8:37:87:d0:4d:29:cd: c1:33:90:9c:d4:6f:3b:01:ee:5e:99:0b:41:a0:2c: 57:1e:6b:3a:18:b5:23:3b:59:3d:13:41:9a:fd:f3: 48:3d:30:e1:22:2a:3e:4d:ca:10:6e:5a:b4:39:fb: 8b:71:3d:bf:67:a1:2a:15:10:73:6b:4d:cd:d7:27: 80:23:d8:79:d5:ec:df:1a:57:60:f1:6f:f1:ef:eb: 99:af:e6:ca:6f:7c:7f:ee:d7:4e:14:48:14:53:8d: fd:49:c7:f3:85:92:35:32:8b:f1:7c:79:9c:6b:54: d5:3a:8e:2d:96:3d:53:ba:9d:fb:48:5b:eb:12:10: 51:6e:df:49:0e:c8:d1:08:74:1a:f1:8f:84:01:f9: 6b:a7:10:22:85:cd:39:c4:df:81:f3:a1:37:61:85: 3e:5c:e4:11:c8:3f:9b:9a:bd:55:88:1d:0b:65:d4: ed:82:7b:e3:15:21:6b:57:f1:0e:6d:89:dd:54:55: b8:df:64:8b:68:37:92:b4:90:4a:27:b8:01:05:49: 9e:eb:9b:3b:06:a4:d8:9c:f4:89:4d:22:68:eb:01: ac:d3:a8:95:51:90:02:eb:56:c6:b3:11:1c:31:0a: db:9f:73:65:90:8b:63:6b:eb:a8:da:6e:ea:53:58: fc:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:09:FE:7D:40:CD:2F:C1:BE:AA:3E:3C:5A:F1:D4:86:92:BA:C6:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/40b5c67a-9ac0-3589-acab-9c3b29acdede.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.80.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:25:b0:f9:fa:64:5b:3f:5c:75:db:a2:2a:97:39:c1:58:ff: bf:23:b9:20:99:0a:66:0c:59:ca:8f:16:1a:e0:e7:73:c9:17: 84:1f:90:ba:3f:e2:b0:98:97:57:58:8a:09:b5:b0:02:ee:68: 51:47:8f:39:af:de:ed:3a:3f:d9:12:cc:c2:d7:73:cd:5f:96: 21:d1:20:82:11:6f:14:79:f0:94:7e:23:1f:52:18:81:b9:90: 4d:a1:65:8b:74:18:9e:95:85:a1:26:6d:29:ba:0c:95:82:b0: 40:60:2f:2e:ec:97:15:27:97:35:2c:bf:5f:53:be:09:6d:b7: 15:1e:69:55:0d:bd:b4:b4:28:7f:ec:ea:e3:3c:fd:a2:3d:d4: df:1c:4e:35:23:58:5b:cc:5f:71:dd:93:12:3a:c3:16:0d:f9: ba:52:46:16:9e:8c:f6:6f:64:96:2b:5c:23:f6:20:dc:a4:a3: 97:d8:e5:9f:52:86:80:3a:49:88:11:d8:89:0e:cf:7d:84:31: 6d:05:d8:8a:c9:6c:04:b9:dd:59:01:b7:29:81:83:4c:60:24: ee:bb:b0:de:99:d6:01:90:18:9f:74:da:10:97:65:03:0c:40: 2f:dc:a6:d8:86:10:29:d5:31:cd:d3:2b:76:b2:dd:9a:ef:ca: b8:43:0e:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4bC9UCpKwqgDxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk OTU2NjkyZjctNDFkMC00ZDdhLWJiNTQtYzFiMzQ5OWRhNTJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnu4MDXBk5Kg3h9BNKc3BM5Cc1G87Ae5emQtB oCxXHms6GLUjO1k9E0Ga/fNIPTDhIio+TcoQblq0OfuLcT2/Z6EqFRBza03N1yeA I9h51ezfGldg8W/x7+uZr+bKb3x/7tdOFEgUU439ScfzhZI1MovxfHmca1TVOo4t lj1Tup37SFvrEhBRbt9JDsjRCHQa8Y+EAflrpxAihc05xN+B86E3YYU+XOQRyD+b mr1ViB0LZdTtgnvjFSFrV/EObYndVFW432SLaDeStJBKJ7gBBUme65s7BqTYnPSJ TSJo6wGs06iVUZAC61bGsxEcMQrbn3NlkItja+uo2m7qU1j8vQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMYJ/n1AzS/Bvqo+PFrx1IaSusZMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNDBiNWM2N2EtOWFjMC0z NTg5LWFjYWItOWMzYjI5YWNkZWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqFdQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACglsPn6ZFs/XHXboiqXOcFY/78juSCZCmYMWcqPFhrg53PJF4QfkLo/ 4rCYl1dYigm1sALuaFFHjzmv3u06P9kSzMLXc81fliHRIIIRbxR58JR+Ix9SGIG5 kE2hZYt0GJ6VhaEmbSm6DJWCsEBgLy7slxUnlzUsv19TvglttxUeaVUNvbS0KH/s 6uM8/aI91N8cTjUjWFvMX3HdkxI6wxYN+bpSRhaejPZvZJYrXCP2INyko5fY5Z9S hoA6SYgR2IkOz32EMW0F2IrJbAS53VkBtymBg0xgJO67sN6Z1gGQGJ902hCXZQMM QC/cptiGECnVMc3TK3ay3ZrvyrhDDu8= -----END CERTIFICATE-----Generated at Sun Oct 19 20:31:05 2025 by rpki-client