$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4200f42a-72f5-310d-bd4e-143e66d1251c.roa File: 4200f42a-72f5-310d-bd4e-143e66d1251c.roa (raw, json) Hash identifier: mTTF9jz97IyHByUFhMGykRElX+mJWJBbH0W9xofFgIM= Subject key identifier: ED:14:CC:96:3B:12:7C:CA:18:07:A5:DE:CC:3B:67:F2:3A:8B:46:2F Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584B4A471B7B20E5AA3F3D997C40 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4200f42a-72f5-310d-bd4e-143e66d1251c.roa Signing time: Tue 23 Sep 2025 13:00:40 +0000 ROA not before: Tue 23 Sep 2025 13:00:40 +0000 ROA not after: Mon 22 Dec 2025 14:00:40 +0000 asID: 3356 IP address blocks: 66.54.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4a:47:1b:7b:20:e5:aa:3f:3d:99:7c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 23 13:00:40 2025 GMT Not After : Dec 22 14:00:40 2025 GMT Subject: CN=b2d68a97-e701-47f7-93b7-bb5b2bfc50ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:80:7b:df:f6:ad:34:fd:44:52:90:4b:45:63: 58:9e:5f:67:94:bb:6b:6c:ea:fe:74:52:5a:f8:24: 09:cd:1c:92:a8:b2:2e:ea:20:0f:7b:08:a0:a2:8d: f7:fd:85:bb:b0:05:d8:67:41:84:0a:df:3f:cd:7e: 74:dd:dd:d5:ec:5b:69:7c:ad:80:71:22:a3:c2:bf: 42:fc:9c:80:2d:6a:2e:3c:06:6f:12:b3:c6:ad:81: e6:d0:22:a6:d4:bd:38:5b:83:a7:4b:3c:6b:5d:a8: 51:7b:8b:74:43:d3:6c:94:71:d4:b0:d7:4e:2f:9a: 40:64:8f:ae:c6:a4:6a:83:b0:10:0c:3b:8b:2d:61: 90:2d:92:54:8c:ac:cf:f1:db:ad:a6:11:7c:98:60: ed:15:61:af:08:49:5c:85:a8:67:88:74:32:e1:e5: d1:06:76:c5:9f:fe:72:d6:b8:b5:20:e7:11:db:e0: 76:28:53:b4:de:cb:80:65:72:08:52:2e:4f:cc:ec: 0b:8e:99:07:d0:fa:ed:44:d4:77:72:eb:c2:19:01: 05:f0:00:e8:a0:7c:37:9b:00:30:20:1e:ac:da:e4: c2:d6:2b:ec:5f:75:15:6d:7a:b4:fa:b9:85:e1:88: b7:e4:52:51:37:f4:de:fb:3b:22:c3:38:19:6d:c0: 86:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:14:CC:96:3B:12:7C:CA:18:07:A5:DE:CC:3B:67:F2:3A:8B:46:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4200f42a-72f5-310d-bd4e-143e66d1251c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 66.54.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:3a:87:41:ff:47:ad:52:9a:1d:0d:17:84:fa:28:50:c8:7c: 5b:54:08:36:06:36:49:85:8e:3f:ea:fd:39:e2:86:8c:38:3a: 5f:04:cc:bd:dc:31:16:6f:43:a9:e4:4e:73:8d:ff:dc:c5:73: c3:a1:ec:60:1e:f8:25:8a:32:fa:80:04:2d:5a:c6:13:34:12: c1:74:75:25:a7:ff:c1:5c:8a:8c:89:d2:ed:d1:d3:37:8a:9c: 8d:d9:f0:78:78:95:6d:b9:74:9e:76:af:78:d3:f7:85:26:38: 06:27:2f:39:4c:31:38:92:03:76:7f:3c:de:36:48:43:91:a2: 9e:13:9e:05:df:da:17:13:0c:29:fa:94:dc:62:88:e0:24:9f: b3:02:41:3f:ca:35:b9:2d:8e:ef:9f:f7:01:11:0d:2d:02:d7: a8:8f:8e:aa:b8:83:ad:16:25:e9:19:06:40:d5:c6:07:1a:66: 10:62:3c:87:db:ab:c2:e0:4c:ae:2f:c9:0c:ef:5c:8b:f2:af: fd:0f:bc:2c:4d:46:39:2e:b2:68:af:29:d9:06:e5:c4:df:3a: 58:8c:4d:cd:cf:18:67:6f:fb:f4:65:96:67:b8:20:09:a0:85: 55:8d:d0:61:f3:45:25:87:68:2f:2d:e7:36:56:25:a5:73:cf: b3:1a:b9:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtKRxt7IOWqPz2ZfEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDkyMzEzMDA0MFoXDTI1MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk YjJkNjhhOTctZTcwMS00N2Y3LTkzYjctYmI1YjJiZmM1MGFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1oB73/atNP1EUpBLRWNYnl9nlLtrbOr+dFJa +CQJzRySqLIu6iAPewigoo33/YW7sAXYZ0GECt8/zX503d3V7FtpfK2AcSKjwr9C /JyALWouPAZvErPGrYHm0CKm1L04W4OnSzxrXahRe4t0Q9NslHHUsNdOL5pAZI+u xqRqg7AQDDuLLWGQLZJUjKzP8dutphF8mGDtFWGvCElchahniHQy4eXRBnbFn/5y 1ri1IOcR2+B2KFO03suAZXIIUi5PzOwLjpkH0PrtRNR3cuvCGQEF8ADooHw3mwAw IB6s2uTC1ivsX3UVbXq0+rmF4Yi35FJRN/Te+zsiwzgZbcCGIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO0UzJY7EnzKGAel3sw7Z/I6i0YvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNDIwMGY0MmEtNzJmNS0z MTBkLWJkNGUtMTQzZTY2ZDEyNTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQjYcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJk6h0H/R61Smh0NF4T6KFDIfFtUCDYGNkmFjj/q/Tnihow4Ol8EzL3c MRZvQ6nkTnON/9zFc8Oh7GAe+CWKMvqABC1axhM0EsF0dSWn/8FcioyJ0u3R0zeK nI3Z8Hh4lW25dJ52r3jT94UmOAYnLzlMMTiSA3Z/PN42SEORop4TngXf2hcTDCn6 lNxiiOAkn7MCQT/KNbktju+f9wERDS0C16iPjqq4g60WJekZBkDVxgcaZhBiPIfb q8LgTK4vyQzvXIvyr/0PvCxNRjkusmivKdkG5cTfOliMTc3PGGdv+/Rllme4IAmg hVWN0GHzRSWHaC8t5zZWJaVzz7MauS0= -----END CERTIFICATE-----Generated at Mon Oct 20 07:44:40 2025 by rpki-client