$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/435c106d-9387-38c4-9498-4b6e21b120f1.roa File: 435c106d-9387-38c4-9498-4b6e21b120f1.roa (raw, json) Hash identifier: X6LoIJCzjp6zCXrzswA3HJ4OsmL6CdxOANgkGkr6z7o= Subject key identifier: E6:77:DD:CC:9B:BD:86:69:90:E4:2E:F5:97:A6:68:B3:EF:FE:92:18 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584B4A472AC496082724CDC63B00 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/435c106d-9387-38c4-9498-4b6e21b120f1.roa Signing time: Tue 23 Sep 2025 13:00:40 +0000 ROA not before: Tue 23 Sep 2025 13:00:40 +0000 ROA not after: Mon 22 Dec 2025 14:00:40 +0000 asID: 3356 IP address blocks: 204.105.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4a:47:2a:c4:96:08:27:24:cd:c6:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 23 13:00:40 2025 GMT Not After : Dec 22 14:00:40 2025 GMT Subject: CN=1ca0c919-da7c-4c1c-91b2-4019981a9632 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:81:c7:76:a8:df:3d:ac:6e:ca:86:cf:78:d4: 89:27:4b:5a:7e:fd:47:12:5d:a9:1f:2f:4e:83:bc: 69:46:05:4f:15:9e:58:37:f9:07:62:91:5c:0b:26: 25:59:24:52:35:8f:e8:53:91:7f:51:e0:12:02:ea: f3:7b:c1:4f:10:8d:e6:88:5b:9f:c5:01:06:f2:05: 00:d1:c5:e3:8a:69:7c:a4:4c:ec:37:0c:b6:4f:10: 88:09:26:65:bd:f4:24:aa:88:ac:8e:f1:46:ff:2c: a7:8d:5d:83:e1:44:fc:03:04:fa:44:01:d8:4a:23: d1:b4:e3:f4:5e:e7:1f:cf:f1:99:1a:b1:63:0e:a8: 83:5c:da:5b:73:b0:df:5b:5d:98:80:d8:02:7c:7f: a1:de:e5:6c:3f:1d:9a:5b:b5:1e:f1:50:e5:2b:58: a3:8a:6a:68:06:1c:11:0e:97:91:19:ca:91:ab:ea: 92:bd:8e:42:f8:98:ad:af:1d:5a:97:bd:b4:23:c4: 85:56:9d:17:27:78:32:d0:13:6d:e9:15:43:82:2d: 0b:96:50:03:23:ff:b9:6a:57:33:a0:63:f4:58:46: d8:2d:01:75:a7:03:3e:75:75:0f:a2:86:0b:3b:29: 6d:81:a0:5e:47:96:ba:25:08:7f:27:d2:af:fa:4d: ad:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:77:DD:CC:9B:BD:86:69:90:E4:2E:F5:97:A6:68:B3:EF:FE:92:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/435c106d-9387-38c4-9498-4b6e21b120f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 204.105.47.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:03:5f:90:da:66:28:f6:e4:9b:53:df:5d:6c:1d:d1:2a:04: c4:65:39:3a:31:3b:d4:ce:4d:d0:e8:96:93:36:cb:e1:18:6d: 86:d7:2d:3d:4b:3f:e0:79:d5:eb:6d:89:c6:aa:2d:27:31:05: ac:b8:cb:2e:83:71:39:6b:c6:11:97:c7:51:7e:e6:0e:73:46: 6a:6b:aa:51:e7:50:28:b9:46:c1:dd:08:41:7a:0b:ec:11:08: 89:48:79:d3:ff:4d:ff:05:45:a0:bd:da:78:24:db:33:32:27: 9a:d6:c6:c1:d5:17:79:20:04:ed:4b:d9:dc:21:b7:81:39:cc: d2:c0:24:ca:d3:f1:83:e6:a8:42:20:cb:0a:f1:58:49:08:7b: b0:73:7e:43:9a:59:b8:f8:79:79:db:34:d9:7d:73:a7:4f:0d: 97:49:1c:fa:ff:76:87:f2:1c:86:58:86:35:84:e7:c9:9c:5a: 9c:d7:55:eb:f2:ff:93:6b:f1:5d:22:2a:92:c7:ab:1e:93:a6: dc:72:7d:3d:5d:63:fe:58:9c:92:c7:44:26:78:76:90:9a:42: 91:99:49:3b:d3:be:66:e5:50:19:7d:a4:1a:a5:15:5a:4f:cd: 6f:b4:04:1b:0d:bc:b5:0a:ea:3d:f9:e5:27:d7:6a:66:83:04: c6:d5:b6:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtKRyrElggnJM3GOwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDkyMzEzMDA0MFoXDTI1MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk MWNhMGM5MTktZGE3Yy00YzFjLTkxYjItNDAxOTk4MWE5NjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgoHHdqjfPaxuyobPeNSJJ0tafv1HEl2pHy9O g7xpRgVPFZ5YN/kHYpFcCyYlWSRSNY/oU5F/UeASAurze8FPEI3miFufxQEG8gUA 0cXjiml8pEzsNwy2TxCICSZlvfQkqoisjvFG/yynjV2D4UT8AwT6RAHYSiPRtOP0 Xucfz/GZGrFjDqiDXNpbc7DfW12YgNgCfH+h3uVsPx2aW7Ue8VDlK1ijimpoBhwR DpeRGcqRq+qSvY5C+Jitrx1al720I8SFVp0XJ3gy0BNt6RVDgi0LllADI/+5alcz oGP0WEbYLQF1pwM+dXUPooYLOyltgaBeR5a6JQh/J9Kv+k2tXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOZ33cybvYZpkOQu9ZemaLPv/pIYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNDM1YzEwNmQtOTM4Ny0z OGM0LTk0OTgtNGI2ZTIxYjEyMGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGkvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB4DX5DaZij25JtT311sHdEqBMRlOToxO9TOTdDolpM2y+EYbYbXLT1L P+B51etticaqLScxBay4yy6DcTlrxhGXx1F+5g5zRmprqlHnUCi5RsHdCEF6C+wR CIlIedP/Tf8FRaC92ngk2zMyJ5rWxsHVF3kgBO1L2dwht4E5zNLAJMrT8YPmqEIg ywrxWEkIe7BzfkOaWbj4eXnbNNl9c6dPDZdJHPr/dofyHIZYhjWE58mcWpzXVevy /5Nr8V0iKpLHqx6TptxyfT1dY/5YnJLHRCZ4dpCaQpGZSTvTvmblUBl9pBqlFVpP zW+0BBsNvLUK6j355SfXamaDBMbVtlw= -----END CERTIFICATE-----Generated at Mon Oct 20 00:02:46 2025 by rpki-client