$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5629b1ee-8e97-309b-90b7-714d5455b82c.roa File: 5629b1ee-8e97-309b-90b7-714d5455b82c.roa (raw, json) Hash identifier: GBMrmN6Ceo3X9Zs8RTYVPCUydI7i84D8yDslpjSiBnA= Subject key identifier: 14:2B:D1:04:B7:92:5A:03:DF:47:6B:A3:9C:91:EB:3B:82:5C:1A:17 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584B4A472717795FE7E8308D8700 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5629b1ee-8e97-309b-90b7-714d5455b82c.roa Signing time: Tue 23 Sep 2025 13:00:40 +0000 ROA not before: Tue 23 Sep 2025 13:00:40 +0000 ROA not after: Mon 22 Dec 2025 14:00:40 +0000 asID: 3360 IP address blocks: 204.104.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4a:47:27:17:79:5f:e7:e8:30:8d:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 23 13:00:40 2025 GMT Not After : Dec 22 14:00:40 2025 GMT Subject: CN=7ef0c106-9f36-47c7-88fc-4de2ab691894 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:e9:b0:94:db:7e:fa:98:eb:6b:e2:fd:d5:c8: dc:06:62:57:1c:99:40:7d:1f:03:d7:8b:1b:e0:bd: dc:17:19:c6:7e:bf:01:51:21:73:49:6d:98:a6:c1: 92:94:0f:d1:5d:ec:90:eb:95:89:45:d3:51:99:04: 75:66:32:71:94:73:06:fc:47:78:e5:3e:81:7f:04: 24:1b:cc:17:68:20:c8:22:34:17:21:75:3e:4e:a8: 10:73:29:31:b4:c0:cb:9b:ba:cf:68:70:f0:e1:f7: ad:42:2c:91:ae:24:48:f0:a9:63:7c:fc:dc:37:34: 5e:cb:cf:48:a5:c8:2d:c9:82:64:e6:5c:17:38:8e: 5b:3e:91:ad:9c:59:e2:b8:0d:43:97:55:c0:17:64: 8b:5e:fe:82:1a:87:4b:cc:f1:6a:b5:73:83:6f:a8: a3:b9:a6:87:9b:84:dc:8a:54:5c:e9:f9:1f:41:ac: 78:f6:6d:8d:5c:f0:73:a8:c5:46:ae:58:95:77:6f: 57:4e:6e:1f:66:cb:03:33:69:92:3e:80:bf:f3:aa: ab:da:47:da:4e:e8:ba:26:82:eb:df:a6:cb:18:5c: f0:8e:10:33:25:79:53:3c:a8:9c:ca:8d:07:83:fd: 9c:14:12:29:15:67:cd:26:c3:8e:59:81:01:b6:fd: e2:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:2B:D1:04:B7:92:5A:03:DF:47:6B:A3:9C:91:EB:3B:82:5C:1A:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5629b1ee-8e97-309b-90b7-714d5455b82c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 204.104.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:95:ad:e9:4c:56:1b:90:cc:f3:1b:c2:74:24:93:e5:be:29: 0e:1a:02:7c:bf:27:e4:01:8d:37:46:b1:40:7b:0e:62:12:5c: 4d:e5:54:be:dc:22:00:ef:d4:e3:1d:79:c0:c7:4a:7c:b0:d6: a6:25:bb:40:0a:bc:ad:30:9d:3c:a5:b2:e9:71:a1:b2:a6:13: 99:30:3f:00:e0:11:b8:72:26:0f:9f:38:c6:d9:65:85:02:38: 61:77:8c:ff:88:a0:6e:3b:b0:6a:a5:ee:10:56:f9:fc:94:a9: 7f:1d:45:85:86:e2:02:b1:67:a6:49:ac:bb:82:6f:23:46:33: c9:5e:e1:f5:c3:77:24:72:f6:0b:76:a4:d2:41:58:ed:9f:f9: f3:63:94:97:0f:a5:71:3c:a3:10:ff:7b:ed:d9:21:e9:8a:e4: e0:8c:1c:c0:0d:27:ce:34:32:fa:d8:c3:cb:fe:a9:bb:09:03: 05:40:37:fc:71:db:bc:0c:99:c9:5f:9b:58:7a:99:0d:35:69: 3c:5b:78:8b:2c:55:15:ce:68:80:01:1b:35:a1:f3:0d:91:5d: 49:ef:ca:b6:04:36:47:fd:ba:c3:4f:e0:b2:76:98:77:3b:4b: 5a:b2:b0:03:7a:a9:4b:24:d0:d2:b5:67:40:e6:5a:ee:e3:7e: 22:b6:ef:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtKRycXeV/n6DCNhwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDkyMzEzMDA0MFoXDTI1MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk N2VmMGMxMDYtOWYzNi00N2M3LTg4ZmMtNGRlMmFiNjkxODk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOmwlNt++pjra+L91cjcBmJXHJlAfR8D14sb 4L3cFxnGfr8BUSFzSW2YpsGSlA/RXeyQ65WJRdNRmQR1ZjJxlHMG/Ed45T6BfwQk G8wXaCDIIjQXIXU+TqgQcykxtMDLm7rPaHDw4fetQiyRriRI8KljfPzcNzRey89I pcgtyYJk5lwXOI5bPpGtnFniuA1Dl1XAF2SLXv6CGodLzPFqtXODb6ijuaaHm4Tc ilRc6fkfQax49m2NXPBzqMVGrliVd29XTm4fZssDM2mSPoC/86qr2kfaTui6JoLr 36bLGFzwjhAzJXlTPKicyo0Hg/2cFBIpFWfNJsOOWYEBtv3iJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBQr0QS3kloD30dro5yR6zuCXBoXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNTYyOWIxZWUtOGU5Ny0z MDliLTkwYjctNzE0ZDU0NTViODJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGgQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFSVrelMVhuQzPMbwnQkk+W+KQ4aAny/J+QBjTdGsUB7DmISXE3lVL7c IgDv1OMdecDHSnyw1qYlu0AKvK0wnTylsulxobKmE5kwPwDgEbhyJg+fOMbZZYUC OGF3jP+IoG47sGql7hBW+fyUqX8dRYWG4gKxZ6ZJrLuCbyNGM8le4fXDdyRy9gt2 pNJBWO2f+fNjlJcPpXE8oxD/e+3ZIemK5OCMHMANJ840MvrYw8v+qbsJAwVAN/xx 27wMmclfm1h6mQ01aTxbeIssVRXOaIABGzWh8w2RXUnvyrYENkf9usNP4LJ2mHc7 S1qysAN6qUsk0NK1Z0DmWu7jfiK27xA= -----END CERTIFICATE-----Generated at Sun Oct 19 20:44:39 2025 by rpki-client