$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/58a16033-bdc4-3821-9ddd-77772dcc3e41.roa File: 58a16033-bdc4-3821-9ddd-77772dcc3e41.roa (raw, json) Hash identifier: HBgfC+uP5HRP+ijEPDfEiS+4wgQTyxhOaq+OhRcilPE= Subject key identifier: 40:34:88:55:B7:6A:B1:61:F7:75:D6:10:19:B4:96:26:CB:97:97:EF Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584B4D11D5BFB3E5047781567C80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/58a16033-bdc4-3821-9ddd-77772dcc3e41.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 203 IP address blocks: 168.87.146.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:d5:bf:b3:e5:04:77:81:56:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=b6cb71a6-0323-4fe3-a525-97a916e097d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d8:bd:33:9d:d4:73:2f:d3:a3:cc:69:5f:5c: 93:0d:c1:89:a4:02:8f:73:ba:21:7a:a4:59:22:08: d0:51:00:dc:48:d5:9f:6e:b1:e0:3c:65:8e:e9:00: d1:8a:98:24:ac:4d:01:33:3b:1b:44:7b:b3:56:39: 49:ab:4a:f1:9f:15:42:62:b8:3d:3c:3a:b0:73:ea: f0:51:a9:30:1c:8f:5e:bc:d5:53:e0:03:bf:a3:bc: 01:44:07:0e:50:08:eb:f8:11:26:5a:b5:58:b5:2e: e2:a1:fa:55:9e:61:83:54:7a:7c:f0:c1:30:2d:d3: 31:18:7b:b0:59:d7:71:a2:51:b9:dd:7a:b4:47:89: 23:53:71:ae:c7:a4:3c:24:aa:1d:f0:da:98:76:46: 85:bf:8d:fe:eb:ab:7d:d0:96:d6:d3:ce:fb:db:db: 8a:cc:d8:3e:6a:47:15:c3:eb:b1:b1:31:22:b2:d6: 48:52:9d:6e:3e:75:c6:f4:cc:d7:bf:1d:b7:0b:47: 3c:8b:17:e0:03:80:39:29:c8:58:70:24:f0:de:78: 14:6d:3f:87:b5:cf:b6:ac:49:13:e5:35:7e:ce:08: 3b:fe:51:44:ad:67:96:3f:91:28:d8:8a:b8:9a:1e: 48:63:49:33:b3:76:24:40:87:42:89:c3:7c:ed:28: 4c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:34:88:55:B7:6A:B1:61:F7:75:D6:10:19:B4:96:26:CB:97:97:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/58a16033-bdc4-3821-9ddd-77772dcc3e41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.146.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:eb:de:0c:23:9a:cd:ca:cf:82:5d:14:22:fe:3c:c8:ae:24: 45:b5:32:0d:89:fb:f7:52:3d:c2:10:50:b0:07:7b:04:c2:cc: d9:1e:6d:02:c8:b6:d6:3b:f0:c5:ff:0c:11:95:ae:66:2c:56: 14:0b:b0:f8:89:c8:c4:1c:93:55:39:b3:d1:23:76:30:26:bb: 05:2f:ea:d1:29:f7:2d:65:1b:66:3f:62:82:7e:cb:35:3f:7a: d3:35:c5:dc:d6:5b:19:0c:77:77:02:36:04:6e:5c:ac:ee:12: 13:8d:d4:95:15:12:6d:31:1a:c8:dd:a4:20:e4:1d:10:f9:e0: 2c:6c:89:6c:ff:bf:70:9c:0f:2d:dd:73:4a:90:bb:53:09:93: 47:79:ef:55:8a:2a:c0:0b:54:c4:ee:95:38:5c:df:02:b2:1f: 5f:1e:1a:a1:33:40:10:9a:63:eb:3e:6e:b8:b9:d9:0b:d2:49: 54:de:00:9c:c6:40:bf:ec:2a:ea:08:a3:de:f6:d2:d9:d8:f4: 8d:4e:4b:c1:b9:3c:fa:83:b2:5e:6a:f5:d3:ab:ca:a0:ef:4e: 69:ac:d1:00:4c:72:1a:89:71:c4:0c:ce:9a:f3:7c:2e:f2:1a: f4:e4:08:77:40:2b:20:25:71:13:ce:fa:5e:35:fd:7a:49:e2: d7:cb:cf:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNEdW/s+UEd4FWfIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk YjZjYjcxYTYtMDMyMy00ZmUzLWE1MjUtOTdhOTE2ZTA5N2Q4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNi9M53Ucy/To8xpX1yTDcGJpAKPc7oheqRZ IgjQUQDcSNWfbrHgPGWO6QDRipgkrE0BMzsbRHuzVjlJq0rxnxVCYrg9PDqwc+rw UakwHI9evNVT4AO/o7wBRAcOUAjr+BEmWrVYtS7iofpVnmGDVHp88MEwLdMxGHuw WddxolG53Xq0R4kjU3Gux6Q8JKod8NqYdkaFv43+66t90JbW087729uKzNg+akcV w+uxsTEistZIUp1uPnXG9MzXvx23C0c8ixfgA4A5KchYcCTw3ngUbT+Htc+2rEkT 5TV+zgg7/lFErWeWP5Eo2Iq4mh5IY0kzs3YkQIdCicN87ShM6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEA0iFW3arFh93XWEBm0libLl5fvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNThhMTYwMzMtYmRjNC0z ODIxLTlkZGQtNzc3NzJkY2MzZTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqFeSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFzr3gwjms3Kz4JdFCL+PMiuJEW1Mg2J+/dSPcIQULAHewTCzNkebQLI ttY78MX/DBGVrmYsVhQLsPiJyMQck1U5s9EjdjAmuwUv6tEp9y1lG2Y/YoJ+yzU/ etM1xdzWWxkMd3cCNgRuXKzuEhON1JUVEm0xGsjdpCDkHRD54CxsiWz/v3CcDy3d c0qQu1MJk0d571WKKsALVMTulThc3wKyH18eGqEzQBCaY+s+bri52QvSSVTeAJzG QL/sKuoIo9720tnY9I1OS8G5PPqDsl5q9dOryqDvTmms0QBMchqJccQMzprzfC7y GvTkCHdAKyAlcRPO+l41/XpJ4tfLz90= -----END CERTIFICATE-----Generated at Sun Oct 19 20:58:26 2025 by rpki-client