$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/689b5c65-97a6-3849-9191-76fc91a3818d.roa File: 689b5c65-97a6-3849-9191-76fc91a3818d.roa (raw, json) Hash identifier: sftM+EVgxalcNPvKBHsOXoZVklwiII6j0UywD9v5xCw= Subject key identifier: 58:01:EE:C0:B4:6A:EF:7D:BE:80:49:3A:E6:85:D5:38:BF:05:44:5C Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584B5B073EFB3932A619C8EED680 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/689b5c65-97a6-3849-9191-76fc91a3818d.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 3360 IP address blocks: 168.87.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:3e:fb:39:32:a6:19:c8:ee:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=01f71b31-6f62-4b06-bead-c1f688b794e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:1b:d5:72:8d:f6:e5:a8:1b:3c:b3:6e:08:df: a5:d1:93:75:9c:23:61:64:77:2b:90:3c:da:42:7f: ed:f7:a4:5d:e4:ce:83:95:f3:9c:99:f0:5c:02:84: da:03:7f:0d:a8:94:b3:5e:c1:e2:a7:bd:64:d2:6c: 6d:37:4a:8f:38:eb:08:e6:64:e7:88:6e:b7:b8:2b: d1:24:57:ba:f3:44:4f:08:eb:db:74:ae:0f:14:69: f7:54:9e:53:91:0f:80:af:b5:3e:e1:db:cb:80:6c: 24:37:c3:b9:5b:a4:4a:6d:13:b7:0c:66:93:c0:3a: 74:bb:89:00:e2:32:a6:5d:52:00:06:41:13:ad:14: 47:8c:b1:f5:f7:d1:fb:ec:f6:6f:79:85:58:84:63: 00:06:8c:1d:1a:d7:19:9b:85:56:cd:63:2c:39:8d: 8a:95:ca:b4:de:ac:0a:c2:05:ba:c3:ec:8f:10:b1: 90:00:b8:c1:8a:a7:e2:7b:90:1c:ca:2c:07:1f:25: ef:d3:57:5e:b4:6c:e6:6f:e1:d3:e5:35:bc:c8:68: 4a:db:57:10:b4:e2:13:56:f8:9b:a2:00:5b:1e:0c: 1d:ef:72:82:c9:27:b9:23:82:c5:9f:3f:2d:5b:1b: ba:c3:9d:f5:53:9e:95:f8:0d:dc:4e:dc:6b:71:e0: 8e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:01:EE:C0:B4:6A:EF:7D:BE:80:49:3A:E6:85:D5:38:BF:05:44:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/689b5c65-97a6-3849-9191-76fc91a3818d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:dc:3f:f1:17:13:0a:65:d3:10:fa:a0:48:0b:8c:15:92:f5: 63:84:6b:5b:ce:3e:39:98:a9:f9:cb:56:c1:14:1e:34:b4:03: 88:4d:30:3f:77:5f:3f:12:d3:e8:9a:00:41:bc:8d:c3:0b:4f: d9:de:ee:7d:ab:e8:1e:51:7a:6b:54:23:94:0e:b4:08:a0:bb: e5:2c:6c:6f:99:02:50:de:7c:83:3e:2d:42:9a:d6:90:3f:04: 60:b9:13:94:49:61:a2:e9:5b:a1:46:69:68:0b:9d:5e:77:77: 8d:d1:29:5f:2c:11:b6:8d:39:e8:07:06:45:f5:cc:41:ad:01: 0e:73:39:29:38:7f:38:70:53:c2:a4:33:74:dc:f5:15:35:54: 3a:a4:24:24:af:44:a4:22:50:ae:76:a5:80:9b:3c:be:99:d3: ec:04:81:94:11:37:94:e3:d5:a3:aa:33:d5:f6:9f:8d:73:79: 00:14:ea:5d:25:ee:8d:fe:36:6a:e3:40:1c:0d:b7:4b:24:27: 5f:f4:ec:9b:d3:a2:cb:67:d9:01:4c:14:a6:c5:63:49:07:e6: 73:67:91:3c:7a:69:ba:a1:68:99:8e:49:5d:df:61:da:84:fa: 59:98:93:1e:36:a0:9a:5a:6a:7a:e5:cb:20:06:31:9a:d7:7d: 2d:e0:d2:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbBz77OTKmGcju1oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk MDFmNzFiMzEtNmY2Mi00YjA2LWJlYWQtYzFmNjg4Yjc5NGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhvVco325agbPLNuCN+l0ZN1nCNhZHcrkDza Qn/t96Rd5M6DlfOcmfBcAoTaA38NqJSzXsHip71k0mxtN0qPOOsI5mTniG63uCvR JFe680RPCOvbdK4PFGn3VJ5TkQ+Ar7U+4dvLgGwkN8O5W6RKbRO3DGaTwDp0u4kA 4jKmXVIABkETrRRHjLH199H77PZveYVYhGMABowdGtcZm4VWzWMsOY2Klcq03qwK wgW6w+yPELGQALjBiqfie5AcyiwHHyXv01detGzmb+HT5TW8yGhK21cQtOITVvib ogBbHgwd73KCySe5I4LFnz8tWxu6w531U56V+A3cTtxrceCOjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFgB7sC0au99voBJOuaF1Ti/BURcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNjg5YjVjNjUtOTdhNi0z ODQ5LTkxOTEtNzZmYzkxYTM4MThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFekMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJncP/EXEwpl0xD6oEgLjBWS9WOEa1vOPjmYqfnLVsEUHjS0A4hNMD93 Xz8S0+iaAEG8jcMLT9ne7n2r6B5RemtUI5QOtAigu+UsbG+ZAlDefIM+LUKa1pA/ BGC5E5RJYaLpW6FGaWgLnV53d43RKV8sEbaNOegHBkX1zEGtAQ5zOSk4fzhwU8Kk M3Tc9RU1VDqkJCSvRKQiUK52pYCbPL6Z0+wEgZQRN5Tj1aOqM9X2n41zeQAU6l0l 7o3+NmrjQBwNt0skJ1/07JvTostn2QFMFKbFY0kH5nNnkTx6abqhaJmOSV3fYdqE +lmYkx42oJpaanrlyyAGMZrXfS3g0qk= -----END CERTIFICATE-----Generated at Sun Oct 19 20:58:27 2025 by rpki-client