$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6afa0bde-43f6-3473-8d53-f2d3ac9bc38e.roa File: 6afa0bde-43f6-3473-8d53-f2d3ac9bc38e.roa (raw, json) Hash identifier: u5bAPfrBhg50MtWhHYjr6UYv8VgiKLEMGh2y3tuvhy0= Subject key identifier: A8:36:6D:EE:9D:C2:11:76:1C:B3:10:0F:43:66:99:57:75:61:0A:C9 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584B4A472956A590468D29AFFB80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6afa0bde-43f6-3473-8d53-f2d3ac9bc38e.roa Signing time: Tue 23 Sep 2025 13:00:40 +0000 ROA not before: Tue 23 Sep 2025 13:00:40 +0000 ROA not after: Mon 22 Dec 2025 14:00:40 +0000 asID: 3356 IP address blocks: 204.104.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4a:47:29:56:a5:90:46:8d:29:af:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 23 13:00:40 2025 GMT Not After : Dec 22 14:00:40 2025 GMT Subject: CN=6a5858fa-15f9-41e2-9a2e-b2658f10de3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:b8:70:62:f9:93:82:7f:78:f2:5b:d3:19:04: e1:64:c8:a8:9f:69:54:57:70:55:7f:3d:96:4c:8c: a5:22:8e:08:a9:ad:50:23:5c:f6:bf:38:ea:31:45: 82:d5:09:ba:21:b0:d1:1e:b9:d5:95:dc:94:cd:7a: 85:04:f2:89:fc:d1:3f:73:7f:13:f5:1e:9b:f1:61: 46:1c:ff:39:64:dd:38:c1:23:b6:30:67:df:2a:93: 0e:30:e1:04:ad:0f:7e:0a:af:59:1c:2f:b4:2f:bf: bc:4d:16:9b:fb:d8:7d:c3:e1:bd:51:e9:04:d6:57: 0f:53:b7:fc:eb:f0:09:2c:c5:bb:f6:45:29:54:50: cb:62:9c:b5:3c:16:20:72:5e:5f:3f:89:4f:ff:ea: 61:ef:0f:c8:5b:a8:c5:09:13:2d:68:a3:99:e6:95: c1:83:0b:00:83:be:12:25:f4:39:52:fc:86:14:23: e0:05:35:6c:2e:e1:a5:89:dd:de:fb:78:76:a0:fb: 47:65:37:55:f7:49:81:fc:f3:52:79:d2:03:8c:d3: bb:14:ec:6a:6f:1c:4a:69:9b:0a:cd:6e:73:7a:e3: 70:ec:03:89:5c:b8:19:a5:17:4b:8d:ef:4b:27:2a: 12:d3:0a:f2:e9:b6:36:8b:37:aa:b7:a5:70:70:4f: 3a:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:36:6D:EE:9D:C2:11:76:1C:B3:10:0F:43:66:99:57:75:61:0A:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6afa0bde-43f6-3473-8d53-f2d3ac9bc38e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 204.104.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:4b:d2:95:65:f1:8d:5b:f1:62:57:3d:31:04:d5:4f:4a:33: c9:b5:37:d7:81:29:22:76:52:dc:d6:56:ee:fe:04:68:b7:47: 74:4b:cd:00:9e:42:a1:f2:85:80:78:9c:a6:0c:09:58:f0:3c: 88:03:33:5e:c7:f0:bb:a8:72:36:81:e2:75:d5:75:e7:73:4b: 89:ac:87:e1:5a:8a:08:36:5e:98:4f:17:2e:5c:96:fb:2f:16: 36:5a:42:0a:56:e5:04:47:27:ce:4e:93:5c:10:bd:87:39:cd: fa:23:47:bd:c1:7a:99:d9:d6:78:33:60:b6:2d:d1:b0:8d:20: 6d:c8:54:37:63:34:c8:2a:bb:8a:b7:29:7e:50:06:e2:84:fe: 49:1b:26:97:d5:62:a8:b3:09:ab:f5:72:dd:29:47:c4:7f:14: 7d:49:17:bd:b1:63:84:c7:c1:76:e4:e7:b8:ae:54:55:3f:30: d4:3b:68:d9:72:93:61:02:44:87:c3:52:cb:79:40:9b:7f:0c: e0:81:e1:06:37:c1:00:d2:e5:7b:2b:99:ef:9e:84:1e:fc:fd: f6:0c:df:6d:10:d9:db:dc:d5:da:b1:9b:f8:b9:e6:1a:1b:02: 3e:38:ae:52:75:f1:60:b1:f8:97:73:a2:66:a6:de:1d:53:e8: c5:91:63:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtKRylWpZBGjSmv+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDkyMzEzMDA0MFoXDTI1MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk NmE1ODU4ZmEtMTVmOS00MWUyLTlhMmUtYjI2NThmMTBkZTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrhwYvmTgn948lvTGQThZMion2lUV3BVfz2W TIylIo4Iqa1QI1z2vzjqMUWC1Qm6IbDRHrnVldyUzXqFBPKJ/NE/c38T9R6b8WFG HP85ZN04wSO2MGffKpMOMOEErQ9+Cq9ZHC+0L7+8TRab+9h9w+G9UekE1lcPU7f8 6/AJLMW79kUpVFDLYpy1PBYgcl5fP4lP/+ph7w/IW6jFCRMtaKOZ5pXBgwsAg74S JfQ5UvyGFCPgBTVsLuGlid3e+3h2oPtHZTdV90mB/PNSedIDjNO7FOxqbxxKaZsK zW5zeuNw7AOJXLgZpRdLje9LJyoS0wry6bY2izeqt6VwcE86ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKg2be6dwhF2HLMQD0NmmVd1YQrJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNmFmYTBiZGUtNDNmNi0z NDczLThkNTMtZjJkM2FjOWJjMzhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGjQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABtL0pVl8Y1b8WJXPTEE1U9KM8m1N9eBKSJ2UtzWVu7+BGi3R3RLzQCe QqHyhYB4nKYMCVjwPIgDM17H8LuocjaB4nXVdedzS4msh+Faigg2XphPFy5clvsv FjZaQgpW5QRHJ85Ok1wQvYc5zfojR73BepnZ1ngzYLYt0bCNIG3IVDdjNMgqu4q3 KX5QBuKE/kkbJpfVYqizCav1ct0pR8R/FH1JF72xY4THwXbk57iuVFU/MNQ7aNly k2ECRIfDUst5QJt/DOCB4QY3wQDS5Xsrme+ehB78/fYM320Q2dvc1dqxm/i55hob Aj44rlJ18WCx+Jdzomam3h1T6MWRYyA= -----END CERTIFICATE-----Generated at Sun Oct 19 20:44:24 2025 by rpki-client