$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9d7aee43-2f7a-3166-82d2-5ddd39af9118.roa File: 9d7aee43-2f7a-3166-82d2-5ddd39af9118.roa (raw, json) Hash identifier: RH4AqWslLIa/U0Gh18LaCa0TVbEBSdO/s/mKCCO4IU8= Subject key identifier: 41:B3:28:4B:F6:EF:64:8A:64:CB:DC:F8:17:02:AA:D6:C6:09:14:1F Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584B59A1C959EE75278D7D2CE700 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9d7aee43-2f7a-3166-82d2-5ddd39af9118.roa Signing time: Mon 29 Sep 2025 01:00:33 +0000 ROA not before: Mon 29 Sep 2025 01:00:33 +0000 ROA not after: Sun 28 Dec 2025 02:00:33 +0000 asID: 203 IP address blocks: 170.30.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:59:a1:c9:59:ee:75:27:8d:7d:2c:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 29 01:00:33 2025 GMT Not After : Dec 28 02:00:33 2025 GMT Subject: CN=00f98c7e-8cef-4605-b468-473504b3d8f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:cf:c7:18:97:f8:b1:37:fd:b4:ef:95:f8:49: e6:77:10:03:0b:85:c6:1b:b1:6c:52:d9:62:c9:e1: ef:56:2b:72:f1:95:b5:d3:59:87:c4:8b:63:78:9e: d3:5b:64:03:4c:5a:79:c7:9d:e1:e0:e5:d3:cb:db: 4e:de:cd:17:3d:75:40:90:46:01:21:cd:bc:23:0d: 3d:37:ce:bc:e1:46:0d:e4:b9:3d:df:b9:a5:44:25: f3:5c:b5:58:90:45:95:20:2a:4f:da:d3:0d:64:61: 5d:8a:44:1f:b1:84:9a:85:89:2b:00:26:6a:b5:ac: 41:52:61:fb:f5:78:05:89:88:77:a2:86:cd:42:25: 38:57:e3:b7:2f:91:c7:e5:42:50:68:ad:79:f7:5a: 90:2d:13:e0:70:49:6c:5b:86:c5:f7:b3:3d:de:76: 1d:b0:0c:6b:5f:4c:10:74:ca:a0:84:6e:fe:47:b3: c4:a3:1f:8f:9c:29:bb:4f:b7:6a:59:55:bf:5c:e4: c0:dc:a4:79:e7:6a:18:98:a3:b1:25:0a:c6:20:ca: fd:ba:14:ed:2d:4b:19:08:03:19:b7:48:17:46:e5: 56:52:41:9d:c2:4f:08:b9:01:1a:f6:f1:48:fb:5f: 29:66:4f:82:7a:33:1c:fa:e3:81:52:bb:1e:8b:95: a4:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:B3:28:4B:F6:EF:64:8A:64:CB:DC:F8:17:02:AA:D6:C6:09:14:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9d7aee43-2f7a-3166-82d2-5ddd39af9118.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 170.30.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:f0:55:e9:61:73:ee:bc:b2:67:4c:50:c3:30:1b:78:76:b9: b4:a5:ed:ff:15:5b:6f:fa:40:f0:a8:12:58:3b:1c:95:8b:bc: 28:11:21:06:14:d7:38:52:e9:3f:3a:55:b9:88:36:4d:8b:33: 63:eb:d8:40:f9:6c:54:11:36:1b:73:ed:a1:52:05:8e:0c:bb: b7:0e:38:c0:9d:05:83:3e:48:17:29:23:3c:b3:dd:c8:12:16: d0:aa:ef:ea:15:45:da:c4:f4:f3:02:f2:47:37:6c:ca:65:86: b3:48:b4:3a:aa:52:d5:75:ff:3c:35:b6:8d:44:c2:a3:b8:6e: c7:f3:12:10:fe:08:88:c2:3e:1c:20:a5:1c:ac:35:2a:96:33: 75:ba:87:f7:14:14:48:67:e5:7e:ae:27:7e:02:a3:f7:af:33: f7:d8:c0:f0:22:5d:93:86:9c:e4:11:7e:d0:1b:3e:95:f5:09: 76:75:52:c5:05:7f:53:0b:a0:3a:d4:d6:8a:3d:26:56:5f:7b: b1:83:ae:ab:8a:9b:68:bd:8b:3d:03:1c:5d:d3:df:90:01:c4: ac:d2:35:4d:99:c3:e5:42:7d:f4:97:80:a8:88:37:6c:33:bf: 34:5e:8c:9c:9f:78:1f:73:21:92:9f:5d:43:e9:fd:15:ba:d5: e6:21:3f:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtZoclZ7nUnjX0s5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDkyOTAxMDAzM1oXDTI1MTIyODAyMDAzM1owLzEtMCsGA1UEAxMk MDBmOThjN2UtOGNlZi00NjA1LWI0NjgtNDczNTA0YjNkOGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAic/HGJf4sTf9tO+V+EnmdxADC4XGG7FsUtli yeHvVity8ZW101mHxItjeJ7TW2QDTFp5x53h4OXTy9tO3s0XPXVAkEYBIc28Iw09 N8684UYN5Lk937mlRCXzXLVYkEWVICpP2tMNZGFdikQfsYSahYkrACZqtaxBUmH7 9XgFiYh3oobNQiU4V+O3L5HH5UJQaK1591qQLRPgcElsW4bF97M93nYdsAxrX0wQ dMqghG7+R7PEox+PnCm7T7dqWVW/XOTA3KR552oYmKOxJQrGIMr9uhTtLUsZCAMZ t0gXRuVWUkGdwk8IuQEa9vFI+18pZk+CejMc+uOBUrsei5Wk+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEGzKEv272SKZMvc+BcCqtbGCRQfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvOWQ3YWVlNDMtMmY3YS0z MTY2LTgyZDItNWRkZDM5YWY5MTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqh7HMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABPwVelhc+68smdMUMMwG3h2ubSl7f8VW2/6QPCoElg7HJWLvCgRIQYU 1zhS6T86VbmINk2LM2Pr2ED5bFQRNhtz7aFSBY4Mu7cOOMCdBYM+SBcpIzyz3cgS FtCq7+oVRdrE9PMC8kc3bMplhrNItDqqUtV1/zw1to1EwqO4bsfzEhD+CIjCPhwg pRysNSqWM3W6h/cUFEhn5X6uJ34Co/evM/fYwPAiXZOGnOQRftAbPpX1CXZ1UsUF f1MLoDrU1oo9JlZfe7GDrquKm2i9iz0DHF3T35ABxKzSNU2Zw+VCffSXgKiIN2wz vzRejJyfeB9zIZKfXUPp/RW61eYhP7s= -----END CERTIFICATE-----Generated at Sun Oct 19 20:41:32 2025 by rpki-client