$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a0cfa3a6-054d-30b2-b882-83512a0b899d.roa File: a0cfa3a6-054d-30b2-b882-83512a0b899d.roa (raw, json) Hash identifier: tElx2FKYr7XGTsDkcLpxi9IGCf8cG2oG1f75PxFseb4= Subject key identifier: BE:20:2C:14:D5:2A:B7:71:AD:60:E8:4E:30:7F:EA:E7:81:3B:D5:25 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584B4A47266A05F400DBABA2E480 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a0cfa3a6-054d-30b2-b882-83512a0b899d.roa Signing time: Tue 23 Sep 2025 13:00:40 +0000 ROA not before: Tue 23 Sep 2025 13:00:40 +0000 ROA not after: Mon 22 Dec 2025 14:00:40 +0000 asID: 202 IP address blocks: 204.104.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4a:47:26:6a:05:f4:00:db:ab:a2:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 23 13:00:40 2025 GMT Not After : Dec 22 14:00:40 2025 GMT Subject: CN=d297c7e7-b2f4-4a61-bd33-80dc3f88fe87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:92:32:f0:fe:a5:2f:58:4b:ec:f8:a7:8c:14: 22:fd:5d:60:af:e2:08:25:5c:52:48:de:3f:dd:f4: ab:c4:c7:e3:87:34:49:70:d3:e1:bb:10:6d:12:60: fa:56:16:82:c9:01:b9:55:0a:53:4e:ca:11:06:81: 59:99:48:99:61:25:6d:3c:23:dc:0c:f5:7a:33:33: 3b:3b:2d:2c:7b:8a:70:fd:30:be:0b:63:b7:72:0d: cd:bf:00:9e:e0:85:c2:9e:7c:25:0f:ed:a4:ee:62: 0f:15:a3:d2:0f:6a:67:5a:43:61:2f:88:a8:d2:09: a9:70:8a:6d:2f:11:d2:cd:55:95:18:3c:d0:bd:18: 44:dd:43:33:0a:58:a8:51:9e:77:ab:36:15:13:20: 39:94:99:8b:bd:5e:62:dd:2d:00:cd:5f:44:1a:e1: 93:c8:40:fe:04:f9:a5:35:c4:c0:ff:9b:3d:c0:41: 6c:f3:ad:37:bc:93:79:ab:41:8d:4f:dd:89:72:96: 6d:ec:76:a3:5c:b4:ec:b3:fa:d0:b0:86:9d:62:1d: b9:bc:01:70:52:b0:92:cf:bb:52:41:e4:eb:f4:5e: bc:13:91:b4:1d:46:27:09:e6:d8:2a:d5:f6:27:c4: 77:02:68:70:0c:b0:94:f8:14:2b:a7:e1:62:be:72: 78:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:20:2C:14:D5:2A:B7:71:AD:60:E8:4E:30:7F:EA:E7:81:3B:D5:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a0cfa3a6-054d-30b2-b882-83512a0b899d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 204.104.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:8e:c3:fd:38:20:ef:14:10:4e:28:27:b9:1a:b3:5a:00:24: 0e:d8:b7:19:9c:07:61:e6:db:2d:12:bc:bd:cf:17:44:0c:74: ad:af:6a:87:6b:58:fd:ca:e8:76:ef:5f:89:87:a7:fb:d4:f6: 6a:54:69:86:a8:1d:d5:a4:54:db:d5:1d:59:77:b5:d3:38:50: ff:a5:b3:55:05:aa:ed:9e:11:a0:8d:cf:c6:4d:54:64:5b:05: 2a:37:75:2a:80:f0:80:a5:54:c3:de:a3:18:77:6b:db:54:3b: 69:fc:6a:10:d8:ef:71:b1:40:c1:82:71:35:30:f8:03:10:0d: 23:41:90:c8:c6:f2:0a:0e:d3:40:43:07:6d:ae:8e:4a:3a:ab: ea:6b:8f:3e:f7:e9:93:ee:97:97:f9:75:16:c3:cc:6d:20:86: d9:b5:47:a8:22:02:70:a0:93:5c:27:a2:5b:25:c1:46:9c:ba: ce:78:48:73:3f:5f:d1:56:aa:bd:a7:06:eb:a8:b2:2a:b4:9b: d3:86:d8:68:f9:f7:77:e9:1b:33:b6:48:de:5c:87:aa:1b:c3: 46:af:eb:a7:35:8f:85:a6:20:37:80:ef:4a:42:0b:da:d8:13: c3:cd:d9:78:ea:12:ca:a1:31:85:43:bc:68:2c:32:6c:74:1c: ac:06:98:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtKRyZqBfQA26ui5IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDkyMzEzMDA0MFoXDTI1MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk ZDI5N2M3ZTctYjJmNC00YTYxLWJkMzMtODBkYzNmODhmZTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3pIy8P6lL1hL7PinjBQi/V1gr+IIJVxSSN4/ 3fSrxMfjhzRJcNPhuxBtEmD6VhaCyQG5VQpTTsoRBoFZmUiZYSVtPCPcDPV6MzM7 Oy0se4pw/TC+C2O3cg3NvwCe4IXCnnwlD+2k7mIPFaPSD2pnWkNhL4io0gmpcIpt LxHSzVWVGDzQvRhE3UMzClioUZ53qzYVEyA5lJmLvV5i3S0AzV9EGuGTyED+BPml NcTA/5s9wEFs8603vJN5q0GNT92JcpZt7HajXLTss/rQsIadYh25vAFwUrCSz7tS QeTr9F68E5G0HUYnCebYKtX2J8R3AmhwDLCU+BQrp+FivnJ4IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL4gLBTVKrdxrWDoTjB/6ueBO9UlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYTBjZmEzYTYtMDU0ZC0z MGIyLWI4ODItODM1MTJhMGI4OTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGgNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAImOw/04IO8UEE4oJ7kas1oAJA7YtxmcB2Hm2y0SvL3PF0QMdK2vaodr WP3K6HbvX4mHp/vU9mpUaYaoHdWkVNvVHVl3tdM4UP+ls1UFqu2eEaCNz8ZNVGRb BSo3dSqA8IClVMPeoxh3a9tUO2n8ahDY73GxQMGCcTUw+AMQDSNBkMjG8goO00BD B22ujko6q+prjz736ZPul5f5dRbDzG0ghtm1R6giAnCgk1wnolslwUacus54SHM/ X9FWqr2nBuuosiq0m9OG2Gj593fpGzO2SN5ch6obw0av66c1j4WmIDeA70pCC9rY E8PN2XjqEsqhMYVDvGgsMmx0HKwGmPo= -----END CERTIFICATE-----Generated at Sun Oct 19 20:51:17 2025 by rpki-client