$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/baf76233-3c6d-35f7-8a9d-4b108593331e.roa File: baf76233-3c6d-35f7-8a9d-4b108593331e.roa (raw, json) Hash identifier: Fwe3KkBNGdgvDZtZoCDdefHAaq5ucO0FwqglcWkh+yw= Subject key identifier: 48:24:79:A3:85:B1:0E:95:BE:4B:AA:06:1F:E1:29:B5:C9:94:45:CD Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584B004BE2CC97D5A214C36BD680 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/baf76233-3c6d-35f7-8a9d-4b108593331e.roa Signing time: Thu 28 Aug 2025 01:00:33 +0000 ROA not before: Thu 28 Aug 2025 01:00:33 +0000 ROA not after: Wed 26 Nov 2025 02:00:33 +0000 asID: 16509 IP address blocks: 168.87.182.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:00:4b:e2:cc:97:d5:a2:14:c3:6b:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 28 01:00:33 2025 GMT Not After : Nov 26 02:00:33 2025 GMT Subject: CN=fb3631b1-598b-4081-b1cb-98c86cf59813 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:14:d3:a8:c6:da:1c:60:e5:53:65:05:6b:86: 41:92:6a:90:f6:b3:e8:08:ab:2d:05:74:bf:74:75: 6a:19:c4:b9:8d:87:ca:43:11:87:cf:6f:c8:cc:76: c0:9a:69:e2:0c:03:81:5f:ee:49:c0:5f:18:55:39: b6:c7:78:5c:d5:6f:9a:ab:50:80:99:e5:bc:79:56: 21:4e:98:90:37:9c:58:e7:a8:68:d7:1f:f4:11:37: ac:00:e3:c8:56:28:3e:dd:63:ce:89:36:bd:7c:d1: eb:ae:8c:11:50:4e:08:d0:ba:b4:3f:3d:00:8f:2b: 94:a1:3a:27:e2:8b:3e:a7:d7:2c:bf:15:0e:f3:40: c3:16:47:35:9d:92:cb:e3:18:b5:98:76:e2:63:08: 60:28:c1:1e:5b:7a:c6:f1:78:4a:b2:01:f6:8c:c0: 1c:08:8d:1b:1b:59:37:06:eb:e9:ba:1a:f3:3e:e3: 77:9f:e0:00:b1:65:fa:36:bc:a0:bc:50:cd:2f:f9: 86:6c:a9:9d:5d:78:4b:dd:a4:08:dc:77:64:1f:02: 52:da:ee:1b:a2:5e:35:14:4b:c3:b4:5f:d7:52:39: 2e:3d:5e:eb:17:3a:ea:6b:78:63:ea:9d:53:ac:97: d7:31:54:1a:0a:0d:06:85:61:1a:73:7b:ba:02:51: c5:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:24:79:A3:85:B1:0E:95:BE:4B:AA:06:1F:E1:29:B5:C9:94:45:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/baf76233-3c6d-35f7-8a9d-4b108593331e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.182.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:1a:7b:d9:d8:a3:1c:63:c6:c2:5b:42:08:f3:20:a2:4d:c3: 7f:ca:7f:c0:9e:15:38:c4:7a:e8:4b:13:35:48:97:b9:1d:7f: 0e:19:0c:e4:38:25:eb:0a:ed:44:3d:69:9f:af:a1:27:ab:8a: ef:9f:fc:3e:74:64:97:09:9f:40:a7:6f:68:c2:93:0f:a4:5e: c8:68:a2:d3:aa:ef:9a:54:14:d8:e0:51:e8:81:1a:d9:bb:79: 53:69:cd:98:4e:6f:8d:99:6e:48:33:b1:36:63:2c:25:21:01: 54:fe:7d:21:4a:a7:26:9a:c6:8b:60:5d:80:9c:c9:68:ba:a3: 5c:ad:be:a8:f0:a6:4a:0f:60:68:59:1f:ef:94:bc:44:43:28: 59:d4:25:73:b9:b9:34:d1:68:d1:cd:b2:a7:a3:14:4a:04:49: 29:78:37:8c:dc:c3:03:3e:d4:7a:4e:f3:ce:2d:88:1d:1a:a1: ac:14:72:9b:52:96:58:f1:ff:7e:a2:24:df:21:63:aa:74:2d: c0:b9:4b:93:65:43:dc:de:a5:68:6d:e3:e2:0d:f3:81:ab:46: 2f:3e:68:67:4d:dc:2c:ec:46:36:5a:da:e0:c1:72:e0:1b:21: 8a:b7:1f:ec:04:f6:e3:4c:e9:dd:39:ec:92:7a:11:84:a3:74: 51:6e:4e:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsAS+LMl9WiFMNr1oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk ZmIzNjMxYjEtNTk4Yi00MDgxLWIxY2ItOThjODZjZjU5ODEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxTTqMbaHGDlU2UFa4ZBkmqQ9rPoCKstBXS/ dHVqGcS5jYfKQxGHz2/IzHbAmmniDAOBX+5JwF8YVTm2x3hc1W+aq1CAmeW8eVYh TpiQN5xY56ho1x/0ETesAOPIVig+3WPOiTa9fNHrrowRUE4I0Lq0Pz0AjyuUoTon 4os+p9csvxUO80DDFkc1nZLL4xi1mHbiYwhgKMEeW3rG8XhKsgH2jMAcCI0bG1k3 BuvpuhrzPuN3n+AAsWX6NrygvFDNL/mGbKmdXXhL3aQI3HdkHwJS2u4bol41FEvD tF/XUjkuPV7rFzrqa3hj6p1TrJfXMVQaCg0GhWEac3u6AlHFKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEgkeaOFsQ6VvkuqBh/hKbXJlEXNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYmFmNzYyMzMtM2M2ZC0z NWY3LThhOWQtNGIxMDg1OTMzMzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFe2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJcae9nYoxxjxsJbQgjzIKJNw3/Kf8CeFTjEeuhLEzVIl7kdfw4ZDOQ4 JesK7UQ9aZ+voSeriu+f/D50ZJcJn0Cnb2jCkw+kXshootOq75pUFNjgUeiBGtm7 eVNpzZhOb42ZbkgzsTZjLCUhAVT+fSFKpyaaxotgXYCcyWi6o1ytvqjwpkoPYGhZ H++UvERDKFnUJXO5uTTRaNHNsqejFEoESSl4N4zcwwM+1HpO884tiB0aoawUcptS lljx/36iJN8hY6p0LcC5S5NlQ9zepWht4+IN84GrRi8+aGdN3CzsRjZa2uDBcuAb IYq3H+wE9uNM6d057JJ6EYSjdFFuTus= -----END CERTIFICATE-----Generated at Sun Oct 19 20:30:55 2025 by rpki-client