$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bcf6f989-824a-304b-bf25-619305571b9a.roa File: bcf6f989-824a-304b-bf25-619305571b9a.roa (raw, json) Hash identifier: ZEL8V7SS+xxn5K8WReR7mW/GN7WzuIHZJWyKYW74mug= Subject key identifier: CB:93:B8:75:03:10:97:0F:1C:42:68:0E:30:45:2F:33:CB:25:92:3D Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584B5DD1F0D1ADA02408D08BC980 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bcf6f989-824a-304b-bf25-619305571b9a.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 3356 IP address blocks: 207.37.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d1:f0:d1:ad:a0:24:08:d0:8b:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=cfbffa35-394e-4f21-8a27-2ef85bd3fd13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:3d:66:83:b7:80:f6:86:a9:bc:22:50:a3:7e: ed:eb:4f:59:e8:2b:ab:17:f2:44:38:ef:b9:c7:68: 51:52:0b:05:12:a9:86:59:45:4e:7f:8d:58:d7:cf: 36:e4:08:f5:ac:e1:f5:db:ba:5b:d7:e1:5a:2b:39: 1b:f1:73:0c:02:d4:9b:25:b3:0f:ee:5d:bd:d2:0e: 36:21:b1:a8:a2:4c:ad:8e:d0:4d:ec:8c:87:df:31: de:5a:ff:8e:e9:66:d2:59:72:8f:bd:98:09:cc:b9: 12:0d:bf:b5:22:76:a6:f2:18:06:a2:a8:a2:65:7e: c9:6f:38:20:f1:4a:4e:0f:ff:67:08:0b:c2:10:d6: 9a:c6:d8:25:4b:32:a7:24:58:4e:ec:a7:ef:11:16: 73:9f:eb:8b:1a:43:25:b7:c5:04:39:73:06:4a:6a: cc:6a:a5:95:25:24:8b:d9:50:90:f7:6f:8e:04:1a: 84:c1:11:a8:56:5c:03:fd:e5:b3:57:21:42:68:35: 84:fc:2b:53:87:b3:f7:40:6f:4a:c9:04:06:10:77: 3c:30:11:8e:ef:42:c1:6c:35:59:ea:26:38:9d:f4: 13:80:41:be:8c:4e:dc:02:cd:e1:5f:b9:a6:e4:2f: 54:97:16:ee:3a:3d:b6:56:9f:25:e2:a8:af:a2:21: c2:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:93:B8:75:03:10:97:0F:1C:42:68:0E:30:45:2F:33:CB:25:92:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bcf6f989-824a-304b-bf25-619305571b9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 207.37.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:3f:5b:bd:13:70:f1:91:83:fa:55:a6:38:2d:44:de:84:18: d9:83:08:63:75:ad:ba:c8:62:85:75:1d:e0:36:48:3d:a0:93: 3f:30:14:57:42:f0:87:c6:28:9f:3f:d9:49:57:ab:f6:22:83: 89:2d:90:b7:fb:bd:c9:f2:39:8b:d5:18:a1:8a:93:2b:ad:b3: 10:e8:a3:d0:4e:12:a6:ce:ad:33:d9:b8:8b:18:3f:c0:9b:e7: 49:ba:a3:bf:be:16:83:8f:b5:d5:57:e8:e6:7d:a3:60:7a:d6: af:97:1d:86:4b:58:95:2e:20:12:ef:98:55:3e:65:5f:98:eb: 79:99:ca:f8:43:f3:70:db:13:1c:3e:bc:6f:52:6c:4c:23:8e: 41:ca:d1:7d:a2:96:9d:70:58:71:c2:b3:66:bf:05:c1:77:ff: 23:9c:0a:40:ec:3a:3a:1e:e5:48:c3:dc:14:f2:60:21:80:cb: d5:e1:10:18:df:46:58:6d:c3:31:62:31:fe:44:77:25:fa:0a: a0:cb:62:4f:f9:75:3b:f5:cd:08:67:53:4d:83:cf:9a:d0:3d: dc:79:4e:c3:38:e9:eb:41:ff:1a:8c:02:50:72:dd:f2:cf:32: b9:33:b4:6e:2e:e6:1d:74:4f:78:25:16:7d:dc:99:62:4a:9b: 70:5e:06:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0fDRraAkCNCLyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk Y2ZiZmZhMzUtMzk0ZS00ZjIxLThhMjctMmVmODViZDNmZDEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhT1mg7eA9oapvCJQo37t609Z6CurF/JEOO+5 x2hRUgsFEqmGWUVOf41Y18825Aj1rOH127pb1+FaKzkb8XMMAtSbJbMP7l290g42 IbGookytjtBN7IyH3zHeWv+O6WbSWXKPvZgJzLkSDb+1Inam8hgGoqiiZX7Jbzgg 8UpOD/9nCAvCENaaxtglSzKnJFhO7KfvERZzn+uLGkMlt8UEOXMGSmrMaqWVJSSL 2VCQ92+OBBqEwRGoVlwD/eWzVyFCaDWE/CtTh7P3QG9KyQQGEHc8MBGO70LBbDVZ 6iY4nfQTgEG+jE7cAs3hX7mm5C9UlxbuOj22Vp8l4qivoiHCTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMuTuHUDEJcPHEJoDjBFLzPLJZI9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYmNmNmY5ODktODI0YS0z MDRiLWJmMjUtNjE5MzA1NTcxYjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzyXIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB0/W70TcPGRg/pVpjgtRN6EGNmDCGN1rbrIYoV1HeA2SD2gkz8wFFdC 8IfGKJ8/2UlXq/Yig4ktkLf7vcnyOYvVGKGKkyutsxDoo9BOEqbOrTPZuIsYP8Cb 50m6o7++FoOPtdVX6OZ9o2B61q+XHYZLWJUuIBLvmFU+ZV+Y63mZyvhD83DbExw+ vG9SbEwjjkHK0X2ilp1wWHHCs2a/BcF3/yOcCkDsOjoe5UjD3BTyYCGAy9XhEBjf RlhtwzFiMf5EdyX6CqDLYk/5dTv1zQhnU02Dz5rQPdx5TsM46etB/xqMAlBy3fLP MrkztG4u5h10T3glFn3cmWJKm3BeBqQ= -----END CERTIFICATE-----Generated at Sun Oct 19 20:41:58 2025 by rpki-client