$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bf12db29-35f0-3ca3-9b48-142bbdf364af.roa File: bf12db29-35f0-3ca3-9b48-142bbdf364af.roa (raw, json) Hash identifier: yVqEX0EJ2fABoEanUd2GfeTfqCbBkj8sY4e+ELTu8pE= Subject key identifier: 70:CA:55:58:C0:88:5D:E2:41:67:6B:3A:B4:3B:B0:74:BB:0A:02:00 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584B8BE22CEBD96746B5CCEC2540 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bf12db29-35f0-3ca3-9b48-142bbdf364af.roa Signing time: Fri 17 Oct 2025 01:00:30 +0000 ROA not before: Fri 17 Oct 2025 01:00:30 +0000 ROA not after: Thu 15 Jan 2026 02:00:30 +0000 asID: 202 IP address blocks: 206.164.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:e2:2c:eb:d9:67:46:b5:cc:ec:25:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 17 01:00:30 2025 GMT Not After : Jan 15 02:00:30 2026 GMT Subject: CN=845df60b-7e3e-43d2-bf4e-4425be3b2821 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:43:2b:e8:ba:64:04:8a:6b:6a:42:ae:1d:bb: 70:75:bc:0b:d8:b7:86:77:dd:e2:fc:ab:84:02:fa: 36:f2:83:4e:9d:38:ef:a3:d1:6c:96:7f:58:f9:c2: 5a:31:17:85:72:25:cb:a0:5f:74:87:f2:33:3a:9b: de:0d:cd:8f:19:6b:e5:5c:fc:43:98:5c:14:0f:41: 0a:a3:ed:a6:21:0d:61:31:6c:2d:a8:b1:c2:6a:23: f4:db:bf:35:c8:e1:64:9f:eb:69:36:26:95:b0:b5: 33:39:b5:79:85:f7:8f:ee:d6:72:71:55:16:12:04: 69:b8:77:a3:21:43:c7:ff:38:56:b8:44:fd:55:c4: 3d:d6:fb:df:8b:b3:8e:ec:07:a3:b9:5b:0e:3b:19: b3:5f:97:f3:13:de:bc:52:8b:5f:3d:d3:01:c2:43: 63:6c:0a:2d:57:12:73:1a:1e:1c:75:de:b6:71:ce: 40:43:1b:56:ea:78:df:53:d6:d7:1f:46:d5:92:54: 0f:47:4b:bd:59:26:71:4a:0e:ca:e2:0e:29:8a:46: 8e:7c:1e:0a:c5:f8:92:f1:31:75:d2:a1:a6:df:a2: 7e:fd:cf:a3:c7:70:dd:05:23:c6:bb:eb:7e:14:da: 13:ce:3d:e3:4d:36:52:1c:7d:ee:f3:6d:1d:6b:fe: 04:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:CA:55:58:C0:88:5D:E2:41:67:6B:3A:B4:3B:B0:74:BB:0A:02:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bf12db29-35f0-3ca3-9b48-142bbdf364af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 206.164.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:ee:60:69:0e:9d:c6:2c:4a:6b:e3:ef:d2:20:60:94:ec:b2: 5c:eb:24:39:9a:81:55:d8:45:7c:39:90:66:5f:cb:5d:df:39: c4:4a:a5:77:8e:d2:48:4e:2a:0f:6f:59:eb:ac:1a:a4:e5:6e: 8b:93:f1:36:71:b0:9d:d7:3f:30:78:65:9e:bb:1e:5b:68:d5: 07:22:cf:b4:c6:04:42:23:0e:39:3d:b4:fc:ac:ea:90:4d:7d: ee:b9:1f:14:a3:4e:1b:c8:e2:67:75:6a:a2:8e:9f:a2:39:3a: 85:b0:63:c3:65:5a:59:1f:13:3f:ba:b3:fa:ad:50:39:dc:36: 2d:fa:ed:87:53:19:1f:ac:52:b7:a6:43:a6:85:49:ba:5a:9a: 7b:4e:30:d5:9c:09:76:34:8b:9c:9c:0b:26:51:54:c9:82:3a: 03:15:44:9e:ea:59:cc:55:21:d3:6e:dd:71:33:41:a6:2e:ba: 63:e5:71:2f:a4:56:f4:dd:43:35:b9:f4:1c:f1:14:61:8b:ac: 5b:59:98:1f:14:4e:4a:b1:85:5d:5f:ed:b1:b3:fe:1a:4c:30: 80:58:37:5d:49:89:fb:93:1c:01:02:1e:d6:28:b6:a2:45:2d: b3:18:3d:7d:84:0d:28:85:4b:d5:d8:52:00:25:c5:9b:ef:ea: a0:ed:72:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuL4izr2WdGtczsJUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk ODQ1ZGY2MGItN2UzZS00M2QyLWJmNGUtNDQyNWJlM2IyODIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0Mr6LpkBIprakKuHbtwdbwL2LeGd93i/KuE Avo28oNOnTjvo9Fsln9Y+cJaMReFciXLoF90h/IzOpveDc2PGWvlXPxDmFwUD0EK o+2mIQ1hMWwtqLHCaiP02781yOFkn+tpNiaVsLUzObV5hfeP7tZycVUWEgRpuHej IUPH/zhWuET9VcQ91vvfi7OO7AejuVsOOxmzX5fzE968UotfPdMBwkNjbAotVxJz Gh4cdd62cc5AQxtW6njfU9bXH0bVklQPR0u9WSZxSg7K4g4pikaOfB4KxfiS8TF1 0qGm36J+/c+jx3DdBSPGu+t+FNoTzj3jTTZSHH3u820da/4ErwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHDKVVjAiF3iQWdrOrQ7sHS7CgIAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYmYxMmRiMjktMzVmMC0z Y2EzLTliNDgtMTQyYmJkZjM2NGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzqTYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI7uYGkOncYsSmvj79IgYJTsslzrJDmagVXYRXw5kGZfy13fOcRKpXeO 0khOKg9vWeusGqTlbouT8TZxsJ3XPzB4ZZ67Hlto1Qciz7TGBEIjDjk9tPys6pBN fe65HxSjThvI4md1aqKOn6I5OoWwY8NlWlkfEz+6s/qtUDncNi367YdTGR+sUrem Q6aFSbpamntOMNWcCXY0i5ycCyZRVMmCOgMVRJ7qWcxVIdNu3XEzQaYuumPlcS+k VvTdQzW59BzxFGGLrFtZmB8UTkqxhV1f7bGz/hpMMIBYN11JifuTHAECHtYotqJF LbMYPX2EDSiFS9XYUgAlxZvv6qDtco8= -----END CERTIFICATE-----Generated at Sun Oct 19 20:42:35 2025 by rpki-client