$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c4d680ea-39f1-3c1c-8caa-52da1ec4a06a.roa File: c4d680ea-39f1-3c1c-8caa-52da1ec4a06a.roa (raw, json) Hash identifier: tSReJcyqnghzcbF4Lb90UUXmeCPjcdmM2RVdT99dVZw= Subject key identifier: C6:70:AA:00:89:67:BF:03:15:F0:C3:C3:A9:9B:55:A1:DC:86:55:78 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584B4A471B212BE39CCD7AD6E280 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c4d680ea-39f1-3c1c-8caa-52da1ec4a06a.roa Signing time: Tue 23 Sep 2025 13:00:40 +0000 ROA not before: Tue 23 Sep 2025 13:00:40 +0000 ROA not after: Mon 22 Dec 2025 14:00:40 +0000 asID: 3356 IP address blocks: 66.54.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4a:47:1b:21:2b:e3:9c:cd:7a:d6:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 23 13:00:40 2025 GMT Not After : Dec 22 14:00:40 2025 GMT Subject: CN=48f22aa5-92d6-49c5-a517-93757a83083c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:43:6b:ed:b0:ae:9c:4e:8a:78:20:5c:fc:bf: 5d:c2:c1:a7:da:08:b8:50:09:6b:de:c1:9c:3a:1a: 1b:f7:89:4d:0c:40:ef:ab:86:bb:ab:04:aa:44:7f: c0:74:5b:50:6f:40:97:70:f8:55:36:f8:ef:81:1d: 4a:76:d9:eb:d6:33:fb:a5:70:5e:be:93:9a:53:22: b1:e1:37:11:a0:80:51:dd:9b:2a:2a:ad:84:1e:09: 24:1a:33:a4:40:be:fc:c3:c0:32:4c:3b:c1:42:11: ed:48:70:1d:a9:11:e7:c5:b1:cf:38:a5:fd:24:e5: 64:0b:e9:55:6a:ee:59:7e:94:8b:b1:57:dd:2a:7f: 2c:00:05:0a:f0:13:e8:05:68:0e:ac:1e:ef:7c:0d: 20:b2:cb:5d:34:1d:d3:e5:c4:1c:c2:09:89:fb:c7: 6d:f7:f0:08:d5:c8:3a:f3:aa:c2:28:18:35:e5:99: ee:30:97:06:ce:aa:3c:97:81:f5:40:a3:77:e0:05: 88:02:0f:32:27:e7:c9:e8:ff:ee:0c:0f:4f:40:ac: dd:ca:59:19:9e:0a:99:75:fb:ed:72:0c:51:56:27: d7:e5:44:2f:5c:ad:37:2e:ff:06:4f:f7:03:d5:5a: 7b:be:eb:9c:b0:c8:30:e5:2e:6d:3c:9c:c3:9a:82: c7:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:70:AA:00:89:67:BF:03:15:F0:C3:C3:A9:9B:55:A1:DC:86:55:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c4d680ea-39f1-3c1c-8caa-52da1ec4a06a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 66.54.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:8d:3b:87:0f:de:0a:3d:7f:73:3f:39:34:70:6a:15:76:66: ed:b3:12:04:61:66:09:df:4b:92:b0:eb:41:56:3e:c6:1a:9a: d5:ae:62:0b:6b:5a:78:01:e2:4f:77:e0:21:49:64:bc:a9:ed: d7:04:51:03:23:4e:fa:6c:f5:23:8f:cd:8f:27:21:34:4c:ab: 1c:54:6b:3e:f7:6d:d7:be:d9:5e:40:08:23:35:99:de:af:e5: 6c:90:e6:33:fe:01:8b:4e:0a:05:b2:c6:f2:2b:32:78:20:bf: 9b:41:ac:8f:a5:af:a5:ee:01:51:15:a7:d8:f6:a7:3a:e0:6f: c9:69:b1:fa:8f:9a:67:8e:f7:d2:fd:08:c1:c3:fd:9c:ee:37: 7e:3b:d3:ff:c9:6e:5f:f6:ed:ec:bc:ff:b8:46:65:7a:7d:ea: bd:ea:6b:0d:c6:68:5d:e6:c9:1f:63:40:ae:a9:4b:70:0c:6a: d7:06:d8:c6:fb:a7:e4:78:db:21:38:4a:e5:d4:1a:5e:74:a8: 8b:f6:2d:d6:11:45:e3:48:a1:b3:fc:92:dd:3a:d9:e9:87:b9: db:2b:6f:c2:bb:7d:ce:12:dd:d9:1d:10:4a:d1:cb:7f:b7:85: 0e:e2:9b:85:bd:9a:51:04:71:da:ad:e7:9b:4a:96:b7:4e:28: eb:ab:38:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtKRxshK+OczXrW4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDkyMzEzMDA0MFoXDTI1MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk NDhmMjJhYTUtOTJkNi00OWM1LWE1MTctOTM3NTdhODMwODNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7kNr7bCunE6KeCBc/L9dwsGn2gi4UAlr3sGc Ohob94lNDEDvq4a7qwSqRH/AdFtQb0CXcPhVNvjvgR1Kdtnr1jP7pXBevpOaUyKx 4TcRoIBR3ZsqKq2EHgkkGjOkQL78w8AyTDvBQhHtSHAdqRHnxbHPOKX9JOVkC+lV au5ZfpSLsVfdKn8sAAUK8BPoBWgOrB7vfA0gsstdNB3T5cQcwgmJ+8dt9/AI1cg6 86rCKBg15ZnuMJcGzqo8l4H1QKN34AWIAg8yJ+fJ6P/uDA9PQKzdylkZngqZdfvt cgxRVifX5UQvXK03Lv8GT/cD1Vp7vuucsMgw5S5tPJzDmoLHxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMZwqgCJZ78DFfDDw6mbVaHchlV4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYzRkNjgwZWEtMzlmMS0z YzFjLThjYWEtNTJkYTFlYzRhMDZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQjYUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFSNO4cP3go9f3M/OTRwahV2Zu2zEgRhZgnfS5Kw60FWPsYamtWuYgtr WngB4k934CFJZLyp7dcEUQMjTvps9SOPzY8nITRMqxxUaz73bde+2V5ACCM1md6v 5WyQ5jP+AYtOCgWyxvIrMnggv5tBrI+lr6XuAVEVp9j2pzrgb8lpsfqPmmeO99L9 CMHD/ZzuN3470//Jbl/27ey8/7hGZXp96r3qaw3GaF3myR9jQK6pS3AMatcG2Mb7 p+R42yE4SuXUGl50qIv2LdYRReNIobP8kt062emHudsrb8K7fc4S3dkdEErRy3+3 hQ7im4W9mlEEcdqt55tKlrdOKOurOB0= -----END CERTIFICATE-----Generated at Mon Oct 20 04:08:16 2025 by rpki-client