$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d2298a8e-cf78-387e-b47b-3e16d3a9a535.roa File: d2298a8e-cf78-387e-b47b-3e16d3a9a535.roa (raw, json) Hash identifier: 4UPMEFC32gjz/Cp26wKgAlkkdqqV1SOayr6LFn7VDC4= Subject key identifier: 3E:41:DD:42:90:77:E2:D4:E6:8C:EB:3C:12:2C:45:AB:7F:59:EF:84 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584B4D11D7D74C9C6F8595A14300 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d2298a8e-cf78-387e-b47b-3e16d3a9a535.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 203 IP address blocks: 204.104.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:d7:d7:4c:9c:6f:85:95:a1:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=05ff7db3-e781-4829-96a8-d4be224c4092 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:4a:07:9d:9c:25:9c:79:a5:aa:71:a0:99:9b: 08:03:fe:8a:e5:1a:9f:4d:f2:d1:6c:f0:d3:ba:7b: d4:03:09:c1:a3:71:56:0b:93:8d:05:7b:da:61:ef: 2e:12:42:6d:f1:4a:d2:06:5f:37:b4:e9:49:0c:02: 18:bc:55:7f:d4:cf:ce:57:0a:b9:7a:3e:0f:8b:4f: 0c:1b:21:56:2c:fe:ba:72:2f:fb:f1:ee:7f:73:e7: df:50:69:a0:d5:ee:4a:3d:ee:25:d1:2c:30:46:68: 64:af:4d:c8:72:bf:39:25:61:e8:39:f4:d1:56:3e: 30:ff:e5:a1:bd:d5:59:0e:a6:72:8a:d1:8f:ca:24: e3:0f:5c:d4:24:c6:ea:e7:52:20:af:c0:46:c1:e3: 01:dd:e7:85:f0:b5:3d:44:52:2f:81:9e:88:a6:5f: 64:f4:df:ae:62:db:80:d2:3a:00:5e:1d:20:51:c4: 38:0a:d2:5b:e5:50:e6:5f:65:55:b9:cb:e6:19:51: f5:7f:85:1f:f9:1a:62:95:32:be:18:b6:2b:b4:ca: 74:c3:6a:dc:14:5b:e3:44:52:61:37:8b:04:1b:96: 10:e6:52:c9:dc:6a:03:62:7e:0c:dc:20:f0:81:0e: bf:9b:0d:93:3f:d8:2a:2e:fd:42:3d:a6:50:45:94: 39:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:41:DD:42:90:77:E2:D4:E6:8C:EB:3C:12:2C:45:AB:7F:59:EF:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d2298a8e-cf78-387e-b47b-3e16d3a9a535.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 204.104.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:fe:9a:b6:e6:bc:41:5b:b2:27:c1:51:6e:66:6f:78:39:ec: f4:c3:0a:d8:9f:c9:aa:e0:23:19:05:bc:b5:05:b7:0c:10:4d: c0:86:ae:7e:af:f9:d0:6a:f4:af:cd:e6:3f:70:01:f0:7b:06: ef:c6:55:5f:81:af:69:08:24:ef:56:65:03:27:f4:ec:2a:73: bc:f8:9f:ae:d3:e4:75:02:4d:7e:06:2c:27:92:a1:f4:11:fd: a2:e2:e6:d8:d1:09:5d:38:5d:7c:e1:70:1c:08:1d:c1:71:29: f9:e4:8c:c1:64:7c:f4:e7:4d:f0:89:d4:bd:02:44:47:b6:a9: 1e:ce:88:fd:08:e2:17:aa:21:93:07:05:99:23:19:b9:a6:20: 50:71:44:e9:95:a2:68:8a:f7:8e:4f:c6:e6:50:e1:b1:c0:ff: a0:83:73:53:d3:31:5f:19:95:89:69:d0:60:bc:76:a6:bc:41: 2f:a8:ca:8d:18:ae:0c:8b:eb:1a:76:08:4b:0b:51:5b:30:43: 2d:db:8d:fa:0e:a7:98:c9:70:bb:56:30:42:b0:ec:d1:ce:57: 8b:08:95:f3:8d:2e:b1:3a:0a:56:f8:79:aa:e6:6b:72:d9:b6: 74:04:d1:7c:b7:3c:93:35:92:63:fb:70:a6:16:6a:10:ea:63: e5:36:24:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNEdfXTJxvhZWhQwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk MDVmZjdkYjMtZTc4MS00ODI5LTk2YTgtZDRiZTIyNGM0MDkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7EoHnZwlnHmlqnGgmZsIA/6K5RqfTfLRbPDT unvUAwnBo3FWC5ONBXvaYe8uEkJt8UrSBl83tOlJDAIYvFV/1M/OVwq5ej4Pi08M GyFWLP66ci/78e5/c+ffUGmg1e5KPe4l0SwwRmhkr03Icr85JWHoOfTRVj4w/+Wh vdVZDqZyitGPyiTjD1zUJMbq51Igr8BGweMB3eeF8LU9RFIvgZ6Ipl9k9N+uYtuA 0joAXh0gUcQ4CtJb5VDmX2VVucvmGVH1f4Uf+RpilTK+GLYrtMp0w2rcFFvjRFJh N4sEG5YQ5lLJ3GoDYn4M3CDwgQ6/mw2TP9gqLv1CPaZQRZQ5AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD5B3UKQd+LU5ozrPBIsRat/We+EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZDIyOThhOGUtY2Y3OC0z ODdlLWI0N2ItM2UxNmQzYTlhNTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGiMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAET+mrbmvEFbsifBUW5mb3g57PTDCtifyargIxkFvLUFtwwQTcCGrn6v +dBq9K/N5j9wAfB7Bu/GVV+Br2kIJO9WZQMn9Owqc7z4n67T5HUCTX4GLCeSofQR /aLi5tjRCV04XXzhcBwIHcFxKfnkjMFkfPTnTfCJ1L0CREe2qR7OiP0I4heqIZMH BZkjGbmmIFBxROmVomiK945PxuZQ4bHA/6CDc1PTMV8ZlYlp0GC8dqa8QS+oyo0Y rgyL6xp2CEsLUVswQy3bjfoOp5jJcLtWMEKw7NHOV4sIlfONLrE6Clb4earma3LZ tnQE0Xy3PJM1kmP7cKYWahDqY+U2JA0= -----END CERTIFICATE-----Generated at Mon Oct 20 12:00:48 2025 by rpki-client