$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d285b726-e3ef-3abf-8761-d6f1f21f4450.roa File: d285b726-e3ef-3abf-8761-d6f1f21f4450.roa (raw, json) Hash identifier: cMuWnaUag5Zai9PjThYFB31HFol/F9az8jZLYbKd3O4= Subject key identifier: 65:1F:83:CD:88:C6:DE:4C:D2:32:79:CA:92:27:05:3A:9D:04:F6:F8 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584B5DD1F63552273F938199A680 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d285b726-e3ef-3abf-8761-d6f1f21f4450.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 202 IP address blocks: 168.87.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d1:f6:35:52:27:3f:93:81:99:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=4997d1b0-b7d2-4aa6-8ec2-db4b42beeea8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:3f:65:88:ac:a7:80:87:6a:6c:d1:9d:b2:f8: 49:c8:4e:06:5e:69:cf:7f:39:4b:3b:ae:d2:10:1b: 31:2f:63:e7:fa:68:60:6c:7c:a6:f7:b1:ce:95:c3: 72:40:e0:c9:ec:07:a7:c4:19:14:7b:61:7b:7a:72: d9:76:1b:32:bc:8f:6e:1f:ea:16:45:b3:1b:6c:ce: 73:e0:2a:aa:51:64:87:8b:61:6b:c8:3c:af:f5:a6: 02:9c:14:08:f2:7f:b2:c8:6e:80:5f:02:e6:e3:9f: 08:39:59:7a:89:11:85:38:b0:79:e0:f0:5b:c8:1f: 70:a3:a9:87:48:6f:2e:c9:d7:ed:d0:36:00:01:15: 54:57:7b:c3:d9:8b:56:2d:0a:78:c6:97:6f:3f:5f: 12:40:05:a4:72:6f:93:67:67:29:89:8c:0f:e0:cd: fe:4b:4d:0e:7f:ea:25:73:d9:d6:af:e5:98:3d:05: 88:75:11:88:99:05:2d:e7:db:f2:92:9c:f1:98:16: 52:bb:eb:34:b4:04:2b:06:dd:68:5c:ff:a5:58:95: 8c:b1:61:3d:65:ca:f0:ff:3b:4f:c6:69:11:3b:22: 78:14:61:02:b4:f5:10:52:fe:02:ad:4b:b0:76:2c: d2:69:f8:30:7b:ee:08:6f:53:99:20:f2:fa:21:d2: c0:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:1F:83:CD:88:C6:DE:4C:D2:32:79:CA:92:27:05:3A:9D:04:F6:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d285b726-e3ef-3abf-8761-d6f1f21f4450.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:dd:0e:f9:7d:c8:05:78:dc:ae:90:50:c1:76:2e:93:17:f2: b1:04:f5:d4:6f:0c:ee:33:ff:5d:52:0c:4d:4c:96:41:e5:72: c9:29:c6:81:73:05:29:eb:98:48:99:a7:73:62:5c:2c:38:6d: 7d:12:15:dd:8a:ca:6e:35:9e:54:fd:33:d9:33:ae:0a:11:55: c7:1d:cf:69:24:cd:f9:b1:3d:7d:77:bc:33:09:e2:cf:5d:2d: 70:0f:f5:5e:f9:a1:41:5d:99:59:11:65:13:ce:1b:dc:9b:5c: 1b:12:2e:4b:ff:6b:4d:8f:01:b8:26:39:37:3b:87:ac:b6:a4: 48:23:6d:00:aa:42:ee:79:fc:b7:f6:31:9a:9a:67:5c:7e:20: ef:f5:a0:d3:84:46:5d:fe:67:e5:08:69:39:80:ed:01:49:c3: d9:c8:65:ce:b9:6b:da:3e:64:86:ae:ae:90:f1:ab:85:e9:ab: 1a:c4:6e:42:57:92:3e:9b:b9:7d:08:58:2f:bb:90:11:66:36: c0:43:2f:0b:d0:19:b1:c1:f4:93:0c:7a:e9:d0:bd:d3:f3:e4: f1:1a:89:95:b3:48:69:e6:28:8f:87:59:72:69:64:6e:14:7b: c6:ee:a5:d5:45:6e:3e:cb:ff:3b:12:ea:75:4b:ae:89:40:9e: fb:82:b6:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0fY1Uic/k4GZpoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk NDk5N2QxYjAtYjdkMi00YWE2LThlYzItZGI0YjQyYmVlZWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhz9liKyngIdqbNGdsvhJyE4GXmnPfzlLO67S EBsxL2Pn+mhgbHym97HOlcNyQODJ7AenxBkUe2F7enLZdhsyvI9uH+oWRbMbbM5z 4CqqUWSHi2FryDyv9aYCnBQI8n+yyG6AXwLm458IOVl6iRGFOLB54PBbyB9wo6mH SG8uydft0DYAARVUV3vD2YtWLQp4xpdvP18SQAWkcm+TZ2cpiYwP4M3+S00Of+ol c9nWr+WYPQWIdRGImQUt59vykpzxmBZSu+s0tAQrBt1oXP+lWJWMsWE9Zcrw/ztP xmkROyJ4FGECtPUQUv4CrUuwdizSafgwe+4Ib1OZIPL6IdLAHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGUfg82Ixt5M0jJ5ypInBTqdBPb4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZDI4NWI3MjYtZTNlZi0z YWJmLTg3NjEtZDZmMWYyMWY0NDUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqFf4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIndDvl9yAV43K6QUMF2LpMX8rEE9dRvDO4z/11SDE1MlkHlcskpxoFz BSnrmEiZp3NiXCw4bX0SFd2Kym41nlT9M9kzrgoRVccdz2kkzfmxPX13vDMJ4s9d LXAP9V75oUFdmVkRZRPOG9ybXBsSLkv/a02PAbgmOTc7h6y2pEgjbQCqQu55/Lf2 MZqaZ1x+IO/1oNOERl3+Z+UIaTmA7QFJw9nIZc65a9o+ZIaurpDxq4XpqxrEbkJX kj6buX0IWC+7kBFmNsBDLwvQGbHB9JMMeunQvdPz5PEaiZWzSGnmKI+HWXJpZG4U e8bupdVFbj7L/zsS6nVLrolAnvuCto0= -----END CERTIFICATE-----Generated at Mon Oct 20 12:38:52 2025 by rpki-client