$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d7b8d1ff-6028-304f-9c22-4bee7cb99a4a.roa File: d7b8d1ff-6028-304f-9c22-4bee7cb99a4a.roa (raw, json) Hash identifier: Rx3YErPxePWsEf23zeXrHmzfwit7Q5itHY92u3VBBdQ= Subject key identifier: EF:54:50:F1:9C:E8:66:48:66:7A:27:70:CB:03:B7:E6:69:24:2B:6A Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584B4A47285E56700C5B05F96168 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d7b8d1ff-6028-304f-9c22-4bee7cb99a4a.roa Signing time: Tue 23 Sep 2025 13:00:40 +0000 ROA not before: Tue 23 Sep 2025 13:00:40 +0000 ROA not after: Mon 22 Dec 2025 14:00:40 +0000 asID: 203 IP address blocks: 204.104.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4a:47:28:5e:56:70:0c:5b:05:f9:61:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 23 13:00:40 2025 GMT Not After : Dec 22 14:00:40 2025 GMT Subject: CN=a2591622-7e04-49cd-9b4e-2cdf9725cd4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:68:da:cb:78:f5:86:9a:e9:0d:0b:0f:9d:fa: fe:bc:50:f4:18:43:c7:67:10:79:50:37:ac:2a:3e: 79:3f:e9:3a:d0:13:2f:1b:b6:8a:ae:48:17:d2:1c: 2d:e9:a1:cb:43:18:6a:84:e2:f1:19:3b:66:7b:ed: 8e:10:26:93:3f:37:bf:3f:12:88:fc:66:0f:ef:15: a1:93:bf:7f:ce:29:fa:b4:c1:a7:44:64:a7:a2:4e: e5:48:36:10:13:82:4f:6a:44:d3:a0:5e:2d:0d:46: 0d:f1:2f:ae:e1:7d:28:75:19:97:90:6a:3d:40:08: 48:1f:0d:04:44:0e:b1:73:95:23:bf:92:3f:88:b3: c5:2c:4b:8b:55:15:12:a3:b2:02:77:35:e8:11:4f: 45:92:f4:68:15:22:32:50:4f:59:c8:91:ac:ab:a7: 22:00:95:35:ec:ab:c6:b4:0a:c0:dc:22:f5:6a:1a: 18:4d:d3:1f:a4:50:67:50:8e:7d:3d:c8:9b:67:c9: 2a:da:ee:0e:7a:33:87:e6:b9:63:55:9a:9e:b2:d5: 04:07:cd:af:a7:93:c6:10:74:26:a2:fc:5e:64:c2: e9:a2:ff:d0:ee:94:c2:e7:37:ed:44:99:9c:fa:ed: f5:6d:e1:71:ce:26:37:4d:8a:12:a4:1d:ed:72:e2: 83:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:54:50:F1:9C:E8:66:48:66:7A:27:70:CB:03:B7:E6:69:24:2B:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d7b8d1ff-6028-304f-9c22-4bee7cb99a4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 204.104.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:54:8d:1a:1b:e3:6b:9e:04:bc:3b:df:d2:6c:57:01:f3:29: f1:55:ff:64:a2:22:c6:36:93:e8:c2:91:1d:77:6c:a1:ef:54: 23:4c:0a:f3:46:0d:d2:f2:73:52:8c:0a:66:a0:a0:08:bd:6d: 48:ba:47:a8:70:ef:32:2d:53:4b:86:71:48:66:9f:a9:60:ed: 6c:2f:26:73:0b:ea:9a:d9:e5:c4:6e:0c:3f:1b:51:70:dd:07: 11:c0:83:4a:6d:d9:41:7c:2e:36:b0:16:1c:af:ce:88:88:58: d1:e5:bb:2c:e2:25:5c:60:25:a7:77:48:25:23:35:85:2e:17: 28:fe:5c:39:22:30:3e:6b:20:92:a1:bf:ef:49:60:3c:86:78: a1:0a:8a:55:7e:bd:81:58:ba:8e:09:c1:5e:9e:d0:25:74:a9: d7:7d:f4:87:10:18:a9:57:4c:fa:35:c9:d5:13:9e:ee:86:ec: b9:95:7b:72:e2:42:c3:3e:dc:71:fa:73:1e:a4:3c:c2:59:ce: a0:78:72:fc:f1:30:fe:81:84:02:a0:98:bc:15:bc:15:8f:a7: e7:6d:8f:eb:fe:9b:86:5c:a8:10:0c:f0:8d:c3:f5:0d:73:52: e2:9f:80:a5:d1:ea:c0:99:0e:0d:54:6b:3a:45:c9:d6:5e:0f: 49:a2:58:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtKRyheVnAMWwX5YWgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDkyMzEzMDA0MFoXDTI1MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk YTI1OTE2MjItN2UwNC00OWNkLTliNGUtMmNkZjk3MjVjZDRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2jay3j1hprpDQsPnfr+vFD0GEPHZxB5UDes Kj55P+k60BMvG7aKrkgX0hwt6aHLQxhqhOLxGTtme+2OECaTPze/PxKI/GYP7xWh k79/zin6tMGnRGSnok7lSDYQE4JPakTToF4tDUYN8S+u4X0odRmXkGo9QAhIHw0E RA6xc5Ujv5I/iLPFLEuLVRUSo7ICdzXoEU9FkvRoFSIyUE9ZyJGsq6ciAJU17KvG tArA3CL1ahoYTdMfpFBnUI59PcibZ8kq2u4OejOH5rljVZqestUEB82vp5PGEHQm ovxeZMLpov/Q7pTC5zftRJmc+u31beFxziY3TYoSpB3tcuKDPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO9UUPGc6GZIZnoncMsDt+ZpJCtqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZDdiOGQxZmYtNjAyOC0z MDRmLTljMjItNGJlZTdjYjk5YTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGhDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJhUjRob42ueBLw739JsVwHzKfFV/2SiIsY2k+jCkR13bKHvVCNMCvNG DdLyc1KMCmagoAi9bUi6R6hw7zItU0uGcUhmn6lg7WwvJnML6prZ5cRuDD8bUXDd BxHAg0pt2UF8LjawFhyvzoiIWNHluyziJVxgJad3SCUjNYUuFyj+XDkiMD5rIJKh v+9JYDyGeKEKilV+vYFYuo4JwV6e0CV0qdd99IcQGKlXTPo1ydUTnu6G7LmVe3Li QsM+3HH6cx6kPMJZzqB4cvzxMP6BhAKgmLwVvBWPp+dtj+v+m4ZcqBAM8I3D9Q1z UuKfgKXR6sCZDg1UazpFydZeD0miWD0= -----END CERTIFICATE-----Generated at Sun Oct 19 20:53:14 2025 by rpki-client