$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d9636a6f-3592-376c-90d3-b77ba2b2de79.roa File: d9636a6f-3592-376c-90d3-b77ba2b2de79.roa (raw, json) Hash identifier: FMgMvBeQgwgMuACdTS0pLuFwggRJHApZhSF0qfcuZNo= Subject key identifier: 3E:76:DA:DF:A7:5D:61:37:51:E8:7C:A8:13:D7:06:BC:5D:96:FB:62 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584B4A471CE1FFF8FCD4BDDBEA40 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d9636a6f-3592-376c-90d3-b77ba2b2de79.roa Signing time: Tue 23 Sep 2025 13:00:40 +0000 ROA not before: Tue 23 Sep 2025 13:00:40 +0000 ROA not after: Mon 22 Dec 2025 14:00:40 +0000 asID: 3360 IP address blocks: 168.87.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4a:47:1c:e1:ff:f8:fc:d4:bd:db:ea:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 23 13:00:40 2025 GMT Not After : Dec 22 14:00:40 2025 GMT Subject: CN=26a0abb2-3d9c-43c5-83e3-b35c7ea461ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:0d:65:f3:0a:79:51:b0:b6:02:3f:69:fe:1f: 21:56:1e:27:d8:68:d7:3f:e6:98:ad:25:31:6a:21: e3:2f:83:86:f1:47:0c:f9:f4:36:bf:bb:d0:98:35: c1:9a:92:cf:50:3a:19:65:f2:b1:41:9b:72:9d:b2: be:d5:e6:8d:0a:0f:bb:ba:c5:76:58:65:c7:8c:75: da:1e:10:04:43:01:5b:1f:e6:03:9d:af:f5:a7:5c: b5:cf:4a:25:1e:2f:68:b1:5d:b5:e4:64:dd:a6:f8: 28:27:07:37:26:20:23:6d:21:19:05:23:97:6d:5a: f0:ad:9f:16:2f:38:81:a2:62:b7:db:9c:a4:64:5c: 28:d6:7b:b0:e6:53:05:91:9a:2d:b9:a7:17:1a:35: a9:9b:37:97:6f:08:d6:a9:62:0b:51:96:a5:bc:89: 32:5a:c7:bc:ca:9c:bf:96:02:0d:5a:f1:3a:45:7f: 4e:85:ed:38:8c:11:0f:fe:eb:17:38:2e:8e:50:03: 04:56:f2:10:3b:32:61:57:f8:7e:50:9f:bf:25:87: a1:56:7d:d5:83:00:7e:e7:54:df:14:8f:94:d0:dc: db:51:ae:45:c5:82:6c:60:94:c9:9a:ec:d3:26:52: 8a:e9:a0:e8:73:85:1a:25:b2:1c:1b:9f:32:c5:10: b3:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:76:DA:DF:A7:5D:61:37:51:E8:7C:A8:13:D7:06:BC:5D:96:FB:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d9636a6f-3592-376c-90d3-b77ba2b2de79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:93:c4:5a:64:e2:8c:11:56:99:4f:e3:35:88:74:de:22:fe: a0:bd:0e:cf:5d:8c:6a:94:5b:3a:c9:fc:9a:d5:6c:c6:7b:33: 16:3a:17:ec:84:ab:76:2c:90:62:26:11:28:3b:f4:4c:f8:02: 23:b0:36:52:01:b5:46:b4:96:4d:81:9e:07:a8:0d:bb:93:36: ad:15:6c:9d:0c:72:34:75:12:7b:34:4e:39:a0:f4:5b:af:54: e9:81:b0:ac:5e:1d:c7:57:0d:c6:e0:05:6a:cc:7f:de:76:74: 34:33:a9:8f:fa:0a:cb:6a:fb:68:64:6e:dc:f4:89:f7:46:85: 4c:43:45:c0:bc:bd:7a:ff:71:21:18:b0:80:67:54:44:2e:b1: 9e:18:50:5e:00:ff:04:7f:d8:19:99:0e:af:b5:e3:30:32:b8: a8:51:c4:02:c1:81:12:98:42:51:cd:bd:27:de:82:8b:56:42: 54:58:61:06:61:54:1b:0a:d4:c8:1a:c6:34:80:b2:9a:9e:95: 26:f3:14:30:5b:01:cd:ae:12:60:a3:7e:46:23:95:7f:8f:d3: 09:75:11:34:12:2a:98:93:1a:ad:ff:40:88:b4:53:ef:b4:26: 0b:e5:f0:4e:41:79:59:51:c9:97:ab:27:d1:95:a3:21:40:63: 1a:78:a1:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtKRxzh//j81L3b6kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDkyMzEzMDA0MFoXDTI1MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk MjZhMGFiYjItM2Q5Yy00M2M1LTgzZTMtYjM1YzdlYTQ2MWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQ1l8wp5UbC2Aj9p/h8hVh4n2GjXP+aYrSUx aiHjL4OG8UcM+fQ2v7vQmDXBmpLPUDoZZfKxQZtynbK+1eaNCg+7usV2WGXHjHXa HhAEQwFbH+YDna/1p1y1z0olHi9osV215GTdpvgoJwc3JiAjbSEZBSOXbVrwrZ8W LziBomK325ykZFwo1nuw5lMFkZotuacXGjWpmzeXbwjWqWILUZalvIkyWse8ypy/ lgINWvE6RX9Ohe04jBEP/usXOC6OUAMEVvIQOzJhV/h+UJ+/JYehVn3VgwB+51Tf FI+U0NzbUa5FxYJsYJTJmuzTJlKK6aDoc4UaJbIcG58yxRCzcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD522t+nXWE3Ueh8qBPXBrxdlvtiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZDk2MzZhNmYtMzU5Mi0z NzZjLTkwZDMtYjc3YmEyYjJkZTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFdWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAGTxFpk4owRVplP4zWIdN4i/qC9Ds9djGqUWzrJ/JrVbMZ7MxY6F+yE q3YskGImESg79Ez4AiOwNlIBtUa0lk2BngeoDbuTNq0VbJ0McjR1Ens0Tjmg9Fuv VOmBsKxeHcdXDcbgBWrMf952dDQzqY/6Cstq+2hkbtz0ifdGhUxDRcC8vXr/cSEY sIBnVEQusZ4YUF4A/wR/2BmZDq+14zAyuKhRxALBgRKYQlHNvSfegotWQlRYYQZh VBsK1MgaxjSAspqelSbzFDBbAc2uEmCjfkYjlX+P0wl1ETQSKpiTGq3/QIi0U++0 Jgvl8E5BeVlRyZerJ9GVoyFAYxp4oYk= -----END CERTIFICATE-----Generated at Sun Oct 19 20:31:27 2025 by rpki-client