$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e58d8b9c-b12f-33f7-a117-9e0cb8543f57.roa File: e58d8b9c-b12f-33f7-a117-9e0cb8543f57.roa (raw, json) Hash identifier: 1EaYeoWvu/zuFdGeQZqj6mDi6Fpl73aj2bm6j6HlL60= Subject key identifier: C1:1B:D1:1B:DE:9D:E6:17:D1:40:05:17:D2:AA:BD:5F:51:BC:44:F7 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584B4A472773A58B7A692B9D7800 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e58d8b9c-b12f-33f7-a117-9e0cb8543f57.roa Signing time: Tue 23 Sep 2025 13:00:40 +0000 ROA not before: Tue 23 Sep 2025 13:00:40 +0000 ROA not after: Mon 22 Dec 2025 14:00:40 +0000 asID: 3356 IP address blocks: 204.104.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4a:47:27:73:a5:8b:7a:69:2b:9d:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 23 13:00:40 2025 GMT Not After : Dec 22 14:00:40 2025 GMT Subject: CN=d9afa131-945d-4d38-af92-48ad57edb921 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:8d:44:97:71:8b:7a:55:ff:0d:7d:f3:86:a9: 13:43:b7:79:41:83:30:d7:61:e4:62:cf:16:c0:a8: 75:e6:96:85:43:bf:bd:32:ef:d8:ee:c9:9e:fd:d1: 3e:1b:46:14:2b:49:8f:ba:01:30:4b:a8:8a:53:2f: e8:5a:de:5b:1f:87:6d:4d:96:a0:35:1d:d1:7d:00: 59:e5:4e:58:67:16:21:55:b5:57:9b:56:79:9d:98: 67:fd:37:05:fa:bc:6e:3c:f5:54:b5:cc:52:71:1b: 66:36:c7:43:06:d1:65:79:6f:1c:f5:13:b7:2f:54: 1d:0a:30:e3:32:aa:74:bf:34:46:21:b9:11:6d:06: 24:41:ba:3b:f4:de:b5:3f:5b:69:87:0b:a8:85:df: 54:45:3c:29:86:6c:da:4c:fa:21:a7:74:50:ec:e5: 12:86:ca:bf:6f:13:47:b6:b1:9f:e8:7d:d5:cd:02: cb:f5:65:90:d5:d2:03:b1:4c:ab:bc:82:a5:ac:71: be:b2:5a:d1:36:47:71:0a:5e:91:c8:7c:bb:8d:fb: 32:a5:65:8a:4f:65:50:79:29:96:9e:d0:6e:3b:e7: 0c:76:14:18:f8:05:b5:6d:21:eb:36:9d:0e:27:60: ea:d8:a9:c0:de:46:dd:93:6b:88:68:c4:ba:0e:c6: 9d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:1B:D1:1B:DE:9D:E6:17:D1:40:05:17:D2:AA:BD:5F:51:BC:44:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e58d8b9c-b12f-33f7-a117-9e0cb8543f57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 204.104.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:61:cb:14:71:19:89:2f:38:9d:dc:4d:71:b8:39:db:b6:b3: 2a:d8:d8:56:1b:68:4c:22:ef:50:14:80:02:0f:70:2d:37:cc: 3e:52:01:76:8d:11:12:18:38:e7:62:9c:aa:8a:34:17:87:c4: 4a:bb:62:c5:94:a5:b0:a3:c6:fc:27:06:fc:b4:9f:45:00:f4: 09:da:98:0b:01:1e:4e:82:d3:d2:1c:8f:35:44:0a:90:0a:7e: 1c:1d:e0:f4:75:e1:6c:65:b3:7f:a1:77:80:5f:4d:19:84:10: b3:fa:be:3c:f8:e6:48:aa:f7:32:91:56:7b:70:5d:bd:7a:a0: 89:cc:bb:7d:5a:7f:4c:63:42:7b:9a:3a:fc:ed:d0:b4:6c:09: 65:4c:bb:74:60:07:7d:22:19:13:db:2a:87:ab:13:8c:36:34: 7c:d0:27:67:e9:b7:a3:e1:66:67:04:a2:af:a8:5e:80:2a:1d: d5:0e:3f:a4:3e:01:79:46:9c:4e:66:08:2b:67:ab:53:8c:f7: f9:84:6c:fa:79:bd:34:1a:13:50:2a:49:2c:d6:35:3b:06:5d: ac:d3:a2:5e:97:e0:56:79:06:f5:72:85:de:7a:74:4d:28:6b: 51:1a:31:d0:f0:1d:76:97:5f:4e:a9:8a:87:07:18:dc:4e:af: 29:b8:59:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtKRydzpYt6aSudeAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDkyMzEzMDA0MFoXDTI1MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk ZDlhZmExMzEtOTQ1ZC00ZDM4LWFmOTItNDhhZDU3ZWRiOTIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApo1El3GLelX/DX3zhqkTQ7d5QYMw12HkYs8W wKh15paFQ7+9Mu/Y7sme/dE+G0YUK0mPugEwS6iKUy/oWt5bH4dtTZagNR3RfQBZ 5U5YZxYhVbVXm1Z5nZhn/TcF+rxuPPVUtcxScRtmNsdDBtFleW8c9RO3L1QdCjDj Mqp0vzRGIbkRbQYkQbo79N61P1tphwuohd9URTwphmzaTPohp3RQ7OUShsq/bxNH trGf6H3VzQLL9WWQ1dIDsUyrvIKlrHG+slrRNkdxCl6RyHy7jfsypWWKT2VQeSmW ntBuO+cMdhQY+AW1bSHrNp0OJ2Dq2KnA3kbdk2uIaMS6DsadNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMEb0RveneYX0UAFF9KqvV9RvET3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZTU4ZDhiOWMtYjEyZi0z M2Y3LWExMTctOWUwY2I4NTQzZjU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGgRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAlhyxRxGYkvOJ3cTXG4Odu2syrY2FYbaEwi71AUgAIPcC03zD5SAXaN ERIYOOdinKqKNBeHxEq7YsWUpbCjxvwnBvy0n0UA9AnamAsBHk6C09IcjzVECpAK fhwd4PR14Wxls3+hd4BfTRmEELP6vjz45kiq9zKRVntwXb16oInMu31af0xjQnua Ovzt0LRsCWVMu3RgB30iGRPbKoerE4w2NHzQJ2fpt6PhZmcEoq+oXoAqHdUOP6Q+ AXlGnE5mCCtnq1OM9/mEbPp5vTQaE1AqSSzWNTsGXazTol6X4FZ5BvVyhd56dE0o a1EaMdDwHXaXX06piocHGNxOrym4WSI= -----END CERTIFICATE-----Generated at Mon Oct 20 04:15:41 2025 by rpki-client