$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/eb8aa76e-7d88-310f-a8ab-eda0f9fe0a8d.roa File: eb8aa76e-7d88-310f-a8ab-eda0f9fe0a8d.roa (raw, json) Hash identifier: oNZCj6811m0oMGiC02PDXnExo1Mv412N7sX+WVoIYrc= Subject key identifier: 33:0C:2B:05:CC:7E:5E:38:DD:E4:C4:2F:79:C6:CC:94:21:33:90:94 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584B6D2C9C750B5C755C654D7710 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/eb8aa76e-7d88-310f-a8ab-eda0f9fe0a8d.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 14618 IP address blocks: 168.87.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:9c:75:0b:5c:75:5c:65:4d:77:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=f2bb3f93-e908-43d1-81ab-fc6d9b85c534 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6a:2d:4e:34:b8:df:bc:36:1b:69:33:3c:2c: df:26:ba:40:36:34:4c:44:0e:5d:74:2e:63:b2:44: 7a:d5:8d:61:fb:0b:0c:70:33:01:b5:d0:de:9d:0c: f7:37:67:dd:51:f5:a7:6d:c6:4e:ca:9a:f1:94:a3: f6:3b:77:70:bc:63:60:9a:74:1f:1a:c5:4d:c3:17: d6:ca:69:4a:22:ae:4f:ba:04:10:3e:4d:af:ce:8c: 45:86:ed:c4:e1:4f:27:4e:b4:50:5c:1b:6e:4e:0e: 5f:8f:4f:a4:a9:a1:17:79:d3:5b:31:cc:0c:11:26: d0:72:3f:5a:bf:f2:e3:63:4a:64:33:e2:5c:d0:bf: 42:a9:d2:b3:39:88:d9:8a:6f:58:56:f0:81:b8:68: 70:88:58:88:c9:ec:54:18:c5:82:45:9d:97:8d:07: 63:c5:8d:1f:fd:76:2f:c0:0f:d6:27:35:b1:5e:65: 4a:d9:77:1e:ae:98:18:b3:01:47:3d:3c:f4:60:06: e1:3f:ca:c5:4b:1e:fe:32:00:9f:8a:26:6d:cd:9a: 0f:ef:9e:a3:d9:c4:9c:61:f5:2b:3c:c8:72:8c:a6: e3:f8:9a:06:ac:37:ad:5c:78:49:93:8e:fc:59:4a: 6e:56:2e:a7:b1:c7:ad:64:7f:16:8d:0b:80:dd:4f: b0:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:0C:2B:05:CC:7E:5E:38:DD:E4:C4:2F:79:C6:CC:94:21:33:90:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/eb8aa76e-7d88-310f-a8ab-eda0f9fe0a8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:b3:a5:cc:89:9d:c3:ba:a9:52:cd:e8:27:56:c5:e4:6b:b6: 09:ae:6f:76:e5:d1:f6:e9:2f:1b:dc:46:32:85:8f:5b:90:7a: 92:8e:e2:92:3a:a7:ae:ed:60:b4:43:ca:a6:e7:07:d1:ae:47: 21:7d:0a:25:2f:3f:a0:f9:31:15:ab:5d:f9:d2:ee:17:fd:32: b9:ec:db:bd:f9:23:b0:90:1b:de:c9:d0:c7:c1:5b:8d:ff:4c: b6:71:ff:93:c9:67:f9:d3:84:02:cb:e5:9d:d5:ba:81:32:a0: e4:8a:11:f8:42:87:d5:54:74:f7:48:7a:d1:87:a8:b6:b3:38: 1c:df:4a:5d:c8:64:bb:a0:6d:fa:40:74:de:8f:3f:85:e9:b1: 1c:94:c4:3d:a7:3d:a9:17:8a:bc:67:26:75:85:5c:ee:2d:4f: 9d:b3:ed:9b:ba:3d:08:12:ab:41:bc:d6:72:39:e3:ec:e6:62: c6:49:b2:ca:ab:94:48:7c:70:45:3e:5f:40:c3:10:bc:eb:55: c6:d1:01:2e:2d:30:51:ba:aa:7b:2a:68:0b:d8:c7:95:db:e8: 73:09:f5:df:40:c9:8d:a8:86:41:df:21:7f:bd:7b:09:50:6e: 6d:d6:d5:6d:c3:7f:88:6b:0c:9e:c2:97:83:ca:a1:20:9f:8c: cf:8e:53:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEttLJx1C1x1XGVNdxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk ZjJiYjNmOTMtZTkwOC00M2QxLTgxYWItZmM2ZDliODVjNTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWotTjS437w2G2kzPCzfJrpANjRMRA5ddC5j skR61Y1h+wsMcDMBtdDenQz3N2fdUfWnbcZOyprxlKP2O3dwvGNgmnQfGsVNwxfW ymlKIq5PugQQPk2vzoxFhu3E4U8nTrRQXBtuTg5fj0+kqaEXedNbMcwMESbQcj9a v/LjY0pkM+Jc0L9CqdKzOYjZim9YVvCBuGhwiFiIyexUGMWCRZ2XjQdjxY0f/XYv wA/WJzWxXmVK2XcerpgYswFHPTz0YAbhP8rFSx7+MgCfiiZtzZoP756j2cScYfUr PMhyjKbj+JoGrDetXHhJk478WUpuVi6nscetZH8WjQuA3U+wiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDMMKwXMfl443eTEL3nGzJQhM5CUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZWI4YWE3NmUtN2Q4OC0z MTBmLWE4YWItZWRhMGY5ZmUwYThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFccMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAGzpcyJncO6qVLN6CdWxeRrtgmub3bl0fbpLxvcRjKFj1uQepKO4pI6 p67tYLRDyqbnB9GuRyF9CiUvP6D5MRWrXfnS7hf9Mrns2735I7CQG97J0MfBW43/ TLZx/5PJZ/nThALL5Z3VuoEyoOSKEfhCh9VUdPdIetGHqLazOBzfSl3IZLugbfpA dN6PP4XpsRyUxD2nPakXirxnJnWFXO4tT52z7Zu6PQgSq0G81nI54+zmYsZJssqr lEh8cEU+X0DDELzrVcbRAS4tMFG6qnsqaAvYx5Xb6HMJ9d9AyY2ohkHfIX+9ewlQ bm3W1W3Df4hrDJ7Cl4PKoSCfjM+OUwI= -----END CERTIFICATE-----Generated at Mon Oct 20 12:00:45 2025 by rpki-client