$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f00700ad-3b21-3127-8b41-4f7218a8e714.roa File: f00700ad-3b21-3127-8b41-4f7218a8e714.roa (raw, json) Hash identifier: UIgvVx4YOTw2pT5v4dHs7rq5a+BCeSwKz4oXdB2i0Eo= Subject key identifier: 52:8D:DE:F3:F2:A1:9B:7B:E6:97:EC:3E:72:76:9B:E2:3A:0C:57:66 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584B4D11D5FAC2BA1CD12182D5C0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f00700ad-3b21-3127-8b41-4f7218a8e714.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 202 IP address blocks: 168.87.154.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:d5:fa:c2:ba:1c:d1:21:82:d5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=47462922-745c-4c19-9c2b-1b56a5d26805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:e3:66:31:97:f6:07:34:72:05:39:04:27:72: 44:3d:2e:16:69:5e:a7:31:55:99:4d:45:a0:0b:2a: 1d:1e:c8:7d:a6:60:57:1f:58:8f:ca:58:69:5d:f8: d5:32:7c:40:5a:99:91:5e:01:2e:7c:2d:be:b6:e2: 0a:a8:99:4b:06:f6:37:c0:bb:7f:98:d7:a5:d9:71: 4a:9d:e2:e5:bf:4c:1b:64:37:36:9c:71:9e:8d:7c: 21:a6:14:12:df:f8:53:ff:89:f8:16:71:dd:b9:3d: bb:89:ed:7c:ef:3c:5b:f8:22:87:b2:fc:3e:3b:df: 61:01:0d:b6:ac:ad:ed:2f:9f:2b:b9:ff:57:63:4c: 0c:6a:01:e3:27:e7:be:4d:fc:62:cf:56:f5:e8:24: 4f:24:d7:41:7e:64:d1:41:15:45:db:f8:4d:57:db: 1d:44:b2:b8:12:cb:e3:51:e5:bd:16:16:6f:83:be: d3:d6:58:ec:37:e9:05:8b:7d:e9:6e:6b:58:f6:30: 5e:cc:b1:58:04:48:d4:d5:e4:77:97:12:73:7d:a5: 29:ab:b6:ff:f0:47:0d:09:f2:74:0a:2c:ae:f4:19: b8:6e:b3:43:0f:f5:2b:78:96:06:78:6c:22:33:a8: 1e:b6:70:40:4f:1d:62:a2:00:c3:6a:ae:7c:ad:d2: 35:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:8D:DE:F3:F2:A1:9B:7B:E6:97:EC:3E:72:76:9B:E2:3A:0C:57:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f00700ad-3b21-3127-8b41-4f7218a8e714.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.154.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:57:85:1a:ab:e1:ee:a7:20:87:18:2a:d6:92:9b:b8:dc:b0: e0:ef:07:ec:eb:1b:6b:29:2f:dd:6a:45:1b:7b:69:eb:b6:0e: 20:1d:75:f2:e6:7c:c8:55:88:50:fb:2a:8b:1f:df:82:5a:ab: 68:28:62:4e:e7:31:c8:8c:16:30:57:91:bb:66:ef:83:fe:8a: 5f:d1:f9:39:08:a0:db:69:ca:2d:60:f4:d7:23:46:6e:70:ee: 64:05:91:88:82:d3:9e:d0:6c:09:41:36:f9:65:94:b1:56:63: fe:ad:22:5d:39:48:f0:cf:4c:82:bf:0f:40:91:fa:af:02:e6: 4e:15:ca:42:83:6b:c0:82:a2:20:c3:3b:35:da:b4:5f:e9:3f: 92:42:69:9d:e6:a3:64:6d:bf:1c:fc:3f:a5:f4:d7:df:5c:0a: 9e:31:e3:b6:69:2c:0d:46:ce:22:91:a9:da:f6:af:27:96:73: 62:f3:e2:a2:7d:35:63:61:8b:c5:67:cd:c2:6c:3c:bf:d1:ea: d6:ea:68:b5:ff:1e:d4:d1:07:d3:09:02:7b:44:cd:23:ad:23: 36:38:21:15:cc:7b:5a:8c:21:82:d4:c4:5e:34:a8:10:ac:93: ea:e4:43:9b:a9:43:9c:e7:b1:89:2f:38:3c:6a:a6:2d:59:18: 6f:97:aa:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNEdX6wroc0SGC1cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk NDc0NjI5MjItNzQ1Yy00YzE5LTljMmItMWI1NmE1ZDI2ODA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAieNmMZf2BzRyBTkEJ3JEPS4WaV6nMVWZTUWg CyodHsh9pmBXH1iPylhpXfjVMnxAWpmRXgEufC2+tuIKqJlLBvY3wLt/mNel2XFK neLlv0wbZDc2nHGejXwhphQS3/hT/4n4FnHduT27ie187zxb+CKHsvw+O99hAQ22 rK3tL58ruf9XY0wMagHjJ+e+Tfxiz1b16CRPJNdBfmTRQRVF2/hNV9sdRLK4Esvj UeW9FhZvg77T1ljsN+kFi33pbmtY9jBezLFYBEjU1eR3lxJzfaUpq7b/8EcNCfJ0 Ciyu9Bm4brNDD/UreJYGeGwiM6getnBATx1iogDDaq58rdI17wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFKN3vPyoZt75pfsPnJ2m+I6DFdmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZjAwNzAwYWQtM2IyMS0z MTI3LThiNDEtNGY3MjE4YThlNzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqFeaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEtXhRqr4e6nIIcYKtaSm7jcsODvB+zrG2spL91qRRt7aeu2DiAddfLm fMhViFD7Kosf34Jaq2goYk7nMciMFjBXkbtm74P+il/R+TkIoNtpyi1g9NcjRm5w 7mQFkYiC057QbAlBNvlllLFWY/6tIl05SPDPTIK/D0CR+q8C5k4VykKDa8CCoiDD OzXatF/pP5JCaZ3mo2Rtvxz8P6X0199cCp4x47ZpLA1GziKRqdr2ryeWc2Lz4qJ9 NWNhi8VnzcJsPL/R6tbqaLX/HtTRB9MJAntEzSOtIzY4IRXMe1qMIYLUxF40qBCs k+rkQ5upQ5znsYkvODxqpi1ZGG+XqpU= -----END CERTIFICATE-----Generated at Sun Oct 19 20:45:33 2025 by rpki-client