$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f07e52a1-fb1b-36a6-baa6-cf2a2d3de5f6.roa File: f07e52a1-fb1b-36a6-baa6-cf2a2d3de5f6.roa (raw, json) Hash identifier: Zto7WFm6N6pOMQ1IIYTL3C8L9IZ9ZSqD6SAgeeJqnq4= Subject key identifier: D6:18:68:10:DF:0C:AB:B3:25:A9:26:BF:B4:3E:C0:65:67:AB:DB:B5 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584B4A471AF64CA9927095F14460 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f07e52a1-fb1b-36a6-baa6-cf2a2d3de5f6.roa Signing time: Tue 23 Sep 2025 13:00:40 +0000 ROA not before: Tue 23 Sep 2025 13:00:40 +0000 ROA not after: Mon 22 Dec 2025 14:00:40 +0000 asID: 203 IP address blocks: 66.54.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4a:47:1a:f6:4c:a9:92:70:95:f1:44:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 23 13:00:40 2025 GMT Not After : Dec 22 14:00:40 2025 GMT Subject: CN=ea4f12ef-a831-470c-b1c4-cf97a3ab4077 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:64:25:2b:ff:c3:a1:44:89:7b:c9:da:0b:91: a1:c3:91:e1:d1:c2:f7:0f:ed:ef:7f:cc:d3:de:35: df:d7:08:fb:d9:26:c5:95:d4:d8:fb:29:c2:04:34: 53:5d:a3:ff:e4:c8:26:1d:8d:68:7b:16:5c:9e:7d: 94:a4:93:85:42:f5:8f:ba:bc:6e:98:fc:16:d1:4a: 59:86:8b:15:f5:50:fb:30:3a:8d:24:38:14:4d:7e: a7:5d:f5:f3:7a:af:be:a6:6f:d6:48:2a:21:89:ed: c7:50:c5:57:6a:e6:72:80:9f:f5:59:3f:93:34:aa: ca:aa:f4:98:0e:e5:20:5d:e3:12:21:28:3d:05:db: b3:42:d8:09:e5:a7:40:48:9d:25:13:cd:6d:44:8b: 1b:24:9d:a1:8e:dd:47:fc:bd:b0:74:52:fb:00:09: b0:62:30:17:b2:8a:20:a3:29:42:e3:df:b1:26:bb: 65:11:d0:68:5b:e0:8d:bd:2a:8b:99:73:da:53:2b: 5c:68:94:d5:29:57:d4:df:4a:3a:ba:ff:0e:00:ea: b7:9e:0d:e1:46:fd:8b:d8:f5:13:40:e1:47:7c:10: 89:aa:8e:12:aa:3c:b9:bd:f6:d4:b1:87:a5:d2:b2: 05:6e:d7:81:82:f5:93:8d:8c:fc:db:f2:51:b6:f6: af:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:18:68:10:DF:0C:AB:B3:25:A9:26:BF:B4:3E:C0:65:67:AB:DB:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f07e52a1-fb1b-36a6-baa6-cf2a2d3de5f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 66.54.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:2b:b5:1c:21:c7:3b:71:0c:0a:de:8c:be:23:79:e1:9c:e6: db:f0:e2:93:7f:8d:9d:6a:0a:1e:e8:c9:6c:b8:c0:4f:03:25: 36:21:5c:39:75:48:30:b6:eb:10:10:88:05:15:70:75:75:ba: b1:0c:c9:b2:1f:ec:21:5b:0c:7f:cc:53:98:e3:f0:90:7a:33: 5a:42:63:4a:9c:6e:fa:8f:2e:67:b8:14:1b:ea:3d:ba:aa:0d: bc:71:76:6e:82:32:ca:66:2e:86:96:fe:40:eb:f4:1a:fd:30: 59:04:3f:63:28:70:ce:04:27:dc:83:98:9d:76:89:c3:28:46: 50:5c:21:4b:e4:ef:e7:43:9b:a3:ce:a1:c3:78:b6:cb:dc:2b: 34:e7:01:4a:8d:23:ba:b9:95:57:45:dd:74:38:71:2d:be:39: 70:34:e5:d3:dc:0d:6d:27:f4:75:c4:2c:e3:25:7d:e9:b1:44: 75:6b:98:9f:aa:04:3e:73:e7:bd:09:dc:e0:47:35:95:99:98: 2e:19:35:f2:8a:37:20:6f:79:28:13:0c:7f:8a:25:8d:f4:b6: 7d:35:1a:ef:f2:cf:59:30:4e:d9:c3:bd:ba:3d:f1:e2:f4:7d: 40:eb:09:f9:bd:ff:8c:a7:3d:75:1f:42:f9:07:e5:f7:a2:80: 03:94:50:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtKRxr2TKmScJXxRGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDkyMzEzMDA0MFoXDTI1MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk ZWE0ZjEyZWYtYTgzMS00NzBjLWIxYzQtY2Y5N2EzYWI0MDc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGQlK//DoUSJe8naC5Ghw5Hh0cL3D+3vf8zT 3jXf1wj72SbFldTY+ynCBDRTXaP/5MgmHY1oexZcnn2UpJOFQvWPurxumPwW0UpZ hosV9VD7MDqNJDgUTX6nXfXzeq++pm/WSCohie3HUMVXauZygJ/1WT+TNKrKqvSY DuUgXeMSISg9BduzQtgJ5adASJ0lE81tRIsbJJ2hjt1H/L2wdFL7AAmwYjAXsoog oylC49+xJrtlEdBoW+CNvSqLmXPaUytcaJTVKVfU30o6uv8OAOq3ng3hRv2L2PUT QOFHfBCJqo4Sqjy5vfbUsYel0rIFbteBgvWTjYz82/JRtvavOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNYYaBDfDKuzJakmv7Q+wGVnq9u1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZjA3ZTUyYTEtZmIxYi0z NmE2LWJhYTYtY2YyYTJkM2RlNWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQjYQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJkrtRwhxztxDArejL4jeeGc5tvw4pN/jZ1qCh7oyWy4wE8DJTYhXDl1 SDC26xAQiAUVcHV1urEMybIf7CFbDH/MU5jj8JB6M1pCY0qcbvqPLme4FBvqPbqq Dbxxdm6CMspmLoaW/kDr9Br9MFkEP2MocM4EJ9yDmJ12icMoRlBcIUvk7+dDm6PO ocN4tsvcKzTnAUqNI7q5lVdF3XQ4cS2+OXA05dPcDW0n9HXELOMlfemxRHVrmJ+q BD5z570J3OBHNZWZmC4ZNfKKNyBveSgTDH+KJY30tn01Gu/yz1kwTtnDvbo98eL0 fUDrCfm9/4ynPXUfQvkH5feigAOUUNQ= -----END CERTIFICATE-----Generated at Sun Oct 19 20:26:36 2025 by rpki-client