$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ff52eb5b-3f24-3e24-9cd9-bfac8fe65e2f.roa File: ff52eb5b-3f24-3e24-9cd9-bfac8fe65e2f.roa (raw, json) Hash identifier: QenRakgvcuMOG6uL2h18QLN5j4EWkclk2dklkfDmu+M= Subject key identifier: 44:66:03:20:C0:8D:FB:10:41:86:C9:BE:90:45:44:8F:35:96:93:0C Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584B4D11DF4018CB6D5ECA280140 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ff52eb5b-3f24-3e24-9cd9-bfac8fe65e2f.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 202 IP address blocks: 216.240.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:df:40:18:cb:6d:5e:ca:28:01:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=d70aef69-c456-4b74-aa22-88b9881e5429 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d3:83:d1:92:28:c7:2c:ea:6d:35:fb:21:13: bb:98:a1:09:71:0e:8a:c1:e0:7e:5e:d2:48:bb:4c: 7a:67:29:f9:1d:3c:30:40:ef:6b:19:22:d5:c3:b3: 82:bd:e2:d2:a1:d6:1b:ca:8b:d6:59:f4:c4:87:14: 79:3f:8d:d3:84:55:14:7d:15:d4:73:7a:59:6d:2d: 15:c4:ba:e4:31:50:9b:71:65:0f:63:cc:de:d4:b8: 87:c5:9d:a3:08:51:05:a2:7b:a7:15:64:e8:1b:16: db:9f:30:a7:cc:0a:2e:83:cf:25:56:5a:03:32:88: fb:44:ac:3d:1a:e9:91:95:fc:e4:69:24:8e:92:54: b8:aa:5b:24:0e:65:33:21:b0:81:e7:d4:96:1f:75: d0:87:94:58:57:a6:7c:3f:fb:a8:8b:ab:b1:de:64: 11:79:c9:ea:14:6e:e5:d7:75:91:1a:73:d2:5e:17: c6:0f:01:ee:e6:86:9a:01:7a:8a:ea:b1:37:f2:14: 41:9c:ed:7c:95:85:94:c4:72:5a:c3:64:df:10:10: c8:18:e3:76:92:81:f5:e1:60:45:9c:71:12:ae:0c: f7:0c:d7:08:2f:ee:58:93:5d:c0:6a:4e:7d:c6:cb: 5f:6e:c8:aa:12:41:22:c6:98:53:e8:35:d5:97:07: dc:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:66:03:20:C0:8D:FB:10:41:86:C9:BE:90:45:44:8F:35:96:93:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ff52eb5b-3f24-3e24-9cd9-bfac8fe65e2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 216.240.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:07:af:32:e2:09:7c:7b:56:db:c8:96:b5:6f:9b:79:f1:5f: f1:4e:aa:18:9b:86:89:42:90:87:19:c9:c4:37:12:80:11:20: 3c:bd:94:c6:53:41:52:97:82:48:aa:66:4a:f2:23:c3:1f:4a: 93:f7:e9:a6:24:e9:57:58:a4:1c:65:fa:c9:bf:d8:f1:0f:cc: d4:ae:9a:71:9b:74:31:b8:57:23:73:b7:26:74:fb:e3:d2:c2: 32:51:de:a4:4c:0a:59:8c:87:d8:16:c1:8d:ad:1a:ff:70:35: 7e:50:2d:b2:62:2f:dd:82:e6:0e:95:d3:22:d1:41:ea:c0:1b: 71:15:6e:d0:73:10:64:54:f1:8a:df:eb:e4:c4:fa:90:52:69: fe:47:35:ea:ad:c3:9e:ee:b0:f4:25:9a:60:01:72:48:fc:e3: a8:5d:02:fe:ef:d9:3a:70:84:14:00:66:f9:fd:b3:85:fd:cf: f9:e2:2c:66:af:ce:f7:07:bf:86:d8:34:b9:b1:f2:4b:f3:d6: d4:4b:d8:8c:b4:bb:62:6c:68:43:cc:1b:99:40:dc:31:73:05: 7d:fe:77:6f:bc:db:c5:39:e1:af:a8:d7:3b:07:0a:9a:3e:9a: 0d:2f:7e:e6:c4:66:97:20:9a:a8:1e:e3:5b:90:0e:89:42:1b: 9c:f4:67:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNEd9AGMttXsooAUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk ZDcwYWVmNjktYzQ1Ni00Yjc0LWFhMjItODhiOTg4MWU1NDI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtOD0ZIoxyzqbTX7IRO7mKEJcQ6KweB+XtJI u0x6Zyn5HTwwQO9rGSLVw7OCveLSodYbyovWWfTEhxR5P43ThFUUfRXUc3pZbS0V xLrkMVCbcWUPY8ze1LiHxZ2jCFEFonunFWToGxbbnzCnzAoug88lVloDMoj7RKw9 GumRlfzkaSSOklS4qlskDmUzIbCB59SWH3XQh5RYV6Z8P/uoi6ux3mQRecnqFG7l 13WRGnPSXhfGDwHu5oaaAXqK6rE38hRBnO18lYWUxHJaw2TfEBDIGON2koH14WBF nHESrgz3DNcIL+5Yk13Aak59xstfbsiqEkEixphT6DXVlwfccQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFERmAyDAjfsQQYbJvpBFRI81lpMMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZmY1MmViNWItM2YyNC0z ZTI0LTljZDktYmZhYzhmZTY1ZTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2PDAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGMHrzLiCXx7VtvIlrVvm3nxX/FOqhibholCkIcZycQ3EoARIDy9lMZT QVKXgkiqZkryI8MfSpP36aYk6VdYpBxl+sm/2PEPzNSumnGbdDG4VyNztyZ0++PS wjJR3qRMClmMh9gWwY2tGv9wNX5QLbJiL92C5g6V0yLRQerAG3EVbtBzEGRU8Yrf 6+TE+pBSaf5HNeqtw57usPQlmmABckj846hdAv7v2TpwhBQAZvn9s4X9z/niLGav zvcHv4bYNLmx8kvz1tRL2Iy0u2JsaEPMG5lA3DFzBX3+d2+828U54a+o1zsHCpo+ mg0vfubEZpcgmqge41uQDolCG5z0Z1c= -----END CERTIFICATE-----Generated at Mon Oct 20 22:40:45 2025 by rpki-client