$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ffd90d82-68b4-3079-a337-4ecf62f70116.roa File: ffd90d82-68b4-3079-a337-4ecf62f70116.roa (raw, json) Hash identifier: nzCu9YRx9Bwl/NXqIh/MqzuqUtiLF2FNYUzAsQLU9EU= Subject key identifier: CD:59:72:B6:FE:73:7B:B7:C3:9B:B1:69:ED:1E:05:8A:33:7E:64:71 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584B4D11D6495EDC9812D0495160 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ffd90d82-68b4-3079-a337-4ecf62f70116.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 202 IP address blocks: 168.87.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:d6:49:5e:dc:98:12:d0:49:51:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=465b2893-4c73-426f-a36b-9e6495d39f4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:61:43:7b:58:25:ac:dc:28:8f:16:b9:af:a4: 83:c3:8d:c4:90:e6:a8:86:d5:4c:d8:f5:04:62:d8: 69:d6:af:16:b0:26:b8:4c:ec:d7:11:61:76:7c:0c: a4:6f:c3:d0:cb:0e:ef:63:c0:d5:17:3e:b1:6c:e5: 94:b6:8a:1a:ec:56:41:bb:a0:1c:2a:9f:b7:38:7d: 8b:09:0e:db:83:65:08:bf:f3:e5:9e:6e:23:b5:29: 06:19:7f:6c:44:2f:95:6d:b3:7d:1e:9d:a3:8c:c1: ad:7f:b2:2e:36:65:ee:94:68:9f:7e:c9:53:30:10: 11:bb:26:3d:1d:be:4e:5a:eb:f8:08:97:57:81:7a: 06:b1:22:51:97:5a:58:4a:21:9a:ae:5d:51:31:47: 15:d5:c2:27:15:cd:5f:1d:65:1a:e4:20:71:ac:ee: 23:89:92:f1:aa:c3:72:d0:47:9f:cf:29:b5:0a:fd: f2:90:dc:38:22:d4:42:45:be:34:2b:85:0c:05:f8: 42:88:dc:31:7b:1f:20:fe:f9:52:58:c4:9f:54:59: 3b:d9:f4:ab:a1:be:6d:c6:16:51:b3:ba:71:0c:a7: 4b:b1:69:01:4e:fa:ee:6f:17:50:af:88:cc:1a:ca: 56:af:ed:44:61:bf:71:63:ac:4a:5e:ac:04:51:de: 07:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:59:72:B6:FE:73:7B:B7:C3:9B:B1:69:ED:1E:05:8A:33:7E:64:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ffd90d82-68b4-3079-a337-4ecf62f70116.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:43:84:e7:94:86:29:31:e3:e7:63:29:c1:ca:03:69:df:be: 69:f9:45:ed:d8:03:28:a1:ce:d2:13:6e:16:f2:5c:e0:cd:bd: 11:20:68:a8:e3:0f:b7:f8:aa:ff:28:a2:66:54:89:73:4e:59: 9b:47:5b:56:37:22:f2:1e:1f:44:b8:1b:03:da:62:7c:21:f4: 01:e6:74:7d:e2:4f:7e:e4:8b:c3:33:97:e5:42:22:c8:15:5f: bb:7c:27:ce:bf:1c:3e:f1:7d:cf:2d:2a:56:17:fa:7c:4f:5d: db:75:0f:8e:d8:c4:d7:26:14:b1:c4:9b:af:5c:9f:b1:ce:71: 8a:29:6b:db:79:94:6c:73:ac:ea:57:a6:a7:d1:d5:93:b4:01: d7:fd:ff:fa:03:13:da:bc:44:30:de:13:62:76:8a:65:bd:2b: 27:8e:3d:de:6d:79:e6:5d:d7:71:35:66:f1:4a:64:17:b4:ac: 4b:7d:eb:6e:43:26:22:16:9c:44:9a:0b:fb:4f:a7:de:bb:67: b7:9c:5a:a5:77:b4:7c:a1:96:03:06:b4:55:74:4d:f2:00:e1: a0:b6:c2:e3:69:ab:ee:e4:19:92:15:2b:7f:07:99:c6:fa:14: a5:f8:35:c0:0e:73:7b:62:b3:79:81:37:92:1a:a5:b7:f2:d1: fa:fd:32:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNEdZJXtyYEtBJUWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk NDY1YjI4OTMtNGM3My00MjZmLWEzNmItOWU2NDk1ZDM5ZjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GFDe1glrNwojxa5r6SDw43EkOaohtVM2PUE Ythp1q8WsCa4TOzXEWF2fAykb8PQyw7vY8DVFz6xbOWUtooa7FZBu6AcKp+3OH2L CQ7bg2UIv/Plnm4jtSkGGX9sRC+VbbN9Hp2jjMGtf7IuNmXulGiffslTMBARuyY9 Hb5OWuv4CJdXgXoGsSJRl1pYSiGarl1RMUcV1cInFc1fHWUa5CBxrO4jiZLxqsNy 0Eefzym1Cv3ykNw4ItRCRb40K4UMBfhCiNwxex8g/vlSWMSfVFk72fSrob5txhZR s7pxDKdLsWkBTvrubxdQr4jMGspWr+1EYb9xY6xKXqwEUd4HhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM1Zcrb+c3u3w5uxae0eBYozfmRxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZmZkOTBkODItNjhiNC0z MDc5LWEzMzctNGVjZjYyZjcwMTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqFecMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADxDhOeUhikx4+djKcHKA2nfvmn5Re3YAyihztITbhbyXODNvREgaKjj D7f4qv8oomZUiXNOWZtHW1Y3IvIeH0S4GwPaYnwh9AHmdH3iT37ki8Mzl+VCIsgV X7t8J86/HD7xfc8tKlYX+nxPXdt1D47YxNcmFLHEm69cn7HOcYopa9t5lGxzrOpX pqfR1ZO0Adf9//oDE9q8RDDeE2J2imW9KyeOPd5teeZd13E1ZvFKZBe0rEt9625D JiIWnESaC/tPp967Z7ecWqV3tHyhlgMGtFV0TfIA4aC2wuNpq+7kGZIVK38Hmcb6 FKX4NcAOc3tis3mBN5Iapbfy0fr9MqM= -----END CERTIFICATE-----Generated at Sun Oct 19 20:49:51 2025 by rpki-client