$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/225967f5-4a5e-3c09-8cbc-de91c827c531.roa File: 225967f5-4a5e-3c09-8cbc-de91c827c531.roa (raw, json) Hash identifier: H5+U7ZoIpclv/hFH0hIggNl07KElrvkgbPMbl3+8uJw= Subject key identifier: 88:FF:4C:8B:2F:F6:85:03:A9:EE:CC:57:A9:5C:2F:65:10:98:7F:2C Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584B5DD1F14C2780F22604481634 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/225967f5-4a5e-3c09-8cbc-de91c827c531.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 203 IP address blocks: 207.37.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d1:f1:4c:27:80:f2:26:04:48:16:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=b5eb7f41-3c3d-4809-9563-6ac0c29e9c55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:fd:09:4c:97:a4:2f:56:f1:3e:0d:45:91:80: bf:f1:39:7d:7c:4f:7e:56:41:e2:fd:46:62:9a:76: 13:8b:5b:1c:4e:d6:1b:6c:e8:33:88:44:7e:18:04: 15:f4:13:0d:8c:f5:b8:9a:21:06:8b:24:75:cf:f1: 65:ca:cb:e7:ae:06:ee:1e:e9:15:98:61:2f:65:c8: de:e3:c3:e6:84:2e:eb:37:0f:18:f6:3d:c6:35:03: f5:6c:91:06:12:be:e0:f1:52:da:3f:73:b5:f7:f4: 78:d1:cb:c9:2a:2c:fc:7d:e9:1a:ab:40:c8:6f:95: 90:3d:1b:06:b0:59:65:77:b6:c3:4d:92:e5:0e:4b: 5e:af:01:d0:e6:30:db:2a:bd:ed:e0:c8:d2:dd:97: 60:72:a4:62:36:8f:e3:0d:11:e3:3f:e1:e1:88:25: 45:69:f3:f2:d5:27:a9:7a:0c:bf:9b:02:cd:75:da: d4:d1:77:8d:52:62:ca:4f:10:c7:11:4b:63:bf:13: ae:c1:21:62:cc:b1:12:39:a7:62:6a:74:d3:a1:b6: 1b:46:35:a6:41:d6:b9:90:f1:78:48:cb:54:23:d7: 19:d2:53:8e:52:2a:2f:58:09:fe:ee:b7:5f:dd:28: d7:de:43:af:e2:14:a0:cd:34:bb:22:d3:24:94:83: c8:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:FF:4C:8B:2F:F6:85:03:A9:EE:CC:57:A9:5C:2F:65:10:98:7F:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/225967f5-4a5e-3c09-8cbc-de91c827c531.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 207.37.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:d8:c7:43:d4:b1:d3:c0:83:0b:a4:dd:d2:a4:82:28:58:f9: 5d:fe:e1:db:f5:b3:5c:e0:d6:05:de:0c:55:75:19:7f:00:cd: d8:c3:b0:51:3e:4c:75:c5:c4:36:56:4a:01:45:38:3e:4e:25: 72:97:4a:6e:a8:ae:65:f6:92:90:5b:47:ca:6d:87:01:7b:5f: a1:51:0c:21:e9:a8:3b:8c:6e:fe:ec:e8:4f:5c:42:b9:63:f2: d0:0d:b6:57:a1:93:a2:85:a2:6c:bf:b9:84:43:4d:7c:24:13: 9b:b3:e5:48:ff:ac:6e:15:be:33:75:b9:8b:a7:e9:74:c0:f3: a8:82:09:98:30:00:2d:b7:a5:d6:3f:32:36:a4:e8:39:4a:fe: 6c:fd:2f:05:e5:3f:74:2d:3c:a2:0e:c1:48:58:49:71:53:33: 32:93:06:72:98:0f:f8:ee:2b:8a:7c:ac:fd:9d:11:ef:b3:fa: 90:c0:c5:89:15:6f:b1:2a:11:ee:6b:68:61:ae:35:94:be:24: 82:3e:d0:ed:ef:cc:8b:bf:d4:dc:65:03:3b:03:7c:3d:43:f0: d0:98:61:4e:0d:06:21:df:1b:d6:79:38:b7:f9:d0:45:46:db: d6:3f:15:18:f1:6d:64:10:e6:98:e3:7f:57:ad:75:36:45:d8: 2e:2d:76:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0fFMJ4DyJgRIFjQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk YjVlYjdmNDEtM2MzZC00ODA5LTk1NjMtNmFjMGMyOWU5YzU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/0JTJekL1bxPg1FkYC/8Tl9fE9+VkHi/UZi mnYTi1scTtYbbOgziER+GAQV9BMNjPW4miEGiyR1z/FlysvnrgbuHukVmGEvZcje 48PmhC7rNw8Y9j3GNQP1bJEGEr7g8VLaP3O19/R40cvJKiz8fekaq0DIb5WQPRsG sFlld7bDTZLlDkterwHQ5jDbKr3t4MjS3ZdgcqRiNo/jDRHjP+HhiCVFafPy1Sep egy/mwLNddrU0XeNUmLKTxDHEUtjvxOuwSFizLESOadianTTobYbRjWmQda5kPF4 SMtUI9cZ0lOOUiovWAn+7rdf3SjX3kOv4hSgzTS7ItMklIPIdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIj/TIsv9oUDqe7MV6lcL2UQmH8sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMjI1OTY3ZjUtNGE1ZS0z YzA5LThjYmMtZGU5MWM4MjdjNTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzyXwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjYx0PUsdPAgwuk3dKkgihY+V3+4dv1s1zg1gXeDFV1GX8AzdjDsFE+ THXFxDZWSgFFOD5OJXKXSm6ormX2kpBbR8pthwF7X6FRDCHpqDuMbv7s6E9cQrlj 8tANtlehk6KFomy/uYRDTXwkE5uz5Uj/rG4VvjN1uYun6XTA86iCCZgwAC23pdY/ Mjak6DlK/mz9LwXlP3QtPKIOwUhYSXFTMzKTBnKYD/juK4p8rP2dEe+z+pDAxYkV b7EqEe5raGGuNZS+JII+0O3vzIu/1NxlAzsDfD1D8NCYYU4NBiHfG9Z5OLf50EVG 29Y/FRjxbWQQ5pjjf1etdTZF2C4tdlY= -----END CERTIFICATE-----Generated at Mon Nov 3 21:12:12 2025 by rpki-client