$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2b8b37d4-6402-313e-8eec-4b3538fb036e.roa File: 2b8b37d4-6402-313e-8eec-4b3538fb036e.roa (raw, json) Hash identifier: bT434+KGUJXvNsJs0MvqnY1ZPpdDTJf2JT2E3FX8R3Y= Subject key identifier: 80:E9:EC:DB:7C:32:F4:2F:2E:DB:B1:8D:79:37:17:7F:7E:BD:55:78 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584B4D11D58636F7EBB3BDFAE640 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2b8b37d4-6402-313e-8eec-4b3538fb036e.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 3360 IP address blocks: 168.87.146.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:d5:86:36:f7:eb:b3:bd:fa:e6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=da9209ec-42c1-4f60-8aac-70178424f50d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:4c:ea:2b:12:e9:41:ac:98:08:d5:81:9b:78: e3:2c:cb:52:92:5e:e7:be:1e:0f:2a:7f:c7:74:d1: a2:01:42:83:cb:6e:17:e1:7b:03:a9:b0:bd:1b:bc: 4a:8d:35:bb:97:d1:1d:80:ed:13:48:d3:15:7c:14: 56:11:1c:ed:b5:1a:a3:3f:1b:f6:2c:65:33:f4:53: 21:d3:63:98:3f:b0:f8:97:cb:f1:a2:ae:1a:bd:92: 7e:ec:52:66:48:da:b3:b6:6a:77:05:9c:50:38:dd: 2b:c0:3c:08:22:16:b8:b9:bf:94:56:91:02:98:89: 6e:a5:d7:9c:78:83:02:f2:1a:db:79:5d:d2:3d:b9: 0c:1d:97:12:f1:10:89:d9:10:da:f1:d5:dc:01:9d: a3:f4:fa:73:84:88:30:e8:28:11:c8:34:77:ed:7c: 21:23:96:2d:18:6d:a7:72:3a:16:d5:1b:9b:14:6e: 59:ec:bf:28:21:5f:ab:f1:e1:bb:6f:a3:ee:5c:64: 11:98:eb:c1:6f:40:46:27:93:aa:10:98:39:31:79: fc:4d:76:63:6f:e3:b1:9d:be:5a:da:15:b5:54:0d: 83:9c:d2:f3:ea:92:06:f1:80:1a:44:01:2d:e0:e0: 96:a0:24:23:97:9d:d7:88:e5:0d:b1:8f:ab:7b:af: ce:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:E9:EC:DB:7C:32:F4:2F:2E:DB:B1:8D:79:37:17:7F:7E:BD:55:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2b8b37d4-6402-313e-8eec-4b3538fb036e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.146.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:fd:45:7f:fd:48:d9:5a:b1:0a:90:b8:9a:45:68:4c:37:54: 00:3f:27:29:4b:00:93:ba:c7:1a:38:e4:da:4c:c8:3b:bd:22: 6f:ef:73:4f:7b:70:14:0e:66:2d:d4:08:55:28:db:1b:4a:4a: a5:28:c7:a9:3d:4f:e3:66:bd:9e:bf:6b:17:22:12:2b:94:bf: 46:b3:c2:b0:7a:a8:c1:7d:c6:06:b3:2c:00:c8:b9:23:12:ed: 6b:b3:ae:ee:a8:3b:3a:13:91:53:89:4c:32:2f:fd:f3:c6:2f: 1a:55:22:3a:c7:e9:55:b8:08:d7:a1:18:97:f9:68:a5:38:26: 03:a5:82:a0:ba:86:81:d5:24:df:aa:9f:ef:af:f1:38:d0:84: 8d:48:f3:0c:bd:46:9f:30:9a:f4:65:02:cb:cb:50:6a:dd:89: 7c:93:19:54:fb:fe:9f:3d:23:a7:71:28:ef:ca:50:a6:5c:e0: 61:88:b7:8e:bd:9b:d3:03:93:a6:45:ea:03:4e:0b:60:6f:2b: 70:b7:7b:3f:e8:ef:83:80:57:78:f9:f5:61:c8:3c:3f:3a:28: b0:18:a3:42:ff:cb:96:ec:aa:4d:7c:f2:93:aa:45:90:06:2b: c6:44:04:17:21:d9:cd:ce:53:4f:63:82:62:ae:46:60:12:be: 71:a8:52:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNEdWGNvfrs7365kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk ZGE5MjA5ZWMtNDJjMS00ZjYwLThhYWMtNzAxNzg0MjRmNTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0zqKxLpQayYCNWBm3jjLMtSkl7nvh4PKn/H dNGiAUKDy24X4XsDqbC9G7xKjTW7l9EdgO0TSNMVfBRWERzttRqjPxv2LGUz9FMh 02OYP7D4l8vxoq4avZJ+7FJmSNqztmp3BZxQON0rwDwIIha4ub+UVpECmIlupdec eIMC8hrbeV3SPbkMHZcS8RCJ2RDa8dXcAZ2j9PpzhIgw6CgRyDR37XwhI5YtGG2n cjoW1RubFG5Z7L8oIV+r8eG7b6PuXGQRmOvBb0BGJ5OqEJg5MXn8TXZjb+Oxnb5a 2hW1VA2DnNLz6pIG8YAaRAEt4OCWoCQjl53XiOUNsY+re6/OkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIDp7Nt8MvQvLtuxjXk3F39+vVV4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMmI4YjM3ZDQtNjQwMi0z MTNlLThlZWMtNGIzNTM4ZmIwMzZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqFeSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABn9RX/9SNlasQqQuJpFaEw3VAA/JylLAJO6xxo45NpMyDu9Im/vc097 cBQOZi3UCFUo2xtKSqUox6k9T+NmvZ6/axciEiuUv0azwrB6qMF9xgazLADIuSMS 7Wuzru6oOzoTkVOJTDIv/fPGLxpVIjrH6VW4CNehGJf5aKU4JgOlgqC6hoHVJN+q n++v8TjQhI1I8wy9Rp8wmvRlAsvLUGrdiXyTGVT7/p89I6dxKO/KUKZc4GGIt469 m9MDk6ZF6gNOC2BvK3C3ez/o74OAV3j59WHIPD86KLAYo0L/y5bsqk188pOqRZAG K8ZEBBch2c3OU09jgmKuRmASvnGoUmI= -----END CERTIFICATE-----Generated at Wed Oct 29 05:22:48 2025 by rpki-client