$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/47931dea-accb-3ea3-a04b-f415659683ec.roa File: 47931dea-accb-3ea3-a04b-f415659683ec.roa (raw, json) Hash identifier: 6vLgSHDOTC5Rwf31KtsBkO7MsPw92dfa0pn9bCJkKlw= Subject key identifier: 45:A3:C8:5A:B9:E6:F9:90:6F:54:35:69:6F:BD:62:53:93:05:B1:AD Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584AE1971A9A76A66F72F8B22580 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/47931dea-accb-3ea3-a04b-f415659683ec.roa Signing time: Sun 17 Aug 2025 01:00:32 +0000 ROA not before: Sun 17 Aug 2025 01:00:32 +0000 ROA not after: Sat 15 Nov 2025 02:00:32 +0000 asID: 3356 IP address blocks: 168.87.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e1:97:1a:9a:76:a6:6f:72:f8:b2:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 17 01:00:32 2025 GMT Not After : Nov 15 02:00:32 2025 GMT Subject: CN=5ad21ee7-6c93-4a87-8554-c24771791b02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0e:02:21:82:6b:e4:c9:98:6c:e2:58:81:42: 1c:32:f8:3f:95:94:75:a1:25:8d:03:68:85:2b:93: bb:3e:7e:4b:e8:f5:48:ed:5f:62:14:d6:6a:80:6c: b3:7c:b8:a0:4c:8b:84:6f:74:1f:cd:c2:e0:41:00: 4e:09:da:0e:a6:fd:6e:7c:aa:ce:a5:93:9b:5a:34: 21:b3:3a:da:18:b9:ef:7a:7a:d5:8d:18:c1:32:9f: 53:b8:4d:89:26:9c:23:37:3e:ac:83:23:e0:db:37: 5b:ba:46:ce:50:31:6f:ef:3c:17:b5:3d:67:6b:d3: 93:15:6e:39:a0:84:22:b0:21:cd:dd:31:9d:2a:ca: 6a:4a:73:4c:5a:75:3c:67:54:2f:86:3f:9f:63:6c: a4:b7:1d:27:a4:47:98:5c:69:c3:4a:1f:4a:b1:c2: 6b:5a:e6:2f:fa:2e:63:bd:08:3b:90:75:b1:bf:19: 04:21:47:31:6a:78:b5:ca:11:ce:74:f9:79:8e:3b: 65:c7:9e:ca:80:09:22:4a:38:05:c9:70:37:12:12: 35:e5:0e:90:ad:6d:cf:82:6f:68:66:96:e0:e6:a5: 32:82:85:33:36:6f:ee:e2:49:d6:4f:fe:37:88:44: fb:a8:62:33:81:d9:38:23:14:6a:62:56:2f:6b:ea: 97:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:A3:C8:5A:B9:E6:F9:90:6F:54:35:69:6F:BD:62:53:93:05:B1:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/47931dea-accb-3ea3-a04b-f415659683ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:1d:70:b2:32:2a:f4:cf:25:2e:a0:71:83:45:80:86:c1:e4: 6b:d1:6d:bf:dc:18:c3:55:3a:99:ef:51:67:12:64:0d:b7:b2: 5e:e3:4b:38:2f:10:85:b9:28:9d:13:7b:ea:ee:89:76:a6:77: db:2d:19:71:83:5d:2d:51:83:58:73:f9:b7:db:7d:1c:3f:7e: 1f:3b:ab:27:c2:a0:ba:8d:36:e9:9d:e6:c0:06:b0:fc:82:d3: 25:ff:86:8a:b5:f1:d1:b8:2f:81:d3:b8:8c:1d:91:ec:e6:58: ab:36:70:ee:0a:cb:e4:52:99:c0:64:3f:5e:a9:70:33:c1:51: c2:e7:79:c2:f8:f4:f0:91:37:58:b0:24:ad:46:7c:1d:50:65: 7a:22:d2:21:d6:06:48:34:25:9f:37:9f:f0:22:0a:d4:08:14: c5:f6:5b:3e:ce:d8:b4:89:32:e6:00:35:06:7a:58:d5:6b:63: fd:12:92:1f:24:42:9c:00:53:3b:4b:76:25:ed:e5:0b:1e:ea: e1:27:a2:e7:dd:de:e6:ec:6c:1f:68:b6:c9:95:1e:ce:85:94: 3f:29:b6:50:c4:00:3f:4f:72:65:06:0e:e9:11:be:64:00:35: bf:4d:a3:c6:f1:27:5d:d3:c5:58:14:62:80:99:b7:c3:a1:56: d1:6b:67:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErhlxqadqZvcviyJYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk NWFkMjFlZTctNmM5My00YTg3LTg1NTQtYzI0NzcxNzkxYjAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvw4CIYJr5MmYbOJYgUIcMvg/lZR1oSWNA2iF K5O7Pn5L6PVI7V9iFNZqgGyzfLigTIuEb3QfzcLgQQBOCdoOpv1ufKrOpZObWjQh szraGLnvenrVjRjBMp9TuE2JJpwjNz6sgyPg2zdbukbOUDFv7zwXtT1na9OTFW45 oIQisCHN3TGdKspqSnNMWnU8Z1Qvhj+fY2yktx0npEeYXGnDSh9KscJrWuYv+i5j vQg7kHWxvxkEIUcxani1yhHOdPl5jjtlx57KgAkiSjgFyXA3EhI15Q6QrW3Pgm9o Zpbg5qUygoUzNm/u4knWT/43iET7qGIzgdk4IxRqYlYva+qXywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEWjyFq55vmQb1Q1aW+9YlOTBbGtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNDc5MzFkZWEtYWNjYi0z ZWEzLWEwNGItZjQxNTY1OTY4M2VjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFcgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABsdcLIyKvTPJS6gcYNFgIbB5GvRbb/cGMNVOpnvUWcSZA23sl7jSzgv EIW5KJ0Te+ruiXamd9stGXGDXS1Rg1hz+bfbfRw/fh87qyfCoLqNNumd5sAGsPyC 0yX/hoq18dG4L4HTuIwdkezmWKs2cO4Ky+RSmcBkP16pcDPBUcLnecL49PCRN1iw JK1GfB1QZXoi0iHWBkg0JZ83n/AiCtQIFMX2Wz7O2LSJMuYANQZ6WNVrY/0Skh8k QpwAUztLdiXt5Qse6uEnoufd3ubsbB9otsmVHs6FlD8ptlDEAD9PcmUGDukRvmQA Nb9No8bxJ13TxVgUYoCZt8OhVtFrZ/w= -----END CERTIFICATE-----Generated at Mon Nov 3 21:12:11 2025 by rpki-client