$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/503db4ea-9213-317f-9d94-9bc074dd6e37.roa File: 503db4ea-9213-317f-9d94-9bc074dd6e37.roa (raw, json) Hash identifier: HS/MbdSBg8ZhC804rOXiWye8sesXWkQ0g8e78f7vYSg= Subject key identifier: 01:02:AA:FB:1A:2B:73:90:84:BB:A1:9B:93:27:23:35:A9:BA:B6:07 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584B4A472EB9BA4F633CEE8CC3F0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/503db4ea-9213-317f-9d94-9bc074dd6e37.roa Signing time: Tue 23 Sep 2025 13:00:40 +0000 ROA not before: Tue 23 Sep 2025 13:00:40 +0000 ROA not after: Mon 22 Dec 2025 14:00:40 +0000 asID: 203 IP address blocks: 205.141.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4a:47:2e:b9:ba:4f:63:3c:ee:8c:c3:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 23 13:00:40 2025 GMT Not After : Dec 22 14:00:40 2025 GMT Subject: CN=c83c34bc-2bfd-414c-80ea-635bf6542ef2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:35:db:97:f1:c0:0c:dc:08:82:f3:d1:b7:d1: f0:9b:60:5b:2c:82:a9:05:25:c1:89:96:82:46:4b: ad:70:48:8d:97:c8:04:e8:48:15:47:5f:67:82:ae: 3b:d1:c0:34:47:3c:e6:f6:b2:6c:f4:95:92:d1:70: c3:87:bb:d6:fa:f2:a7:64:d3:36:4e:0b:15:61:ed: 33:76:44:25:8e:e1:b0:1c:66:81:15:ec:9a:f4:1f: 31:a6:e6:41:41:8f:d8:c4:19:3e:de:7b:fb:4e:a5: 82:dd:fe:80:91:88:10:f2:3c:76:df:9f:4c:6e:f6: c8:3b:40:04:04:3a:ce:f1:1f:60:80:46:b2:d3:d6: 7c:87:68:60:cc:9f:e2:a9:46:a2:66:07:97:16:fa: 9d:1c:41:ea:57:a8:29:0f:67:f4:ee:21:dd:ef:a5: af:87:27:71:f9:86:1a:ce:24:99:4a:ff:80:27:81: d3:c7:81:49:a4:af:9b:dc:b8:04:d5:94:cf:c6:e5: 89:64:eb:de:c0:c6:79:39:fb:f2:61:65:de:5a:c8: 43:5c:a2:14:2b:52:e8:67:11:b3:91:96:ea:d4:b5: de:6a:39:15:82:cb:f7:58:0c:55:c6:b6:24:c2:9e: 58:4a:7b:a6:fa:b0:96:31:2c:7d:a9:2a:ad:de:aa: 0e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:02:AA:FB:1A:2B:73:90:84:BB:A1:9B:93:27:23:35:A9:BA:B6:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/503db4ea-9213-317f-9d94-9bc074dd6e37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 205.141.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:a7:f1:4e:7a:2f:73:af:a0:4f:4c:f8:fd:32:09:a6:0a:a8: 1d:a9:8f:44:22:4c:4c:8e:23:64:79:49:39:1b:cc:42:34:c5: 2a:f1:cb:81:1b:88:84:b0:11:b2:8f:6a:63:f8:e7:80:ce:be: 40:80:d5:27:89:77:fd:b3:a3:0c:47:dd:e9:7f:e5:8b:d1:d6: 6d:fc:0f:15:ec:1a:c1:da:6d:bb:a1:83:a3:97:13:c0:0d:7a: 7b:97:34:d3:6e:e5:ef:99:79:cc:fa:99:c8:11:d8:f5:1c:a6: 0e:d4:c7:9e:25:33:ae:c1:d6:72:21:36:6c:25:7e:13:a4:12: df:9e:38:e6:6e:12:e0:67:a1:10:c2:69:3d:ea:00:02:a6:e0: e1:4d:40:cf:56:3d:cc:d7:4f:91:56:39:f4:31:c2:ab:7d:9d: 07:d7:02:7d:14:50:06:ae:cb:e5:3a:47:e0:80:cc:f6:ae:af: 5e:af:75:14:31:ea:54:05:5b:db:cf:3c:55:2c:81:90:5f:95: 6d:f3:4a:98:c3:b9:db:e0:10:f4:7a:0a:06:9d:8a:92:1f:6e: 28:2a:ac:39:a6:a4:3f:35:5c:97:ae:1b:3c:3b:08:64:4b:63: 6f:c5:63:2c:d5:b9:91:0d:d4:2d:be:2a:19:4b:cf:40:90:3e: 08:2b:e2:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtKRy65uk9jPO6Mw/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDkyMzEzMDA0MFoXDTI1MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk YzgzYzM0YmMtMmJmZC00MTRjLTgwZWEtNjM1YmY2NTQyZWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjXbl/HADNwIgvPRt9Hwm2BbLIKpBSXBiZaC RkutcEiNl8gE6EgVR19ngq470cA0Rzzm9rJs9JWS0XDDh7vW+vKnZNM2TgsVYe0z dkQljuGwHGaBFeya9B8xpuZBQY/YxBk+3nv7TqWC3f6AkYgQ8jx2359MbvbIO0AE BDrO8R9ggEay09Z8h2hgzJ/iqUaiZgeXFvqdHEHqV6gpD2f07iHd76Wvhydx+YYa ziSZSv+AJ4HTx4FJpK+b3LgE1ZTPxuWJZOvewMZ5OfvyYWXeWshDXKIUK1LoZxGz kZbq1LXeajkVgsv3WAxVxrYkwp5YSnum+rCWMSx9qSqt3qoOUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAECqvsaK3OQhLuhm5MnIzWpurYHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNTAzZGI0ZWEtOTIxMy0z MTdmLTlkOTQtOWJjMDc0ZGQ2ZTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzY3NMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACn8U56L3OvoE9M+P0yCaYKqB2pj0QiTEyOI2R5STkbzEI0xSrxy4Eb iISwEbKPamP454DOvkCA1SeJd/2zowxH3el/5YvR1m38DxXsGsHabbuhg6OXE8AN enuXNNNu5e+Zecz6mcgR2PUcpg7Ux54lM67B1nIhNmwlfhOkEt+eOOZuEuBnoRDC aT3qAAKm4OFNQM9WPczXT5FWOfQxwqt9nQfXAn0UUAauy+U6R+CAzPaur16vdRQx 6lQFW9vPPFUsgZBflW3zSpjDudvgEPR6CgadipIfbigqrDmmpD81XJeuGzw7CGRL Y2/FYyzVuZEN1C2+KhlLz0CQPggr4vQ= -----END CERTIFICATE-----Generated at Mon Nov 3 21:12:45 2025 by rpki-client