$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/65db882f-f2c5-3703-af87-e6d758b69350.roa File: 65db882f-f2c5-3703-af87-e6d758b69350.roa (raw, json) Hash identifier: TKw6QOcPf0sfBxvetN/umqKaOtGdnEBlxKU5tH3v/wo= Subject key identifier: 04:3D:E8:4F:5C:55:C3:5F:90:A1:71:D0:B7:C7:23:0C:10:BD:8B:16 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584B4A471ABAB255C3F8FC1EB800 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/65db882f-f2c5-3703-af87-e6d758b69350.roa Signing time: Tue 23 Sep 2025 13:00:40 +0000 ROA not before: Tue 23 Sep 2025 13:00:40 +0000 ROA not after: Mon 22 Dec 2025 14:00:40 +0000 asID: 3360 IP address blocks: 66.54.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4a:47:1a:ba:b2:55:c3:f8:fc:1e:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 23 13:00:40 2025 GMT Not After : Dec 22 14:00:40 2025 GMT Subject: CN=2472aac2-4044-43ae-b931-5e509777faee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:14:11:85:d9:91:84:24:ed:14:e5:6c:5b:2b: 19:a6:05:d8:20:42:9a:13:81:72:6e:a9:5a:c3:82: 8e:f0:07:cf:8a:fd:1d:1f:ed:ea:e1:b6:de:2b:15: a7:6d:22:38:20:68:cb:ee:98:37:d9:e6:ac:2d:04: 3a:4d:a5:8f:12:8c:0b:15:4d:52:03:98:ad:d8:bf: f5:24:1a:82:36:f6:03:b7:a9:2a:11:e0:11:32:a9: 71:4c:e7:5f:9b:89:5c:f7:a1:9a:66:b1:6e:c9:eb: 30:55:8a:ee:d4:0b:7d:62:6a:3d:3b:f0:22:91:1a: 8b:2d:e3:ad:32:7d:87:97:58:5c:92:f4:09:cf:90: 9c:5c:49:ca:29:49:3c:a4:8b:26:4e:0c:d7:fb:c7: 7e:d1:39:98:f0:8f:e0:9e:79:22:40:e9:d5:df:f0: d9:76:f8:9b:64:d3:8c:7b:40:68:8e:03:88:ec:47: 81:b7:b1:90:cd:96:52:14:a9:94:41:ea:56:33:75: b7:89:c7:8b:db:88:bf:d6:44:82:b1:c8:00:da:e7: 81:1a:f4:91:41:9d:d3:89:12:61:60:37:e6:0f:2c: 23:6f:58:92:f5:0e:da:ea:79:7a:d2:c3:08:e5:15: 67:01:8a:a4:79:4d:b5:99:9b:8e:bc:bd:97:10:cf: cb:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:3D:E8:4F:5C:55:C3:5F:90:A1:71:D0:B7:C7:23:0C:10:BD:8B:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/65db882f-f2c5-3703-af87-e6d758b69350.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 66.54.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:45:24:f5:91:b8:87:a7:41:04:a1:57:32:49:2c:c4:f6:7b: 8d:0a:b8:68:a5:bd:69:7d:4f:4a:a2:cc:c9:c8:35:ab:43:6c: ef:8d:31:dd:3a:1a:0d:3a:98:5a:0f:03:6c:b3:38:6d:69:19: 96:1c:b6:11:33:5c:f5:8b:99:c5:c0:71:e7:e8:e8:13:39:8b: f2:83:c9:93:32:bf:80:33:da:b3:09:71:f7:79:5d:86:dc:20: e1:57:c5:0f:44:34:72:68:7c:4a:c9:bf:92:69:75:5a:a3:33: e1:46:68:0a:c5:6e:89:ec:f6:d6:2a:01:91:96:ed:93:5d:72: 4c:21:32:dd:64:c9:b6:f4:ff:3d:90:75:ae:c6:11:05:ed:3a: 63:91:97:4c:87:aa:80:29:06:8c:ed:1c:f0:27:60:16:d3:b6: b0:af:35:72:fc:0a:9a:c9:0a:c6:ba:7f:1a:7b:b0:ec:6d:30: 8e:49:d2:ad:65:95:58:f7:e7:7e:e6:21:72:fe:22:98:fe:da: 50:d1:8c:63:7b:83:4e:cb:ca:c1:20:78:75:bd:17:cf:20:de: f7:4e:44:0b:76:73:19:bd:b8:0b:73:77:db:a2:26:6b:7c:0c: c5:a4:a7:2d:9c:e1:a5:06:9f:78:ac:30:0f:0e:3f:d1:29:b3: d7:46:a2:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtKRxq6slXD+PweuAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDkyMzEzMDA0MFoXDTI1MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk MjQ3MmFhYzItNDA0NC00M2FlLWI5MzEtNWU1MDk3NzdmYWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBQRhdmRhCTtFOVsWysZpgXYIEKaE4Fybqla w4KO8AfPiv0dH+3q4bbeKxWnbSI4IGjL7pg32easLQQ6TaWPEowLFU1SA5it2L/1 JBqCNvYDt6kqEeARMqlxTOdfm4lc96GaZrFuyeswVYru1At9Ymo9O/AikRqLLeOt Mn2Hl1hckvQJz5CcXEnKKUk8pIsmTgzX+8d+0TmY8I/gnnkiQOnV3/DZdvibZNOM e0BojgOI7EeBt7GQzZZSFKmUQepWM3W3iceL24i/1kSCscgA2ueBGvSRQZ3TiRJh YDfmDywjb1iS9Q7a6nl60sMI5RVnAYqkeU21mZuOvL2XEM/LvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAQ96E9cVcNfkKFx0LfHIwwQvYsWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNjVkYjg4MmYtZjJjNS0z NzAzLWFmODctZTZkNzU4YjY5MzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQjYQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADdFJPWRuIenQQShVzJJLMT2e40KuGilvWl9T0qizMnINatDbO+NMd06 Gg06mFoPA2yzOG1pGZYcthEzXPWLmcXAcefo6BM5i/KDyZMyv4Az2rMJcfd5XYbc IOFXxQ9ENHJofErJv5JpdVqjM+FGaArFbons9tYqAZGW7ZNdckwhMt1kybb0/z2Q da7GEQXtOmORl0yHqoApBoztHPAnYBbTtrCvNXL8CprJCsa6fxp7sOxtMI5J0q1l lVj3537mIXL+Ipj+2lDRjGN7g07LysEgeHW9F88g3vdORAt2cxm9uAtzd9uiJmt8 DMWkpy2c4aUGn3isMA8OP9Eps9dGouQ= -----END CERTIFICATE-----Generated at Wed Oct 29 05:22:47 2025 by rpki-client