$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/75ae1dc4-78e2-39b0-9e67-7e4f38f0706c.roa File: 75ae1dc4-78e2-39b0-9e67-7e4f38f0706c.roa (raw, json) Hash identifier: nmfQ/4ZMfTNDtE0VfVE68DA98JTYTYOF9FMKshXrE7k= Subject key identifier: A4:F7:EF:FE:DC:AD:66:D0:AD:87:3E:5D:BC:82:F1:94:38:AC:01:71 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584BB2F7D25317315BF75267A7C0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/75ae1dc4-78e2-39b0-9e67-7e4f38f0706c.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 3356 IP address blocks: 192.85.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:d2:53:17:31:5b:f7:52:67:a7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=ee21388d-0167-46fa-87a9-85e8442467cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:dc:fb:de:0b:18:35:bb:fc:f5:b3:1c:09:52: 25:e9:57:6e:d4:01:e1:bd:92:24:71:77:7e:cd:ac: 49:fa:55:1f:a2:da:b1:57:b6:e7:90:3a:c0:22:03: fc:54:b2:bf:72:83:b1:a0:c9:b4:8d:04:41:58:c4: 97:2c:53:9f:6f:96:30:5f:ba:71:c6:2c:25:63:4d: a3:16:37:64:07:55:9c:06:8b:90:e9:c6:dd:0b:a2: 90:d6:07:0c:82:cc:7f:c0:39:1b:0f:6d:5a:19:1d: 3b:35:8e:a9:11:91:2a:41:36:8b:7b:23:45:92:33: 23:61:c7:1e:5c:e9:f9:ec:7d:ee:e9:7c:5d:e4:6a: 5c:dc:ce:e4:08:26:a6:c5:a8:d2:76:0c:9e:60:a9: 36:45:39:2b:3f:40:34:6b:58:7e:4b:fe:e2:31:2f: c5:90:64:7f:ad:ce:00:66:1f:75:a0:b3:af:51:dc: 2c:a8:ea:51:cc:1d:a6:6f:ee:43:8a:46:4d:6c:66: de:71:9b:ba:70:f8:a9:d4:89:4a:e6:2d:ca:1e:80: de:5e:f7:5c:4f:ac:31:75:0e:2e:d5:14:58:86:83: 29:55:8c:d6:5f:09:d0:c4:4f:3e:ff:23:7e:bc:95: a0:8c:40:1a:e5:a2:08:eb:a0:15:e5:1a:a7:80:d3: 1a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:F7:EF:FE:DC:AD:66:D0:AD:87:3E:5D:BC:82:F1:94:38:AC:01:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/75ae1dc4-78e2-39b0-9e67-7e4f38f0706c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.85.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:b8:25:5e:02:85:4a:02:6f:07:0f:9c:3a:11:25:f4:32:34: 59:de:95:e2:22:0c:26:cb:6f:11:f9:12:aa:a8:ab:26:5e:cc: 7a:dd:5a:31:4c:f4:ca:40:9a:59:8b:f5:56:d7:01:a9:fb:65: 80:7f:81:36:25:c6:d7:1b:7d:f1:d8:f1:6f:57:99:c9:7c:b9: 2f:7d:a6:d3:0b:23:b1:22:27:3e:79:1f:a9:57:10:14:b1:24: 0b:c6:ef:a0:10:7d:b1:cc:28:fd:f3:90:ae:17:ac:d3:3c:11: 2b:f3:29:f9:04:6b:9d:d5:58:ab:96:aa:e0:aa:58:10:a8:32: a1:c8:99:a4:48:f0:6f:ac:bb:2f:ee:bf:61:62:ff:d4:90:92: 86:ca:0c:c4:cd:4b:ca:2d:12:89:35:11:57:bf:95:ab:03:2c: 59:61:39:c0:23:b1:29:c7:c1:f1:67:f9:af:0a:98:39:44:a8: 22:f0:9e:be:58:17:3a:a5:05:93:fb:e7:de:fc:2d:00:e0:34: 38:27:de:ad:ac:79:87:53:5f:9e:f1:da:73:a8:c7:ad:78:1f: 7a:ba:91:fc:1c:1f:53:c6:4b:c2:19:99:7f:c7:ee:f4:87:7b: 59:62:a7:48:62:f1:98:46:c4:9c:9c:05:2e:b8:8a:25:80:0e: 5e:3c:05:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy99JTFzFb91Jnp8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk ZWUyMTM4OGQtMDE2Ny00NmZhLTg3YTktODVlODQ0MjQ2N2NjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Nz73gsYNbv89bMcCVIl6Vdu1AHhvZIkcXd+ zaxJ+lUfotqxV7bnkDrAIgP8VLK/coOxoMm0jQRBWMSXLFOfb5YwX7pxxiwlY02j FjdkB1WcBouQ6cbdC6KQ1gcMgsx/wDkbD21aGR07NY6pEZEqQTaLeyNFkjMjYcce XOn57H3u6Xxd5Gpc3M7kCCamxajSdgyeYKk2RTkrP0A0a1h+S/7iMS/FkGR/rc4A Zh91oLOvUdwsqOpRzB2mb+5DikZNbGbecZu6cPip1IlK5i3KHoDeXvdcT6wxdQ4u 1RRYhoMpVYzWXwnQxE8+/yN+vJWgjEAa5aII66AV5RqngNMaiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKT37/7crWbQrYc+XbyC8ZQ4rAFxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNzVhZTFkYzQtNzhlMi0z OWIwLTllNjctN2U0ZjM4ZjA3MDZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFXmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFe4JV4ChUoCbwcPnDoRJfQyNFneleIiDCbLbxH5EqqoqyZezHrdWjFM 9MpAmlmL9VbXAan7ZYB/gTYlxtcbffHY8W9Xmcl8uS99ptMLI7EiJz55H6lXEBSx JAvG76AQfbHMKP3zkK4XrNM8ESvzKfkEa53VWKuWquCqWBCoMqHImaRI8G+suy/u v2Fi/9SQkobKDMTNS8otEok1EVe/lasDLFlhOcAjsSnHwfFn+a8KmDlEqCLwnr5Y FzqlBZP75978LQDgNDgn3q2seYdTX57x2nOox614H3q6kfwcH1PGS8IZmX/H7vSH e1lip0hi8ZhGxJycBS64iiWADl48BbE= -----END CERTIFICATE-----Generated at Mon Nov 3 21:11:18 2025 by rpki-client