$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/832d3131-8b59-3fe3-89f4-08758bef31c4.roa File: 832d3131-8b59-3fe3-89f4-08758bef31c4.roa (raw, json) Hash identifier: tVUtSYe1hBnyY3oMcCtYW+ee6CSZ1bvS4mbFbwQbdyY= Subject key identifier: AA:ED:9E:D8:A0:02:B6:DD:CE:18:ED:C4:6C:3C:8B:18:49:F0:6B:93 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584B987245637EC7714E4ADC8B60 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/832d3131-8b59-3fe3-89f4-08758bef31c4.roa Signing time: Tue 21 Oct 2025 13:00:39 +0000 ROA not before: Tue 21 Oct 2025 13:00:39 +0000 ROA not after: Mon 19 Jan 2026 14:00:39 +0000 asID: 60204 IP address blocks: 206.164.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:72:45:63:7e:c7:71:4e:4a:dc:8b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 21 13:00:39 2025 GMT Not After : Jan 19 14:00:39 2026 GMT Subject: CN=8d9c1401-b156-4ff9-bb4f-bd3b2c80c1f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c7:82:92:ab:63:55:4d:8f:0e:b5:dc:18:00: 06:b9:a2:18:b0:26:60:6b:6c:c7:56:52:a8:0b:e6: c4:47:e0:37:e9:45:75:4a:5f:60:ca:bb:47:81:b2: 8d:b5:65:2f:0f:e9:d8:d3:79:44:9c:af:0e:68:ec: 47:c5:c7:b5:2c:cc:39:f5:a1:35:c5:f6:0c:6c:04: cf:02:7e:25:b7:e8:bd:1e:ab:41:23:04:85:4e:5f: 8a:4b:8f:07:8d:c3:96:f9:39:29:22:ee:1f:3c:d8: 99:4b:31:04:00:2d:2e:48:ce:b3:c2:df:d2:28:01: 97:31:b1:88:69:61:8b:4e:da:6e:94:47:65:d7:39: 8a:48:fb:d0:5d:a3:2f:6c:dc:de:67:56:e3:cf:07: 24:4d:c9:7c:a6:bf:2d:1e:63:83:fc:c0:81:9b:8a: d8:2c:4c:10:31:27:48:bc:15:22:25:cf:94:e5:03: e9:9d:8d:de:de:1e:d9:04:76:8d:db:87:3d:1d:83: 9b:3d:ac:35:a2:3b:91:f2:63:36:8b:25:58:df:63: 77:f4:4d:4a:9d:cd:53:62:a2:7c:59:e3:88:63:4b: 45:10:9d:b0:a0:94:ab:5d:3d:65:88:48:12:5e:51: 5a:03:c1:34:5d:29:c9:5b:45:9a:bc:7a:8b:d7:9f: ce:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:ED:9E:D8:A0:02:B6:DD:CE:18:ED:C4:6C:3C:8B:18:49:F0:6B:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/832d3131-8b59-3fe3-89f4-08758bef31c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 206.164.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:f4:71:02:34:bb:37:1d:91:58:09:01:b2:ec:2d:a7:ac:8d: e1:ca:1a:0e:cc:0f:fa:0e:0b:99:b3:57:15:26:32:e9:66:e4: 1e:2b:87:ce:82:bd:82:95:d0:d1:3f:c9:08:26:52:d7:a5:7d: 71:af:fb:38:26:d5:04:e4:66:29:b1:be:75:7f:19:fe:f9:ef: aa:00:b9:9a:9f:df:91:98:3e:69:8d:94:95:74:55:57:47:e9: 66:f2:7e:ae:d5:02:33:cb:c5:1b:6f:ec:bb:6e:8f:4d:28:2b: fe:4d:18:08:91:7e:31:8a:4b:44:01:f0:43:52:85:46:69:34: c1:58:7b:4d:c6:0a:0a:97:74:cc:b7:a9:8d:ff:42:1a:3b:f9: 5e:d1:28:7d:d3:01:97:c7:0e:0a:5d:d1:9a:ea:1d:f0:a7:18: 35:11:a5:ab:08:6d:13:47:9e:29:1d:e2:32:18:e9:b4:84:dc: 26:49:99:ed:72:48:2e:59:51:40:c1:bf:d6:89:b5:2b:22:c6: 80:fc:f0:b8:0a:25:8e:52:8d:36:62:43:69:e5:b1:07:38:7f: b3:97:39:5f:18:ac:a8:0f:23:ad:23:81:86:99:c3:79:da:f1: bb:ba:78:77:74:b0:05:2b:8d:c7:13:b1:71:88:85:6f:bc:7e: 9d:04:9c:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuYckVjfsdxTkrci2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTAyMTEzMDAzOVoXDTI2MDExOTE0MDAzOVowLzEtMCsGA1UEAxMk OGQ5YzE0MDEtYjE1Ni00ZmY5LWJiNGYtYmQzYjJjODBjMWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMeCkqtjVU2PDrXcGAAGuaIYsCZga2zHVlKo C+bER+A36UV1Sl9gyrtHgbKNtWUvD+nY03lEnK8OaOxHxce1LMw59aE1xfYMbATP An4lt+i9HqtBIwSFTl+KS48HjcOW+TkpIu4fPNiZSzEEAC0uSM6zwt/SKAGXMbGI aWGLTtpulEdl1zmKSPvQXaMvbNzeZ1bjzwckTcl8pr8tHmOD/MCBm4rYLEwQMSdI vBUiJc+U5QPpnY3e3h7ZBHaN24c9HYObPaw1ojuR8mM2iyVY32N39E1Knc1TYqJ8 WeOIY0tFEJ2woJSrXT1liEgSXlFaA8E0XSnJW0WavHqL15/OuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKrtntigArbdzhjtxGw8ixhJ8GuTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvODMyZDMxMzEtOGI1OS0z ZmUzLTg5ZjQtMDg3NThiZWYzMWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzqQgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADv0cQI0uzcdkVgJAbLsLaesjeHKGg7MD/oOC5mzVxUmMulm5B4rh86C vYKV0NE/yQgmUtelfXGv+zgm1QTkZimxvnV/Gf7576oAuZqf35GYPmmNlJV0VVdH 6Wbyfq7VAjPLxRtv7Ltuj00oK/5NGAiRfjGKS0QB8ENShUZpNMFYe03GCgqXdMy3 qY3/Qho7+V7RKH3TAZfHDgpd0ZrqHfCnGDURpasIbRNHnikd4jIY6bSE3CZJme1y SC5ZUUDBv9aJtSsixoD88LgKJY5SjTZiQ2nlsQc4f7OXOV8YrKgPI60jgYaZw3na 8bu6eHd0sAUrjccTsXGIhW+8fp0EnBQ= -----END CERTIFICATE-----Generated at Mon Nov 3 21:12:42 2025 by rpki-client