$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/95358b0a-f6a1-395a-9a6a-a99fc49a756b.roa File: 95358b0a-f6a1-395a-9a6a-a99fc49a756b.roa (raw, json) Hash identifier: 5un8BQvNhhkVaoiZgv7NWcjJ5kjcc9Z23tOD8Vq5pZM= Subject key identifier: 29:62:B3:4A:A9:CD:CA:1F:E9:E4:5C:DA:1A:2C:0F:6D:AC:57:85:C9 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584BB2F7D4735D11A56FBBEFCE80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/95358b0a-f6a1-395a-9a6a-a99fc49a756b.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 3356 IP address blocks: 168.87.140.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:d4:73:5d:11:a5:6f:bb:ef:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=5fc75cd9-86bb-4fb9-ac70-1e22a61aaced Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ac:f7:28:15:cb:06:77:5f:c9:d8:0f:97:9f: 41:00:a7:5c:57:3e:23:a3:14:08:59:c0:ef:37:56: 79:91:13:73:76:4a:95:a2:a2:5e:de:83:c2:4f:0f: 98:00:4c:b5:9b:bc:86:c7:3b:c7:2e:87:08:bc:a9: 70:02:9f:8a:2a:ef:34:fa:bb:ba:16:c9:ab:b0:35: 6e:dd:f4:e6:7e:e7:99:ce:6a:41:ad:6f:e3:01:16: 12:e6:35:8f:64:0f:f5:dd:f0:c2:53:c2:07:5c:8f: ae:3d:09:d5:7f:cb:69:4d:81:91:75:99:60:e0:75: e0:5a:0a:b2:ec:a8:23:3d:c7:8f:9e:cc:3d:a3:aa: c1:02:44:eb:0f:05:75:62:5a:2b:24:0d:72:34:89: ea:92:41:47:8c:94:a8:64:a0:99:b0:f4:6f:4e:35: 75:23:c6:81:59:e2:4c:c2:5e:ea:b0:93:4f:90:58: ea:a8:66:41:ed:ad:4b:bd:44:50:6e:5d:06:99:20: 09:94:3f:38:b6:6e:de:91:02:76:15:9c:85:b5:6f: 04:a8:cb:20:c2:ce:00:44:84:f9:e4:32:3c:7e:4b: 10:7d:6c:43:85:68:fb:e7:7b:46:e5:72:44:24:88: 72:b6:84:00:80:2b:d8:b0:c0:35:60:8e:72:ad:80: 45:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:62:B3:4A:A9:CD:CA:1F:E9:E4:5C:DA:1A:2C:0F:6D:AC:57:85:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/95358b0a-f6a1-395a-9a6a-a99fc49a756b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.140.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:d5:bf:87:16:59:a3:75:f8:5a:05:a6:c3:81:24:1e:9d:08: bf:7c:06:00:98:3c:cb:46:8e:55:5f:84:d7:20:47:77:e8:4e: 95:69:4b:dc:68:b4:96:d3:90:57:9a:77:3e:ff:bb:eb:04:b7: e8:49:18:92:ee:01:30:01:3e:c2:c7:00:51:db:00:4a:4c:c9: d6:19:b6:de:0b:2d:28:05:3d:77:30:c9:86:4b:f9:93:80:09: 4f:82:ce:97:73:d8:3e:f7:43:31:26:74:9b:b6:73:25:9d:18: d0:05:32:4e:88:a3:78:58:11:0a:aa:65:87:2c:00:b5:d9:34: d5:bc:cb:9c:5c:09:95:33:6d:9a:79:87:64:e0:a6:ff:e5:58: b1:f7:bd:2f:a2:b7:8e:64:b3:c5:41:51:ce:36:35:73:34:3f: 2b:9c:4f:7e:12:c0:c0:26:79:a5:bc:b5:5d:3f:ff:c9:3a:2d: c6:4f:8d:20:0f:73:c0:df:83:32:43:c0:14:1a:c2:a6:84:11: 30:7e:35:42:bd:6a:7c:ea:ef:41:07:d5:26:ae:45:aa:fb:21: 07:eb:e2:0c:e7:a4:69:1b:d9:c3:07:4f:3c:a6:e8:f1:06:8c: ea:9d:d4:f1:c4:0d:46:92:8d:93:92:e0:eb:f4:0f:43:e4:53: a5:25:ec:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy99RzXRGlb7vvzoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk NWZjNzVjZDktODZiYi00ZmI5LWFjNzAtMWUyMmE2MWFhY2VkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaz3KBXLBndfydgPl59BAKdcVz4joxQIWcDv N1Z5kRNzdkqVoqJe3oPCTw+YAEy1m7yGxzvHLocIvKlwAp+KKu80+ru6FsmrsDVu 3fTmfueZzmpBrW/jARYS5jWPZA/13fDCU8IHXI+uPQnVf8tpTYGRdZlg4HXgWgqy 7KgjPcePnsw9o6rBAkTrDwV1YlorJA1yNInqkkFHjJSoZKCZsPRvTjV1I8aBWeJM wl7qsJNPkFjqqGZB7a1LvURQbl0GmSAJlD84tm7ekQJ2FZyFtW8EqMsgws4ARIT5 5DI8fksQfWxDhWj753tG5XJEJIhytoQAgCvYsMA1YI5yrYBFXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFClis0qpzcof6eRc2hosD22sV4XJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvOTUzNThiMGEtZjZhMS0z OTVhLTlhNmEtYTk5ZmM0OWE3NTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqFeMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFLVv4cWWaN1+FoFpsOBJB6dCL98BgCYPMtGjlVfhNcgR3foTpVpS9xo tJbTkFeadz7/u+sEt+hJGJLuATABPsLHAFHbAEpMydYZtt4LLSgFPXcwyYZL+ZOA CU+Czpdz2D73QzEmdJu2cyWdGNAFMk6Io3hYEQqqZYcsALXZNNW8y5xcCZUzbZp5 h2Tgpv/lWLH3vS+it45ks8VBUc42NXM0PyucT34SwMAmeaW8tV0//8k6LcZPjSAP c8DfgzJDwBQawqaEETB+NUK9anzq70EH1SauRar7IQfr4gznpGkb2cMHTzym6PEG jOqd1PHEDUaSjZOS4Ov0D0PkU6Ul7Ec= -----END CERTIFICATE-----Generated at Mon Nov 3 21:12:11 2025 by rpki-client