$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a0fda407-3641-3385-93d9-4a7761c5b20c.roa File: a0fda407-3641-3385-93d9-4a7761c5b20c.roa (raw, json) Hash identifier: CFuLgJZpFf1QcosQPMWILA3VPLTF3q3cLU1coHTlJ6w= Subject key identifier: 5D:EC:29:17:C4:F8:9A:66:C7:80:B3:08:5D:EA:BB:13:FA:FB:BE:46 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584B4A47265793DF5EE61D5B4300 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a0fda407-3641-3385-93d9-4a7761c5b20c.roa Signing time: Tue 23 Sep 2025 13:00:40 +0000 ROA not before: Tue 23 Sep 2025 13:00:40 +0000 ROA not after: Mon 22 Dec 2025 14:00:40 +0000 asID: 3356 IP address blocks: 204.104.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4a:47:26:57:93:df:5e:e6:1d:5b:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 23 13:00:40 2025 GMT Not After : Dec 22 14:00:40 2025 GMT Subject: CN=2cc77c7a-6f22-466e-ae8d-357675e87464 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5f:84:3e:7e:c4:fe:6b:7a:27:99:c0:13:25: e8:f1:c0:07:0e:09:40:f8:48:d9:d8:60:bc:3e:bd: 05:e5:f3:f3:8e:bb:a1:f8:05:ed:d1:fd:f9:e9:f2: 69:57:fd:86:8f:cf:18:c4:f6:50:4b:d8:6d:6f:bd: 8e:a2:b9:10:79:18:95:60:d8:9c:32:e5:41:0d:06: dc:e1:97:ac:14:47:9e:8d:77:b3:36:24:be:57:c3: 7e:38:b4:4f:0f:48:3a:36:f3:7d:6f:0d:41:0b:32: 51:a2:ad:8c:02:76:5d:63:e0:c3:7b:c4:7f:61:db: d9:90:85:5c:89:98:b4:aa:d2:fb:d0:37:e0:d9:2a: f3:d9:10:39:eb:3f:10:27:46:17:86:ff:76:65:35: ee:d9:21:69:e0:85:92:be:18:9f:b2:e9:52:f8:18: e8:3a:3e:16:56:f1:2c:31:ee:a8:c0:70:7d:de:19: d2:20:16:32:d2:dd:1b:9e:8e:18:da:f4:b0:d5:26: 24:5a:38:9d:f9:d1:70:a3:4e:79:4d:08:ab:de:a5: 87:9e:fc:53:4e:47:8a:5b:7a:aa:7f:2a:e6:93:ea: 5f:68:d8:6b:b7:34:44:37:62:ce:48:75:c0:8f:44: 90:2e:12:88:0c:fd:fe:c0:ca:f7:45:c8:05:0f:a6: a3:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:EC:29:17:C4:F8:9A:66:C7:80:B3:08:5D:EA:BB:13:FA:FB:BE:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a0fda407-3641-3385-93d9-4a7761c5b20c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 204.104.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:4b:4d:42:b3:92:81:b9:9a:6c:f2:f2:7d:25:13:53:1d:73: 2f:d9:f5:d5:c5:54:27:cf:08:2a:3d:a8:ac:4c:07:74:ba:e9: ec:7c:58:d3:22:bf:d7:85:d7:5d:44:dc:3b:fe:f7:05:12:0a: 04:6a:3f:50:33:ba:db:65:53:13:e9:65:e6:2d:36:61:d4:79: 19:29:b9:e6:91:69:34:b9:f3:1a:98:b5:d5:ae:12:83:39:e8: f8:1e:5f:a9:16:9e:b1:49:b1:28:29:55:0b:57:e0:13:e4:9e: f2:13:15:f3:b8:24:1c:11:14:a0:77:ff:11:08:f6:35:ee:53: 40:ed:a6:24:ad:70:bc:3b:27:76:8c:2f:d7:96:aa:dc:6f:2a: 0a:be:c7:3e:2c:ee:8c:cc:41:91:aa:26:09:00:21:89:e5:61: bf:46:a8:1f:6e:09:f9:30:5d:a7:a1:a1:7c:7a:31:6c:6e:8c: a5:f8:ca:d5:70:d9:b9:76:25:be:fb:f2:a7:33:66:eb:0c:eb: 8e:32:2c:c8:09:3b:0e:d8:cf:4f:91:ea:5d:6e:47:df:8e:1d: cd:f2:58:aa:7f:00:4d:86:dc:0a:a2:73:c3:91:40:e9:08:99: e9:32:83:e4:53:5f:a0:71:ad:a4:f3:ef:09:40:c8:01:d2:dd: 42:ef:5e:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtKRyZXk99e5h1bQwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDkyMzEzMDA0MFoXDTI1MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk MmNjNzdjN2EtNmYyMi00NjZlLWFlOGQtMzU3Njc1ZTg3NDY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuV+EPn7E/mt6J5nAEyXo8cAHDglA+EjZ2GC8 Pr0F5fPzjruh+AXt0f356fJpV/2Gj88YxPZQS9htb72OorkQeRiVYNicMuVBDQbc 4ZesFEeejXezNiS+V8N+OLRPD0g6NvN9bw1BCzJRoq2MAnZdY+DDe8R/YdvZkIVc iZi0qtL70Dfg2Srz2RA56z8QJ0YXhv92ZTXu2SFp4IWSvhifsulS+BjoOj4WVvEs Me6owHB93hnSIBYy0t0bno4Y2vSw1SYkWjid+dFwo055TQir3qWHnvxTTkeKW3qq fyrmk+pfaNhrtzREN2LOSHXAj0SQLhKIDP3+wMr3RcgFD6ajUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF3sKRfE+Jpmx4CzCF3quxP6+75GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYTBmZGE0MDctMzY0MS0z Mzg1LTkzZDktNGE3NzYxYzViMjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGgNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAxLTUKzkoG5mmzy8n0lE1Mdcy/Z9dXFVCfPCCo9qKxMB3S66ex8WNMi v9eF111E3Dv+9wUSCgRqP1AzuttlUxPpZeYtNmHUeRkpueaRaTS58xqYtdWuEoM5 6PgeX6kWnrFJsSgpVQtX4BPknvITFfO4JBwRFKB3/xEI9jXuU0DtpiStcLw7J3aM L9eWqtxvKgq+xz4s7ozMQZGqJgkAIYnlYb9GqB9uCfkwXaehoXx6MWxujKX4ytVw 2bl2Jb778qczZusM644yLMgJOw7Yz0+R6l1uR9+OHc3yWKp/AE2G3Aqic8ORQOkI mekyg+RTX6BxraTz7wlAyAHS3ULvXuk= -----END CERTIFICATE-----Generated at Mon Nov 3 21:12:37 2025 by rpki-client