$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a39f4356-800b-3461-847c-e65f3c5a32a6.roa File: a39f4356-800b-3461-847c-e65f3c5a32a6.roa (raw, json) Hash identifier: Qm1xnqBBT33eeKT7Z+8leuFK7NDkJxvoz7lWlKoyufg= Subject key identifier: 8B:5D:54:EE:CB:3F:98:9C:B4:38:68:BE:B8:06:15:6F:96:5C:2F:08 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584B3821A127275E44C3DEA1CD80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a39f4356-800b-3461-847c-e65f3c5a32a6.roa Signing time: Wed 17 Sep 2025 01:00:33 +0000 ROA not before: Wed 17 Sep 2025 01:00:33 +0000 ROA not after: Tue 16 Dec 2025 02:00:33 +0000 asID: 3356 IP address blocks: 168.87.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:38:21:a1:27:27:5e:44:c3:de:a1:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 17 01:00:33 2025 GMT Not After : Dec 16 02:00:33 2025 GMT Subject: CN=df4483e0-2f98-40d4-82ab-168e36eace84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:26:dc:29:b7:79:02:8c:3d:6f:1b:2d:d0:d6: cd:93:ee:19:b0:74:5d:8c:f9:68:1c:18:2b:a9:1e: f6:93:ef:47:ce:69:0a:a4:6f:3b:c8:e3:6e:37:1b: 57:2d:30:18:fc:af:88:1e:45:7b:6b:f3:af:5a:53: 36:9e:f1:62:3a:20:d5:7b:20:d4:5c:9d:d1:0d:ad: 1d:c7:f5:9e:90:cf:fe:ef:f8:79:38:15:58:f2:e4: 37:ab:f4:a7:52:ae:10:37:48:c7:c1:ce:9e:78:0e: ea:0a:c2:a7:3f:9c:6c:4f:fb:97:01:b4:ff:3b:c4: 2c:0a:e2:ac:1a:43:dc:79:35:87:38:ad:82:20:e8: d4:9a:09:60:67:33:49:61:40:fe:22:ef:8d:6e:2e: ab:62:ee:89:ef:f2:e5:d0:7c:74:02:f5:8e:96:0e: a6:5e:22:31:63:ef:7d:4b:57:5b:45:7a:4d:aa:7e: 75:c6:dc:c9:80:23:73:9e:d6:f0:58:a0:46:5f:29: c4:56:94:46:4b:f4:b7:fb:d7:7c:f0:c9:65:01:5f: 1a:92:a9:19:10:d9:08:a4:48:d2:e0:e3:71:87:de: e5:92:51:18:a3:b4:7b:c2:1d:70:b2:32:72:03:8e: 8d:99:bd:d5:a0:37:73:2f:11:50:cb:94:47:dd:66: 85:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:5D:54:EE:CB:3F:98:9C:B4:38:68:BE:B8:06:15:6F:96:5C:2F:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a39f4356-800b-3461-847c-e65f3c5a32a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.6.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:d2:c0:99:fa:57:10:c5:62:e9:83:b5:df:21:7e:2d:e6:b6: d8:50:fd:d6:4d:3f:44:3a:17:68:82:dd:40:35:63:b7:88:c2: f2:96:9e:4d:69:68:ee:6d:3f:81:aa:f4:ac:9c:b1:17:e8:49: d6:67:41:aa:4f:42:3a:0c:8a:56:b9:06:7b:04:4c:f1:83:ec: fb:c0:19:94:b6:8b:6b:ab:19:44:9c:9d:3b:34:5f:80:12:e6: 5e:0b:78:df:34:c3:39:f3:ef:5b:9f:22:b4:c4:82:41:db:64: cb:a7:aa:7b:3b:a4:d7:5f:ff:cf:95:d3:5a:d6:3e:1e:cd:da: 58:8b:f4:07:fd:c6:4c:0e:4a:a5:83:db:ec:dc:a3:b3:e9:c7: 47:04:95:0d:03:f5:64:4c:fa:2b:70:98:f3:98:6a:ba:8a:d0: 29:f4:4d:38:f0:ee:f2:19:60:52:7f:9e:19:22:0f:1f:2f:27: ca:7a:05:5f:cf:7d:b6:65:a3:53:73:25:99:3a:2e:33:16:d0: 83:51:4f:87:f5:fd:58:21:39:4f:3d:da:64:d7:8e:50:ce:8d: c1:98:ba:5a:47:b8:1b:1a:5b:5d:ef:4f:45:aa:1e:b4:5e:c1: 38:e8:32:1d:f6:71:1a:57:04:c9:4f:a2:dc:f2:43:58:6d:57: 14:cc:0a:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs4IaEnJ15Ew96hzYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDkxNzAxMDAzM1oXDTI1MTIxNjAyMDAzM1owLzEtMCsGA1UEAxMk ZGY0NDgzZTAtMmY5OC00MGQ0LTgyYWItMTY4ZTM2ZWFjZTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCbcKbd5Aow9bxst0NbNk+4ZsHRdjPloHBgr qR72k+9HzmkKpG87yONuNxtXLTAY/K+IHkV7a/OvWlM2nvFiOiDVeyDUXJ3RDa0d x/WekM/+7/h5OBVY8uQ3q/SnUq4QN0jHwc6eeA7qCsKnP5xsT/uXAbT/O8QsCuKs GkPceTWHOK2CIOjUmglgZzNJYUD+Iu+Nbi6rYu6J7/Ll0Hx0AvWOlg6mXiIxY+99 S1dbRXpNqn51xtzJgCNzntbwWKBGXynEVpRGS/S3+9d88MllAV8akqkZENkIpEjS 4ONxh97lklEYo7R7wh1wsjJyA46Nmb3VoDdzLxFQy5RH3WaF/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFItdVO7LP5ictDhovrgGFW+WXC8IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYTM5ZjQzNTYtODAwYi0z NDYxLTg0N2MtZTY1ZjNjNWEzMmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFcGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAzSwJn6VxDFYumDtd8hfi3mtthQ/dZNP0Q6F2iC3UA1Y7eIwvKWnk1p aO5tP4Gq9KycsRfoSdZnQapPQjoMila5BnsETPGD7PvAGZS2i2urGUScnTs0X4AS 5l4LeN80wznz71ufIrTEgkHbZMunqns7pNdf/8+V01rWPh7N2liL9Af9xkwOSqWD 2+zco7Ppx0cElQ0D9WRM+itwmPOYarqK0Cn0TTjw7vIZYFJ/nhkiDx8vJ8p6BV/P fbZlo1NzJZk6LjMW0INRT4f1/VghOU892mTXjlDOjcGYulpHuBsaW13vT0WqHrRe wTjoMh32cRpXBMlPotzyQ1htVxTMCtA= -----END CERTIFICATE-----Generated at Mon Nov 3 21:11:17 2025 by rpki-client