$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bfa20b7a-61f3-367d-b9e0-f4782802d8fb.roa File: bfa20b7a-61f3-367d-b9e0-f4782802d8fb.roa (raw, json) Hash identifier: uhFPAXrvHiZEGEAjcQW141+UmIbk7QEwy+uHxbyfGcY= Subject key identifier: 37:92:17:8B:24:C3:F5:AB:05:FA:D9:3A:7F:3C:4D:62:DC:1C:B5:5E Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584BB2F7D30C80E694C19F924C00 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bfa20b7a-61f3-367d-b9e0-f4782802d8fb.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 203 IP address blocks: 204.105.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:d3:0c:80:e6:94:c1:9f:92:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=1f701a60-df9c-4881-b9f0-c6196791d721 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:22:f9:61:af:4e:9e:17:3d:67:c2:bc:69:a5: 1a:4a:33:55:69:d0:8d:3f:62:4b:a0:49:21:2c:27: 9b:75:59:67:b8:2e:ae:cf:a2:93:e4:e8:9b:63:67: 26:7f:24:7e:62:72:73:0c:21:9e:ca:ba:4a:47:ea: 76:f2:2e:46:2d:a0:46:5b:12:73:a9:9a:34:cf:09: c4:d3:7b:45:4a:f6:ca:0f:07:ee:85:51:af:1f:4e: b0:c5:50:4e:24:49:1d:05:19:61:6e:19:e8:21:4a: b6:69:c8:a9:f1:28:06:49:2a:d9:10:f0:27:6a:11: 1f:9e:ec:c0:72:92:95:46:e3:3a:db:20:b2:47:e9: 8b:bb:8e:17:a0:83:f4:e8:98:0b:a5:9f:da:cd:60: 19:7e:6a:2f:de:35:86:3b:1a:f2:92:08:9a:4d:3f: 34:51:f1:65:3f:6b:32:05:55:e8:c5:03:e1:40:90: 0a:fb:87:2c:eb:29:4f:98:41:af:b8:41:2a:6f:8e: 18:03:9b:e1:13:63:b8:b3:d0:74:02:84:b6:40:a6: a5:03:03:7f:80:be:ae:42:fa:a3:c3:bd:c6:d5:de: b5:74:85:b2:a4:c0:be:80:48:d0:c0:9f:99:61:b5: 67:29:fe:77:a8:51:ca:aa:25:20:53:3b:f9:14:c5: dd:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:92:17:8B:24:C3:F5:AB:05:FA:D9:3A:7F:3C:4D:62:DC:1C:B5:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bfa20b7a-61f3-367d-b9e0-f4782802d8fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 204.105.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:52:7f:a5:6f:0f:6c:98:85:90:bc:d2:2d:62:c3:09:05:d2: 7e:fc:9a:27:17:2e:85:a1:31:16:c9:6f:5e:2f:f3:d1:0d:9d: 8f:24:5d:e4:6f:67:aa:ec:8c:e3:6c:fe:4a:ce:8f:96:18:2d: cf:b6:f1:82:43:1f:86:b9:f8:81:05:94:19:98:cf:c5:c2:79: 8c:40:56:0d:3c:24:0e:59:62:60:8c:8d:e2:54:62:2d:4f:dd: 78:e7:38:f1:93:62:52:b2:f7:aa:b2:4a:74:7b:40:33:61:7b: e7:63:72:4c:a6:b7:3d:1a:bd:ac:f7:29:60:bd:17:3c:c0:2f: 07:e7:52:38:9b:25:20:ef:c1:f5:d8:de:9e:b6:bb:a9:0c:39: 00:7e:75:ee:54:e9:9e:12:9e:fa:1b:e9:25:96:f9:50:63:90: 02:af:1b:f5:e8:fb:2d:a1:db:d9:97:7e:52:12:e8:7b:6d:55: 87:83:98:fe:7b:24:6b:59:f5:86:08:2c:76:9c:e5:87:05:0c: b1:14:da:61:32:86:a9:44:1d:81:7b:61:db:f1:aa:c0:2c:c1: 0c:2a:80:84:97:7c:21:91:b5:cb:a1:66:3e:a0:b6:ac:38:91: ee:0a:a9:e4:08:98:9b:17:3e:2f:b3:ef:de:e3:18:94:49:44: b2:98:37:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy99MMgOaUwZ+STAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk MWY3MDFhNjAtZGY5Yy00ODgxLWI5ZjAtYzYxOTY3OTFkNzIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCL5Ya9Onhc9Z8K8aaUaSjNVadCNP2JLoEkh LCebdVlnuC6uz6KT5OibY2cmfyR+YnJzDCGeyrpKR+p28i5GLaBGWxJzqZo0zwnE 03tFSvbKDwfuhVGvH06wxVBOJEkdBRlhbhnoIUq2acip8SgGSSrZEPAnahEfnuzA cpKVRuM62yCyR+mLu44XoIP06JgLpZ/azWAZfmov3jWGOxrykgiaTT80UfFlP2sy BVXoxQPhQJAK+4cs6ylPmEGvuEEqb44YA5vhE2O4s9B0AoS2QKalAwN/gL6uQvqj w73G1d61dIWypMC+gEjQwJ+ZYbVnKf53qFHKqiUgUzv5FMXdUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDeSF4skw/WrBfrZOn88TWLcHLVeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYmZhMjBiN2EtNjFmMy0z NjdkLWI5ZTAtZjQ3ODI4MDJkOGZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGl1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGZSf6VvD2yYhZC80i1iwwkF0n78micXLoWhMRbJb14v89ENnY8kXeRv Z6rsjONs/krOj5YYLc+28YJDH4a5+IEFlBmYz8XCeYxAVg08JA5ZYmCMjeJUYi1P 3XjnOPGTYlKy96qySnR7QDNhe+djckymtz0avaz3KWC9FzzALwfnUjibJSDvwfXY 3p62u6kMOQB+de5U6Z4Snvob6SWW+VBjkAKvG/Xo+y2h29mXflIS6HttVYeDmP57 JGtZ9YYILHac5YcFDLEU2mEyhqlEHYF7YdvxqsAswQwqgISXfCGRtcuhZj6gtqw4 ke4KqeQImJsXPi+z797jGJRJRLKYN1U= -----END CERTIFICATE-----Generated at Mon Nov 3 21:11:15 2025 by rpki-client