$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d34f8161-5d0c-3370-9431-24eda18aaa4f.roa File: d34f8161-5d0c-3370-9431-24eda18aaa4f.roa (raw, json) Hash identifier: jaWeDgfTTyd+ypCHObl9sNr8ACYs14bgbviepe8nnFM= Subject key identifier: 6D:2C:D4:CC:42:AC:C0:D7:FA:81:EB:6C:F0:1C:26:68:68:88:08:9B Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584B4A472587F65AFE7AD94E2A00 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d34f8161-5d0c-3370-9431-24eda18aaa4f.roa Signing time: Tue 23 Sep 2025 13:00:40 +0000 ROA not before: Tue 23 Sep 2025 13:00:40 +0000 ROA not after: Mon 22 Dec 2025 14:00:40 +0000 asID: 3356 IP address blocks: 204.104.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4a:47:25:87:f6:5a:fe:7a:d9:4e:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 23 13:00:40 2025 GMT Not After : Dec 22 14:00:40 2025 GMT Subject: CN=13964529-bb99-4a06-a9f1-abd141414415 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7e:6f:b1:97:38:16:1a:95:4c:e3:3a:2c:27: 6d:a1:14:bc:a5:7c:25:2c:04:10:5c:f8:1d:4e:f4: 71:8e:42:08:e5:60:bc:b1:aa:50:41:cd:9b:4f:2e: 29:7c:cc:15:5e:7f:01:5e:b9:81:e1:80:31:96:ec: 9c:86:e9:9b:0a:4f:8f:53:6b:3c:d5:80:7c:66:2a: 67:03:8b:33:9a:6d:09:08:54:51:c4:a9:9d:39:c1: 78:33:fe:47:6a:b4:1d:23:e0:42:cc:f0:05:e5:13: fd:08:69:ee:19:28:00:5c:dd:a3:60:35:4f:89:cf: 0b:8c:8e:e5:1f:2d:7e:57:95:7f:3b:d6:29:61:33: c9:1a:77:38:44:10:a6:f0:e5:b7:3e:49:1b:98:4e: da:a8:71:cf:2c:0e:32:0e:8f:13:96:eb:0f:a9:7e: 02:dc:1f:ef:76:52:fe:bb:a9:ab:6a:27:9c:e9:95: eb:5e:64:a3:13:5a:33:47:54:14:3e:8f:ec:6a:86: c5:4c:1d:71:3a:4c:11:5c:33:a4:01:59:52:7e:23: 46:13:5b:8d:f1:88:aa:f3:e1:3d:b1:f1:81:48:9a: 07:61:c9:52:4c:43:9a:af:bf:64:f0:db:2c:64:2d: 0e:3b:b4:cb:00:5e:34:43:bd:c8:8c:2f:0d:cf:15: 9a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:2C:D4:CC:42:AC:C0:D7:FA:81:EB:6C:F0:1C:26:68:68:88:08:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d34f8161-5d0c-3370-9431-24eda18aaa4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 204.104.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:62:d2:20:d3:c5:2a:ea:75:60:bc:62:6d:e3:3a:69:fe:37: e9:00:0d:ed:9e:9d:b8:78:6d:25:29:5a:05:2e:26:3e:6b:f0: 9b:48:de:0c:61:39:51:5c:3e:44:c0:24:bc:0d:4b:b2:c7:9d: 03:01:ff:af:21:2f:32:a5:e4:ba:b0:04:47:5e:c9:e1:d0:b6: 54:09:2c:a4:c2:79:33:d1:7c:85:50:f2:a0:ac:90:9f:99:3b: 77:66:f2:ae:07:20:6f:3b:41:14:3f:db:36:8f:10:35:a6:f8: a1:54:3e:2c:01:78:ba:29:6c:da:0b:bc:16:01:f9:95:13:9c: dc:7d:c5:cd:aa:21:d7:5f:a6:f9:9e:af:a7:4f:fb:c4:c7:6f: 65:c3:a5:6c:69:10:f1:35:dc:71:ac:f6:71:bd:e2:63:70:55: 51:bd:31:15:1e:9c:e5:24:5e:35:8f:09:63:ba:64:3a:f2:17: 63:f0:5f:d2:44:15:e5:62:13:5f:65:71:11:67:56:33:59:20: e5:6d:fd:91:5d:e8:f1:2a:b8:a9:c4:a5:5c:10:29:dd:fe:c1: 6c:cf:ed:a0:d3:ee:0b:77:7e:04:44:a4:1f:59:37:2b:4a:95: af:a3:61:05:c8:61:28:b5:cc:bc:64:4d:f6:5e:eb:64:79:44: 81:56:a6:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtKRyWH9lr+etlOKgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDkyMzEzMDA0MFoXDTI1MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk MTM5NjQ1MjktYmI5OS00YTA2LWE5ZjEtYWJkMTQxNDE0NDE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAun5vsZc4FhqVTOM6LCdtoRS8pXwlLAQQXPgd TvRxjkII5WC8sapQQc2bTy4pfMwVXn8BXrmB4YAxluychumbCk+PU2s81YB8Zipn A4szmm0JCFRRxKmdOcF4M/5HarQdI+BCzPAF5RP9CGnuGSgAXN2jYDVPic8LjI7l Hy1+V5V/O9YpYTPJGnc4RBCm8OW3PkkbmE7aqHHPLA4yDo8TlusPqX4C3B/vdlL+ u6mraiec6ZXrXmSjE1ozR1QUPo/saobFTB1xOkwRXDOkAVlSfiNGE1uN8Yiq8+E9 sfGBSJoHYclSTEOar79k8NssZC0OO7TLAF40Q73IjC8NzxWaJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG0s1MxCrMDX+oHrbPAcJmhoiAibMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZDM0ZjgxNjEtNWQwYy0z MzcwLTk0MzEtMjRlZGExOGFhYTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGgKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGRi0iDTxSrqdWC8Ym3jOmn+N+kADe2enbh4bSUpWgUuJj5r8JtI3gxh OVFcPkTAJLwNS7LHnQMB/68hLzKl5LqwBEdeyeHQtlQJLKTCeTPRfIVQ8qCskJ+Z O3dm8q4HIG87QRQ/2zaPEDWm+KFUPiwBeLopbNoLvBYB+ZUTnNx9xc2qIddfpvme r6dP+8THb2XDpWxpEPE13HGs9nG94mNwVVG9MRUenOUkXjWPCWO6ZDryF2PwX9JE FeViE19lcRFnVjNZIOVt/ZFd6PEquKnEpVwQKd3+wWzP7aDT7gt3fgREpB9ZNytK la+jYQXIYSi1zLxkTfZe62R5RIFWpiY= -----END CERTIFICATE-----Generated at Mon Nov 3 21:12:13 2025 by rpki-client