$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/fdcf7e52-75e0-31cd-aa21-f3b8457313fb.roa File: fdcf7e52-75e0-31cd-aa21-f3b8457313fb.roa (raw, json) Hash identifier: MAkrbe142FqAjc2oqFSbdERlrJJnX9le8XsjAlDIBnk= Subject key identifier: 25:1B:CC:CC:6E:96:B0:E0:0F:DD:D8:FE:E1:FC:17:59:C9:06:F2:73 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584BD67978B672708646772BEE00 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/fdcf7e52-75e0-31cd-aa21-f3b8457313fb.roa Signing time: Wed 12 Nov 2025 18:15:26 +0000 ROA not before: Wed 12 Nov 2025 18:15:26 +0000 ROA not after: Tue 10 Feb 2026 18:15:26 +0000 asID: 86 IP address blocks: 168.87.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d6:79:78:b6:72:70:86:46:77:2b:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Nov 12 18:15:26 2025 GMT Not After : Feb 10 18:15:26 2026 GMT Subject: CN=593917ff-dd0d-4ffb-862b-662e9fb2c097 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:6f:48:1e:b5:72:43:d2:45:43:df:e2:77:02: 56:3a:cb:c0:f3:18:1e:bd:6f:9a:86:0f:2d:a4:aa: cc:e3:a4:37:77:98:ca:17:54:4b:6b:46:79:4a:fd: 86:dd:d0:1d:a1:d8:8a:e6:c7:58:de:2b:8d:40:7b: db:5b:b1:fe:08:34:71:6e:9f:78:45:94:b6:02:99: 85:b1:bf:1a:cc:ad:b3:2b:09:28:38:a9:76:59:f8: d7:13:ad:28:e2:47:47:d8:99:96:b0:65:15:d7:74: 0e:4e:e1:b5:97:68:f6:44:48:cd:91:48:d6:b6:8a: 8c:b4:c4:35:b6:22:59:0b:f2:50:6e:d7:cf:39:02: f8:20:75:59:60:31:71:52:e3:ff:d8:8d:18:77:10: 4c:a0:a4:30:ab:6e:28:c1:6b:bf:0b:e2:50:ad:ec: cd:8a:9e:f3:d9:1b:0c:24:df:e3:ac:29:0c:b6:dd: d2:1a:e0:3c:db:fe:9f:2e:b5:c4:35:7d:d0:87:a1: 43:6e:b5:6c:a9:ef:b0:dd:cb:9f:19:eb:d2:26:cd: e3:fc:e0:9b:08:82:ba:c8:4e:32:e6:38:c5:b8:fe: 8f:3e:54:44:c2:4c:bb:5b:e1:37:ba:42:de:7b:31: 1b:64:8e:19:6e:8c:ff:76:7b:31:de:14:9d:cc:2d: e8:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:1B:CC:CC:6E:96:B0:E0:0F:DD:D8:FE:E1:FC:17:59:C9:06:F2:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/fdcf7e52-75e0-31cd-aa21-f3b8457313fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:be:7f:ac:13:76:a3:aa:ee:66:24:cd:5f:c9:2e:83:93:0f: 6a:f9:6d:d6:d4:95:da:59:c0:4b:fa:72:96:e0:56:94:f0:d9: 96:60:40:83:f8:e5:56:42:30:c5:2c:03:fd:59:a9:e7:2d:1f: 6d:14:32:d5:22:aa:0f:15:3a:54:35:6a:89:53:fe:46:f4:df: d4:56:b7:ca:c7:08:58:7a:e3:58:89:bd:b2:7f:44:fc:15:e9: 6b:52:d8:97:ce:6c:97:d1:2e:0c:da:9e:fe:e0:1c:29:82:05: 3f:a7:60:51:d5:8b:cd:a5:f9:1a:d2:1c:94:9c:12:a6:0c:3a: a3:95:8f:ba:7c:9c:23:1a:6a:09:60:43:73:63:37:b3:ae:08: 87:a4:fb:71:36:c0:70:50:5e:a8:3d:86:54:b9:15:33:82:d1: 5f:f9:45:3b:03:65:06:db:2e:c1:54:33:99:78:a0:ed:7b:d7: 7d:83:eb:5a:60:39:82:e2:c6:09:db:39:59:74:52:9c:bf:4d: 01:67:85:7a:e2:53:80:e3:ff:a9:6a:ec:53:f6:06:b4:39:bc: e0:c3:c4:f4:bd:2c:fe:a1:a9:c8:52:12:4d:6a:10:b7:53:fb: 8e:07:19:f7:5b:c3:27:b8:f4:92:68:f5:4d:e6:17:4d:06:08: 06:b4:66:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvWeXi2cnCGRncr7gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTExMjE4MTUyNloXDTI2MDIxMDE4MTUyNlowLzEtMCsGA1UEAxMk NTkzOTE3ZmYtZGQwZC00ZmZiLTg2MmItNjYyZTlmYjJjMDk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgG9IHrVyQ9JFQ9/idwJWOsvA8xgevW+ahg8t pKrM46Q3d5jKF1RLa0Z5Sv2G3dAdodiK5sdY3iuNQHvbW7H+CDRxbp94RZS2ApmF sb8azK2zKwkoOKl2WfjXE60o4kdH2JmWsGUV13QOTuG1l2j2REjNkUjWtoqMtMQ1 tiJZC/JQbtfPOQL4IHVZYDFxUuP/2I0YdxBMoKQwq24owWu/C+JQrezNip7z2RsM JN/jrCkMtt3SGuA82/6fLrXENX3Qh6FDbrVsqe+w3cufGevSJs3j/OCbCIK6yE4y 5jjFuP6PPlREwky7W+E3ukLeezEbZI4Zboz/dnsx3hSdzC3obwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCUbzMxulrDgD93Y/uH8F1nJBvJzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZmRjZjdlNTItNzVlMC0z MWNkLWFhMjEtZjNiODQ1NzMxM2ZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFdWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE++f6wTdqOq7mYkzV/JLoOTD2r5bdbUldpZwEv6cpbgVpTw2ZZgQIP4 5VZCMMUsA/1ZqectH20UMtUiqg8VOlQ1aolT/kb039RWt8rHCFh641iJvbJ/RPwV 6WtS2JfObJfRLgzanv7gHCmCBT+nYFHVi82l+RrSHJScEqYMOqOVj7p8nCMaaglg Q3NjN7OuCIek+3E2wHBQXqg9hlS5FTOC0V/5RTsDZQbbLsFUM5l4oO17132D61pg OYLixgnbOVl0Upy/TQFnhXriU4Dj/6lq7FP2BrQ5vODDxPS9LP6hqchSEk1qELdT +44HGfdbwye49JJo9U3mF00GCAa0Zng= -----END CERTIFICATE-----Generated at Mon Nov 17 18:09:22 2025 by rpki-client