$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0e3da453-af8a-39ea-bf9c-ca08a4c4d08b.roa File: 0e3da453-af8a-39ea-bf9c-ca08a4c4d08b.roa (raw, json) Hash identifier: tYgRX55l4mtKZCJY373VvgbGoGjvRCiEYUPU+L+raOA= Subject key identifier: 3C:C3:9B:06:7B:1D:C6:5B:F5:FA:A7:E6:F7:99:09:3A:B2:E2:32:7A Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584BB2F7BEBFED318EEE746CBE80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0e3da453-af8a-39ea-bf9c-ca08a4c4d08b.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 202 IP address blocks: 168.87.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:be:bf:ed:31:8e:ee:74:6c:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=49055494-67ed-47ec-be34-60bfdda654f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:49:94:f9:3f:f7:cb:d2:b9:3d:94:7c:44:4c: 24:ba:05:24:71:34:40:b7:79:70:1a:94:02:d6:cc: d8:8b:82:23:14:9b:b1:2b:b2:6c:a9:99:7e:d5:ff: 37:96:2c:03:e6:9f:0a:d2:00:a1:d1:3a:f2:42:fb: d9:3b:0a:9c:f1:4a:b2:73:68:f2:6a:f7:14:d2:df: ea:a8:ed:7d:e4:7c:41:60:ef:fb:a8:fb:8e:6d:ee: e6:50:41:f0:80:33:a1:08:8b:f6:c7:49:f5:6b:7e: ee:01:db:c0:ec:10:8e:01:b2:cd:b4:b4:34:c6:4c: 2a:1b:fe:ae:b7:2d:14:b9:89:48:1c:38:1a:dd:02: e2:a1:14:a5:d9:b3:cd:b1:a2:c4:18:80:8f:8d:89: e8:0c:8b:7e:cc:cb:cf:1a:ac:b8:61:94:ae:91:29: 1b:a8:6e:2e:3e:ff:62:56:80:c4:5e:ed:62:d4:9e: af:d2:2d:d8:0f:c8:80:03:1c:29:a0:63:69:0f:a4: 63:b8:d4:17:57:cc:db:f5:2a:0b:82:79:df:c0:6b: 0a:48:25:4a:23:79:28:88:ed:58:59:bf:d4:9f:b0: 0e:65:84:fd:3f:2f:af:6c:ae:b2:1c:b5:f8:4f:77: 59:a8:ad:d2:68:b1:ff:95:9d:78:d2:4a:80:0c:ab: 1b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:C3:9B:06:7B:1D:C6:5B:F5:FA:A7:E6:F7:99:09:3A:B2:E2:32:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0e3da453-af8a-39ea-bf9c-ca08a4c4d08b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:d0:83:19:5d:ba:e1:b7:af:36:9e:29:e9:2b:07:5d:b6:7b: 8d:cc:22:c0:9b:16:b1:9c:e9:8f:93:5b:92:12:09:76:6f:2c: 3f:4c:84:55:f4:31:31:b3:e4:70:09:2c:fb:4a:cd:1e:43:7f: fb:1a:4e:e3:ce:ab:ee:fc:6b:ec:e1:a7:4a:1d:1d:c1:02:1f: a3:7a:cd:2e:8e:88:ce:f3:b9:54:fc:6f:05:1a:c3:21:78:86: f6:67:7b:e5:38:f4:53:a4:52:47:4f:59:bc:6f:a9:3f:e0:96: e8:86:69:9a:8d:fd:80:4c:e5:93:97:a8:28:af:7b:2a:9a:64: 25:eb:a5:d7:0d:4d:85:4c:56:80:11:00:d8:b1:b0:2e:14:71: d2:47:c5:4d:81:d4:62:30:e5:20:3a:ef:4b:c0:ca:9b:10:42: c2:6e:fb:7b:e4:38:8e:6f:03:9e:56:c7:0f:ac:db:12:8e:5d: 2c:ae:bb:01:ec:55:24:bc:14:b0:0e:25:e5:a4:26:79:9f:64: f3:3c:86:60:82:cd:e7:ea:61:47:77:58:d3:62:58:6a:28:b8: fb:ac:53:c9:18:a2:97:f7:86:58:ba:8c:bd:d0:63:80:d0:a8: 09:aa:8f:f3:86:39:dd:35:d9:4c:1c:55:f8:b4:7e:3d:1d:ef: e7:62:48:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy976/7TGO7nRsvoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk NDkwNTU0OTQtNjdlZC00N2VjLWJlMzQtNjBiZmRkYTY1NGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkmU+T/3y9K5PZR8REwkugUkcTRAt3lwGpQC 1szYi4IjFJuxK7JsqZl+1f83liwD5p8K0gCh0TryQvvZOwqc8Uqyc2jyavcU0t/q qO195HxBYO/7qPuObe7mUEHwgDOhCIv2x0n1a37uAdvA7BCOAbLNtLQ0xkwqG/6u ty0UuYlIHDga3QLioRSl2bPNsaLEGICPjYnoDIt+zMvPGqy4YZSukSkbqG4uPv9i VoDEXu1i1J6v0i3YD8iAAxwpoGNpD6RjuNQXV8zb9SoLgnnfwGsKSCVKI3koiO1Y Wb/Un7AOZYT9Py+vbK6yHLX4T3dZqK3SaLH/lZ140kqADKsbbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDzDmwZ7HcZb9fqn5veZCTqy4jJ6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMGUzZGE0NTMtYWY4YS0z OWVhLWJmOWMtY2EwOGE0YzRkMDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFcYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIXQgxlduuG3rzaeKekrB122e43MIsCbFrGc6Y+TW5ISCXZvLD9MhFX0 MTGz5HAJLPtKzR5Df/saTuPOq+78a+zhp0odHcECH6N6zS6OiM7zuVT8bwUawyF4 hvZne+U49FOkUkdPWbxvqT/gluiGaZqN/YBM5ZOXqCiveyqaZCXrpdcNTYVMVoAR ANixsC4UcdJHxU2B1GIw5SA670vAypsQQsJu+3vkOI5vA55Wxw+s2xKOXSyuuwHs VSS8FLAOJeWkJnmfZPM8hmCCzefqYUd3WNNiWGoouPusU8kYopf3hli6jL3QY4DQ qAmqj/OGOd012UwcVfi0fj0d7+diSAU= -----END CERTIFICATE-----Generated at Tue Nov 4 21:41:11 2025 by rpki-client