$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1009cd0b-9971-3e8d-954c-5334aab05cba.roa File: 1009cd0b-9971-3e8d-954c-5334aab05cba.roa (raw, json) Hash identifier: NTGncw47BbD8YTyRZQFH2IrAPjvU/fPVMYA1DT6XP0M= Subject key identifier: B4:7E:14:83:FC:37:28:D1:2F:A2:3D:E2:A1:47:80:1F:46:FD:F5:28 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584BA0D272FC2C99C0260B96A540 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1009cd0b-9971-3e8d-954c-5334aab05cba.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 14618 IP address blocks: 168.87.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:72:fc:2c:99:c0:26:0b:96:a5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=21c20b18-a9eb-4ab3-b865-873362c8f06b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c7:43:e3:0b:72:52:46:25:b6:6f:2f:05:b8: 32:39:da:46:21:78:b0:6a:7e:f5:27:1b:76:c8:5a: 50:4e:cf:5e:64:86:8e:3f:7f:8b:e1:93:06:c2:5d: b6:53:93:b3:27:fc:82:17:a8:09:9c:28:8a:6a:ff: 33:7d:fb:35:d1:23:41:1a:8d:a7:f6:2b:24:fa:d2: fc:ae:2e:98:31:4f:72:18:59:9e:42:fa:b5:f3:96: 6c:d6:8c:b6:43:fa:4f:3d:3e:dd:30:7f:e1:55:1e: 5c:d5:6a:f4:8b:75:7d:9c:e5:19:32:3d:ab:60:69: ad:a6:09:63:16:88:e5:5d:d6:16:2a:3c:5d:fe:bd: 03:31:49:d7:8f:dc:c2:2c:5e:83:38:f9:11:47:ec: e1:bb:b9:92:ad:97:bf:dd:fd:d2:00:fe:c5:66:1d: 0c:d8:8c:51:96:93:16:68:2d:d6:6d:0a:93:1c:9f: 5c:12:9d:3e:12:79:7e:43:43:5a:7d:5b:66:2e:a4: 8f:3e:5d:3b:93:11:af:81:2e:fe:1c:c0:bb:28:3d: b2:6c:50:56:82:0d:66:ba:9a:91:5f:29:29:ff:0b: b4:bd:41:96:35:4f:5b:a4:e6:95:cf:cd:71:af:a4: 4e:fd:b6:9b:2b:0b:e2:28:b0:c4:3e:a7:2c:61:91: 81:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:7E:14:83:FC:37:28:D1:2F:A2:3D:E2:A1:47:80:1F:46:FD:F5:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1009cd0b-9971-3e8d-954c-5334aab05cba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:e5:82:68:20:d4:f7:4d:f1:c5:88:f3:d8:48:ee:43:45:d1: af:e0:e2:89:a0:6d:62:f5:8b:f5:64:1b:aa:42:1d:34:9b:da: 5d:27:99:2a:cf:5d:26:06:5b:28:26:36:38:1f:f1:57:df:c1: 87:03:b0:5a:ce:df:66:a4:02:8d:f8:74:14:be:7b:2e:94:99: 5f:1c:d3:3c:17:23:09:10:f9:da:81:e5:63:20:bb:09:cd:e4: 1a:db:f6:70:f1:d5:eb:fc:8b:f7:21:62:d0:fe:10:58:b7:9b: 5d:17:c6:d5:d1:6d:10:37:90:9c:2b:3a:fa:d8:66:a8:b4:3f: b1:b8:29:6f:36:d6:80:7f:a3:37:98:ae:73:7e:53:17:e0:30: 87:2b:cf:d2:d1:b5:b6:5a:0f:29:7e:58:bc:cf:bd:ab:37:d7: 92:9c:8f:ec:0b:1b:e5:af:58:33:d7:8f:6c:66:0e:ba:cf:ed: 33:29:c3:6c:d6:88:91:8a:95:d4:19:ea:f7:c2:9b:ab:b0:06: 36:0a:ee:66:f2:e9:d1:b4:77:15:e7:ff:39:db:32:7d:11:3c: 79:42:48:b7:91:74:1a:03:0c:07:51:b1:18:7e:8b:ef:03:b8: 5b:c0:58:4c:ea:f7:7f:f8:ef:3e:0a:fc:7e:2a:e5:1e:e6:dc: f5:65:08:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0nL8LJnAJguWpUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk MjFjMjBiMTgtYTllYi00YWIzLWI4NjUtODczMzYyYzhmMDZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8dD4wtyUkYltm8vBbgyOdpGIXiwan71Jxt2 yFpQTs9eZIaOP3+L4ZMGwl22U5OzJ/yCF6gJnCiKav8zffs10SNBGo2n9isk+tL8 ri6YMU9yGFmeQvq185Zs1oy2Q/pPPT7dMH/hVR5c1Wr0i3V9nOUZMj2rYGmtpglj FojlXdYWKjxd/r0DMUnXj9zCLF6DOPkRR+zhu7mSrZe/3f3SAP7FZh0M2IxRlpMW aC3WbQqTHJ9cEp0+Enl+Q0NafVtmLqSPPl07kxGvgS7+HMC7KD2ybFBWgg1mupqR Xykp/wu0vUGWNU9bpOaVz81xr6RO/babKwviKLDEPqcsYZGB6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLR+FIP8NyjRL6I94qFHgB9G/fUoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMTAwOWNkMGItOTk3MS0z ZThkLTk1NGMtNTMzNGFhYjA1Y2JhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFe5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFflgmgg1PdN8cWI89hI7kNF0a/g4omgbWL1i/VkG6pCHTSb2l0nmSrP XSYGWygmNjgf8VffwYcDsFrO32akAo34dBS+ey6UmV8c0zwXIwkQ+dqB5WMguwnN 5Brb9nDx1ev8i/chYtD+EFi3m10XxtXRbRA3kJwrOvrYZqi0P7G4KW821oB/ozeY rnN+UxfgMIcrz9LRtbZaDyl+WLzPvas315Kcj+wLG+WvWDPXj2xmDrrP7TMpw2zW iJGKldQZ6vfCm6uwBjYK7mby6dG0dxXn/znbMn0RPHlCSLeRdBoDDAdRsRh+i+8D uFvAWEzq93/47z4K/H4q5R7m3PVlCNY= -----END CERTIFICATE-----Generated at Wed Nov 5 12:45:53 2025 by rpki-client