$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1838690d-f3a0-35fa-9624-1e158147f08c.roa File: 1838690d-f3a0-35fa-9624-1e158147f08c.roa (raw, json) Hash identifier: 2V9FuNpZEQbD6s0vpuUg6N9x2VlVO8rZmHfs7VUcAAg= Subject key identifier: 36:6C:8A:0B:04:40:44:64:4E:9E:1E:3C:D5:84:35:41:EA:E5:25:D6 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584BB2F7D3503DFAB115910CCE40 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1838690d-f3a0-35fa-9624-1e158147f08c.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 203 IP address blocks: 204.105.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:d3:50:3d:fa:b1:15:91:0c:ce:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=0106f8c7-83e3-4187-81d6-f2f3bbe5d7fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c6:67:06:1b:ff:0a:37:61:56:e0:d2:53:e0: 72:cd:5a:33:8e:ab:fb:df:69:01:d9:0f:5f:ac:20: 4a:4b:53:8d:9b:e8:25:27:ad:f0:60:7f:61:19:c8: 78:5f:ed:f2:80:2d:7a:75:5b:58:2e:81:7c:ea:98: 00:5d:06:df:18:d9:cf:5a:9e:c4:55:68:c6:93:dd: a4:90:04:e9:44:65:e2:6a:22:09:09:23:cc:1d:bb: d6:3a:6d:69:bc:fe:66:e0:87:15:b7:b6:a4:d9:a5: 89:73:99:96:e1:8b:13:7d:23:81:59:ef:d2:4a:11: e5:3b:6d:cd:7f:be:ea:60:47:71:27:e6:f2:98:1a: 86:6b:08:63:ad:5d:38:c5:57:a9:bf:62:46:7c:d9: ba:57:98:58:68:6a:92:9e:81:7e:14:f4:4e:d3:fb: 60:e8:cb:77:ac:65:6c:1c:56:8f:05:da:77:d8:00: ed:b0:c2:d4:e1:66:ec:6b:9d:b6:35:36:ff:f0:70: a0:23:c3:27:b3:59:54:2a:46:cd:bd:29:0f:aa:07: ba:81:7c:6e:57:db:70:55:55:a8:72:ed:f1:17:a4: 78:ff:72:66:43:7c:1b:a4:24:b0:be:00:3a:38:78: 25:95:a0:bb:d8:33:34:38:6c:1a:21:14:ce:b1:87: a5:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:6C:8A:0B:04:40:44:64:4E:9E:1E:3C:D5:84:35:41:EA:E5:25:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1838690d-f3a0-35fa-9624-1e158147f08c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 204.105.118.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:9c:83:fb:ec:f5:b1:44:31:5c:c6:d5:89:7b:15:58:67:8b: 6d:1c:ed:94:cf:10:03:a1:fc:fb:16:2b:ba:14:e3:be:b2:c9: 45:9e:2e:e0:b5:1b:c9:26:63:db:4b:93:73:65:d7:a0:84:19: e9:65:42:46:77:22:2e:76:6d:52:f0:f8:2e:d0:2b:4d:d3:cd: 35:80:14:d7:10:cd:e7:3e:2c:e6:0f:32:22:b0:1f:26:0f:78: cf:25:b3:e8:45:7b:17:45:42:56:75:7c:c0:aa:9d:bf:31:31: 63:7e:97:de:ba:b9:24:e2:b6:55:95:47:48:48:23:7f:ad:80: 57:30:11:c9:a6:1e:43:d8:4e:4b:c7:2e:a8:73:40:6e:c9:0e: 78:32:ea:80:19:49:26:11:52:2a:21:69:b8:f9:b6:de:19:ec: a6:8a:26:b2:08:b2:93:6a:33:a6:f1:4b:e6:cd:2c:76:ee:60: 68:d3:18:14:ee:9c:b6:81:43:b2:31:0a:09:3f:9d:70:17:d2: 26:1c:0f:31:30:a8:8c:dc:1b:75:91:2e:1b:4f:5f:49:1d:b3: 00:9b:f6:ab:a5:69:ed:f8:35:a7:68:92:b8:42:5d:94:0d:a1: d2:aa:82:ba:09:26:ec:26:65:6f:d0:32:7f:ce:c0:3e:92:81: e0:ad:a2:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy99NQPfqxFZEMzkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk MDEwNmY4YzctODNlMy00MTg3LTgxZDYtZjJmM2JiZTVkN2ZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8ZnBhv/CjdhVuDSU+ByzVozjqv732kB2Q9f rCBKS1ONm+glJ63wYH9hGch4X+3ygC16dVtYLoF86pgAXQbfGNnPWp7EVWjGk92k kATpRGXiaiIJCSPMHbvWOm1pvP5m4IcVt7ak2aWJc5mW4YsTfSOBWe/SShHlO23N f77qYEdxJ+bymBqGawhjrV04xVepv2JGfNm6V5hYaGqSnoF+FPRO0/tg6Mt3rGVs HFaPBdp32ADtsMLU4Wbsa522NTb/8HCgI8Mns1lUKkbNvSkPqge6gXxuV9twVVWo cu3xF6R4/3JmQ3wbpCSwvgA6OHgllaC72DM0OGwaIRTOsYelSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDZsigsEQERkTp4ePNWENUHq5SXWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMTgzODY5MGQtZjNhMC0z NWZhLTk2MjQtMWUxNTgxNDdmMDhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGl2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHmcg/vs9bFEMVzG1Yl7FVhni20c7ZTPEAOh/PsWK7oU476yyUWeLuC1 G8kmY9tLk3Nl16CEGellQkZ3Ii52bVLw+C7QK03TzTWAFNcQzec+LOYPMiKwHyYP eM8ls+hFexdFQlZ1fMCqnb8xMWN+l966uSTitlWVR0hII3+tgFcwEcmmHkPYTkvH LqhzQG7JDngy6oAZSSYRUiohabj5tt4Z7KaKJrIIspNqM6bxS+bNLHbuYGjTGBTu nLaBQ7IxCgk/nXAX0iYcDzEwqIzcG3WRLhtPX0kdswCb9qulae34NadokrhCXZQN odKqgroJJuwmZW/QMn/OwD6SgeCtomo= -----END CERTIFICATE-----Generated at Tue Nov 4 23:27:32 2025 by rpki-client