$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/18900fde-da30-3fdd-80da-d78090baa1d7.roa File: 18900fde-da30-3fdd-80da-d78090baa1d7.roa (raw, json) Hash identifier: wM4CIiIX9SO1Arx9TdYoxlgpd9flcTqYFJL3JjJhjkQ= Subject key identifier: 52:71:09:7F:CF:7F:F6:2A:D1:49:2D:36:FD:CF:79:11:3C:E5:24:E8 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584BA0D2722948CF3C68D2EF7800 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/18900fde-da30-3fdd-80da-d78090baa1d7.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 14618 IP address blocks: 168.87.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:72:29:48:cf:3c:68:d2:ef:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=75992b9e-0db7-4542-9f4b-c897827c2841 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e9:33:ca:30:36:48:df:00:e0:1c:89:c9:fc: d5:e7:cf:ae:81:4a:04:50:fb:ed:e7:47:00:ae:1d: fb:e4:d0:a1:0d:a3:e2:54:5a:cc:1b:43:81:27:83: 8b:ef:f4:b3:ab:f8:a1:aa:a8:40:91:95:03:8a:94: 6d:c1:eb:aa:75:fe:67:00:67:c0:4f:f4:7a:9a:2e: 46:14:af:c2:31:f5:77:ca:01:18:35:c8:6d:d1:e9: cc:59:e3:a5:5f:6d:bc:3c:dd:84:d9:80:68:50:69: 26:9d:f9:ce:3a:1e:fc:c5:f5:1a:85:c8:f9:6f:45: d5:85:25:3b:da:7c:cc:48:b1:11:91:4f:40:f6:70: 24:5b:d5:87:67:d3:f6:4c:9f:3e:15:ed:c0:ac:a8: 4b:5f:c6:ae:5a:f4:28:06:b3:39:88:5e:53:88:43: 50:36:b9:18:ba:6a:52:8b:1b:4c:c4:ac:18:df:37: f3:ac:64:97:b9:d4:78:3e:ab:02:01:21:fd:e0:dd: f0:05:c3:a4:84:f7:12:8a:ec:fb:ac:cf:ef:b2:02: 40:43:c1:3c:46:3a:8f:8a:75:bb:dd:f8:95:27:ad: d0:24:77:f7:df:f5:db:cd:f0:e3:ef:2c:c9:8b:80: 28:a4:b2:1e:1f:f3:bb:13:5b:e9:4d:5b:20:24:fa: 3b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:71:09:7F:CF:7F:F6:2A:D1:49:2D:36:FD:CF:79:11:3C:E5:24:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/18900fde-da30-3fdd-80da-d78090baa1d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:41:42:0c:6d:e9:d1:89:f4:87:9d:97:06:a5:21:7e:34:b9: 16:98:d2:c2:20:f3:9e:00:f1:77:ed:af:1e:a2:95:de:3a:a3: e1:58:0a:e5:21:23:5d:75:e3:b9:ec:f9:22:35:79:a8:82:8a: 18:67:3f:8d:64:e1:61:73:cb:b6:57:25:e5:c9:1d:fd:f4:45: 1c:3a:cd:de:7c:8e:ba:bf:de:12:1e:52:a8:c8:83:8f:62:cc: c1:9a:a7:b7:61:8f:48:b0:d8:b8:75:ba:60:c0:85:0d:d0:67: b7:20:51:db:af:91:8f:ec:86:62:0d:ec:d1:9e:67:13:af:0a: 86:05:70:73:54:ae:76:d1:2e:28:bb:d9:9b:d4:ba:ff:d0:ec: 6d:6a:8d:d2:22:47:ed:64:ff:52:03:e4:aa:67:c5:7d:e5:b7: 96:06:e5:7e:e7:e3:fc:48:26:9f:8c:0a:be:bf:ef:99:79:19: 85:b7:7a:d4:b6:c7:a1:55:81:56:9b:b2:12:95:1f:cc:7b:80: f0:6c:7c:e3:50:20:97:77:df:89:ae:60:61:6a:f3:54:6f:11: 08:36:96:69:08:2e:86:b8:92:f0:6f:66:2c:67:a0:79:e0:e7: c8:ec:85:f3:c7:49:81:0a:80:1e:ae:73:53:47:16:ab:2d:1d: 58:b8:32:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0nIpSM88aNLveAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk NzU5OTJiOWUtMGRiNy00NTQyLTlmNGItYzg5NzgyN2MyODQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+kzyjA2SN8A4ByJyfzV58+ugUoEUPvt50cA rh375NChDaPiVFrMG0OBJ4OL7/Szq/ihqqhAkZUDipRtweuqdf5nAGfAT/R6mi5G FK/CMfV3ygEYNcht0enMWeOlX228PN2E2YBoUGkmnfnOOh78xfUahcj5b0XVhSU7 2nzMSLERkU9A9nAkW9WHZ9P2TJ8+Fe3ArKhLX8auWvQoBrM5iF5TiENQNrkYumpS ixtMxKwY3zfzrGSXudR4PqsCASH94N3wBcOkhPcSiuz7rM/vsgJAQ8E8RjqPinW7 3fiVJ63QJHf33/XbzfDj7yzJi4AopLIeH/O7E1vpTVsgJPo7JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFJxCX/Pf/Yq0UktNv3PeRE85SToMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMTg5MDBmZGUtZGEzMC0z ZmRkLTgwZGEtZDc4MDkwYmFhMWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFe6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFpBQgxt6dGJ9IedlwalIX40uRaY0sIg854A8Xftrx6ild46o+FYCuUh I11147ns+SI1eaiCihhnP41k4WFzy7ZXJeXJHf30RRw6zd58jrq/3hIeUqjIg49i zMGap7dhj0iw2Lh1umDAhQ3QZ7cgUduvkY/shmIN7NGeZxOvCoYFcHNUrnbRLii7 2ZvUuv/Q7G1qjdIiR+1k/1ID5KpnxX3lt5YG5X7n4/xIJp+MCr6/75l5GYW3etS2 x6FVgVabshKVH8x7gPBsfONQIJd334muYGFq81RvEQg2lmkILoa4kvBvZixnoHng 58jshfPHSYEKgB6uc1NHFqstHVi4MuU= -----END CERTIFICATE-----Generated at Wed Nov 5 04:08:22 2025 by rpki-client