$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/22cbb97d-8976-3da8-8dc7-bcd90cf703d2.roa File: 22cbb97d-8976-3da8-8dc7-bcd90cf703d2.roa (raw, json) Hash identifier: hiISBWAgke4gwG96teIITVDxQbQIUe0iutr3rMwCw6c= Subject key identifier: 21:DA:CB:A0:78:C4:F2:43:77:AB:E7:D8:E4:C2:80:27:4E:B2:A2:26 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584BB2F7D182E9D10B887D0AF180 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/22cbb97d-8976-3da8-8dc7-bcd90cf703d2.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 3356 IP address blocks: 168.87.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:d1:82:e9:d1:0b:88:7d:0a:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=2a2265e7-e383-4fa9-b207-f43000cf82a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:a9:48:ed:95:41:79:0c:66:0d:41:16:26:56: 95:e5:5c:7d:3f:dc:ba:5f:80:da:78:b7:73:2b:91: d2:7a:5f:62:21:12:41:7a:10:0a:1d:6a:66:88:a8: 50:ca:a8:7a:04:e9:fe:4d:a9:cf:3e:ea:9b:f0:e9: 3f:e2:9e:51:a5:78:59:45:d2:c6:0c:93:e8:3b:e2: 32:41:4e:c5:10:66:ad:c8:98:1c:44:d9:9d:9c:62: 9b:fc:29:4b:32:12:47:21:48:20:69:e4:73:72:76: 92:05:e8:95:22:f5:7b:ff:d0:72:96:83:0a:20:d7: 41:70:2a:54:5a:7a:d7:f7:82:7c:fe:f1:14:e1:93: 60:32:ca:13:7f:38:fd:87:e3:3f:cf:28:cb:96:b0: f8:7d:6f:42:81:1d:55:5f:26:73:37:d3:93:08:2d: f4:0d:de:8e:2d:82:b1:56:48:80:df:90:5e:45:45: a7:ce:66:cb:15:4a:ed:e4:3c:c9:63:7e:f8:57:80: e1:a1:05:4a:e9:3c:ae:9b:60:f2:6f:4f:6d:4e:f8: 76:da:d7:b3:57:9a:b1:c0:ee:96:46:b2:0c:9f:f7: 61:33:5a:32:85:71:76:14:bf:7a:27:c1:74:ae:a0: ec:a5:0c:7f:66:99:b9:02:8c:d8:8f:55:35:01:be: 60:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:DA:CB:A0:78:C4:F2:43:77:AB:E7:D8:E4:C2:80:27:4E:B2:A2:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/22cbb97d-8976-3da8-8dc7-bcd90cf703d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:16:2d:4e:66:08:bd:33:5b:7f:46:60:31:1b:60:d2:62:d8: a5:5c:e8:f2:b8:3c:0e:7c:be:32:27:11:dc:2b:51:27:9b:93: 91:b9:5f:73:6c:f6:5c:68:bc:55:4a:57:4f:b8:9c:a9:47:d3: 00:2d:3a:5d:1c:54:63:3f:a1:f2:72:fe:d8:e3:e5:d3:a5:a7: 4a:1f:79:74:95:59:bf:01:6f:79:95:e0:7d:b6:e2:fc:95:cc: 5d:f1:e7:2c:f6:22:ae:87:c8:eb:6a:a4:98:8f:5b:e9:bd:f7: b5:d0:ff:ff:3f:e4:cf:64:5a:a3:7e:c8:dd:4a:ba:a7:90:50: 45:49:2b:cf:2a:d1:71:35:87:eb:86:e0:56:38:39:f7:04:e4: 2d:44:da:fd:61:14:57:29:8d:3f:d0:e4:de:c3:c6:99:77:17: 1c:d4:a6:93:e5:06:60:ea:b7:d9:ad:82:03:4f:a6:7e:a1:e8: 9f:53:89:e7:c2:e3:18:31:a5:0b:10:3d:51:00:62:07:fc:fb: 73:f1:7b:d6:93:a2:ed:4d:7e:56:3d:ac:35:b0:cd:78:b6:f5: f6:1d:2f:b3:e6:61:88:94:a9:78:7c:a5:83:bd:eb:ca:e6:d1: 3d:86:44:a8:78:d5:46:5f:8a:8d:da:62:dd:4e:5e:2d:49:8c: 2b:92:7e:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy99GC6dELiH0K8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk MmEyMjY1ZTctZTM4My00ZmE5LWIyMDctZjQzMDAwY2Y4MmEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhalI7ZVBeQxmDUEWJlaV5Vx9P9y6X4DaeLdz K5HSel9iIRJBehAKHWpmiKhQyqh6BOn+TanPPuqb8Ok/4p5RpXhZRdLGDJPoO+Iy QU7FEGatyJgcRNmdnGKb/ClLMhJHIUggaeRzcnaSBeiVIvV7/9ByloMKINdBcCpU WnrX94J8/vEU4ZNgMsoTfzj9h+M/zyjLlrD4fW9CgR1VXyZzN9OTCC30Dd6OLYKx VkiA35BeRUWnzmbLFUrt5DzJY374V4DhoQVK6Tyum2Dyb09tTvh22tezV5qxwO6W RrIMn/dhM1oyhXF2FL96J8F0rqDspQx/Zpm5AozYj1U1Ab5gvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCHay6B4xPJDd6vn2OTCgCdOsqImMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMjJjYmI5N2QtODk3Ni0z ZGE4LThkYzctYmNkOTBjZjcwM2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFeCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACoWLU5mCL0zW39GYDEbYNJi2KVc6PK4PA58vjInEdwrUSebk5G5X3Ns 9lxovFVKV0+4nKlH0wAtOl0cVGM/ofJy/tjj5dOlp0ofeXSVWb8Bb3mV4H224vyV zF3x5yz2Iq6HyOtqpJiPW+m997XQ//8/5M9kWqN+yN1KuqeQUEVJK88q0XE1h+uG 4FY4OfcE5C1E2v1hFFcpjT/Q5N7Dxpl3FxzUppPlBmDqt9mtggNPpn6h6J9TiefC 4xgxpQsQPVEAYgf8+3Pxe9aTou1NflY9rDWwzXi29fYdL7PmYYiUqXh8pYO968rm 0T2GRKh41UZfio3aYt1OXi1JjCuSfsw= -----END CERTIFICATE-----Generated at Tue Nov 4 22:41:35 2025 by rpki-client