$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2dce18db-f198-3fc7-ad9b-6ff68946a3b8.roa File: 2dce18db-f198-3fc7-ad9b-6ff68946a3b8.roa (raw, json) Hash identifier: gxSM1XxnwUUoL+7FJyqALINrTq0EgxhKKu3H1j9OiA8= Subject key identifier: 6F:05:8E:CC:44:8B:34:95:9D:1D:9C:24:29:7E:AB:19:0C:09:3C:C4 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584BB2F7C000D0C65CA6A8B68EE0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2dce18db-f198-3fc7-ad9b-6ff68946a3b8.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 3356 IP address blocks: 168.87.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:c0:00:d0:c6:5c:a6:a8:b6:8e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=9c9d7f65-befd-4329-9dcb-2fea48c0c9d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:e3:09:ef:43:b2:04:92:39:ab:b8:e6:ee:1e: 30:28:fc:2b:05:83:22:04:d1:32:1c:99:ef:c2:5f: 47:ae:59:a5:32:ee:2a:7d:db:9e:ce:eb:58:ea:15: f8:86:05:df:af:14:56:f9:93:e4:a6:3a:4b:b2:f7: d2:17:6d:07:ff:69:17:85:09:10:9b:e6:22:4f:14: 15:23:da:7e:68:9f:bb:fa:83:33:56:8e:19:85:5b: f7:1b:01:4d:53:09:25:22:f4:6d:f3:d0:15:cb:bb: 0c:8b:1e:72:03:12:39:5e:cc:bc:4a:c5:2b:3d:83: 60:d5:e0:b6:a9:da:1d:22:26:78:54:16:a9:99:23: a0:fe:ec:2a:44:51:da:95:eb:ca:38:2d:11:e7:ba: cd:66:bf:0a:ea:3f:08:2b:76:50:15:66:e7:cc:d1: 2b:e4:19:0a:31:af:52:73:31:88:8d:9a:8e:db:bd: 7a:e6:0d:b3:41:4f:c9:d8:fc:4f:ed:1a:56:3c:d4: 19:9b:d7:54:c5:dd:6c:4f:14:c4:b3:9e:90:3c:c3: 3f:24:99:6b:63:a2:85:54:64:61:5f:bc:8b:49:1d: 48:19:2a:84:77:81:48:0b:4b:6c:69:0d:fc:e2:33: 9c:79:29:a2:2a:32:37:0d:34:8d:89:33:ea:57:bd: 1d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:05:8E:CC:44:8B:34:95:9D:1D:9C:24:29:7E:AB:19:0C:09:3C:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2dce18db-f198-3fc7-ad9b-6ff68946a3b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.160.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:f0:31:c1:72:4b:ec:00:4d:57:24:58:48:3f:87:21:5b:e5: 96:d1:23:62:49:f4:64:d1:bc:20:75:5a:66:68:96:39:8d:69: 1c:18:e4:2b:9b:a1:b4:24:cd:92:a7:db:36:50:db:f2:1f:9d: 33:72:2f:af:bd:53:d3:ff:60:2f:bc:b2:e2:63:13:f9:40:e0: 7f:bc:ad:1a:d6:b3:ea:87:14:c7:db:7d:81:71:55:d9:21:e0: f0:b5:59:9c:08:c2:f5:fb:06:4c:43:6d:65:5b:7b:d2:51:dc: 93:09:4c:0c:46:19:09:a2:91:6b:70:b7:aa:b5:5a:22:73:fa: 5a:45:3e:73:6d:4b:b7:97:ea:43:2e:f8:e0:07:19:75:36:24: 72:d3:a7:ae:d7:41:bb:44:79:f4:f7:fa:a0:78:59:dd:01:5a: 15:57:0a:2f:46:e3:d1:35:a0:33:d8:62:57:87:35:6d:34:ea: d3:9d:bc:d1:2d:9c:d8:2a:0e:0c:5e:b5:71:4a:23:d2:29:ad: 05:a6:21:41:8e:62:2a:be:7b:0d:fa:1c:21:21:a5:d0:97:e4: b9:fe:64:4a:97:b4:97:b2:f5:03:fa:26:3f:5e:14:4c:42:45: 46:c3:6c:ae:a2:ba:01:bd:6e:90:b8:d0:61:05:0f:df:f8:61: ef:9a:cc:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy98AA0MZcpqi2juAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk OWM5ZDdmNjUtYmVmZC00MzI5LTlkY2ItMmZlYTQ4YzBjOWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3uMJ70OyBJI5q7jm7h4wKPwrBYMiBNEyHJnv wl9HrlmlMu4qfduezutY6hX4hgXfrxRW+ZPkpjpLsvfSF20H/2kXhQkQm+YiTxQV I9p+aJ+7+oMzVo4ZhVv3GwFNUwklIvRt89AVy7sMix5yAxI5Xsy8SsUrPYNg1eC2 qdodIiZ4VBapmSOg/uwqRFHalevKOC0R57rNZr8K6j8IK3ZQFWbnzNEr5BkKMa9S czGIjZqO27165g2zQU/J2PxP7RpWPNQZm9dUxd1sTxTEs56QPMM/JJlrY6KFVGRh X7yLSR1IGSqEd4FIC0tsaQ384jOceSmiKjI3DTSNiTPqV70dTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG8FjsxEizSVnR2cJCl+qxkMCTzEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMmRjZTE4ZGItZjE5OC0z ZmM3LWFkOWItNmZmNjg5NDZhM2I4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqFegMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzwMcFyS+wATVckWEg/hyFb5ZbRI2JJ9GTRvCB1WmZoljmNaRwY5Cub obQkzZKn2zZQ2/IfnTNyL6+9U9P/YC+8suJjE/lA4H+8rRrWs+qHFMfbfYFxVdkh 4PC1WZwIwvX7BkxDbWVbe9JR3JMJTAxGGQmikWtwt6q1WiJz+lpFPnNtS7eX6kMu +OAHGXU2JHLTp67XQbtEefT3+qB4Wd0BWhVXCi9G49E1oDPYYleHNW006tOdvNEt nNgqDgxetXFKI9IprQWmIUGOYiq+ew36HCEhpdCX5Ln+ZEqXtJey9QP6Jj9eFExC RUbDbK6iugG9bpC40GEFD9/4Ye+azAQ= -----END CERTIFICATE-----Generated at Wed Nov 5 00:33:35 2025 by rpki-client