$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2df95585-ce30-38a7-8aba-14f782b87a34.roa File: 2df95585-ce30-38a7-8aba-14f782b87a34.roa (raw, json) Hash identifier: A8Re4nQUig8ykcqPV2O/+w1mOcIRSctIFRupwN8fmrg= Subject key identifier: F6:A5:6D:4B:68:1F:28:CE:17:DE:A6:2A:AB:03:53:00:FC:CB:AB:40 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584BA0D271DAB6F1F4E946797280 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2df95585-ce30-38a7-8aba-14f782b87a34.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 16509 IP address blocks: 168.87.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:71:da:b6:f1:f4:e9:46:79:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=52e90ef3-74ee-4332-88e1-932009908a3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:1b:d3:16:8f:86:44:d3:05:79:16:1d:b6:51: d8:ff:9d:a5:07:e3:27:ef:0e:f0:70:6d:b0:45:35: 16:a5:d5:32:b0:5c:52:fb:2c:33:00:aa:a6:a6:ae: e0:65:77:1a:49:cc:da:4c:ad:b5:52:c5:fc:27:94: 0c:ba:4e:7c:5f:26:c8:0f:14:85:5f:bb:cf:e8:6d: af:e6:ba:5c:db:78:0f:a7:46:af:8c:61:5b:72:c6: f5:38:6b:d8:39:ce:22:dc:e8:c5:51:d6:66:4f:00: bf:e8:97:18:ea:cb:c6:a9:35:50:62:dc:a5:3b:37: 60:40:64:b3:2c:df:00:2c:74:6c:41:45:da:47:e8: 8d:63:3c:87:ea:84:a7:99:ce:1c:fd:66:da:9f:dd: 6b:89:29:31:65:52:90:3b:db:4f:b0:4a:20:d0:bd: 18:a9:31:a5:76:34:ce:45:d8:09:dd:cc:60:63:28: a4:0f:5d:9b:79:40:c8:49:e8:f2:26:3b:26:25:c1: 69:cf:6c:14:88:cb:7e:82:dc:18:1c:5e:1c:2a:67: 6b:58:ed:32:64:a5:6f:b1:05:a3:9d:75:69:00:04: ea:47:12:d4:4d:76:5c:40:0e:41:3f:9c:02:ed:be: 92:81:d5:4f:09:8c:54:34:0f:12:12:ec:a0:f5:36: fa:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:A5:6D:4B:68:1F:28:CE:17:DE:A6:2A:AB:03:53:00:FC:CB:AB:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2df95585-ce30-38a7-8aba-14f782b87a34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:d9:4a:fd:67:f4:d3:3b:28:ed:d3:29:46:0b:1c:ce:27:37: 26:aa:9f:5b:70:d9:5f:88:f3:7e:bc:34:ed:19:26:15:56:7b: 3a:5b:94:02:a2:a1:c4:44:78:3f:e6:61:ec:4a:96:4f:5b:20: e6:29:85:d8:8a:3a:b2:44:4f:cb:8e:e8:20:b4:4b:73:10:98: e7:29:1a:74:a0:13:36:3c:0b:b0:6b:fb:72:13:5b:92:c0:c5: a2:ef:dc:75:1d:56:30:ad:01:23:6e:b6:ea:81:6c:7f:0e:5f: 8c:d5:a6:17:1f:5a:65:af:1b:0c:b5:cf:5d:04:ed:92:a4:bb: b0:e1:3b:88:c2:20:ca:1f:bc:0b:f9:f1:8e:19:8c:77:49:83: 56:c8:e1:3e:53:54:d3:e2:46:f7:63:ff:38:4c:f7:d7:94:5b: d4:06:06:62:08:2e:0b:25:36:cb:62:e8:0a:0d:67:f0:01:03: d7:d9:7b:b4:e6:d3:80:c0:7c:a4:14:e6:f0:16:f3:fa:c5:fc: 0a:81:cb:37:34:33:c4:8f:6f:4c:5f:a9:6c:99:eb:b8:e4:66: b7:b6:85:19:24:70:7d:6b:6b:33:42:01:df:04:69:53:52:51: 29:02:2f:aa:df:ec:1f:8a:4a:d4:de:60:99:0d:c9:d6:6b:74: 3a:f3:9a:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0nHatvH06UZ5coAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk NTJlOTBlZjMtNzRlZS00MzMyLTg4ZTEtOTMyMDA5OTA4YTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxvTFo+GRNMFeRYdtlHY/52lB+Mn7w7wcG2w RTUWpdUysFxS+ywzAKqmpq7gZXcaSczaTK21UsX8J5QMuk58XybIDxSFX7vP6G2v 5rpc23gPp0avjGFbcsb1OGvYOc4i3OjFUdZmTwC/6JcY6svGqTVQYtylOzdgQGSz LN8ALHRsQUXaR+iNYzyH6oSnmc4c/Wban91riSkxZVKQO9tPsEog0L0YqTGldjTO RdgJ3cxgYyikD12beUDISejyJjsmJcFpz2wUiMt+gtwYHF4cKmdrWO0yZKVvsQWj nXVpAATqRxLUTXZcQA5BP5wC7b6SgdVPCYxUNA8SEuyg9Tb6JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPalbUtoHyjOF96mKqsDUwD8y6tAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMmRmOTU1ODUtY2UzMC0z OGE3LThhYmEtMTRmNzgyYjg3YTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFesMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAzZSv1n9NM7KO3TKUYLHM4nNyaqn1tw2V+I8368NO0ZJhVWezpblAKi ocREeD/mYexKlk9bIOYphdiKOrJET8uO6CC0S3MQmOcpGnSgEzY8C7Br+3ITW5LA xaLv3HUdVjCtASNutuqBbH8OX4zVphcfWmWvGwy1z10E7ZKku7DhO4jCIMofvAv5 8Y4ZjHdJg1bI4T5TVNPiRvdj/zhM99eUW9QGBmIILgslNsti6AoNZ/ABA9fZe7Tm 04DAfKQU5vAW8/rF/AqByzc0M8SPb0xfqWyZ67jkZre2hRkkcH1razNCAd8EaVNS USkCL6rf7B+KStTeYJkNydZrdDrzmmo= -----END CERTIFICATE-----Generated at Wed Nov 5 11:12:12 2025 by rpki-client