$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2e7fd385-e819-31ca-afc2-f2349353a7a9.roa File: 2e7fd385-e819-31ca-afc2-f2349353a7a9.roa (raw, json) Hash identifier: KtCb/P0btnJ4KBs2E4iLFC6I6CZ+AwQLaSxYnRKaay0= Subject key identifier: 92:AF:11:B2:62:6A:57:88:3F:BB:43:C4:0F:55:B9:19:A2:7D:EA:06 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584B4A4725D79CC525739A594520 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2e7fd385-e819-31ca-afc2-f2349353a7a9.roa Signing time: Tue 23 Sep 2025 13:00:40 +0000 ROA not before: Tue 23 Sep 2025 13:00:40 +0000 ROA not after: Mon 22 Dec 2025 14:00:40 +0000 asID: 202 IP address blocks: 204.104.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4a:47:25:d7:9c:c5:25:73:9a:59:45:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 23 13:00:40 2025 GMT Not After : Dec 22 14:00:40 2025 GMT Subject: CN=44818ded-aadd-4d58-bd80-382a844e5e42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:7c:22:08:6f:d6:d3:a3:f8:e4:6c:c5:0b:6e: c5:c1:01:8a:6e:c9:7a:27:22:c4:a5:8e:9f:75:6a: a2:5a:63:7a:be:66:5f:3d:13:44:a3:74:93:c4:03: 6a:2b:da:8c:81:3e:a2:e7:d4:da:d0:b7:d2:df:91: 58:52:b6:01:4e:bf:ef:ec:00:88:c2:30:81:b6:e5: 29:96:e8:22:00:b0:f7:36:29:59:a9:51:a1:42:41: ed:bc:95:b3:a8:d7:72:23:56:c2:7d:b4:07:f7:ff: bc:35:66:e6:19:5b:b7:4f:06:c2:75:92:f4:93:6c: f4:cd:5d:76:4f:07:8b:6a:04:49:68:74:4c:f4:8e: c2:a6:fb:27:a6:0d:f7:fb:c2:ce:0e:71:c8:fa:be: a6:90:a5:41:82:74:a5:56:ec:89:85:53:f7:31:c6: 6f:5a:bd:62:b3:2a:53:3c:3d:42:45:cf:17:0b:1a: dd:3c:41:a9:0b:58:10:7c:2c:00:d4:fd:13:e0:9e: 88:79:73:70:15:6f:df:52:a2:40:e2:0b:10:c2:55: 66:88:a3:47:0b:a9:51:5d:6e:bd:90:94:ae:34:56: 0a:15:eb:5f:12:a8:1d:ab:3c:38:7d:05:c5:5d:98: 2b:37:07:d7:19:ec:8a:0d:02:82:c7:47:f1:18:bd: f4:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:AF:11:B2:62:6A:57:88:3F:BB:43:C4:0F:55:B9:19:A2:7D:EA:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2e7fd385-e819-31ca-afc2-f2349353a7a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 204.104.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:c4:e8:2b:bc:da:48:f3:dc:95:9f:89:b4:9d:5e:17:26:12: aa:34:4d:c1:ac:7c:3c:12:d1:c6:66:e5:ef:07:45:2e:a8:c1: 2b:fc:ed:9d:bf:59:6d:1b:c8:67:b7:1c:c5:aa:6d:97:90:21: f6:18:aa:99:dd:34:df:88:4d:cd:29:72:11:fa:eb:22:bc:ae: 47:54:4a:41:2a:83:33:ee:5a:d2:6b:9b:06:1d:00:b0:33:8a: c8:7e:3b:00:eb:16:cc:9f:4f:93:fe:84:4f:c1:b9:b5:e8:73: d9:ed:36:45:e9:47:1c:cb:33:d8:71:d2:79:ab:d0:e6:d4:6b: 51:2d:9c:36:90:2a:42:a9:a3:aa:ff:9f:36:01:e1:06:3c:68: ca:c0:76:40:90:d1:09:c2:dc:3c:57:a3:47:1a:7a:eb:d9:b4: 9d:6a:47:48:2c:78:95:67:8c:3c:75:0e:2f:49:e2:37:f8:a3: e0:55:c3:80:d4:19:84:ac:60:4b:1f:17:7e:59:72:29:80:12: c6:74:47:42:a6:a1:62:9b:bb:b7:50:ab:c9:b9:05:49:1b:73: 2b:c1:77:53:d2:fc:5c:46:40:7e:6a:4e:2e:bb:53:b3:c5:50: a3:8d:ce:d1:5f:22:cc:96:77:27:47:50:a0:4d:50:ee:7f:39: 69:3b:80:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtKRyXXnMUlc5pZRSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDkyMzEzMDA0MFoXDTI1MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk NDQ4MThkZWQtYWFkZC00ZDU4LWJkODAtMzgyYTg0NGU1ZTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHwiCG/W06P45GzFC27FwQGKbsl6JyLEpY6f dWqiWmN6vmZfPRNEo3STxANqK9qMgT6i59Ta0LfS35FYUrYBTr/v7ACIwjCBtuUp lugiALD3NilZqVGhQkHtvJWzqNdyI1bCfbQH9/+8NWbmGVu3TwbCdZL0k2z0zV12 TweLagRJaHRM9I7Cpvsnpg33+8LODnHI+r6mkKVBgnSlVuyJhVP3McZvWr1isypT PD1CRc8XCxrdPEGpC1gQfCwA1P0T4J6IeXNwFW/fUqJA4gsQwlVmiKNHC6lRXW69 kJSuNFYKFetfEqgdqzw4fQXFXZgrNwfXGeyKDQKCx0fxGL30ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJKvEbJialeIP7tDxA9VuRmifeoGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMmU3ZmQzODUtZTgxOS0z MWNhLWFmYzItZjIzNDkzNTNhN2E5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGgLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC/E6Cu82kjz3JWfibSdXhcmEqo0TcGsfDwS0cZm5e8HRS6owSv87Z2/ WW0byGe3HMWqbZeQIfYYqpndNN+ITc0pchH66yK8rkdUSkEqgzPuWtJrmwYdALAz ish+OwDrFsyfT5P+hE/BubXoc9ntNkXpRxzLM9hx0nmr0ObUa1EtnDaQKkKpo6r/ nzYB4QY8aMrAdkCQ0QnC3DxXo0caeuvZtJ1qR0gseJVnjDx1Di9J4jf4o+BVw4DU GYSsYEsfF35ZcimAEsZ0R0KmoWKbu7dQq8m5BUkbcyvBd1PS/FxGQH5qTi67U7PF UKONztFfIsyWdydHUKBNUO5/OWk7gMA= -----END CERTIFICATE-----Generated at Tue Nov 4 21:43:36 2025 by rpki-client