$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/31a7dc63-4267-3715-90ea-778612d26f7b.roa File: 31a7dc63-4267-3715-90ea-778612d26f7b.roa (raw, json) Hash identifier: Qc3mrp5XfI2Vppna6sVBsqJo8SM3H5Gy+MvNAPMN0xI= Subject key identifier: D9:E1:3C:21:21:0B:2F:5E:58:71:C5:EC:DA:61:98:0B:EB:3D:0A:09 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584B5DD1F0E98A54725C39B0D280 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/31a7dc63-4267-3715-90ea-778612d26f7b.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 202 IP address blocks: 207.37.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d1:f0:e9:8a:54:72:5c:39:b0:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=4f3a3c80-4299-43e8-910d-85209c927223 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:39:98:a4:c5:75:0d:64:b5:9f:e3:80:f4:ab: d9:4d:f1:24:62:9c:10:c6:55:e4:cd:83:28:88:0f: 49:0c:51:54:9f:b3:d1:fa:72:20:a1:65:0a:03:fa: f1:f4:1a:82:1a:bb:56:62:a2:da:0e:91:95:d1:4b: 5f:04:c7:26:41:2c:a6:ee:3c:3b:5f:db:1a:01:09: d3:8d:61:6b:d6:9a:8a:54:d0:ca:a3:43:4f:a1:04: ff:04:4a:06:4f:e2:8d:70:df:8d:f3:3a:3a:b0:15: ec:2e:c4:19:70:b2:a9:90:48:65:86:f9:10:6e:5b: e1:1c:f1:de:7c:a9:05:99:6f:2f:0b:d1:37:35:94: cd:27:01:cf:da:09:86:31:26:a5:19:d6:9c:dc:0c: 85:3e:36:0e:49:2b:07:d2:26:78:b1:dd:fe:45:1e: ea:7c:d4:08:3c:2a:16:81:bd:f2:08:a5:24:ed:0f: 38:2a:b2:c3:d5:ae:47:d8:1f:37:80:79:8d:3a:6d: 5a:6d:4a:f3:c6:78:25:3b:5a:2f:9a:67:d9:ed:ae: 1a:7e:5a:00:fd:26:46:9b:a2:31:c2:90:45:2d:1d: 18:ca:09:ae:af:2b:8f:85:48:c7:64:ed:12:21:29: 92:5a:53:a3:0e:d5:ce:4c:7a:dd:79:82:17:8e:6d: 51:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:E1:3C:21:21:0B:2F:5E:58:71:C5:EC:DA:61:98:0B:EB:3D:0A:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/31a7dc63-4267-3715-90ea-778612d26f7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 207.37.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:da:9a:e9:df:bb:80:ae:32:b4:2e:2f:fb:f3:d7:78:fd:a7: bc:40:7f:e1:a8:b8:ef:b0:d0:34:2d:d4:35:29:a4:bb:b8:cd: 2f:30:b8:34:ed:f8:c9:19:d3:18:18:1a:c1:8c:e3:fe:37:a4: 8c:80:a7:0e:68:1f:28:52:c0:c4:4b:4c:b9:85:1e:4f:bd:c1: 8f:40:56:46:bd:50:3a:dc:bf:15:05:26:a0:26:be:35:2a:8b: 53:85:bd:18:ce:ec:97:12:46:75:b1:1a:ab:54:95:ea:1e:55: 9c:1a:ba:26:6b:ae:3e:7e:cd:57:6c:33:f2:38:2f:a1:7e:72: ef:89:45:aa:4b:d0:97:f2:28:b7:24:86:0e:79:f9:b3:5e:dc: ea:6d:24:a2:58:31:f4:2c:87:cc:84:8f:a6:dd:03:28:97:dd: c4:7d:fb:9c:a7:6a:f8:f8:aa:b9:6f:e1:04:a2:ec:49:b6:f4: a7:0a:77:cd:ae:73:73:18:a4:a9:9a:52:fb:47:e7:7c:c4:8a: 95:a9:32:6d:06:ea:ab:be:1c:50:55:42:c5:ae:56:a0:73:de: 1d:33:66:41:26:f9:9d:2a:c6:d9:00:07:16:37:a6:59:e3:c9: ab:71:66:25:39:58:50:a6:b7:bf:17:85:27:b9:05:ef:a7:5b: b7:a5:7f:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0fDpilRyXDmw0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk NGYzYTNjODAtNDI5OS00M2U4LTkxMGQtODUyMDljOTI3MjIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDmYpMV1DWS1n+OA9KvZTfEkYpwQxlXkzYMo iA9JDFFUn7PR+nIgoWUKA/rx9BqCGrtWYqLaDpGV0UtfBMcmQSym7jw7X9saAQnT jWFr1pqKVNDKo0NPoQT/BEoGT+KNcN+N8zo6sBXsLsQZcLKpkEhlhvkQblvhHPHe fKkFmW8vC9E3NZTNJwHP2gmGMSalGdac3AyFPjYOSSsH0iZ4sd3+RR7qfNQIPCoW gb3yCKUk7Q84KrLD1a5H2B83gHmNOm1abUrzxnglO1ovmmfZ7a4afloA/SZGm6Ix wpBFLR0YygmuryuPhUjHZO0SISmSWlOjDtXOTHrdeYIXjm1RqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNnhPCEhCy9eWHHF7NphmAvrPQoJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMzFhN2RjNjMtNDI2Ny0z NzE1LTkwZWEtNzc4NjEyZDI2ZjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzyXIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHXamunfu4CuMrQuL/vz13j9p7xAf+GouO+w0DQt1DUppLu4zS8wuDTt +MkZ0xgYGsGM4/43pIyApw5oHyhSwMRLTLmFHk+9wY9AVka9UDrcvxUFJqAmvjUq i1OFvRjO7JcSRnWxGqtUleoeVZwauiZrrj5+zVdsM/I4L6F+cu+JRapL0JfyKLck hg55+bNe3OptJKJYMfQsh8yEj6bdAyiX3cR9+5ynavj4qrlv4QSi7Em29KcKd82u c3MYpKmaUvtH53zEipWpMm0G6qu+HFBVQsWuVqBz3h0zZkEm+Z0qxtkABxY3plnj yatxZiU5WFCmt78XhSe5Be+nW7elf8E= -----END CERTIFICATE-----Generated at Wed Nov 5 14:43:47 2025 by rpki-client