$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3231c947-1760-3d64-8634-c33e6e472059.roa File: 3231c947-1760-3d64-8634-c33e6e472059.roa (raw, json) Hash identifier: qEgy/i7rE4Fg+gpjtvzEybJPEYsVAuAxIdztUmL9AS0= Subject key identifier: 15:64:6F:7E:CF:C4:7F:62:5F:8A:CC:3E:CB:12:46:79:78:35:36:1C Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584B9E07CB1AAA533AD115CD9F2E Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3231c947-1760-3d64-8634-c33e6e472059.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 203 IP address blocks: 206.164.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:cb:1a:aa:53:3a:d1:15:cd:9f:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=2ae0936a-6cdb-4517-bac7-c1a95c77af30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:78:09:f2:ec:b4:e4:d0:aa:44:1d:ef:61:a5: 45:d1:fe:01:4a:b1:62:bf:b6:96:0b:2f:30:ed:f7: 9f:cf:d0:92:cc:a0:b1:45:28:15:88:81:6e:2b:b6: 32:9f:fb:27:92:97:7f:b2:d8:74:81:f0:0c:80:c7: 14:d0:ad:16:4e:58:6f:95:9b:6f:b5:40:2d:6f:85: 3d:f9:ea:6e:e2:9d:17:bc:3f:8f:10:87:41:75:7f: d4:97:75:ea:2a:7a:c7:62:b2:09:b4:d9:3b:bb:6b: 5a:ca:c6:1e:e1:99:29:44:f7:c4:42:6c:8d:31:df: c6:de:c8:5a:13:35:8e:0f:19:5d:75:c5:f2:25:09: 20:f2:12:b8:11:9a:4a:d3:d9:3d:eb:85:d3:06:bf: 04:f0:7b:b4:ee:f6:d6:82:cc:00:77:3f:10:cb:6f: 1f:69:07:dc:70:bc:12:b0:05:61:0b:52:f1:99:67: 6b:21:e7:65:92:07:5b:f0:44:cd:aa:1c:30:3b:16: 7d:63:9c:d7:7a:92:02:21:14:a3:c9:1a:9d:ac:c8: 5c:33:b5:b9:89:99:a5:a2:70:aa:a4:7c:0a:2a:b3: d9:4a:d3:1c:84:a1:32:ba:7e:6a:0e:de:0e:44:62: 07:00:45:06:d1:a1:9e:92:46:09:68:ab:bf:87:52: 95:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:64:6F:7E:CF:C4:7F:62:5F:8A:CC:3E:CB:12:46:79:78:35:36:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3231c947-1760-3d64-8634-c33e6e472059.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 206.164.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:86:85:c2:b1:6b:5c:3b:e4:b7:67:88:e2:b9:9a:23:56:44: 59:db:3b:62:0f:7d:4f:61:e5:44:82:87:0f:ae:b6:a1:a5:8e: 83:44:72:44:a7:88:4d:0f:85:c3:91:17:14:46:02:5a:bc:ee: fa:86:38:74:4f:b9:4b:0b:16:5f:d7:3f:33:d3:75:67:3c:20: 8f:6f:7d:f9:44:ac:34:63:1d:8f:1a:b7:f2:40:64:da:0a:db: 9f:f2:12:61:25:57:48:b0:f4:78:db:c4:60:35:c7:91:cd:b5: 23:42:ca:54:28:49:48:a3:29:2f:2c:d4:a8:bd:cb:b4:22:d8: 7d:f9:1b:ac:b2:50:bf:bf:d5:f1:10:25:21:f7:09:07:b3:72: ea:6c:06:9c:09:ce:25:c8:30:5f:5d:bd:c8:00:72:dd:be:2a: 48:dd:4d:04:7a:43:67:cd:29:d9:4c:43:00:81:7b:17:ca:f2: fa:ae:50:dc:af:03:fd:79:88:c0:20:40:68:38:cb:c7:ea:12: b2:ca:06:4f:67:21:6f:de:43:2e:69:7b:94:e9:f2:ac:4c:92: 4a:a6:77:2c:13:53:bd:19:74:6f:64:de:d4:12:1b:70:e1:bf: 95:af:b6:54:b4:14:73:f1:85:8e:a7:63:e4:94:08:fc:56:e8: 3a:78:da:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB8saqlM60RXNny4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk MmFlMDkzNmEtNmNkYi00NTE3LWJhYzctYzFhOTVjNzdhZjMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXgJ8uy05NCqRB3vYaVF0f4BSrFiv7aWCy8w 7fefz9CSzKCxRSgViIFuK7Yyn/snkpd/sth0gfAMgMcU0K0WTlhvlZtvtUAtb4U9 +epu4p0XvD+PEIdBdX/Ul3XqKnrHYrIJtNk7u2taysYe4ZkpRPfEQmyNMd/G3sha EzWODxlddcXyJQkg8hK4EZpK09k964XTBr8E8Hu07vbWgswAdz8Qy28faQfccLwS sAVhC1LxmWdrIedlkgdb8ETNqhwwOxZ9Y5zXepICIRSjyRqdrMhcM7W5iZmlonCq pHwKKrPZStMchKEyun5qDt4ORGIHAEUG0aGekkYJaKu/h1KVCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBVkb37PxH9iX4rMPssSRnl4NTYcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMzIzMWM5NDctMTc2MC0z ZDY0LTg2MzQtYzMzZTZlNDcyMDU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqTDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABKGhcKxa1w75LdniOK5miNWRFnbO2IPfU9h5USChw+utqGljoNEckSn iE0PhcORFxRGAlq87vqGOHRPuUsLFl/XPzPTdWc8II9vfflErDRjHY8at/JAZNoK 25/yEmElV0iw9HjbxGA1x5HNtSNCylQoSUijKS8s1Ki9y7Qi2H35G6yyUL+/1fEQ JSH3CQezcupsBpwJziXIMF9dvcgAct2+KkjdTQR6Q2fNKdlMQwCBexfK8vquUNyv A/15iMAgQGg4y8fqErLKBk9nIW/eQy5pe5Tp8qxMkkqmdywTU70ZdG9k3tQSG3Dh v5WvtlS0FHPxhY6nY+SUCPxW6Dp42sI= -----END CERTIFICATE-----Generated at Tue Nov 4 23:39:06 2025 by rpki-client