$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/35ac8dc3-d667-3c7c-9754-9665cc566311.roa File: 35ac8dc3-d667-3c7c-9754-9665cc566311.roa (raw, json) Hash identifier: hP4k8xzAsvKhi7xLvg5YpochORj0ElFHis+a/fwMcaY= Subject key identifier: D5:9F:0E:AE:AF:18:B6:48:81:12:24:A5:D6:80:11:CA:17:B3:5F:02 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584BA0D272952B73F22ACA4B4860 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/35ac8dc3-d667-3c7c-9754-9665cc566311.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 16509 IP address blocks: 168.87.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:72:95:2b:73:f2:2a:ca:4b:48:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=971d4769-f171-4ba0-bc83-eb51ecb52a5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:9f:ad:95:7f:aa:32:68:29:1c:62:bb:89:17: 81:c6:d7:9c:9e:68:f7:cf:d8:fb:f4:fd:99:ea:7d: 4e:1f:4a:8f:41:14:64:85:ef:1e:5a:ff:17:1a:f4: f8:2f:7c:e7:ae:81:02:82:2d:ff:e2:1e:41:be:be: 62:21:ab:c8:be:41:e0:d5:25:c0:ea:cd:10:5c:df: ff:19:3e:fc:db:79:ef:7b:12:38:48:26:e0:45:7f: 2b:9c:b3:58:f6:48:e6:f9:f0:48:f7:ea:84:14:d9: de:70:93:02:43:b0:e0:ff:e4:8d:96:43:15:1c:c0: 6e:c9:72:c7:53:45:eb:16:43:b8:6b:ea:54:ab:28: 0d:76:74:e2:3d:c3:da:21:84:5a:c0:9e:5c:8a:ef: 73:a2:a6:51:f4:ce:25:d6:b7:89:6a:81:f6:8b:aa: bb:57:16:b5:db:e6:66:b1:7c:5f:88:c6:17:f6:78: e9:21:0d:f6:1f:00:26:c0:f7:8c:21:10:54:7e:a9: 5f:a5:73:24:23:85:05:53:04:47:f4:da:d8:a6:23: 09:e3:41:d2:11:4e:9a:ac:08:af:92:88:6d:42:9a: 67:1c:34:eb:9d:eb:c6:8a:2e:99:69:ee:8b:11:66: 41:06:52:79:8d:fc:63:c2:c5:4a:89:c2:70:0f:16: e5:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:9F:0E:AE:AF:18:B6:48:81:12:24:A5:D6:80:11:CA:17:B3:5F:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/35ac8dc3-d667-3c7c-9754-9665cc566311.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.184.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:20:0d:f3:d1:fe:ee:57:c0:5f:da:af:5b:c2:c3:66:23:b3: 47:a2:82:90:66:c3:fa:32:72:a4:7b:1d:d6:02:36:ff:45:47: 09:4c:ac:e1:1b:d9:a3:f9:63:ad:08:af:58:36:48:7e:2b:6a: f4:35:0c:44:05:cb:3e:15:a3:3c:16:0d:e1:92:59:b2:42:69: 7f:35:dd:33:62:a4:56:7b:a2:20:2e:c0:6f:a0:ef:1f:13:b5: 77:c1:cb:1d:d5:f8:b7:ad:e1:24:20:7c:da:21:88:e6:2c:ef: 8a:a9:5a:66:d4:29:be:bc:de:2a:9e:f7:84:c6:e3:e6:9d:91: c6:6e:fe:9e:8c:28:df:e3:d7:e3:88:42:b4:da:1a:07:e5:7f: 02:51:18:a6:00:4c:ee:a1:5d:fb:f6:60:8a:f1:68:8e:76:2a: b1:fc:11:3d:14:98:14:fb:49:91:2e:49:0a:67:07:8a:dd:cf: ee:3a:e1:3b:b9:af:9e:88:3d:8c:0c:ac:90:cd:74:02:91:74: 92:bf:43:26:a1:1b:cf:93:17:e6:f1:44:65:85:4e:4c:23:d2: 62:07:c2:2e:03:0b:e7:2d:e0:ef:45:ba:64:3c:e9:a3:62:8d: 68:40:29:bb:d8:2c:58:a4:d7:62:fe:5f:a5:25:f9:ff:43:1a: 98:32:58:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0nKVK3PyKspLSGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk OTcxZDQ3NjktZjE3MS00YmEwLWJjODMtZWI1MWVjYjUyYTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlp+tlX+qMmgpHGK7iReBxtecnmj3z9j79P2Z 6n1OH0qPQRRkhe8eWv8XGvT4L3znroECgi3/4h5Bvr5iIavIvkHg1SXA6s0QXN// GT7823nvexI4SCbgRX8rnLNY9kjm+fBI9+qEFNnecJMCQ7Dg/+SNlkMVHMBuyXLH U0XrFkO4a+pUqygNdnTiPcPaIYRawJ5ciu9zoqZR9M4l1reJaoH2i6q7Vxa12+Zm sXxfiMYX9njpIQ32HwAmwPeMIRBUfqlfpXMkI4UFUwRH9NrYpiMJ40HSEU6arAiv kohtQppnHDTrnevGii6Zae6LEWZBBlJ5jfxjwsVKicJwDxblZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNWfDq6vGLZIgRIkpdaAEcoXs18CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMzVhYzhkYzMtZDY2Ny0z YzdjLTk3NTQtOTY2NWNjNTY2MzExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFe4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGAgDfPR/u5XwF/ar1vCw2Yjs0eigpBmw/oycqR7HdYCNv9FRwlMrOEb 2aP5Y60Ir1g2SH4ravQ1DEQFyz4VozwWDeGSWbJCaX813TNipFZ7oiAuwG+g7x8T tXfByx3V+Let4SQgfNohiOYs74qpWmbUKb683iqe94TG4+adkcZu/p6MKN/j1+OI QrTaGgflfwJRGKYATO6hXfv2YIrxaI52KrH8ET0UmBT7SZEuSQpnB4rdz+464Tu5 r56IPYwMrJDNdAKRdJK/QyahG8+TF+bxRGWFTkwj0mIHwi4DC+ct4O9FumQ86aNi jWhAKbvYLFik12L+X6Ul+f9DGpgyWLc= -----END CERTIFICATE-----Generated at Wed Nov 5 16:19:20 2025 by rpki-client