$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/48529b48-e02e-3ba6-87a0-38a733adde1c.roa File: 48529b48-e02e-3ba6-87a0-38a733adde1c.roa (raw, json) Hash identifier: nnhE0wEvBR1ynA9IsQwdWmRhAPds0IhraNn8xJ9Mn0c= Subject key identifier: 02:18:5D:D1:D8:00:C0:0D:44:3C:DE:8A:BD:EE:5E:0C:97:40:CE:D0 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584BB2F7D44F90950C6020452740 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/48529b48-e02e-3ba6-87a0-38a733adde1c.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 203 IP address blocks: 168.87.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:d4:4f:90:95:0c:60:20:45:27:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=de87cc15-61ff-41e8-8532-70779afdb2f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:27:6e:42:77:b4:71:e2:91:fd:6e:a6:4a:03: 30:1f:2d:d0:0a:14:c9:21:cf:18:6a:73:fe:25:83: 45:e1:c5:31:c6:77:5c:98:2e:6a:25:2c:74:89:57: 1b:27:71:ee:4f:94:f2:c4:3d:8a:0b:69:e3:85:b0: 57:3d:fe:33:5c:07:79:d9:2d:0a:4e:63:d3:5d:96: 07:61:3d:d8:02:84:66:65:b3:6d:d5:ac:75:b6:aa: d8:93:28:f0:dc:0d:1f:99:15:5b:bc:c0:22:60:94: e2:84:93:3c:e2:51:e3:48:5a:95:7c:05:22:1e:d8: 93:06:79:c3:0c:f6:c7:ed:e8:71:be:4e:5b:f1:bc: e7:63:a6:00:4b:e6:24:82:e2:e1:5d:f5:91:d8:2e: 44:df:f0:7b:1d:43:52:a8:61:15:c7:c3:da:37:8b: a2:16:61:0f:08:bc:b9:d4:98:eb:6c:34:28:6a:99: 07:47:18:78:96:65:e3:b2:43:08:85:82:79:fb:2b: 4e:e9:f9:df:8a:73:5f:8f:53:3d:71:75:c2:d4:f2: 10:64:f5:d1:db:d5:44:ce:7a:ba:20:70:20:c8:2b: aa:4c:48:6f:3c:98:97:56:f8:b3:f6:8f:ae:32:fb: d0:eb:af:be:23:00:da:eb:d0:fe:78:aa:ff:b7:36: 2d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:18:5D:D1:D8:00:C0:0D:44:3C:DE:8A:BD:EE:5E:0C:97:40:CE:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/48529b48-e02e-3ba6-87a0-38a733adde1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:f2:f3:40:69:64:c0:11:bd:6f:5a:e3:b5:cf:c0:aa:78:4a: c2:62:21:45:25:4c:51:10:d2:41:fe:52:ec:11:4b:94:56:b4: b6:61:46:5c:9b:08:b3:79:3b:ce:c9:3d:df:4e:76:dc:2b:8c: 3b:2e:75:83:1b:0a:d8:d4:d9:20:2f:38:6a:68:4b:4d:ce:f8: 63:50:4f:89:41:79:5f:a8:a2:1d:43:98:01:6d:05:e3:bd:0a: 1c:96:09:e5:85:b2:87:9c:25:24:5e:c0:fa:34:e7:63:93:23: 6b:dc:a9:35:4c:9e:24:a9:4c:fc:aa:5f:32:4c:60:5e:bc:3b: 15:1f:0d:08:fb:6f:43:d4:2c:8d:c2:05:d9:6e:54:10:84:d3: 5d:fa:0a:3b:59:c9:01:a5:41:e3:7a:a8:84:34:6f:a2:82:5e: 05:02:9b:cb:87:02:5f:98:66:9b:a1:c0:5a:d9:06:c7:55:fb: 2a:af:ff:2c:80:4f:51:61:01:36:5f:ae:bf:75:95:db:23:f9: c6:e3:cd:96:3a:fd:33:b4:72:7e:bb:21:32:43:9e:91:bb:43: d2:c9:12:c5:42:69:7d:49:58:6d:4f:64:f8:d7:6c:5b:a1:58: f5:59:ee:b0:dd:67:91:e0:88:d2:ee:19:ff:bb:28:32:9f:e4: e6:6b:bd:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy99RPkJUMYCBFJ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk ZGU4N2NjMTUtNjFmZi00MWU4LTg1MzItNzA3NzlhZmRiMmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviduQne0ceKR/W6mSgMwHy3QChTJIc8YanP+ JYNF4cUxxndcmC5qJSx0iVcbJ3HuT5TyxD2KC2njhbBXPf4zXAd52S0KTmPTXZYH YT3YAoRmZbNt1ax1tqrYkyjw3A0fmRVbvMAiYJTihJM84lHjSFqVfAUiHtiTBnnD DPbH7ehxvk5b8bznY6YAS+YkguLhXfWR2C5E3/B7HUNSqGEVx8PaN4uiFmEPCLy5 1JjrbDQoapkHRxh4lmXjskMIhYJ5+ytO6fnfinNfj1M9cXXC1PIQZPXR29VEznq6 IHAgyCuqTEhvPJiXVviz9o+uMvvQ66++IwDa69D+eKr/tzYtDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAIYXdHYAMANRDzeir3uXgyXQM7QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNDg1MjliNDgtZTAyZS0z YmE2LTg3YTAtMzhhNzMzYWRkZTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqFeIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJLy80BpZMARvW9a47XPwKp4SsJiIUUlTFEQ0kH+UuwRS5RWtLZhRlyb CLN5O87JPd9OdtwrjDsudYMbCtjU2SAvOGpoS03O+GNQT4lBeV+ooh1DmAFtBeO9 ChyWCeWFsoecJSRewPo052OTI2vcqTVMniSpTPyqXzJMYF68OxUfDQj7b0PULI3C BdluVBCE0136CjtZyQGlQeN6qIQ0b6KCXgUCm8uHAl+YZpuhwFrZBsdV+yqv/yyA T1FhATZfrr91ldsj+cbjzZY6/TO0cn67ITJDnpG7Q9LJEsVCaX1JWG1PZPjXbFuh WPVZ7rDdZ5HgiNLuGf+7KDKf5OZrvek= -----END CERTIFICATE-----Generated at Wed Nov 5 09:23:23 2025 by rpki-client