$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4aecd1d1-2be5-3214-8315-35fe5272833f.roa File: 4aecd1d1-2be5-3214-8315-35fe5272833f.roa (raw, json) Hash identifier: 3nwbmwTJWSuwUnHdf9E4TM7z0cqwSPE5eYcsWDsg/p4= Subject key identifier: 45:8A:24:D6:9E:30:6B:9E:68:78:AC:10:1E:F8:B5:28:E5:21:10:C3 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584BB2F7D41842B852DED042FF30 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4aecd1d1-2be5-3214-8315-35fe5272833f.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 3360 IP address blocks: 168.87.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:d4:18:42:b8:52:de:d0:42:ff:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=509bea3c-ddc8-439d-bfab-8dc149c0b73d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:87:29:f9:1c:f8:6a:00:c0:39:35:58:35:29: 2c:20:d3:96:93:32:e7:12:ca:fc:01:e9:2e:ba:28: 84:be:30:22:f8:69:8c:1f:e0:13:b9:5c:a4:0e:88: 80:49:f3:97:ca:ac:1d:a0:50:e6:46:1d:61:3b:84: 10:ad:bb:81:23:4a:bf:10:01:98:7b:f4:79:ae:57: cc:fc:f8:3c:58:f8:6c:79:59:74:13:35:f8:cf:17: c9:b9:3f:48:ef:e6:11:36:1e:88:f3:ca:47:61:8b: a8:67:6b:7d:d7:dc:32:e7:18:1c:37:6d:62:44:87: de:23:e5:8c:00:e1:a7:9f:16:7b:cf:84:8f:6d:69: 57:c7:6b:fa:1d:91:33:57:17:51:b1:d9:99:84:15: b0:96:98:e1:72:4c:80:6a:be:9e:63:8c:47:b0:3d: 7f:49:fe:34:5c:1c:c7:ab:79:63:00:cf:d0:c9:13: de:c1:e1:a7:15:d4:34:01:32:2c:66:21:8b:8b:ec: da:c8:ca:d5:d3:da:63:b6:99:71:17:72:58:5f:66: a8:ea:4c:a7:5b:34:00:87:c6:ad:9f:cb:f3:b0:b7: c4:49:fa:97:d3:33:1e:fe:1b:32:7d:19:24:3e:30: e3:9c:18:5c:10:07:ef:87:6f:79:59:b9:57:ca:b0: 68:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:8A:24:D6:9E:30:6B:9E:68:78:AC:10:1E:F8:B5:28:E5:21:10:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4aecd1d1-2be5-3214-8315-35fe5272833f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:58:13:a1:ce:e4:39:de:0e:3d:e2:b3:1b:02:b4:52:e1:ee: 6e:41:7e:3f:9a:8b:53:60:55:08:a9:7c:c5:de:32:8b:00:60: de:0f:5f:60:fc:8c:ef:7a:ec:7c:fc:f5:4f:c6:46:c9:ab:e3: 65:b9:7d:c7:a1:43:d1:38:81:2f:6e:3b:82:58:14:58:6f:68: cc:bb:4d:58:62:d0:2c:af:b1:9c:64:78:5b:f2:b6:98:64:fe: 86:c4:04:5e:e8:a7:bd:71:64:bd:30:7c:8a:28:7b:50:18:ad: 03:a2:6d:31:6b:a4:c0:00:2f:84:2b:f4:4c:9e:a5:8a:33:48: 26:2b:db:cd:fb:c6:78:cb:ed:49:ff:68:3d:ee:a4:65:7a:ee: f4:2e:be:e8:90:63:3d:97:e8:bd:be:75:ea:23:84:62:50:74: a4:58:a5:25:8d:42:82:7c:f6:e2:d2:a0:0f:4f:df:c3:25:c7: fd:6e:1e:d4:1f:71:88:68:04:95:f2:c4:6f:2e:5b:f5:d5:10: 80:9a:97:b3:a3:2f:4b:64:74:ff:d8:d8:80:31:6e:a5:71:4d: 19:ed:af:ea:8b:1a:b0:89:fb:f2:d7:a3:03:9e:4d:b8:5f:8f: f4:74:5f:ad:d6:89:b4:a9:b9:d4:ed:24:ad:17:8a:91:bc:78: d9:79:c2:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy99QYQrhS3tBC/zAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk NTA5YmVhM2MtZGRjOC00MzlkLWJmYWItOGRjMTQ5YzBiNzNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9ocp+Rz4agDAOTVYNSksINOWkzLnEsr8Aeku uiiEvjAi+GmMH+ATuVykDoiASfOXyqwdoFDmRh1hO4QQrbuBI0q/EAGYe/R5rlfM /Pg8WPhseVl0EzX4zxfJuT9I7+YRNh6I88pHYYuoZ2t919wy5xgcN21iRIfeI+WM AOGnnxZ7z4SPbWlXx2v6HZEzVxdRsdmZhBWwlpjhckyAar6eY4xHsD1/Sf40XBzH q3ljAM/QyRPeweGnFdQ0ATIsZiGLi+zayMrV09pjtplxF3JYX2ao6kynWzQAh8at n8vzsLfESfqX0zMe/hsyfRkkPjDjnBhcEAfvh295WblXyrBodQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEWKJNaeMGueaHisEB74tSjlIRDDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNGFlY2QxZDEtMmJlNS0z MjE0LTgzMTUtMzVmZTUyNzI4MzNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqFeIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAARYE6HO5DneDj3isxsCtFLh7m5Bfj+ai1NgVQipfMXeMosAYN4PX2D8 jO967Hz89U/GRsmr42W5fcehQ9E4gS9uO4JYFFhvaMy7TVhi0CyvsZxkeFvytphk /obEBF7op71xZL0wfIooe1AYrQOibTFrpMAAL4Qr9EyepYozSCYr2837xnjL7Un/ aD3upGV67vQuvuiQYz2X6L2+deojhGJQdKRYpSWNQoJ89uLSoA9P38Mlx/1uHtQf cYhoBJXyxG8uW/XVEICal7OjL0tkdP/Y2IAxbqVxTRntr+qLGrCJ+/LXowOeTbhf j/R0X63WibSpudTtJK0XipG8eNl5whw= -----END CERTIFICATE-----Generated at Tue Nov 4 21:43:41 2025 by rpki-client