$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/54fa30f9-30ac-3ec6-a2fe-9d30984ad118.roa File: 54fa30f9-30ac-3ec6-a2fe-9d30984ad118.roa (raw, json) Hash identifier: 2Zju5fcQyhtVwqizAg/bG/L/ZmkwDXCBJmi9OPrOYRw= Subject key identifier: B4:3C:57:86:B9:59:96:3B:F6:F2:B8:63:19:2F:FB:F5:54:D4:5D:F1 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584B9E0790F6C4F7F2A737CD9D00 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/54fa30f9-30ac-3ec6-a2fe-9d30984ad118.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 203 IP address blocks: 206.164.196.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:90:f6:c4:f7:f2:a7:37:cd:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=b3c29302-94da-469c-a5f4-3d49e72c55f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:b2:b8:a9:36:63:5b:ca:9e:7f:f5:15:03:d3: 2d:19:11:61:ae:37:f5:11:f6:8b:64:f9:fc:98:90: 11:9e:63:df:1a:74:f7:66:2f:19:da:c9:05:e9:2d: 53:88:39:cc:d9:96:99:96:59:46:fd:4d:50:fe:6e: 56:e7:68:97:41:f7:97:07:de:db:e6:ea:57:b5:c3: 34:ea:f7:28:03:02:59:1c:5f:91:74:e3:93:e1:d6: d5:9d:7e:e8:7c:d2:1a:3f:0c:ec:48:e5:c5:f8:c0: 21:6f:ad:e7:23:b6:46:d1:f8:19:1f:ef:10:f5:1f: db:a6:7b:1f:35:31:7c:62:3e:04:1e:9d:eb:84:5f: 81:76:92:02:5e:9e:89:d8:98:25:3d:c5:40:40:15: 69:37:bc:5c:a9:3b:c7:3c:0b:34:16:ec:54:da:83: fc:9b:3b:ff:a0:42:4b:21:11:ad:b8:46:a1:ed:d7: 56:7e:b4:f4:67:d6:d6:ee:96:29:d5:36:9b:1f:19: d5:c3:3c:1d:4c:7c:82:32:47:cc:fd:7b:d3:00:7a: 24:c2:c5:09:21:b0:d0:05:ce:a5:97:99:3a:55:f1: e7:13:3a:10:a9:67:fc:c9:f3:1a:dd:64:68:d9:bc: 5b:72:16:47:18:9b:86:6c:5b:04:1f:a4:4c:c1:e1: ee:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:3C:57:86:B9:59:96:3B:F6:F2:B8:63:19:2F:FB:F5:54:D4:5D:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/54fa30f9-30ac-3ec6-a2fe-9d30984ad118.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 206.164.196.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:1a:a4:78:61:f0:93:52:a3:fa:0b:f2:e0:d0:79:00:b5:83: 44:a8:f4:fb:41:37:09:aa:21:1f:e1:63:d0:b1:79:4d:9e:a8: 19:45:84:72:fc:54:7e:c2:88:76:ff:75:66:b4:1f:f1:24:8a: bb:76:c6:47:41:1b:55:6a:3a:ff:b9:15:61:a3:aa:34:d0:02: bc:60:d9:46:3d:b0:12:59:05:f0:38:48:11:fd:35:af:d9:9c: ae:b4:5b:14:46:4b:13:7c:6b:75:05:ef:5b:cb:99:b3:cd:f4: fb:1e:68:21:53:d2:41:e3:65:d5:b3:88:ae:0a:41:5a:18:52: 70:d7:69:e3:e6:87:01:8c:4a:eb:b2:97:88:f8:34:81:24:6e: 80:dd:b1:5b:ca:27:2c:e0:55:b3:4e:a0:f6:6c:66:5b:dc:63: 24:0c:70:72:ef:90:8b:64:dd:b9:9a:55:0b:21:3b:ed:82:1e: 05:00:91:61:e7:9e:90:73:9a:3d:c9:0f:04:f2:21:14:52:3d: a6:36:d0:1f:26:44:8e:34:15:1e:7c:1a:19:36:df:d9:1f:6b: 68:d5:3f:83:e8:33:19:ab:9e:ea:ab:1c:5a:a1:0a:d6:06:19: 81:23:74:01:0a:6e:8f:a4:fa:dd:c8:4a:db:78:ad:79:0a:dc: c8:3d:cc:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB5D2xPfypzfNnQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk YjNjMjkzMDItOTRkYS00NjljLWE1ZjQtM2Q0OWU3MmM1NWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbK4qTZjW8qef/UVA9MtGRFhrjf1EfaLZPn8 mJARnmPfGnT3Zi8Z2skF6S1TiDnM2ZaZlllG/U1Q/m5W52iXQfeXB97b5upXtcM0 6vcoAwJZHF+RdOOT4dbVnX7ofNIaPwzsSOXF+MAhb63nI7ZG0fgZH+8Q9R/bpnsf NTF8Yj4EHp3rhF+BdpICXp6J2JglPcVAQBVpN7xcqTvHPAs0FuxU2oP8mzv/oEJL IRGtuEah7ddWfrT0Z9bW7pYp1TabHxnVwzwdTHyCMkfM/XvTAHokwsUJIbDQBc6l l5k6VfHnEzoQqWf8yfMa3WRo2bxbchZHGJuGbFsEH6RMweHuDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLQ8V4a5WZY79vK4Yxkv+/VU1F3xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNTRmYTMwZjktMzBhYy0z ZWM2LWEyZmUtOWQzMDk4NGFkMTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzqTEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJgapHhh8JNSo/oL8uDQeQC1g0So9PtBNwmqIR/hY9CxeU2eqBlFhHL8 VH7CiHb/dWa0H/Ekirt2xkdBG1VqOv+5FWGjqjTQArxg2UY9sBJZBfA4SBH9Na/Z nK60WxRGSxN8a3UF71vLmbPN9PseaCFT0kHjZdWziK4KQVoYUnDXaePmhwGMSuuy l4j4NIEkboDdsVvKJyzgVbNOoPZsZlvcYyQMcHLvkItk3bmaVQshO+2CHgUAkWHn npBzmj3JDwTyIRRSPaY20B8mRI40FR58Ghk239kfa2jVP4PoMxmrnuqrHFqhCtYG GYEjdAEKbo+k+t3IStt4rXkK3Mg9zA0= -----END CERTIFICATE-----Generated at Wed Nov 5 03:43:59 2025 by rpki-client