$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/55683f09-f3e6-35c6-bf48-a4a791b6c0fe.roa File: 55683f09-f3e6-35c6-bf48-a4a791b6c0fe.roa (raw, json) Hash identifier: LCx2UcP6Wj2Xah9n1c8My1mCyy+0jMs7BKXge/9bUlE= Subject key identifier: E7:4A:E4:DF:DE:06:8D:47:2A:DA:F6:B6:E9:CD:54:76:27:48:25:65 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584BB2F7BFDFC2C9C03F419CCF40 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/55683f09-f3e6-35c6-bf48-a4a791b6c0fe.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 202 IP address blocks: 168.87.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:bf:df:c2:c9:c0:3f:41:9c:cf:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=dd77343f-a2e1-4961-a14a-0b7db8357c4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:52:71:eb:90:6b:b7:6a:92:a0:da:fc:e0:79: 67:14:0d:14:d7:33:c8:1a:02:b1:55:f2:90:f5:4d: 68:75:c8:d8:34:d4:8e:36:44:61:83:1d:fd:bf:a5: 0d:e4:a3:37:20:a8:9c:ff:83:c4:bd:e8:af:07:94: d6:90:01:a5:01:18:88:6f:9d:69:a1:8f:e2:54:7b: 36:63:04:ff:14:0f:dc:8a:1d:e7:c6:ee:f0:81:ff: df:8c:aa:5e:ee:8c:4c:e0:90:64:ed:41:0c:7d:e4: d4:f8:40:56:d9:97:2c:42:15:d8:bc:d6:52:c1:94: fb:52:1b:94:67:da:02:b9:a1:0c:dd:33:c9:17:79: 3e:fc:11:15:ed:cd:86:ae:99:a6:5b:46:da:42:78: 7b:ca:97:3d:c8:66:bd:55:27:36:2f:2c:8d:1a:cc: eb:71:80:e6:c4:f8:fe:5d:dc:6a:21:ae:12:52:58: a9:44:f9:79:c1:3e:f4:dc:42:4c:3b:9d:ea:dc:67: 96:49:0a:ef:b4:dc:ca:f0:1b:8a:f5:51:9b:6d:64: 22:dd:33:8a:b4:0c:e4:d2:51:e4:9a:2b:6d:d4:1d: d8:08:bf:25:41:10:50:8e:24:a3:16:d5:99:34:a8: 7c:13:86:80:ff:89:db:01:9a:91:73:9e:e4:29:fd: 55:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:4A:E4:DF:DE:06:8D:47:2A:DA:F6:B6:E9:CD:54:76:27:48:25:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/55683f09-f3e6-35c6-bf48-a4a791b6c0fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:5d:13:0d:d7:95:dc:ea:fe:d1:9a:2e:a9:46:78:d7:99:9d: ab:0e:b6:8f:c7:b2:63:30:38:df:f5:50:a3:e5:15:cd:ed:ea: 1e:c8:ab:54:03:a5:07:dc:e0:8a:79:db:c1:f9:c0:11:0b:f5: 29:70:a7:4d:94:49:4e:af:03:b2:64:8a:21:99:ad:b2:81:2a: e3:bf:41:69:51:09:fb:6e:c1:15:a6:ec:14:21:5a:3f:d4:5c: a1:34:15:12:09:4f:1a:42:9b:65:34:a8:12:38:28:3a:10:65: 39:bb:e0:0b:1d:8a:7d:6a:ce:7d:45:2f:5c:7a:44:d7:90:f0: 82:45:ac:54:c3:13:aa:a5:c9:68:18:b4:1c:1b:59:b0:3e:9f: 6d:5a:e8:c3:22:99:2d:94:a8:1a:f5:52:d5:a9:ec:24:72:4f: 72:d8:d8:64:c0:9e:83:c1:ab:79:18:b9:81:2c:b3:08:b1:64: 31:55:8e:3f:34:4f:02:46:66:35:20:28:f7:89:aa:7a:84:82: b4:92:f8:55:5c:dc:6a:93:91:c5:49:e7:e9:cf:d3:9a:d7:f7: 87:aa:34:6e:04:5e:00:93:b0:31:3e:76:c7:80:29:c6:ed:b2: c7:f6:a7:a0:83:fe:93:47:6d:50:f1:f8:33:75:93:ca:80:99: 93:57:21:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy97/fwsnAP0Gcz0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk ZGQ3NzM0M2YtYTJlMS00OTYxLWExNGEtMGI3ZGI4MzU3YzRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA81Jx65Brt2qSoNr84HlnFA0U1zPIGgKxVfKQ 9U1odcjYNNSONkRhgx39v6UN5KM3IKic/4PEveivB5TWkAGlARiIb51poY/iVHs2 YwT/FA/cih3nxu7wgf/fjKpe7oxM4JBk7UEMfeTU+EBW2ZcsQhXYvNZSwZT7UhuU Z9oCuaEM3TPJF3k+/BEV7c2GrpmmW0baQnh7ypc9yGa9VSc2LyyNGszrcYDmxPj+ XdxqIa4SUlipRPl5wT703EJMO53q3GeWSQrvtNzK8BuK9VGbbWQi3TOKtAzk0lHk mitt1B3YCL8lQRBQjiSjFtWZNKh8E4aA/4nbAZqRc57kKf1V+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOdK5N/eBo1HKtr2tunNVHYnSCVlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNTU2ODNmMDktZjNlNi0z NWM2LWJmNDgtYTRhNzkxYjZjMGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqFeeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIFdEw3Xldzq/tGaLqlGeNeZnasOto/HsmMwON/1UKPlFc3t6h7Iq1QD pQfc4Ip528H5wBEL9Slwp02USU6vA7JkiiGZrbKBKuO/QWlRCftuwRWm7BQhWj/U XKE0FRIJTxpCm2U0qBI4KDoQZTm74Asdin1qzn1FL1x6RNeQ8IJFrFTDE6qlyWgY tBwbWbA+n21a6MMimS2UqBr1UtWp7CRyT3LY2GTAnoPBq3kYuYEsswixZDFVjj80 TwJGZjUgKPeJqnqEgrSS+FVc3GqTkcVJ5+nP05rX94eqNG4EXgCTsDE+dseAKcbt ssf2p6CD/pNHbVDx+DN1k8qAmZNXIdk= -----END CERTIFICATE-----Generated at Tue Nov 4 21:41:58 2025 by rpki-client