$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/61928c84-e37c-3ece-9d09-31dc2613bdbc.roa File: 61928c84-e37c-3ece-9d09-31dc2613bdbc.roa (raw, json) Hash identifier: 0D2YAbGcV7TSA4v5tNxNXA81d5CXIUin4szATI6vvXk= Subject key identifier: 01:2C:D1:2C:C6:EF:B9:41:57:CE:AA:08:B2:35:E7:39:56:7B:69:48 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584BB2F7D39D40A46D93599C7D80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/61928c84-e37c-3ece-9d09-31dc2613bdbc.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 3356 IP address blocks: 168.87.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:d3:9d:40:a4:6d:93:59:9c:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=612d838c-3efc-4034-bed7-225eca5ef8e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b6:a6:06:72:4b:2a:4c:9d:18:10:e9:e3:49: 16:5f:9a:7f:97:f3:6b:60:7a:64:28:b1:2b:0f:42: 86:a8:13:a0:2e:3f:0d:58:09:80:ca:c7:05:f9:e0: 54:15:77:34:66:fe:ab:aa:64:c9:ba:f2:1c:1a:6d: d7:e3:f4:81:71:42:f5:63:7b:0a:0b:24:f4:28:66: d7:f6:90:04:cf:fe:93:45:ac:44:6c:d2:7d:c3:ae: 8b:32:a1:fe:78:77:9b:b8:0c:fa:01:82:33:e3:54: ca:c0:10:a8:65:fc:ca:02:fa:4f:a1:96:05:2c:d8: 62:b5:92:d6:40:45:45:fc:2e:30:09:f4:af:13:a5: 16:ec:f3:03:7c:49:28:e5:1a:96:1f:d4:dd:8a:3e: 19:eb:51:1f:fc:9b:4e:ba:e7:1b:0f:19:c6:a9:c2: 56:6f:fe:af:46:68:c9:53:21:e5:69:bd:ac:e9:39: 7e:46:a8:18:2a:09:e8:eb:a4:3d:54:99:ec:5f:65: 96:df:91:9d:3c:39:53:a9:b9:21:4c:cf:ce:a0:66: 65:94:d0:87:e6:db:fb:63:a9:57:9b:ec:55:0e:c0: 7e:01:10:bb:e1:1c:48:f3:6f:ab:c4:6c:64:37:c7: 6e:da:1b:91:02:e9:cc:9a:6d:52:39:38:57:fa:a9: fb:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:2C:D1:2C:C6:EF:B9:41:57:CE:AA:08:B2:35:E7:39:56:7B:69:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/61928c84-e37c-3ece-9d09-31dc2613bdbc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.115.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:0d:c4:0d:98:54:3b:b5:f4:e5:78:e4:31:9e:bd:18:85:66: 74:80:51:63:c6:f4:c7:02:23:7d:1d:ae:28:af:dc:b8:e0:ee: 09:87:0a:ff:d2:74:27:e9:25:4c:c7:64:6b:20:1e:bb:2b:13: a8:e7:a7:5d:e1:97:64:c8:d6:3f:fb:a0:71:dc:50:3d:0c:35: 23:96:1f:ff:ab:87:dc:40:ee:e4:97:fa:1f:78:9a:9d:cf:40: da:29:f4:89:6d:e8:b1:00:a4:17:b0:f5:f6:29:75:28:fb:3e: 3f:22:95:42:ef:c4:5c:00:72:51:e3:da:61:fd:77:09:f7:b6: ca:6d:dc:40:4f:6a:35:71:f9:ec:9e:65:e3:22:e5:13:a4:ea: ec:bc:be:9a:2c:0c:8b:e4:ae:3d:93:80:f3:7e:92:30:0e:f3: 8a:97:59:82:a2:5b:ed:49:68:b2:95:05:17:6f:92:3c:27:9e: 5a:71:c0:59:17:bb:dc:44:29:6b:89:62:81:ee:48:ff:fe:ad: 69:e6:75:7b:e6:20:0a:ac:83:8c:c0:c1:64:4f:d7:62:1b:8c: 2c:38:30:01:d7:56:0b:59:4b:dc:e6:f7:de:ca:b5:eb:c2:ba: 30:17:0d:7b:ae:91:b5:32:26:36:5a:48:d0:f9:b1:fd:02:b5: 66:61:d4:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy99OdQKRtk1mcfYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk NjEyZDgzOGMtM2VmYy00MDM0LWJlZDctMjI1ZWNhNWVmOGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLamBnJLKkydGBDp40kWX5p/l/NrYHpkKLEr D0KGqBOgLj8NWAmAyscF+eBUFXc0Zv6rqmTJuvIcGm3X4/SBcUL1Y3sKCyT0KGbX 9pAEz/6TRaxEbNJ9w66LMqH+eHebuAz6AYIz41TKwBCoZfzKAvpPoZYFLNhitZLW QEVF/C4wCfSvE6UW7PMDfEko5RqWH9Tdij4Z61Ef/JtOuucbDxnGqcJWb/6vRmjJ UyHlab2s6Tl+RqgYKgno66Q9VJnsX2WW35GdPDlTqbkhTM/OoGZllNCH5tv7Y6lX m+xVDsB+ARC74RxI82+rxGxkN8du2huRAunMmm1SOThX+qn7PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAEs0SzG77lBV86qCLI15zlWe2lIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNjE5MjhjODQtZTM3Yy0z ZWNlLTlkMDktMzFkYzI2MTNiZGJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFdzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQNxA2YVDu19OV45DGevRiFZnSAUWPG9McCI30driiv3Ljg7gmHCv/S dCfpJUzHZGsgHrsrE6jnp13hl2TI1j/7oHHcUD0MNSOWH/+rh9xA7uSX+h94mp3P QNop9Ilt6LEApBew9fYpdSj7Pj8ilULvxFwAclHj2mH9dwn3tspt3EBPajVx+eye ZeMi5ROk6uy8vposDIvkrj2TgPN+kjAO84qXWYKiW+1JaLKVBRdvkjwnnlpxwFkX u9xEKWuJYoHuSP/+rWnmdXvmIAqsg4zAwWRP12IbjCw4MAHXVgtZS9zm997KtevC ujAXDXuukbUyJjZaSND5sf0CtWZh1IA= -----END CERTIFICATE-----Generated at Tue Nov 4 20:59:35 2025 by rpki-client