$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/620b5565-3e1d-374f-993f-56e5a13bc7bf.roa File: 620b5565-3e1d-374f-993f-56e5a13bc7bf.roa (raw, json) Hash identifier: bHDP9jvvWJBhaQtU8RbiMxgO1wDUvUuEaqgha2AbzwQ= Subject key identifier: 07:DA:00:37:54:EF:2F:A7:96:66:84:57:B7:52:17:96:27:11:10:65 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584BB2F7D3BED3DD1E5AE7539AC0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/620b5565-3e1d-374f-993f-56e5a13bc7bf.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 202 IP address blocks: 168.87.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:d3:be:d3:dd:1e:5a:e7:53:9a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=12129257-ecf2-42fa-9def-22b3ba76486c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:af:65:c3:4e:84:0d:d1:c7:99:f9:dc:69:ad: d2:b1:51:2b:13:03:c8:65:1a:6d:f9:90:5d:25:e3: d1:09:b5:5b:9b:5c:b3:60:4a:cd:86:2f:96:79:14: b1:aa:88:42:da:fe:18:af:6b:80:8f:ca:04:85:b8: 68:32:83:98:11:5b:fb:b5:bc:d0:23:de:89:19:29: dc:cc:9d:37:39:15:b2:8f:aa:e1:92:0c:47:93:ad: 50:c6:fb:31:04:56:6e:a5:6f:5d:44:05:fa:35:20: d5:2b:07:0b:25:fd:77:67:42:89:ba:11:41:9a:e8: 13:7c:f4:0e:b6:57:53:e5:92:c2:06:45:46:41:c8: f8:25:18:c7:09:7b:b4:71:fa:5f:86:7a:69:03:d9: 64:9c:c9:43:ed:cf:30:94:9f:27:37:c3:35:85:4a: 74:9b:e1:7e:3d:af:72:6a:c4:b3:fe:67:f5:b0:8e: 66:ea:07:f3:df:e7:5a:7d:cf:3f:60:a4:9f:bf:c5: 6f:01:bb:37:17:27:ba:d3:b3:0c:5c:31:8c:be:7c: aa:0b:81:1f:2a:2b:8c:04:40:76:56:9d:28:a0:59: 01:a7:6b:a0:fb:07:c7:23:9d:f4:eb:56:eb:36:ac: 6d:94:c7:77:7c:61:6b:b6:c2:50:b7:73:04:8e:1a: 59:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:DA:00:37:54:EF:2F:A7:96:66:84:57:B7:52:17:96:27:11:10:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/620b5565-3e1d-374f-993f-56e5a13bc7bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.115.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:12:ea:88:84:2e:a3:b6:ad:e8:70:2e:59:bd:0c:97:31:56: 44:c9:7a:7c:de:de:52:a4:5a:7a:c1:fd:00:82:99:e6:3c:64: a5:89:d3:a7:dc:a9:e9:52:b8:30:f4:04:6c:04:33:d3:d7:74: 63:32:2c:0d:fa:4a:ac:98:f7:06:22:8a:85:cc:59:0d:a3:1e: 6f:2b:8f:62:42:62:37:7f:53:66:aa:ee:06:51:43:a6:39:66: e6:27:ca:0f:af:f6:9e:14:03:55:27:74:a8:36:8a:c6:f5:cd: 4a:2f:8c:1f:5c:af:88:78:ef:c5:be:09:10:20:d9:b6:9e:8b: e9:14:14:ef:34:ba:b4:9b:5b:41:f8:63:95:1d:4b:37:a7:1a: 68:48:54:9a:ea:c1:8c:4e:82:25:70:64:75:6f:38:51:00:2f: 46:d8:03:a2:f8:d9:dc:1b:79:95:b4:1c:d3:48:15:11:35:5c: 69:41:a6:45:f6:50:5f:69:e0:fd:8d:e7:53:4d:bf:16:a8:d8: a6:8e:9a:3d:cd:c8:9f:04:34:a9:42:f4:c7:68:c2:c0:85:8d: f0:db:75:09:d6:be:71:d6:c4:aa:5d:f3:cf:ce:84:3d:fd:fd: 19:db:76:23:2f:94:58:56:de:7b:55:00:d7:b8:55:a6:c1:b5: d3:d9:e3:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy99O+090eWudTmsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk MTIxMjkyNTctZWNmMi00MmZhLTlkZWYtMjJiM2JhNzY0ODZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkq9lw06EDdHHmfncaa3SsVErEwPIZRpt+ZBd JePRCbVbm1yzYErNhi+WeRSxqohC2v4Yr2uAj8oEhbhoMoOYEVv7tbzQI96JGSnc zJ03ORWyj6rhkgxHk61QxvsxBFZupW9dRAX6NSDVKwcLJf13Z0KJuhFBmugTfPQO tldT5ZLCBkVGQcj4JRjHCXu0cfpfhnppA9lknMlD7c8wlJ8nN8M1hUp0m+F+Pa9y asSz/mf1sI5m6gfz3+dafc8/YKSfv8VvAbs3Fye607MMXDGMvnyqC4EfKiuMBEB2 Vp0ooFkBp2ug+wfHI53061brNqxtlMd3fGFrtsJQt3MEjhpZHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAfaADdU7y+nlmaEV7dSF5YnERBlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNjIwYjU1NjUtM2UxZC0z NzRmLTk5M2YtNTZlNWExM2JjN2JmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFdzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJQS6oiELqO2rehwLlm9DJcxVkTJenze3lKkWnrB/QCCmeY8ZKWJ06fc qelSuDD0BGwEM9PXdGMyLA36SqyY9wYiioXMWQ2jHm8rj2JCYjd/U2aq7gZRQ6Y5 ZuYnyg+v9p4UA1UndKg2isb1zUovjB9cr4h478W+CRAg2baei+kUFO80urSbW0H4 Y5UdSzenGmhIVJrqwYxOgiVwZHVvOFEAL0bYA6L42dwbeZW0HNNIFRE1XGlBpkX2 UF9p4P2N51NNvxao2KaOmj3NyJ8ENKlC9MdowsCFjfDbdQnWvnHWxKpd88/OhD39 /RnbdiMvlFhW3ntVANe4VabBtdPZ46M= -----END CERTIFICATE-----Generated at Wed Nov 5 09:19:33 2025 by rpki-client