$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6e3baeb0-9f4e-3e9d-8acc-fc0346f1b51e.roa File: 6e3baeb0-9f4e-3e9d-8acc-fc0346f1b51e.roa (raw, json) Hash identifier: gya6hjIVTtOuyzVNpYL3uU13mh3jNdh4bZCxmMRCjTk= Subject key identifier: 6E:6F:68:C8:97:BF:0E:85:81:7C:6B:7A:52:16:DF:F8:E0:42:08:7C Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584B9E07CDEAA05B1DF3232F5A00 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6e3baeb0-9f4e-3e9d-8acc-fc0346f1b51e.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 203 IP address blocks: 168.87.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:cd:ea:a0:5b:1d:f3:23:2f:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=b996e04c-cf18-4150-8afe-72cb7f0ff919 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0e:84:a9:f3:1c:64:f9:3b:67:b1:ae:ff:58: d9:9c:57:76:8b:3a:1e:28:b0:17:63:31:5d:55:e3: 42:8e:05:3b:b7:25:82:7e:2a:c7:0c:70:60:cc:a8: db:ed:48:05:5c:96:84:62:03:b7:e1:24:60:89:26: 72:43:2f:59:37:d3:6b:54:78:fc:7d:ae:ff:57:2e: fa:36:2b:35:63:f0:3b:16:c9:81:18:cb:63:b4:28: 16:25:20:fe:73:06:16:99:45:cc:54:02:05:71:7a: ac:1f:79:4a:5e:fc:e4:c8:22:75:40:e1:e7:40:b7: 1f:d0:bf:73:42:58:c3:9f:d7:b5:1e:73:86:ef:94: 5c:00:30:26:a4:5a:1e:64:84:8c:02:3e:71:e3:88: 39:0e:93:a5:f1:17:9b:92:b5:52:e5:31:72:db:2d: 37:40:b1:30:c4:59:fc:51:2a:ba:74:32:5a:cf:61: 0f:77:b9:ae:c4:0d:0d:0c:ee:60:f8:4d:f1:dc:fa: 69:1e:ce:0c:7d:28:b5:bd:37:ba:a5:b4:31:85:e1: 0c:66:6d:cc:68:48:36:42:1e:ff:ce:04:4e:fa:a9: 2c:64:3f:97:5f:45:74:3d:48:c0:07:2d:9c:81:00: dc:c9:8e:d0:c2:fa:c0:39:31:72:ed:5f:a7:55:f0: b9:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:6F:68:C8:97:BF:0E:85:81:7C:6B:7A:52:16:DF:F8:E0:42:08:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6e3baeb0-9f4e-3e9d-8acc-fc0346f1b51e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:4e:e6:1d:7f:0b:ac:f2:c7:dc:b3:91:c6:2f:0f:5d:50:ac: 1d:3e:a7:3f:cd:a0:92:cf:e9:84:01:a4:17:04:d8:8a:0c:19: ed:e0:78:4a:bc:85:25:a4:38:e3:dd:f8:b1:a8:3e:34:04:5c: 58:a2:d4:78:fc:52:69:7c:5c:09:4f:da:9a:f5:80:75:24:81: 44:07:b6:1c:dd:c5:a1:db:16:62:51:99:cc:b9:c4:41:e0:7d: da:f8:3f:22:c7:94:d0:fa:b6:1d:a9:b0:92:37:8f:e1:a9:c2: 94:41:52:7b:07:49:34:6d:bb:5c:c8:7d:f8:15:35:73:14:cc: 21:8e:c9:10:10:a7:8d:8e:90:9e:4b:33:9a:b9:32:77:a4:5f: 6b:5c:0c:bb:85:10:14:66:e9:64:79:21:9b:41:67:4b:eb:48: c5:03:21:9f:2b:61:bd:81:a1:73:3e:31:79:6b:82:b8:35:a9: d5:5b:53:1e:d7:db:c7:4c:f0:3f:46:07:d8:b5:9e:d4:5b:eb: f1:b4:f9:c4:3e:2c:b1:48:cf:e0:1b:fb:8d:20:72:68:63:e7: 54:02:bd:9c:aa:59:a4:e8:c1:2f:b3:de:ac:d6:8a:63:36:1a: 12:58:ec:63:e9:28:b2:3a:aa:33:5c:a7:df:57:11:6c:3a:8c: db:e4:e3:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB83qoFsd8yMvWgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk Yjk5NmUwNGMtY2YxOC00MTUwLThhZmUtNzJjYjdmMGZmOTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQ6EqfMcZPk7Z7Gu/1jZnFd2izoeKLAXYzFd VeNCjgU7tyWCfirHDHBgzKjb7UgFXJaEYgO34SRgiSZyQy9ZN9NrVHj8fa7/Vy76 Nis1Y/A7FsmBGMtjtCgWJSD+cwYWmUXMVAIFcXqsH3lKXvzkyCJ1QOHnQLcf0L9z QljDn9e1HnOG75RcADAmpFoeZISMAj5x44g5DpOl8RebkrVS5TFy2y03QLEwxFn8 USq6dDJaz2EPd7muxA0NDO5g+E3x3PppHs4MfSi1vTe6pbQxheEMZm3MaEg2Qh7/ zgRO+qksZD+XX0V0PUjABy2cgQDcyY7QwvrAOTFy7V+nVfC5YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG5vaMiXvw6FgXxrelIW3/jgQgh8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNmUzYmFlYjAtOWY0ZS0z ZTlkLThhY2MtZmMwMzQ2ZjFiNTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFeAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABhO5h1/C6zyx9yzkcYvD11QrB0+pz/NoJLP6YQBpBcE2IoMGe3geEq8 hSWkOOPd+LGoPjQEXFii1Hj8Uml8XAlP2pr1gHUkgUQHthzdxaHbFmJRmcy5xEHg fdr4PyLHlND6th2psJI3j+GpwpRBUnsHSTRtu1zIffgVNXMUzCGOyRAQp42OkJ5L M5q5MnekX2tcDLuFEBRm6WR5IZtBZ0vrSMUDIZ8rYb2BoXM+MXlrgrg1qdVbUx7X 28dM8D9GB9i1ntRb6/G0+cQ+LLFIz+Ab+40gcmhj51QCvZyqWaTowS+z3qzWimM2 GhJY7GPpKLI6qjNcp99XEWw6jNvk47o= -----END CERTIFICATE-----Generated at Wed Nov 5 00:32:59 2025 by rpki-client