$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/78648d11-2f6f-3a66-8f68-3edfca0d6da9.roa File: 78648d11-2f6f-3a66-8f68-3edfca0d6da9.roa (raw, json) Hash identifier: 4Msu4jvngPnqr6aToHqBaZ+QYVD4XTxKOt5EoOURohc= Subject key identifier: A9:9B:7B:20:47:4C:A2:9E:DF:24:CC:1F:82:CD:5C:22:69:A3:31:C0 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584BB2F7D1A73CE018C885079D00 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/78648d11-2f6f-3a66-8f68-3edfca0d6da9.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 202 IP address blocks: 168.87.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:d1:a7:3c:e0:18:c8:85:07:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=cc2c6ec0-6355-4709-ac67-d052110fea37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:43:4c:ad:c9:03:67:97:68:03:d1:eb:9c:d4: fc:9a:a6:f9:38:96:bd:60:11:86:f3:33:4a:ca:0b: bb:bb:b9:f7:34:33:80:b8:01:4a:66:7c:76:66:fa: 45:31:7c:8f:c2:19:0a:9d:de:cc:f9:dd:c5:c9:91: 16:6c:c4:8d:1a:1a:d0:46:86:4f:78:d8:25:01:b0: 48:d4:91:2f:f2:f0:7c:d3:5b:46:cc:c1:6a:90:00: 5b:1e:04:72:93:7d:8a:c9:5b:85:24:94:4a:74:53: 64:f8:af:1e:cc:61:c3:34:53:53:09:cd:fc:35:57: f8:b2:37:3d:32:d8:4b:7a:5f:e1:0d:d9:c0:00:31: 07:dd:b4:d1:da:ce:2c:80:2a:3a:ad:aa:de:fa:97: dd:09:7e:5c:25:21:c2:91:68:2a:7c:08:13:ae:9e: e8:f9:6a:ee:12:4b:7e:7e:ab:b7:00:f5:11:2b:74: f4:36:73:df:e9:f3:a8:79:27:91:6f:19:0e:66:c2: 71:ef:86:bd:ae:70:83:43:23:a7:0f:bb:2d:79:60: da:e2:be:c1:e2:84:2f:72:01:35:e9:c9:58:08:f5: ba:0b:d8:b0:f0:b3:f4:c2:68:e9:5a:8a:d0:0c:00: d8:b2:9e:10:bd:91:a8:5e:3e:bd:32:13:6c:60:3b: 11:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:9B:7B:20:47:4C:A2:9E:DF:24:CC:1F:82:CD:5C:22:69:A3:31:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/78648d11-2f6f-3a66-8f68-3edfca0d6da9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:4a:2b:38:b3:64:bd:b8:7d:c0:05:52:85:7c:ce:22:9d:e0: 46:ff:34:35:79:1e:0f:f6:4b:00:2d:53:dc:6b:fe:d3:f7:07: 55:01:63:f1:91:27:0b:1b:1e:52:04:68:82:8e:7b:30:76:8f: d3:22:fc:4a:71:69:9c:87:53:f7:74:8c:54:9f:69:14:d9:08: 43:e4:0f:c6:71:27:28:39:87:6f:60:50:42:08:fb:14:9e:63: 24:15:af:c0:d0:c4:e0:89:55:a9:3c:71:55:23:1a:ee:ce:56: 0a:50:b5:1c:6f:ff:d0:80:0b:40:a1:26:f9:bd:a8:c7:bc:cd: f4:5b:97:08:f0:10:84:a8:79:29:93:47:c3:f8:3c:1b:58:fd: b7:e9:96:61:73:8f:3a:16:0e:2f:e2:d6:b4:46:09:6a:c2:fe: 80:33:f7:5c:f7:7d:50:d7:c6:55:fc:21:fe:89:c3:5d:df:dc: 25:4d:70:3f:5e:5c:00:b2:82:ea:50:f2:67:f5:14:7b:b6:e8: ef:52:02:f6:89:87:df:81:a9:5b:7a:d3:2f:c0:ec:d9:76:6c: aa:a0:7b:1d:fa:a6:62:3e:03:cd:ba:cb:46:ca:6e:5f:76:a1: 6d:c9:7c:35:e7:5a:b6:f4:f6:d6:91:57:4d:6f:f9:8e:7b:d7: 04:9e:75:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy99GnPOAYyIUHnQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk Y2MyYzZlYzAtNjM1NS00NzA5LWFjNjctZDA1MjExMGZlYTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUNMrckDZ5doA9HrnNT8mqb5OJa9YBGG8zNK ygu7u7n3NDOAuAFKZnx2ZvpFMXyPwhkKnd7M+d3FyZEWbMSNGhrQRoZPeNglAbBI 1JEv8vB801tGzMFqkABbHgRyk32KyVuFJJRKdFNk+K8ezGHDNFNTCc38NVf4sjc9 MthLel/hDdnAADEH3bTR2s4sgCo6rare+pfdCX5cJSHCkWgqfAgTrp7o+WruEkt+ fqu3APURK3T0NnPf6fOoeSeRbxkOZsJx74a9rnCDQyOnD7steWDa4r7B4oQvcgE1 6clYCPW6C9iw8LP0wmjpWorQDADYsp4QvZGoXj69MhNsYDsRtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKmbeyBHTKKe3yTMH4LNXCJpozHAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNzg2NDhkMTEtMmY2Zi0z YTY2LThmNjgtM2VkZmNhMGQ2ZGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFeCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI5KKzizZL24fcAFUoV8ziKd4Eb/NDV5Hg/2SwAtU9xr/tP3B1UBY/GR JwsbHlIEaIKOezB2j9Mi/EpxaZyHU/d0jFSfaRTZCEPkD8ZxJyg5h29gUEII+xSe YyQVr8DQxOCJVak8cVUjGu7OVgpQtRxv/9CAC0ChJvm9qMe8zfRblwjwEISoeSmT R8P4PBtY/bfplmFzjzoWDi/i1rRGCWrC/oAz91z3fVDXxlX8If6Jw13f3CVNcD9e XACygupQ8mf1FHu26O9SAvaJh9+BqVt60y/A7Nl2bKqgex36pmI+A826y0bKbl92 oW3JfDXnWrb09taRV01v+Y571wSede0= -----END CERTIFICATE-----Generated at Tue Nov 4 23:26:51 2025 by rpki-client