$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/7a5da348-6d34-33b1-bac8-df30d0ee90fa.roa File: 7a5da348-6d34-33b1-bac8-df30d0ee90fa.roa (raw, json) Hash identifier: eSi4lTc67N5CNjl4JdcNDs62BrDPrt3z/yyjAovVqxs= Subject key identifier: 92:89:FF:50:DE:A3:9A:F0:B1:7F:96:D3:FE:7C:EF:1E:FD:64:64:E4 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584BA0D271CA6CE78B0159D000A0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/7a5da348-6d34-33b1-bac8-df30d0ee90fa.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 14618 IP address blocks: 168.87.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:71:ca:6c:e7:8b:01:59:d0:00:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=e5295028-a401-42e0-8696-14cbc769c23b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:8b:30:71:5e:4e:67:90:68:be:33:a1:ca:a6: 3c:cd:c2:62:96:d5:31:b0:46:82:3f:7b:79:ac:0d: fc:1c:12:7c:0e:3f:a7:3f:c1:60:69:f2:4d:3b:a8: 18:c7:e0:14:d1:92:6d:52:f9:95:2b:e8:ce:1d:89: 1f:4d:d7:f5:37:ae:ba:18:c6:6e:5c:37:04:80:a4: be:52:2c:72:00:a8:8f:fc:e1:64:1f:7d:a8:17:c4: 88:68:4a:a5:d5:dc:91:1b:9a:16:61:2b:ba:2c:b9: 4d:bb:a6:37:ba:0c:b9:7f:1b:97:cb:07:8b:4b:34: 01:82:9d:70:95:d7:c0:b6:3d:39:c1:db:02:1d:be: 07:75:69:f4:0a:1a:0d:25:55:3b:15:97:c0:f3:2f: 4d:d3:eb:55:4a:20:d6:63:e0:45:28:8a:c4:8a:0c: 7c:be:a5:db:1d:72:75:53:e3:45:44:bd:20:0a:b9: 73:7e:e9:8d:0f:04:83:bb:1c:7d:84:f4:f8:91:53: 5d:12:95:6f:05:a1:f1:4d:6c:7b:22:df:ab:a0:fa: b4:b6:fa:cd:f1:a4:98:90:1a:2e:d6:7c:e7:7e:e5: b4:d0:f1:10:9f:e4:05:19:0f:ff:1f:91:e5:99:80: 98:94:a4:5d:91:91:b9:f8:bb:b0:62:eb:c6:a0:f5: a7:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:89:FF:50:DE:A3:9A:F0:B1:7F:96:D3:FE:7C:EF:1E:FD:64:64:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/7a5da348-6d34-33b1-bac8-df30d0ee90fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:58:d0:fd:fa:ad:48:10:d9:39:6a:df:b6:49:1f:36:9b:be: 76:6f:c9:f6:f4:bb:9a:1f:13:ea:82:5d:d6:b8:e5:a6:53:45: b8:9f:0f:78:77:ef:de:46:cf:22:22:1c:4c:ab:de:1a:e8:cf: 27:c5:7a:a4:c1:14:fd:d3:25:d6:26:2f:92:84:4e:c6:07:50: 30:a3:c8:f6:09:02:be:9d:42:33:97:3a:93:9f:ea:a8:46:52: 63:fd:13:64:25:eb:f0:16:27:17:a0:db:e9:f7:9d:d6:0e:0d: bb:b8:34:a7:25:f4:ba:44:44:3f:1d:62:e6:b9:8e:36:4a:47: ea:85:98:3a:cf:e4:72:0d:23:89:8f:ca:0b:6f:6e:01:d5:62: 7d:e5:36:ea:62:e5:35:c0:3a:fe:03:2f:1c:03:da:ac:27:d0: 66:2e:33:02:3d:03:c7:2b:ed:f8:c3:3e:5e:d6:2f:f5:f2:fb: 3a:89:10:12:56:44:07:6f:6a:bc:e1:44:87:95:0b:10:2b:05: ea:56:ee:90:f6:7c:f3:2f:86:b3:23:fe:7a:61:cf:00:3c:16: 6e:13:06:e4:ce:42:f8:39:67:52:b0:9c:c5:89:45:66:23:c2: 25:0b:23:c0:b3:5b:a5:f0:aa:66:6a:96:6e:a6:0f:37:b2:30: b2:d6:0a:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0nHKbOeLAVnQAKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk ZTUyOTUwMjgtYTQwMS00MmUwLTg2OTYtMTRjYmM3NjljMjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyoswcV5OZ5BovjOhyqY8zcJiltUxsEaCP3t5 rA38HBJ8Dj+nP8FgafJNO6gYx+AU0ZJtUvmVK+jOHYkfTdf1N666GMZuXDcEgKS+ UixyAKiP/OFkH32oF8SIaEql1dyRG5oWYSu6LLlNu6Y3ugy5fxuXyweLSzQBgp1w ldfAtj05wdsCHb4HdWn0ChoNJVU7FZfA8y9N0+tVSiDWY+BFKIrEigx8vqXbHXJ1 U+NFRL0gCrlzfumNDwSDuxx9hPT4kVNdEpVvBaHxTWx7It+roPq0tvrN8aSYkBou 1nznfuW00PEQn+QFGQ//H5HlmYCYlKRdkZG5+LuwYuvGoPWnwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJKJ/1Deo5rwsX+W0/587x79ZGTkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvN2E1ZGEzNDgtNmQzNC0z M2IxLWJhYzgtZGYzMGQwZWU5MGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFesMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACdY0P36rUgQ2Tlq37ZJHzabvnZvyfb0u5ofE+qCXda45aZTRbifD3h3 795GzyIiHEyr3hrozyfFeqTBFP3TJdYmL5KETsYHUDCjyPYJAr6dQjOXOpOf6qhG UmP9E2Ql6/AWJxeg2+n3ndYODbu4NKcl9LpERD8dYua5jjZKR+qFmDrP5HINI4mP ygtvbgHVYn3lNupi5TXAOv4DLxwD2qwn0GYuMwI9A8cr7fjDPl7WL/Xy+zqJEBJW RAdvarzhRIeVCxArBepW7pD2fPMvhrMj/nphzwA8Fm4TBuTOQvg5Z1KwnMWJRWYj wiULI8CzW6XwqmZqlm6mDzeyMLLWChc= -----END CERTIFICATE-----Generated at Wed Nov 5 04:08:44 2025 by rpki-client