$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/89a29d46-d778-3d51-9eb5-25e8a39ce4e7.roa File: 89a29d46-d778-3d51-9eb5-25e8a39ce4e7.roa (raw, json) Hash identifier: g9dN9sNZPWYy+TsOyYJ+JCUknJuClS29uL4IbiLnl+M= Subject key identifier: E8:4C:E2:35:5A:C5:4F:81:83:11:7C:76:5F:27:D6:60:7A:E5:6E:71 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584BB2F7D6EF399ADCD8F9FE2400 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/89a29d46-d778-3d51-9eb5-25e8a39ce4e7.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 202 IP address blocks: 206.164.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:d6:ef:39:9a:dc:d8:f9:fe:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=361e7965-7675-4bed-be3b-ad4756643b0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:fd:51:84:c5:c8:ad:d7:c4:43:d4:d9:ed:3d: f0:e8:a5:45:37:9a:fb:cd:a9:46:f1:dc:c7:5a:2d: 08:30:7a:5a:e3:74:c6:37:f7:92:07:5d:5f:27:c2: 6e:2d:bf:96:e1:a5:56:45:77:4d:8e:7a:35:9d:9a: cd:60:3f:a8:ec:1c:a6:3b:a4:33:ab:3d:0b:a2:73: e6:eb:b8:76:d6:53:1f:35:0f:bb:d6:9b:4f:ec:92: 54:e2:cb:14:36:0c:08:5b:62:be:18:fa:c8:fb:cd: 6e:04:7b:c9:c0:e2:db:51:a0:27:87:a0:55:8a:b3: ae:50:bc:45:9e:f6:9c:09:29:15:f2:cc:47:14:ef: a8:07:f7:a8:eb:d2:27:c7:98:ed:df:6e:b9:6e:5b: 36:db:77:9e:50:b3:dc:d2:82:02:a7:25:08:48:ab: ee:c0:d5:2d:b2:f6:0e:ae:39:cf:e6:ae:f4:e9:53: 4f:ca:a4:09:c7:53:5a:63:53:d2:3d:9d:75:93:b3: 9d:4f:9c:ed:ca:e9:6c:8c:ac:43:7f:b0:87:69:26: 56:38:c7:55:8d:35:e7:55:9d:a7:11:37:8c:ef:e9: 00:27:db:ff:39:3e:16:ed:71:3f:57:e6:c6:3b:b1: cd:77:d0:bd:ae:05:fb:fc:a5:b6:40:e8:85:f7:76: a8:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:4C:E2:35:5A:C5:4F:81:83:11:7C:76:5F:27:D6:60:7A:E5:6E:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/89a29d46-d778-3d51-9eb5-25e8a39ce4e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 206.164.178.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:7a:35:cb:2c:c4:e1:70:6e:0d:67:3d:24:f9:be:c2:d4:51: d2:94:3d:8e:dc:f2:18:04:12:c2:b5:e4:76:c7:87:a3:3f:9f: 78:5a:08:35:89:9f:92:bf:18:ed:49:93:25:74:f8:9c:32:30: 1b:56:6b:af:fe:1a:cf:91:8b:76:2c:8b:f2:19:5c:b0:21:a8: 7d:32:3e:81:16:7d:7a:c8:17:1a:c9:df:c7:10:56:99:a3:b4: 5d:1a:41:3e:91:f1:4f:88:cb:f6:52:31:df:fe:fc:1e:b9:43: 00:c8:5b:af:c6:f6:3a:bf:54:2a:3a:9b:f8:a0:a0:75:0f:e3: f7:5c:2c:b4:11:ab:79:2e:7a:66:de:e8:39:f4:ff:cb:2d:94: 12:4b:07:4d:2b:cb:fd:25:2f:16:c0:28:c9:0f:5b:86:43:f2: ac:65:14:7e:e1:a8:f2:fd:83:5b:e2:7c:dc:b7:83:0d:a4:da: df:9a:f2:f9:dd:ec:95:4d:b7:4a:d9:c5:52:ac:22:ba:eb:77: e1:f1:31:b2:ea:1f:dd:03:8f:6a:8c:3c:86:6c:93:0d:39:22: 20:6c:94:fb:de:db:a7:ca:21:13:3e:cf:ea:77:4e:25:3b:6a: 1a:d6:6c:8f:f0:2d:72:1d:89:1f:4a:07:7d:63:bd:ca:3b:ee: c6:0e:19:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy99bvOZrc2Pn+JAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk MzYxZTc5NjUtNzY3NS00YmVkLWJlM2ItYWQ0NzU2NjQzYjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlf1RhMXIrdfEQ9TZ7T3w6KVFN5r7zalG8dzH Wi0IMHpa43TGN/eSB11fJ8JuLb+W4aVWRXdNjno1nZrNYD+o7BymO6Qzqz0LonPm 67h21lMfNQ+71ptP7JJU4ssUNgwIW2K+GPrI+81uBHvJwOLbUaAnh6BVirOuULxF nvacCSkV8sxHFO+oB/eo69Inx5jt3265bls223eeULPc0oICpyUISKvuwNUtsvYO rjnP5q706VNPyqQJx1NaY1PSPZ11k7OdT5ztyulsjKxDf7CHaSZWOMdVjTXnVZ2n ETeM7+kAJ9v/OT4W7XE/V+bGO7HNd9C9rgX7/KW2QOiF93aoVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOhM4jVaxU+BgxF8dl8n1mB65W5xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvODlhMjlkNDYtZDc3OC0z ZDUxLTllYjUtMjVlOGEzOWNlNGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqSyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABp6NcssxOFwbg1nPST5vsLUUdKUPY7c8hgEEsK15HbHh6M/n3haCDWJ n5K/GO1JkyV0+JwyMBtWa6/+Gs+Ri3Ysi/IZXLAhqH0yPoEWfXrIFxrJ38cQVpmj tF0aQT6R8U+Iy/ZSMd/+/B65QwDIW6/G9jq/VCo6m/igoHUP4/dcLLQRq3kuembe 6Dn0/8stlBJLB00ry/0lLxbAKMkPW4ZD8qxlFH7hqPL9g1vifNy3gw2k2t+a8vnd 7JVNt0rZxVKsIrrrd+HxMbLqH90Dj2qMPIZskw05IiBslPve26fKIRM+z+p3TiU7 ahrWbI/wLXIdiR9KB31jvco77sYOGV8= -----END CERTIFICATE-----Generated at Tue Nov 4 23:33:52 2025 by rpki-client