$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8a962e69-e99e-3dcc-986c-baf471ff1500.roa File: 8a962e69-e99e-3dcc-986c-baf471ff1500.roa (raw, json) Hash identifier: dX3mBY91/XddoobDBjQSp7VqjY4pKnVaulkEv5cIDRU= Subject key identifier: 2A:21:A9:9C:9E:6C:BA:1D:A9:C5:DF:E5:F8:C7:3F:9B:52:0C:D8:E0 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584BB2F7D615DB7CE8192840C640 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8a962e69-e99e-3dcc-986c-baf471ff1500.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 3360 IP address blocks: 204.105.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:d6:15:db:7c:e8:19:28:40:c6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=73168edc-1412-44b3-8d36-caa60c21faba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:47:68:eb:2c:bd:79:da:7a:17:71:0a:27:9d: d2:fa:74:79:05:f8:a6:a4:b2:d6:d6:a4:c0:7f:6b: 00:01:d2:7b:04:40:a4:6a:af:b4:35:84:35:80:49: 43:24:fd:b5:09:26:f8:39:89:4c:a3:78:3d:1c:07: 6e:a6:f4:8e:6b:d0:8f:3c:24:54:73:8b:2a:e3:96: e3:34:86:29:ed:88:58:9c:cd:a2:fc:fa:27:f2:6a: ac:bf:12:ab:de:4d:e5:55:4a:3c:d3:69:97:5d:57: b3:45:bc:c8:5f:6d:cf:85:7d:c2:95:70:a5:9f:69: f7:9c:87:04:84:f9:61:13:9b:2a:a8:33:e6:53:9f: c0:68:9b:2f:22:75:a0:57:47:70:fd:49:24:72:34: 81:2e:8c:e6:18:08:3a:af:f4:c5:6e:85:95:75:0a: b0:d4:91:35:46:54:a9:0e:f0:03:d8:28:19:17:a1: 25:03:49:60:6a:40:07:4d:d0:85:0e:5d:8d:4b:ee: 69:19:81:1c:c3:4d:9c:eb:e9:da:76:c1:41:c5:0c: 85:2f:5c:46:77:39:8b:d6:56:90:09:9a:56:9b:96: b1:87:bc:dc:34:3a:6b:4c:c3:fc:7f:47:36:0e:99: 1c:4b:b3:98:bf:9b:bd:f2:9b:9c:79:af:b5:f7:84: 62:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:21:A9:9C:9E:6C:BA:1D:A9:C5:DF:E5:F8:C7:3F:9B:52:0C:D8:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8a962e69-e99e-3dcc-986c-baf471ff1500.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 204.105.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:2f:35:d8:f6:4f:7d:65:25:f2:ae:9a:85:6a:99:42:b9:58: 16:01:a3:19:28:1f:0a:bf:77:a6:38:6f:f1:fc:fb:4c:bd:4c: cf:e2:5d:14:63:c2:b8:4c:c6:e1:e6:7f:b1:53:3c:4c:84:b6: 9f:4d:c0:8d:bd:29:f1:6c:39:c4:14:ba:2b:ff:e7:4f:78:86: 93:08:e8:8c:0c:71:ca:05:72:ee:5f:3c:a6:6f:54:9c:03:18: 7b:b3:de:1a:0d:11:ac:83:c5:6d:0b:25:01:12:bd:d4:7b:28: 46:6b:15:11:14:fd:d2:d3:40:91:05:07:a1:5a:8b:57:2d:8b: 16:f5:54:cf:6d:70:36:5e:c1:64:45:6d:6c:78:20:f1:a6:84: ba:27:b6:6c:57:19:2a:6a:27:e2:bb:c6:28:c8:69:61:15:bc: 55:a8:d8:0a:16:b9:84:3a:ee:29:04:db:ca:5f:e1:b8:ef:db: 07:fe:36:32:34:05:b5:9a:3f:41:be:c3:ec:3d:ae:a8:1e:2a: 61:92:e1:14:d6:f9:20:e4:52:50:18:d1:9f:d6:8f:d5:cd:b3: fe:41:fb:10:43:c9:e3:32:dc:63:b9:22:cf:8c:cd:a4:6d:1b: 60:6b:0a:a3:5f:4b:fd:8c:83:fa:15:e2:e2:2c:58:f4:4e:00: 27:d8:6b:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy99YV23zoGShAxkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk NzMxNjhlZGMtMTQxMi00NGIzLThkMzYtY2FhNjBjMjFmYWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEdo6yy9edp6F3EKJ53S+nR5BfimpLLW1qTA f2sAAdJ7BECkaq+0NYQ1gElDJP21CSb4OYlMo3g9HAdupvSOa9CPPCRUc4sq45bj NIYp7YhYnM2i/Pon8mqsvxKr3k3lVUo802mXXVezRbzIX23PhX3ClXCln2n3nIcE hPlhE5sqqDPmU5/AaJsvInWgV0dw/UkkcjSBLozmGAg6r/TFboWVdQqw1JE1RlSp DvAD2CgZF6ElA0lgakAHTdCFDl2NS+5pGYEcw02c6+nadsFBxQyFL1xGdzmL1laQ CZpWm5axh7zcNDprTMP8f0c2DpkcS7OYv5u98pucea+194RicQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCohqZyebLodqcXf5fjHP5tSDNjgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvOGE5NjJlNjktZTk5ZS0z ZGNjLTk4NmMtYmFmNDcxZmYxNTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzGmQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHAvNdj2T31lJfKumoVqmUK5WBYBoxkoHwq/d6Y4b/H8+0y9TM/iXRRj wrhMxuHmf7FTPEyEtp9NwI29KfFsOcQUuiv/5094hpMI6IwMccoFcu5fPKZvVJwD GHuz3hoNEayDxW0LJQESvdR7KEZrFREU/dLTQJEFB6Fai1ctixb1VM9tcDZewWRF bWx4IPGmhLontmxXGSpqJ+K7xijIaWEVvFWo2AoWuYQ67ikE28pf4bjv2wf+NjI0 BbWaP0G+w+w9rqgeKmGS4RTW+SDkUlAY0Z/Wj9XNs/5B+xBDyeMy3GO5Is+MzaRt G2BrCqNfS/2Mg/oV4uIsWPROACfYa7M= -----END CERTIFICATE-----Generated at Tue Nov 4 23:26:24 2025 by rpki-client