$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9518bcd8-e583-3346-aeb7-ed804ee2a31a.roa File: 9518bcd8-e583-3346-aeb7-ed804ee2a31a.roa (raw, json) Hash identifier: hsm4EQx2XE5i0M4+RSJ8QXZXyjhSWC+1uN1aTveeGEo= Subject key identifier: D9:63:DA:A7:1F:F2:A5:C1:7C:0D:C6:C8:72:08:A8:45:F1:3A:BF:E2 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584BA0D272471A6329062B50A4C0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9518bcd8-e583-3346-aeb7-ed804ee2a31a.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 14618 IP address blocks: 168.87.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:72:47:1a:63:29:06:2b:50:a4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=4439b0f0-3015-4461-abda-48f04bd0eccd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:72:d0:80:ef:21:b6:5f:9b:30:90:be:8e:01: 19:f1:44:32:9a:dc:64:58:28:2b:a4:26:d5:78:92: 36:8d:ab:fb:7a:b3:fd:0a:21:34:c3:3d:b9:e2:06: f7:2f:ff:ce:b3:72:2e:b2:14:50:98:f3:66:33:f0: 8f:0f:03:69:45:8b:99:ab:13:73:ed:6f:f1:44:53: 39:a9:42:b3:0e:51:6a:f8:2f:a7:1f:07:9f:24:ca: d2:d4:20:8a:0c:42:61:4b:4b:15:93:cb:5c:b4:0d: bc:f8:25:bb:f8:1d:d7:1b:e0:bd:38:73:ec:c3:43: a1:1a:07:f3:9f:ff:42:85:d5:45:10:21:c0:6f:72: b9:50:1e:eb:7e:96:7b:76:e3:93:66:99:d0:68:7b: 3a:16:84:d3:e8:12:03:ab:cd:d4:2e:7c:6d:04:08: 52:75:84:b5:0d:90:a8:75:d1:d4:55:09:ff:70:d8: 25:48:74:7a:57:05:4a:81:67:b7:9c:28:eb:3b:79: f6:b5:c3:c8:77:d2:77:73:03:65:e4:68:09:2e:92: bd:af:53:c6:2f:a1:a8:41:0a:be:7a:e0:7c:66:07: 45:d4:ff:63:ca:bd:f5:13:1b:94:9e:2b:8d:8a:9f: 44:a7:46:da:43:a0:e8:3f:06:7b:ae:e7:03:dc:7e: 6d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:63:DA:A7:1F:F2:A5:C1:7C:0D:C6:C8:72:08:A8:45:F1:3A:BF:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9518bcd8-e583-3346-aeb7-ed804ee2a31a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.178.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:fa:7d:59:06:fc:8d:74:5e:ad:78:24:3f:2a:1e:1a:a0:94: ee:9e:bd:3a:6c:1f:fc:6c:5a:69:ca:c0:6e:86:f5:f1:ac:46: ee:43:c1:33:2d:88:8d:fd:aa:28:a9:51:ed:62:a0:ac:55:06: 38:68:26:aa:f1:4e:58:cd:1e:18:e1:a5:ed:37:b7:04:05:2e: 75:96:a4:56:60:30:78:53:22:c1:46:8c:35:41:fe:82:c6:2c: 55:45:0e:04:9b:c7:22:9d:aa:d2:50:c9:0a:a0:63:59:17:c9: 11:cb:a8:2a:35:a9:b7:42:4c:6c:dc:89:d9:0b:92:44:a5:a0: b8:31:5b:b4:c1:42:ec:e8:f1:c7:8c:8f:dc:08:de:f7:46:2f: 18:27:00:64:5a:26:9a:1f:ac:d2:2d:ac:a1:73:9c:55:60:1d: 81:e2:62:46:a8:49:e2:75:ff:86:36:89:ba:7b:39:b1:bd:37: f3:21:4a:a6:80:70:37:3c:b0:aa:b4:dc:b8:4d:e5:b7:7b:89: 16:31:eb:e3:86:51:12:e5:32:f9:af:e7:86:b4:1b:a5:72:9b: 35:aa:0c:70:f2:eb:1e:55:68:c2:2e:ef:a4:e3:a9:4d:79:1b: cf:8c:e4:23:da:89:e2:00:e8:54:41:77:27:06:f4:1c:f5:7a: 20:0e:3e:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0nJHGmMpBitQpMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk NDQzOWIwZjAtMzAxNS00NDYxLWFiZGEtNDhmMDRiZDBlY2NkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3LQgO8htl+bMJC+jgEZ8UQymtxkWCgrpCbV eJI2jav7erP9CiE0wz254gb3L//Os3IushRQmPNmM/CPDwNpRYuZqxNz7W/xRFM5 qUKzDlFq+C+nHwefJMrS1CCKDEJhS0sVk8tctA28+CW7+B3XG+C9OHPsw0OhGgfz n/9ChdVFECHAb3K5UB7rfpZ7duOTZpnQaHs6FoTT6BIDq83ULnxtBAhSdYS1DZCo ddHUVQn/cNglSHR6VwVKgWe3nCjrO3n2tcPId9J3cwNl5GgJLpK9r1PGL6GoQQq+ euB8ZgdF1P9jyr31ExuUniuNip9Ep0baQ6DoPwZ7rucD3H5tFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNlj2qcf8qXBfA3GyHIIqEXxOr/iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvOTUxOGJjZDgtZTU4My0z MzQ2LWFlYjctZWQ4MDRlZTJhMzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFeyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABH6fVkG/I10Xq14JD8qHhqglO6evTpsH/xsWmnKwG6G9fGsRu5DwTMt iI39qiipUe1ioKxVBjhoJqrxTljNHhjhpe03twQFLnWWpFZgMHhTIsFGjDVB/oLG LFVFDgSbxyKdqtJQyQqgY1kXyRHLqCo1qbdCTGzcidkLkkSloLgxW7TBQuzo8ceM j9wI3vdGLxgnAGRaJpofrNItrKFznFVgHYHiYkaoSeJ1/4Y2ibp7ObG9N/MhSqaA cDc8sKq03LhN5bd7iRYx6+OGURLlMvmv54a0G6VymzWqDHDy6x5VaMIu76TjqU15 G8+M5CPaieIA6FRBdycG9Bz1eiAOPgQ= -----END CERTIFICATE-----Generated at Wed Nov 5 10:57:21 2025 by rpki-client