$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9f3841d0-f2a4-3980-b388-7aad5c42aad7.roa File: 9f3841d0-f2a4-3980-b388-7aad5c42aad7.roa (raw, json) Hash identifier: AfXLbYcjN7oAjS0jce77ecYYyZDXUFZXt0vnnZOGNLk= Subject key identifier: 5B:5D:EE:E5:88:6E:B5:25:F2:DA:F0:18:3F:07:56:9F:64:C8:47:0A Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584B9E07919146243DF8881A8A80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9f3841d0-f2a4-3980-b388-7aad5c42aad7.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 202 IP address blocks: 206.164.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:91:91:46:24:3d:f8:88:1a:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=c0a8d563-3d33-4dc6-a428-893a02b1650b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:df:68:fb:c6:c3:b0:b7:92:52:61:09:a2:ed: eb:2f:ac:ad:c8:01:fb:f1:71:58:d1:e2:7a:a4:4e: 89:cf:d6:bc:e9:1a:0b:5d:8f:17:42:a1:72:0e:ee: 7c:50:bc:f4:05:b5:61:c9:76:d7:6c:27:1c:74:5f: 18:10:a9:05:85:90:1a:a8:87:90:0a:7d:d7:eb:4d: f2:e6:5b:99:63:80:4c:0b:10:d0:3b:04:1c:b1:f9: de:59:65:03:8f:3c:fc:95:90:ab:86:22:cc:43:6d: 86:aa:e8:c4:57:c6:43:9f:40:34:db:bf:2e:b0:9d: d8:77:a1:14:99:07:c8:2a:d7:94:86:53:72:6f:6a: 23:02:64:b1:ef:d4:b7:7f:9d:49:98:aa:ac:b8:02: 82:49:b3:f3:0b:b8:39:f9:87:22:0e:a0:e8:6e:b7: 60:be:ad:07:8b:f1:62:0e:09:7e:bd:40:0e:e9:8c: 56:80:a2:82:e6:26:8b:df:81:6b:d6:8f:da:7d:31: 19:33:2b:aa:4e:37:cc:e6:d2:db:78:0a:a6:97:02: 3b:51:e1:f5:ff:41:c8:55:9c:27:9f:06:c6:a8:af: 71:de:04:94:fa:5b:34:db:61:e3:39:95:03:8a:35: 13:02:4b:87:2a:7b:3f:e1:f9:05:10:3c:2b:84:fd: 2b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:5D:EE:E5:88:6E:B5:25:F2:DA:F0:18:3F:07:56:9F:64:C8:47:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9f3841d0-f2a4-3980-b388-7aad5c42aad7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 206.164.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:6e:da:85:d7:94:c0:1a:af:23:ea:23:49:57:41:74:90:e0: 89:dd:1b:b1:c9:17:36:24:d2:46:e2:b4:33:db:da:e4:0f:41: 85:a7:dd:76:ac:89:b7:b8:72:6e:17:84:a8:41:c0:14:89:af: 76:07:27:73:94:e9:33:d3:84:cd:56:0f:30:38:b1:10:46:41: bb:49:b3:f1:26:91:14:c4:88:d7:ca:f6:1d:5f:eb:75:15:00: e3:ef:f9:9b:c6:de:a5:8a:f5:7b:65:7f:96:60:a3:ef:9c:83: cd:7c:e2:b2:82:ea:d3:c2:8c:52:15:6f:74:6f:28:ec:6f:bb: 28:b1:85:9b:ec:d6:da:f7:32:48:9f:c6:a5:6c:26:05:a2:78: b5:bb:fb:cc:95:e9:da:ea:0f:54:30:7d:63:dc:8f:05:dd:57: a2:d0:e7:c7:e1:bd:52:a7:23:97:61:1e:09:15:d7:ec:3d:df: ab:98:ad:4c:d7:19:e1:68:a8:4e:a9:71:7c:44:ad:d1:5f:cf: 37:c7:ce:61:5e:87:03:a5:d0:10:a2:86:fb:7f:ff:58:d3:49: 88:e7:5b:b8:12:3b:cb:08:bf:5d:1d:4d:39:bb:3d:b5:8f:bc: 9b:b3:07:8a:25:d1:21:bf:75:d6:68:4e:8c:5d:88:22:fc:d6: a3:70:0f:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB5GRRiQ9+IgaioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk YzBhOGQ1NjMtM2QzMy00ZGM2LWE0MjgtODkzYTAyYjE2NTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgd9o+8bDsLeSUmEJou3rL6ytyAH78XFY0eJ6 pE6Jz9a86RoLXY8XQqFyDu58ULz0BbVhyXbXbCccdF8YEKkFhZAaqIeQCn3X603y 5luZY4BMCxDQOwQcsfneWWUDjzz8lZCrhiLMQ22GqujEV8ZDn0A0278usJ3Yd6EU mQfIKteUhlNyb2ojAmSx79S3f51JmKqsuAKCSbPzC7g5+YciDqDobrdgvq0Hi/Fi Dgl+vUAO6YxWgKKC5iaL34Fr1o/afTEZMyuqTjfM5tLbeAqmlwI7UeH1/0HIVZwn nwbGqK9x3gSU+ls022HjOZUDijUTAkuHKns/4fkFEDwrhP0rQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFtd7uWIbrUl8trwGD8HVp9kyEcKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvOWYzODQxZDAtZjJhNC0z OTgwLWIzODgtN2FhZDVjNDJhYWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqTDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABJu2oXXlMAaryPqI0lXQXSQ4IndG7HJFzYk0kbitDPb2uQPQYWn3Xas ibe4cm4XhKhBwBSJr3YHJ3OU6TPThM1WDzA4sRBGQbtJs/EmkRTEiNfK9h1f63UV AOPv+ZvG3qWK9Xtlf5Zgo++cg8184rKC6tPCjFIVb3RvKOxvuyixhZvs1tr3Mkif xqVsJgWieLW7+8yV6drqD1QwfWPcjwXdV6LQ58fhvVKnI5dhHgkV1+w936uYrUzX GeFoqE6pcXxErdFfzzfHzmFehwOl0BCihvt//1jTSYjnW7gSO8sIv10dTTm7PbWP vJuzB4ol0SG/ddZoToxdiCL81qNwDx0= -----END CERTIFICATE-----Generated at Tue Nov 4 21:42:52 2025 by rpki-client