$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a291e078-89e9-3804-b69a-c329e494dc85.roa File: a291e078-89e9-3804-b69a-c329e494dc85.roa (raw, json) Hash identifier: 7QFKnqQW+TEU5Dckg8BLPkXaslrmIAFQXaCy7I+kR6o= Subject key identifier: 68:EB:23:65:41:57:2A:C2:F1:3E:FC:43:4F:46:F1:88:8E:FD:56:E4 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584B4A471A3F1567E852E5BE3800 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a291e078-89e9-3804-b69a-c329e494dc85.roa Signing time: Tue 23 Sep 2025 13:00:40 +0000 ROA not before: Tue 23 Sep 2025 13:00:40 +0000 ROA not after: Mon 22 Dec 2025 14:00:40 +0000 asID: 202 IP address blocks: 66.54.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4a:47:1a:3f:15:67:e8:52:e5:be:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 23 13:00:40 2025 GMT Not After : Dec 22 14:00:40 2025 GMT Subject: CN=61769de4-3ab7-45db-9a22-659f2db6a9bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ca:25:5a:b9:56:68:1d:d7:65:11:03:28:52: 7f:ee:1c:ac:b5:1c:ad:b2:c3:50:c6:62:31:37:3e: c1:0c:05:0c:a1:6c:68:5a:7e:2b:00:ba:78:be:ec: b1:bc:27:ec:20:a7:4e:58:89:37:47:a6:89:9c:35: d5:e1:b4:3e:29:7f:59:1c:5f:ed:e8:a2:58:25:6f: d1:f2:50:85:79:29:3b:90:af:fd:cf:e6:31:47:5d: df:e2:15:36:50:16:60:09:bb:23:c6:4c:d6:aa:3f: 06:1c:dc:61:05:b0:d1:dd:9f:92:25:cc:7e:96:d7: 11:97:e1:35:b4:ed:6b:98:6d:d0:fa:a0:56:8f:6d: 94:c3:60:13:ee:af:9e:8f:e3:2e:81:f3:01:36:36: cb:88:9d:61:2a:a8:be:bb:6e:7e:89:3c:70:ba:bd: 7f:d7:ba:82:6f:7a:41:ef:9b:e4:0c:c7:38:e5:e1: bf:f1:e9:47:20:c3:65:97:a9:85:f5:8e:85:5a:19: 9d:42:33:68:30:7b:a5:4d:36:62:4a:21:80:a1:0c: a6:9f:f7:4d:33:eb:06:af:3c:2b:c2:b4:4c:d3:2e: 5b:eb:55:78:6d:8c:63:3a:7a:15:6a:69:b7:e8:63: e9:07:0a:c4:d4:7c:a4:b8:89:24:82:6a:c8:40:b1: a2:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:EB:23:65:41:57:2A:C2:F1:3E:FC:43:4F:46:F1:88:8E:FD:56:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a291e078-89e9-3804-b69a-c329e494dc85.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 66.54.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:b6:07:8c:90:21:29:dd:b2:32:e7:bb:77:36:c9:82:37:68: 5b:f2:8a:46:65:49:da:bd:e8:48:4f:0d:2e:a6:ca:bd:fc:a1: 58:80:04:f8:c7:6b:cd:e9:f1:dc:c7:54:83:41:b0:5a:06:94: 8b:35:ee:30:70:90:f7:2f:56:77:00:23:5a:79:31:4f:b8:1c: b8:24:ea:61:f4:1f:10:87:e5:11:46:a6:02:a8:8c:2a:69:6f: 8a:80:c2:65:22:f7:aa:c2:fe:1d:68:91:6a:b1:2c:73:de:ef: 5c:9b:f3:18:4e:8b:d6:98:7f:d0:6a:a2:19:c5:d2:7d:f5:69: 08:21:48:a0:47:83:d4:21:47:e8:c9:f0:bd:b5:ef:e9:01:39: d1:b5:49:34:78:55:ab:67:7f:71:32:ca:35:34:4f:21:61:fa: 7d:42:88:6c:44:99:7e:60:7e:f8:6f:46:00:e8:6e:b9:d1:b5: 5c:dc:e7:25:82:68:07:b3:b9:d7:ff:c0:07:e1:57:99:0d:52: 44:05:9f:65:e5:a9:4e:dc:e4:df:b9:e7:49:0c:a7:19:27:2a: 10:82:17:e1:d7:93:12:2e:37:63:ed:f0:23:98:2b:3f:b9:66: 89:73:04:62:90:4d:8a:b4:6a:f0:6b:1a:cc:76:1a:c3:a1:b5: 8a:33:e5:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtKRxo/FWfoUuW+OAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDkyMzEzMDA0MFoXDTI1MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk NjE3NjlkZTQtM2FiNy00NWRiLTlhMjItNjU5ZjJkYjZhOWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcolWrlWaB3XZREDKFJ/7hystRytssNQxmIx Nz7BDAUMoWxoWn4rALp4vuyxvCfsIKdOWIk3R6aJnDXV4bQ+KX9ZHF/t6KJYJW/R 8lCFeSk7kK/9z+YxR13f4hU2UBZgCbsjxkzWqj8GHNxhBbDR3Z+SJcx+ltcRl+E1 tO1rmG3Q+qBWj22Uw2AT7q+ej+MugfMBNjbLiJ1hKqi+u25+iTxwur1/17qCb3pB 75vkDMc45eG/8elHIMNll6mF9Y6FWhmdQjNoMHulTTZiSiGAoQymn/dNM+sGrzwr wrRM0y5b61V4bYxjOnoVamm36GPpBwrE1HykuIkkgmrIQLGiJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGjrI2VBVyrC8T78Q09G8YiO/VbkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYTI5MWUwNzgtODllOS0z ODA0LWI2OWEtYzMyOWU0OTRkYzg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQjYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAi2B4yQISndsjLnu3c2yYI3aFvyikZlSdq96EhPDS6myr38oViABPjH a83p8dzHVINBsFoGlIs17jBwkPcvVncAI1p5MU+4HLgk6mH0HxCH5RFGpgKojCpp b4qAwmUi96rC/h1okWqxLHPe71yb8xhOi9aYf9BqohnF0n31aQghSKBHg9QhR+jJ 8L217+kBOdG1STR4Vatnf3EyyjU0TyFh+n1CiGxEmX5gfvhvRgDobrnRtVzc5yWC aAezudf/wAfhV5kNUkQFn2XlqU7c5N+550kMpxknKhCCF+HXkxIuN2Pt8COYKz+5 ZolzBGKQTYq0avBrGsx2GsOhtYoz5Uo= -----END CERTIFICATE-----Generated at Tue Nov 4 21:42:56 2025 by rpki-client