$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ad0a4b73-d283-3624-b738-812cfe6c0978.roa File: ad0a4b73-d283-3624-b738-812cfe6c0978.roa (raw, json) Hash identifier: 7/3EGAcfRFAsB8a5TmtFuvhdjcWsUkknkhF1CPgQs2I= Subject key identifier: 25:D6:09:53:E4:46:41:51:CD:37:40:BA:4A:3A:C6:D8:04:FC:91:8B Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584AF7EBDFB3E4C786242BCDFC80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ad0a4b73-d283-3624-b738-812cfe6c0978.roa Signing time: Mon 25 Aug 2025 01:00:33 +0000 ROA not before: Mon 25 Aug 2025 01:00:33 +0000 ROA not after: Sun 23 Nov 2025 02:00:33 +0000 asID: 202 IP address blocks: 168.87.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f7:eb:df:b3:e4:c7:86:24:2b:cd:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 25 01:00:33 2025 GMT Not After : Nov 23 02:00:33 2025 GMT Subject: CN=a3c6da97-89c8-40bf-a46f-7e32f5492693 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:ae:92:77:0e:93:b0:db:00:a2:00:94:08:4e: 91:6e:d6:79:30:67:b9:4b:ec:26:c5:9f:20:c3:1b: e6:6a:f8:7c:f6:ae:46:20:75:06:67:fd:95:36:1a: 3d:fd:66:17:00:10:c6:1f:fa:8c:8b:96:93:c4:95: e1:4f:69:a6:f1:75:6f:27:b8:17:0e:2f:92:2d:4f: a6:a2:a8:d5:e4:55:45:43:4b:a9:90:c2:4d:cd:82: 21:e4:8e:6b:80:4c:22:ab:f4:49:8e:af:04:d9:39: 11:03:25:b8:2d:2c:ad:10:61:e8:85:39:26:fe:d9: 2e:da:df:02:0f:a4:ce:cd:3c:02:f8:c3:38:3a:4b: 45:7f:93:5b:78:03:6e:cc:f7:4a:7d:a5:1a:10:5c: 7d:74:91:9b:72:20:0d:2f:37:7c:bb:98:a6:55:6d: df:d1:d7:d5:2d:48:04:ee:0e:ee:d6:d2:44:2c:45: 64:c2:e7:d7:0e:cf:f5:1b:b8:91:37:cb:b9:2f:16: 51:ee:1b:a8:8e:1e:cd:de:ef:55:d9:3a:82:f8:77: a4:0f:14:0d:11:a4:8d:9a:c9:e0:7b:0c:cc:51:85: e9:3d:42:24:73:aa:89:42:b2:96:14:56:18:09:57: de:7d:1a:25:81:19:94:19:95:d0:c5:6a:83:18:ca: 66:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:D6:09:53:E4:46:41:51:CD:37:40:BA:4A:3A:C6:D8:04:FC:91:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ad0a4b73-d283-3624-b738-812cfe6c0978.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:51:cf:55:0b:f6:e8:ad:a3:c2:d7:c2:d2:01:1a:54:52:28: 7f:ff:8a:c0:73:e4:d8:cd:d2:50:6e:47:27:63:0b:ef:60:67: 1f:04:06:16:14:6c:3f:75:e2:3c:17:56:ad:a7:47:67:55:cb: d9:e7:ce:c7:8b:23:c3:e1:07:ff:41:9b:ea:56:e8:d1:1b:3a: 5c:74:ad:35:34:3b:4e:5b:57:dd:58:a4:10:e7:b9:28:c9:54: a0:da:68:7e:02:06:b2:6c:f4:74:55:05:8f:4f:ef:9f:25:26: 72:e3:e8:3c:24:e4:af:48:ee:be:57:72:d0:2c:2b:3e:c0:c8: 08:93:f6:92:bd:60:69:ce:d0:47:99:63:b6:72:31:58:4a:c9: dd:45:ff:b7:f4:50:91:f8:15:9a:2a:7f:63:86:85:c2:41:6f: 01:0b:64:f5:1f:87:48:44:95:b4:2f:22:69:b5:77:c6:35:22: 36:dc:ad:1a:08:0c:0e:1f:77:15:3f:7c:f3:6a:05:25:18:40: 9f:ac:ab:19:40:e2:0b:f4:26:d9:c4:20:d5:59:39:70:3e:fd: 7f:1c:95:77:4a:2b:f0:c5:6d:30:23:48:be:1b:eb:50:86:a9: 11:b4:c0:c5:20:8b:9d:3e:f1:bb:9e:fb:d6:d6:6b:da:30:4b: db:fc:f6:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr369+z5MeGJCvN/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDgyNTAxMDAzM1oXDTI1MTEyMzAyMDAzM1owLzEtMCsGA1UEAxMk YTNjNmRhOTctODljOC00MGJmLWE0NmYtN2UzMmY1NDkyNjkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAga6Sdw6TsNsAogCUCE6RbtZ5MGe5S+wmxZ8g wxvmavh89q5GIHUGZ/2VNho9/WYXABDGH/qMi5aTxJXhT2mm8XVvJ7gXDi+SLU+m oqjV5FVFQ0upkMJNzYIh5I5rgEwiq/RJjq8E2TkRAyW4LSytEGHohTkm/tku2t8C D6TOzTwC+MM4OktFf5NbeANuzPdKfaUaEFx9dJGbciANLzd8u5imVW3f0dfVLUgE 7g7u1tJELEVkwufXDs/1G7iRN8u5LxZR7huojh7N3u9V2TqC+HekDxQNEaSNmsng ewzMUYXpPUIkc6qJQrKWFFYYCVfefRolgRmUGZXQxWqDGMpmuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCXWCVPkRkFRzTdAuko6xtgE/JGLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYWQwYTRiNzMtZDI4My0z NjI0LWI3MzgtODEyY2ZlNmMwOTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFdWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFhRz1UL9uito8LXwtIBGlRSKH//isBz5NjN0lBuRydjC+9gZx8EBhYU bD914jwXVq2nR2dVy9nnzseLI8PhB/9Bm+pW6NEbOlx0rTU0O05bV91YpBDnuSjJ VKDaaH4CBrJs9HRVBY9P758lJnLj6Dwk5K9I7r5XctAsKz7AyAiT9pK9YGnO0EeZ Y7ZyMVhKyd1F/7f0UJH4FZoqf2OGhcJBbwELZPUfh0hElbQvImm1d8Y1IjbcrRoI DA4fdxU/fPNqBSUYQJ+sqxlA4gv0JtnEINVZOXA+/X8clXdKK/DFbTAjSL4b61CG qRG0wMUgi50+8bue+9bWa9owS9v89tI= -----END CERTIFICATE-----Generated at Tue Nov 4 21:43:00 2025 by rpki-client