$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b862ce43-4abe-30b2-a15c-9f17ea14d07a.roa File: b862ce43-4abe-30b2-a15c-9f17ea14d07a.roa (raw, json) Hash identifier: eExSALXeGat86WEsNRfxyrlPOv7XGthmofTgaXbY6cM= Subject key identifier: 0D:02:EA:5E:0E:14:BD:53:3E:D7:5B:EA:9F:F1:24:A0:C9:1C:01:78 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584BB2F7BFCE668EC6FA680E53C0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b862ce43-4abe-30b2-a15c-9f17ea14d07a.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 3360 IP address blocks: 168.87.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:bf:ce:66:8e:c6:fa:68:0e:53:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=2a695972-aa1c-47c6-aef1-189a78e9da10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:2e:4b:00:76:db:f9:95:91:35:7a:d1:ad:42: 16:d3:fd:5d:bd:ca:49:e7:a5:08:2c:a5:18:9c:e7: 2d:f6:7c:b1:18:07:0c:69:e4:21:f1:da:f6:35:70: 71:03:2a:3c:b9:30:c5:b5:85:0c:6f:ff:6c:7c:10: c0:c4:1d:9e:63:37:6a:59:90:e1:7e:49:03:60:aa: a4:b7:c1:89:c3:7d:d2:0c:70:b2:09:71:81:9b:fa: 1c:54:47:9e:af:f8:5f:38:25:ad:70:f1:7c:6e:b1: 60:93:a9:e6:4e:33:71:c8:86:aa:00:e4:75:bd:85: 5e:d3:c2:a4:59:5d:bb:e8:c7:bf:09:50:cf:e2:d0: aa:b9:23:9f:03:f2:e9:79:41:4a:a3:20:67:1e:95: 27:d4:ce:d9:a2:c8:a4:1d:54:57:0f:a6:ff:5d:d8: 2a:cb:e2:63:c0:f2:b0:cb:a3:70:dd:ad:1b:53:c9: ca:c1:6d:98:4a:6d:93:1e:de:f4:3d:79:4e:b4:9e: 6f:1b:15:56:68:25:27:6b:a3:82:c7:d9:8f:6a:6a: b2:76:bb:1c:58:a9:c5:7e:f3:1a:05:84:b8:27:a2: 4e:13:96:dc:ea:14:8e:c1:6d:8b:1e:63:b8:1e:fc: a0:fc:13:bc:39:11:51:65:1f:b9:91:41:f8:3f:e4: 84:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:02:EA:5E:0E:14:BD:53:3E:D7:5B:EA:9F:F1:24:A0:C9:1C:01:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b862ce43-4abe-30b2-a15c-9f17ea14d07a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:de:52:6e:55:f9:49:58:ae:5e:5e:20:8d:f1:c6:be:9e:eb: 91:18:2c:e5:76:21:d1:67:34:45:ff:56:df:15:57:b1:90:46: 60:5b:8a:54:c1:cc:7a:92:66:60:17:14:d6:7f:2d:14:d2:84: b7:70:a5:67:a3:1a:7c:7c:4c:60:c1:f1:04:1a:d7:22:6c:2f: d3:45:4c:d5:c0:46:0d:13:62:35:38:62:ac:98:f5:09:47:45: a5:83:2d:09:23:31:5b:3e:06:63:c8:52:fb:03:39:1a:9f:74: be:01:2d:9e:ae:0b:1c:10:5f:af:c0:c4:31:3c:57:7f:38:e1: a5:e4:5a:a6:5b:e5:cc:aa:f5:75:d7:5a:27:13:cb:08:11:f6: a1:6d:3b:f9:e4:ad:93:16:2d:40:46:8a:da:85:fc:41:e5:d9: 66:2e:35:1e:cb:ee:87:9f:5e:76:2b:1d:5e:38:2c:d3:2d:fd: 87:b8:90:a8:42:57:c4:ac:9e:3b:41:3d:fd:d1:ed:8f:f5:e6: 0b:e5:89:7b:68:66:99:55:76:5f:64:a6:10:eb:22:4f:8f:cc: ba:3a:30:4e:52:de:51:8f:ba:62:d2:de:f6:ad:2e:2b:e2:ac: 9c:61:71:93:38:7a:33:52:ec:23:ff:de:82:11:ae:6e:7d:5e: a8:fc:0a:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy97/OZo7G+mgOU8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk MmE2OTU5NzItYWExYy00N2M2LWFlZjEtMTg5YTc4ZTlkYTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoC5LAHbb+ZWRNXrRrUIW0/1dvcpJ56UILKUY nOct9nyxGAcMaeQh8dr2NXBxAyo8uTDFtYUMb/9sfBDAxB2eYzdqWZDhfkkDYKqk t8GJw33SDHCyCXGBm/ocVEeer/hfOCWtcPF8brFgk6nmTjNxyIaqAOR1vYVe08Kk WV276Me/CVDP4tCquSOfA/LpeUFKoyBnHpUn1M7ZosikHVRXD6b/Xdgqy+JjwPKw y6Nw3a0bU8nKwW2YSm2THt70PXlOtJ5vGxVWaCUna6OCx9mPamqydrscWKnFfvMa BYS4J6JOE5bc6hSOwW2LHmO4Hvyg/BO8ORFRZR+5kUH4P+SE+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA0C6l4OFL1TPtdb6p/xJKDJHAF4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYjg2MmNlNDMtNGFiZS0z MGIyLWExNWMtOWYxN2VhMTRkMDdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqFeeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAATeUm5V+UlYrl5eII3xxr6e65EYLOV2IdFnNEX/Vt8VV7GQRmBbilTB zHqSZmAXFNZ/LRTShLdwpWejGnx8TGDB8QQa1yJsL9NFTNXARg0TYjU4YqyY9QlH RaWDLQkjMVs+BmPIUvsDORqfdL4BLZ6uCxwQX6/AxDE8V3844aXkWqZb5cyq9XXX WicTywgR9qFtO/nkrZMWLUBGitqF/EHl2WYuNR7L7oefXnYrHV44LNMt/Ye4kKhC V8SsnjtBPf3R7Y/15gvliXtoZplVdl9kphDrIk+PzLo6ME5S3lGPumLS3vatLivi rJxhcZM4ejNS7CP/3oIRrm59Xqj8CpU= -----END CERTIFICATE-----Generated at Wed Nov 5 00:58:29 2025 by rpki-client