$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bee9c874-07bc-3295-92a5-96b15913b828.roa File: bee9c874-07bc-3295-92a5-96b15913b828.roa (raw, json) Hash identifier: wjd3GldIe7DG/bMfB7aPExqHH2VOF1yKAbPG3AX2r+s= Subject key identifier: 65:5A:5E:7B:E0:3A:E7:94:71:F6:B8:0D:24:C5:53:9F:AB:2A:C9:35 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584B583C8B5F900BF1D6B1894140 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bee9c874-07bc-3295-92a5-96b15913b828.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 203 IP address blocks: 168.87.4.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:8b:5f:90:0b:f1:d6:b1:89:41:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=8c685a23-a27b-43bb-bdb9-f8d03ac295a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:a5:0a:51:9a:07:83:3d:4d:cc:07:81:e7:ad: ad:78:db:28:ee:12:3c:d3:d2:65:dc:22:c6:06:b8: 3a:f7:bd:0d:3a:8c:76:42:7c:dc:4d:ba:31:31:ef: 09:4a:ff:d5:2f:9c:fd:75:5a:d5:ee:fe:ab:20:c9: a6:ad:4a:97:48:a0:e7:2e:7e:7f:26:ca:9b:60:21: fb:3d:aa:3e:89:78:97:b1:ad:fe:05:f2:23:12:66: c4:27:06:15:2a:04:da:c2:00:74:82:1b:fe:ef:04: f7:5d:45:b4:6c:b8:04:5c:d8:09:b1:d4:d7:70:af: 9e:35:4a:dc:8f:47:77:66:d9:8b:98:8b:f2:12:71: 62:e2:5e:dd:a6:6f:51:97:cc:80:96:1a:e5:19:d4: 89:0a:c6:3d:b0:d6:cc:96:30:48:c8:af:f6:6d:56: a4:ad:3f:51:15:71:7a:15:91:41:e7:ab:e6:78:9c: 3e:e4:72:8b:4a:2d:48:2e:9d:48:e7:25:04:a3:7f: 0f:dc:9c:6e:d7:b0:2a:c1:83:01:d8:33:16:5b:eb: 3c:c2:70:d5:db:92:3b:e6:9f:71:81:e7:7f:c3:7c: 7b:0c:0b:b9:89:d4:f2:e0:a2:0a:19:51:3e:ca:6d: 82:93:6e:0f:21:ae:4f:60:c1:81:96:1f:84:c9:e0: 72:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:5A:5E:7B:E0:3A:E7:94:71:F6:B8:0D:24:C5:53:9F:AB:2A:C9:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bee9c874-07bc-3295-92a5-96b15913b828.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.4.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:74:5f:68:f5:93:b0:96:8b:b5:b1:56:b2:42:eb:0e:b3:25: e1:3a:70:34:56:c0:29:ff:a4:87:fb:a1:51:f3:7a:10:5e:e6: 36:52:43:01:3c:f7:14:fa:a0:c2:13:18:10:3e:db:5d:f5:12: 22:47:dc:31:ef:db:28:9b:4c:88:77:f4:26:e7:e6:1d:66:42: c5:1a:41:d6:65:8b:6e:1b:66:68:c3:67:86:6d:09:02:0a:e9: 77:4d:c0:0b:1f:22:5b:ef:15:9e:49:4e:79:04:e1:5c:59:4c: cd:6c:ee:c6:1b:95:3f:d9:cb:e3:f8:49:f2:6a:52:6c:2b:bb: 46:ad:41:c8:c3:16:da:c3:ed:1c:4e:37:29:79:a6:35:f7:8e: e8:7c:a5:a8:61:32:2e:a9:50:bb:90:da:9f:8a:99:46:b6:d2: 97:04:c1:e9:11:e3:5f:ba:fc:eb:59:a2:c4:c1:14:8b:cb:0d: 97:fc:02:dd:be:e2:23:09:05:b5:49:bc:08:54:2e:31:b3:40: d3:b1:62:f8:d5:9b:78:43:01:91:88:a6:2b:2f:49:cd:4b:a1: 3c:81:cd:a2:27:b5:0a:72:c6:52:e8:1f:d6:58:d3:6a:55:bf: da:15:fe:38:9d:5b:ea:08:ac:cc:58:c2:3e:64:55:b3:f4:48: 90:9d:18:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPItfkAvx1rGJQUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk OGM2ODVhMjMtYTI3Yi00M2JiLWJkYjktZjhkMDNhYzI5NWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5aUKUZoHgz1NzAeB562teNso7hI809Jl3CLG Brg6970NOox2QnzcTboxMe8JSv/VL5z9dVrV7v6rIMmmrUqXSKDnLn5/JsqbYCH7 Pao+iXiXsa3+BfIjEmbEJwYVKgTawgB0ghv+7wT3XUW0bLgEXNgJsdTXcK+eNUrc j0d3ZtmLmIvyEnFi4l7dpm9Rl8yAlhrlGdSJCsY9sNbMljBIyK/2bVakrT9RFXF6 FZFB56vmeJw+5HKLSi1ILp1I5yUEo38P3Jxu17AqwYMB2DMWW+s8wnDV25I75p9x ged/w3x7DAu5idTy4KIKGVE+ym2Ck24PIa5PYMGBlh+EyeByuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGVaXnvgOueUcfa4DSTFU5+rKsk1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYmVlOWM4NzQtMDdiYy0z Mjk1LTkyYTUtOTZiMTU5MTNiODI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqFcEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFF0X2j1k7CWi7WxVrJC6w6zJeE6cDRWwCn/pIf7oVHzehBe5jZSQwE8 9xT6oMITGBA+2131EiJH3DHv2yibTIh39Cbn5h1mQsUaQdZli24bZmjDZ4ZtCQIK 6XdNwAsfIlvvFZ5JTnkE4VxZTM1s7sYblT/Zy+P4SfJqUmwru0atQcjDFtrD7RxO Nyl5pjX3juh8pahhMi6pULuQ2p+KmUa20pcEwekR41+6/OtZosTBFIvLDZf8At2+ 4iMJBbVJvAhULjGzQNOxYvjVm3hDAZGIpisvSc1LoTyBzaIntQpyxlLoH9ZY02pV v9oV/jidW+oIrMxYwj5kVbP0SJCdGPM= -----END CERTIFICATE-----Generated at Wed Nov 5 03:49:49 2025 by rpki-client