$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c86bb04b-3de9-3441-be9f-90b51051f16f.roa File: c86bb04b-3de9-3441-be9f-90b51051f16f.roa (raw, json) Hash identifier: nZ4VUKYS3iKwbC+ADEG/DCBU3IgyoNR1F3hFo/I8WlM= Subject key identifier: 0F:51:E3:F5:A2:5F:C1:9B:CA:05:4F:FB:B2:86:6F:D5:08:2A:D5:2B Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584BB2F7D65AB95398E8837D8780 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c86bb04b-3de9-3441-be9f-90b51051f16f.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 3360 IP address blocks: 205.191.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:d6:5a:b9:53:98:e8:83:7d:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=f0d5d5d6-40b0-4e5f-9723-f891dacb2b59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:3f:b0:31:30:96:6c:be:5e:57:64:b6:50:aa: 70:94:aa:ac:81:7d:b9:93:a2:2f:5c:02:1d:32:ec: 06:0b:c2:dc:12:47:66:10:b7:3f:2e:9b:0c:03:9e: a3:e7:37:54:ed:7d:e4:b7:2e:2e:3d:d1:95:6c:fb: bf:29:28:31:4b:56:c8:b7:51:1e:a0:26:ba:81:c6: 69:42:63:85:32:ba:ec:f8:72:66:48:09:66:28:c4: 69:c7:18:8a:77:3c:03:b2:95:7c:a1:6d:b5:59:e1: e8:66:76:79:d8:4d:3c:91:83:be:a5:a4:04:ae:3c: ec:0b:19:74:2e:bd:90:37:22:4d:bf:76:09:05:7a: a2:d0:8d:f2:b6:20:45:4e:35:fd:e9:aa:9f:fc:88: f4:97:33:aa:e7:05:69:63:5b:c8:7f:7d:be:1a:0f: 98:a0:3f:c5:bb:77:6e:a1:a8:df:79:1e:03:84:02: 41:7b:2a:ae:07:50:d2:31:d4:12:43:d2:c5:25:01: 9a:57:ab:b4:b2:1a:d0:f1:01:4a:5b:af:3e:56:d4: a8:05:bb:f5:cf:84:d5:fc:b7:00:40:94:b4:c0:93: 1a:7d:1b:15:21:65:26:02:03:8a:40:15:60:c1:dd: 2c:07:a8:0a:c1:9a:6f:1d:28:29:49:09:58:0d:70: 0d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:51:E3:F5:A2:5F:C1:9B:CA:05:4F:FB:B2:86:6F:D5:08:2A:D5:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c86bb04b-3de9-3441-be9f-90b51051f16f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 205.191.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:7a:9a:b6:38:09:ae:2a:60:05:67:1b:12:fd:b4:d9:3d:ff: 42:17:19:a3:8e:b6:1d:7d:eb:57:b7:14:f1:59:12:4a:94:53: 0e:57:d7:13:05:18:8c:a1:56:7a:ae:10:e8:6f:4f:2e:4e:38: d2:a1:11:00:9f:9c:92:21:c7:64:a4:1c:81:41:bc:b4:cf:ba: cd:8f:8b:83:0f:e8:0b:90:7a:0b:a2:54:fc:d9:ba:72:2e:d3: c4:66:92:52:fe:8d:9c:00:69:fe:1b:9e:f3:5f:69:bf:a3:b3: 38:67:bf:af:da:59:b0:8b:3d:ca:da:1d:2f:aa:1f:ef:b6:5b: 14:8d:2e:e7:4e:e7:d9:30:8c:c0:bf:17:de:36:ab:99:02:55: 1a:5d:be:b7:fe:67:64:88:96:0c:b1:5a:f9:f1:77:44:c3:e5: d4:b1:7b:0b:ce:5b:f5:e5:f7:60:ed:06:20:9b:4d:3b:2e:27: 3a:51:76:25:fa:30:9b:fa:c8:7b:31:3c:a8:d7:d8:db:ce:b8: 58:76:54:83:96:af:95:d2:47:6e:ee:a5:99:33:13:c7:f0:3e: 5d:fc:8e:f9:18:b4:e7:06:d9:eb:9d:1e:3f:34:cb:f5:a7:80: 18:ab:2d:b4:05:fd:74:67:ab:be:a0:fa:0d:d7:9a:9c:76:aa: b0:11:e8:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy99ZauVOY6IN9h4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk ZjBkNWQ1ZDYtNDBiMC00ZTVmLTk3MjMtZjg5MWRhY2IyYjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiD+wMTCWbL5eV2S2UKpwlKqsgX25k6IvXAId MuwGC8LcEkdmELc/LpsMA56j5zdU7X3kty4uPdGVbPu/KSgxS1bIt1EeoCa6gcZp QmOFMrrs+HJmSAlmKMRpxxiKdzwDspV8oW21WeHoZnZ52E08kYO+paQErjzsCxl0 Lr2QNyJNv3YJBXqi0I3ytiBFTjX96aqf/Ij0lzOq5wVpY1vIf32+Gg+YoD/Fu3du oajfeR4DhAJBeyquB1DSMdQSQ9LFJQGaV6u0shrQ8QFKW68+VtSoBbv1z4TV/LcA QJS0wJMafRsVIWUmAgOKQBVgwd0sB6gKwZpvHSgpSQlYDXAN+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA9R4/WiX8GbygVP+7KGb9UIKtUrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYzg2YmIwNGItM2RlOS0z NDQxLWJlOWYtOTBiNTEwNTFmMTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzb8oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACF6mrY4Ca4qYAVnGxL9tNk9/0IXGaOOth1961e3FPFZEkqUUw5X1xMF GIyhVnquEOhvTy5OONKhEQCfnJIhx2SkHIFBvLTPus2Pi4MP6AuQeguiVPzZunIu 08RmklL+jZwAaf4bnvNfab+jszhnv6/aWbCLPcraHS+qH++2WxSNLudO59kwjMC/ F942q5kCVRpdvrf+Z2SIlgyxWvnxd0TD5dSxewvOW/Xl92DtBiCbTTsuJzpRdiX6 MJv6yHsxPKjX2NvOuFh2VIOWr5XSR27upZkzE8fwPl38jvkYtOcG2eudHj80y/Wn gBirLbQF/XRnq76g+g3Xmpx2qrAR6KM= -----END CERTIFICATE-----Generated at Tue Nov 4 21:40:41 2025 by rpki-client