$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/df54e28e-16a2-3158-9e5c-42ba1c10d6e4.roa File: df54e28e-16a2-3158-9e5c-42ba1c10d6e4.roa (raw, json) Hash identifier: 7PrypCRq6xgQ09zzkgkn7oOHfuqMcwkFI02tELAyhpI= Subject key identifier: BB:66:96:B0:CA:A6:B6:D4:58:F2:39:6B:F5:21:03:C7:E3:4F:A8:53 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584BB2F7C026C27829CD7989E3E0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/df54e28e-16a2-3158-9e5c-42ba1c10d6e4.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 202 IP address blocks: 168.87.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:c0:26:c2:78:29:cd:79:89:e3:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=474d4561-3c99-4c70-80db-8141758ebc46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:95:b8:2e:3c:fe:4c:7f:c6:bb:96:95:d7:42: 77:73:67:b2:89:09:c0:52:0b:ad:d9:ff:71:07:92: 00:7a:6a:cd:a5:d9:ac:ae:75:7b:95:c8:5d:b0:d1: 1c:08:ca:80:6a:71:03:ca:05:c7:7d:d9:84:e1:5a: 5b:ca:3e:b9:c4:da:08:55:c6:ee:cf:f8:f5:42:41: 68:82:2d:3b:ca:4f:18:29:bf:26:8f:f8:51:99:b9: 3f:34:6b:6d:c9:36:cb:cc:6d:2e:8e:52:72:52:41: 14:32:db:16:b6:3e:b9:23:f3:b2:7c:77:75:54:df: 64:46:70:75:fb:18:f6:a3:ec:b6:75:74:2a:62:80: de:74:2f:b3:53:60:fc:cb:49:f7:6a:77:c2:7a:45: fe:d5:0e:12:1b:eb:ff:36:ae:09:d7:8b:a0:f7:ca: 7c:dc:b8:e9:a3:9e:14:7b:4c:7b:10:63:e8:d3:d8: 38:fc:92:dc:fa:d6:ed:8c:da:c8:8c:9d:ee:d1:5b: b3:84:c8:fe:f3:c1:36:21:41:48:33:a0:4b:41:8f: 54:a8:0b:9a:a6:e2:55:eb:c2:29:13:23:77:c8:11: c1:62:5e:85:37:02:30:0e:6a:2f:86:47:c2:3b:f6: 37:1e:88:27:34:9f:7e:8d:a7:08:f0:36:72:83:c0: 3b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:66:96:B0:CA:A6:B6:D4:58:F2:39:6B:F5:21:03:C7:E3:4F:A8:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/df54e28e-16a2-3158-9e5c-42ba1c10d6e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.160.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:5a:18:51:80:50:a5:54:c9:51:30:52:f6:28:4e:3b:2f:6b: 95:73:84:8c:22:36:e8:24:e2:c3:06:e8:5b:a1:09:c5:2e:ef: cd:61:35:56:6d:32:b3:cf:37:9a:15:dc:da:36:d8:0c:bf:ef: 52:f3:84:d1:6b:6c:15:72:71:10:dd:d4:9a:d2:52:d9:98:10: 5e:26:02:18:91:77:1a:b2:fa:ff:ca:19:7a:ef:7f:81:dc:8d: b9:f7:0b:d3:4c:47:3e:ba:1a:4c:fe:0d:46:52:d4:65:0b:79: 3c:c3:16:01:10:07:1d:2e:de:e4:3d:a3:77:08:08:ba:a4:bb: 3c:be:a9:e2:cf:df:4a:cb:7a:e0:28:0b:1a:88:b6:a3:90:f6: 33:cb:0e:45:ac:60:34:59:b3:3c:04:e8:5f:00:e6:e3:53:46: 77:f4:c5:64:16:a3:70:b8:d2:63:19:80:32:1a:81:bf:3c:92: 79:3a:23:fe:52:f2:c0:57:36:c8:1f:a3:40:e2:f9:5a:6c:5a: 8e:5b:2b:b3:22:55:3f:d0:df:cb:4d:df:f8:0d:a9:05:7a:a5: 7c:bd:d5:a6:9e:5a:a0:85:ea:41:c0:3a:b0:c9:ca:5b:c3:3c: a6:43:b0:5c:34:8a:c6:da:ab:6a:0b:f3:25:5f:cc:ca:28:83: f9:d1:93:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy98AmwngpzXmJ4+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk NDc0ZDQ1NjEtM2M5OS00YzcwLTgwZGItODE0MTc1OGViYzQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpW4Ljz+TH/Gu5aV10J3c2eyiQnAUgut2f9x B5IAemrNpdmsrnV7lchdsNEcCMqAanEDygXHfdmE4Vpbyj65xNoIVcbuz/j1QkFo gi07yk8YKb8mj/hRmbk/NGttyTbLzG0ujlJyUkEUMtsWtj65I/OyfHd1VN9kRnB1 +xj2o+y2dXQqYoDedC+zU2D8y0n3anfCekX+1Q4SG+v/Nq4J14ug98p83Ljpo54U e0x7EGPo09g4/JLc+tbtjNrIjJ3u0VuzhMj+88E2IUFIM6BLQY9UqAuapuJV68Ip EyN3yBHBYl6FNwIwDmovhkfCO/Y3HognNJ9+jacI8DZyg8A7EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLtmlrDKprbUWPI5a/UhA8fjT6hTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZGY1NGUyOGUtMTZhMi0z MTU4LTllNWMtNDJiYTFjMTBkNmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqFegMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGRaGFGAUKVUyVEwUvYoTjsva5VzhIwiNugk4sMG6FuhCcUu781hNVZt MrPPN5oV3No22Ay/71LzhNFrbBVycRDd1JrSUtmYEF4mAhiRdxqy+v/KGXrvf4Hc jbn3C9NMRz66Gkz+DUZS1GULeTzDFgEQBx0u3uQ9o3cICLqkuzy+qeLP30rLeuAo CxqItqOQ9jPLDkWsYDRZszwE6F8A5uNTRnf0xWQWo3C40mMZgDIagb88knk6I/5S 8sBXNsgfo0Di+VpsWo5bK7MiVT/Q38tN3/gNqQV6pXy91aaeWqCF6kHAOrDJylvD PKZDsFw0isbaq2oL8yVfzMoog/nRk74= -----END CERTIFICATE-----Generated at Wed Nov 5 00:57:32 2025 by rpki-client