$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f1f77be5-daf4-345a-99b1-f4bee4f839d6.roa File: f1f77be5-daf4-345a-99b1-f4bee4f839d6.roa (raw, json) Hash identifier: UJTRbr4/O133DzYsrgk8N46q+qHvn5wr+FH5sIXejV8= Subject key identifier: A5:F0:6E:4C:6A:3F:77:3C:98:28:DC:38:45:DF:52:A4:F9:B4:9C:26 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584B0746C4733428B2A317849B80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f1f77be5-daf4-345a-99b1-f4bee4f839d6.roa Signing time: Sat 30 Aug 2025 13:00:42 +0000 ROA not before: Sat 30 Aug 2025 13:00:42 +0000 ROA not after: Fri 28 Nov 2025 14:00:42 +0000 asID: 3356 IP address blocks: 168.87.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:07:46:c4:73:34:28:b2:a3:17:84:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 30 13:00:42 2025 GMT Not After : Nov 28 14:00:42 2025 GMT Subject: CN=ab6960f8-3081-43db-99ca-3152f81987b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a4:e3:6c:f0:bd:6c:3b:a5:9c:57:40:bd:70: 67:11:31:15:c2:f9:2f:2f:85:98:cb:e9:d8:e8:9d: ec:98:3e:19:89:51:c7:d0:b2:ba:f4:bd:41:ef:2c: 3c:38:70:78:d4:20:da:64:31:f6:d8:1c:00:81:1e: 2d:d9:6b:c3:d9:d1:26:68:be:b4:aa:20:90:49:4f: 75:77:0c:0d:6b:cd:01:a5:28:1b:1f:2a:59:7b:4d: 1b:b5:28:1c:14:7a:a4:c2:1a:38:0e:03:96:de:94: ff:3d:7a:3a:38:39:23:b8:5e:a8:05:97:d7:d5:28: b0:b7:04:9f:da:35:68:1e:73:b6:28:12:0f:cb:0a: 0c:61:8f:b7:21:cb:6f:42:a4:68:dd:21:03:21:cd: 43:d0:87:e2:dd:3e:a5:8f:0c:86:fd:a3:3d:4f:71: 28:85:f3:f3:0d:45:a6:44:2c:d9:93:7a:f4:54:d9: fc:cd:81:63:40:90:78:e9:86:66:7b:f8:39:b9:81: ec:91:98:49:6e:d3:30:ac:08:c0:75:03:83:0d:6a: d9:aa:c8:78:da:02:86:1f:53:29:7d:10:41:38:a2: e6:17:b2:8c:33:50:fc:22:d5:9f:9b:45:62:67:9f: 2d:7a:84:a5:36:51:7a:26:80:6b:d2:45:36:59:43: c2:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:F0:6E:4C:6A:3F:77:3C:98:28:DC:38:45:DF:52:A4:F9:B4:9C:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f1f77be5-daf4-345a-99b1-f4bee4f839d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:e3:f6:d1:a9:ad:58:03:d4:a0:f6:87:be:ed:86:de:34:6a: c9:06:75:84:12:41:a8:57:8f:38:20:08:b4:66:04:56:e5:e9: 73:92:bc:ff:3f:c6:d5:3c:f9:96:7b:ab:b5:60:e5:98:bf:70: 50:97:ce:ed:99:ad:d8:38:5c:11:99:ec:e1:05:85:6e:68:d2: 36:6e:87:8f:33:78:fe:cf:4e:d9:98:17:41:ed:61:4e:41:5d: a4:67:10:07:aa:39:1a:c0:44:48:b7:4f:d1:5d:b5:57:91:52: a2:c6:ce:3b:15:f0:c6:b0:4f:0d:d3:5a:aa:e5:bd:e6:d3:fd: aa:59:3e:47:05:93:89:e0:53:26:f1:da:23:37:61:f3:fc:3a: 57:3f:65:3f:8d:98:69:31:20:ad:20:df:eb:f3:f4:eb:e8:63: f1:18:ff:61:df:49:11:3c:74:36:e5:d5:bb:d0:e1:c9:83:c9: 93:31:d2:4d:0f:79:4e:bd:73:7c:01:60:a7:49:a2:eb:39:a4: 77:30:ee:a1:31:c8:dc:e1:c3:87:17:fb:60:41:89:b8:16:80: d9:06:bd:79:a3:70:d3:cb:e8:f3:e5:93:b6:5a:6f:cb:58:d2: 7e:76:a8:fc:79:c0:4e:58:0d:ca:cc:ba:ca:e0:cc:dd:dc:be: cc:71:12:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsHRsRzNCiyoxeEm4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDgzMDEzMDA0MloXDTI1MTEyODE0MDA0MlowLzEtMCsGA1UEAxMk YWI2OTYwZjgtMzA4MS00M2RiLTk5Y2EtMzE1MmY4MTk4N2IxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1KTjbPC9bDulnFdAvXBnETEVwvkvL4WYy+nY 6J3smD4ZiVHH0LK69L1B7yw8OHB41CDaZDH22BwAgR4t2WvD2dEmaL60qiCQSU91 dwwNa80BpSgbHypZe00btSgcFHqkwho4DgOW3pT/PXo6ODkjuF6oBZfX1SiwtwSf 2jVoHnO2KBIPywoMYY+3IctvQqRo3SEDIc1D0Ifi3T6ljwyG/aM9T3EohfPzDUWm RCzZk3r0VNn8zYFjQJB46YZme/g5uYHskZhJbtMwrAjAdQODDWrZqsh42gKGH1Mp fRBBOKLmF7KMM1D8ItWfm0ViZ58teoSlNlF6JoBr0kU2WUPCTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKXwbkxqP3c8mCjcOEXfUqT5tJwmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZjFmNzdiZTUtZGFmNC0z NDVhLTk5YjEtZjRiZWU0ZjgzOWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqFcUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAErj9tGprVgD1KD2h77tht40askGdYQSQahXjzggCLRmBFbl6XOSvP8/ xtU8+ZZ7q7Vg5Zi/cFCXzu2Zrdg4XBGZ7OEFhW5o0jZuh48zeP7PTtmYF0HtYU5B XaRnEAeqORrAREi3T9FdtVeRUqLGzjsV8MawTw3TWqrlvebT/apZPkcFk4ngUybx 2iM3YfP8Olc/ZT+NmGkxIK0g3+vz9OvoY/EY/2HfSRE8dDbl1bvQ4cmDyZMx0k0P eU69c3wBYKdJous5pHcw7qExyNzhw4cX+2BBibgWgNkGvXmjcNPL6PPlk7Zab8tY 0n52qPx5wE5YDcrMusrgzN3cvsxxEpE= -----END CERTIFICATE-----Generated at Tue Nov 4 20:59:48 2025 by rpki-client