$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f408855e-9251-37a2-9fb5-4cba259a98d2.roa File: f408855e-9251-37a2-9fb5-4cba259a98d2.roa (raw, json) Hash identifier: nlOXt1hZjWSKlpnPeECWiea6+RkAMZAm8VSh1acffCs= Subject key identifier: 7D:20:22:DB:F1:1A:93:02:C3:E7:F3:32:EB:56:2A:E5:3D:69:A1:32 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584BB2F7D42AB1428D30DB88A570 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f408855e-9251-37a2-9fb5-4cba259a98d2.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 202 IP address blocks: 168.87.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:d4:2a:b1:42:8d:30:db:88:a5:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=709f8807-4bed-47bf-8292-726a141dbd4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:8c:eb:54:e0:7e:09:06:9a:b3:8d:0d:6e:3d: 00:59:4b:a7:42:65:4b:0a:14:87:dd:0c:87:0c:42: f5:dd:d2:bf:48:09:1f:d0:9c:dc:99:c4:9d:b9:78: b9:08:8c:9c:e2:9e:46:43:4f:76:b8:d0:8f:39:24: 7c:da:3b:35:48:df:b0:87:51:76:3f:d1:f2:71:53: f6:f8:c0:9f:be:c7:22:71:b1:12:e4:99:2c:06:5b: e0:be:97:2c:04:cb:a9:c8:48:9d:bb:56:4e:46:fe: f1:f4:77:14:cc:b1:ab:4d:f5:55:d9:99:84:20:ac: 00:15:d9:2c:fe:ed:81:53:f0:67:de:6d:01:5d:c5: ce:fe:0a:7e:06:50:ee:50:0d:9e:a2:c5:e9:29:d2: 21:fa:73:79:2e:b7:62:1e:b2:2d:80:ca:16:2d:32: 3c:33:57:77:15:b0:85:2e:c3:ae:85:a2:94:26:9c: f9:a8:60:d9:d6:2a:0e:40:b0:b2:8e:59:ed:dc:bf: 0e:38:d4:53:0a:de:38:c7:86:45:ce:89:ef:4c:e4: 4a:8f:0e:57:7d:ee:15:7c:40:ee:50:28:eb:d9:13: a3:71:8d:ce:a2:c1:8b:a1:21:07:7a:06:b2:33:6a: c7:6e:3c:d7:fe:71:17:f0:9a:52:33:8c:28:f8:27: 5a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:20:22:DB:F1:1A:93:02:C3:E7:F3:32:EB:56:2A:E5:3D:69:A1:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f408855e-9251-37a2-9fb5-4cba259a98d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:2a:6f:12:53:cf:1e:6d:01:ed:1a:bf:5a:59:d8:90:99:b5: e2:c7:8b:b1:fb:e1:a5:3c:f2:82:29:1f:e0:b4:2b:d6:8d:98: b4:60:c0:4a:a8:57:99:a8:61:7d:b0:34:28:64:91:5d:21:6c: 3a:14:11:97:c2:33:12:f5:2f:56:18:62:b6:4f:17:d8:17:95: 22:8c:b9:7a:8b:49:51:a5:82:08:62:0c:1d:1b:70:45:57:aa: c9:a1:e0:2f:dc:f4:ce:84:49:aa:19:eb:c2:e4:ec:37:19:ad: 18:8b:6a:ec:cf:5b:60:2b:6f:bf:f6:ff:e9:7a:c7:e1:82:5d: 55:5d:fc:4e:72:38:7d:3a:d8:c7:9e:6e:46:64:35:25:fc:90: 81:d7:63:ac:31:9b:e3:f8:06:c2:2f:99:fe:0d:c7:59:c0:1d: 0e:0c:44:f4:46:e0:5a:49:44:de:9c:9a:3e:3d:96:2d:8f:e6: 37:80:1d:0e:17:88:04:38:84:de:9b:18:49:1b:e1:bb:95:f3: 4c:cb:b9:85:40:a9:74:e5:3c:9a:79:57:bb:9b:ba:11:69:55: c2:4f:75:5c:ab:3c:46:67:aa:16:e0:fb:48:ff:89:c9:4e:07: fa:cb:f8:66:e2:e3:2b:a9:a6:54:44:63:cc:da:7b:77:c5:79: b5:54:28:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy99QqsUKNMNuIpXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk NzA5Zjg4MDctNGJlZC00N2JmLTgyOTItNzI2YTE0MWRiZDRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4zrVOB+CQaas40Nbj0AWUunQmVLChSH3QyH DEL13dK/SAkf0JzcmcSduXi5CIyc4p5GQ092uNCPOSR82js1SN+wh1F2P9HycVP2 +MCfvscicbES5JksBlvgvpcsBMupyEidu1ZORv7x9HcUzLGrTfVV2ZmEIKwAFdks /u2BU/Bn3m0BXcXO/gp+BlDuUA2eosXpKdIh+nN5LrdiHrItgMoWLTI8M1d3FbCF LsOuhaKUJpz5qGDZ1ioOQLCyjlnt3L8OONRTCt44x4ZFzonvTORKjw5Xfe4VfEDu UCjr2ROjcY3OosGLoSEHegayM2rHbjzX/nEX8JpSM4wo+CdaCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH0gItvxGpMCw+fzMutWKuU9aaEyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZjQwODg1NWUtOTI1MS0z N2EyLTlmYjUtNGNiYTI1OWE5OGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqFeIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI8qbxJTzx5tAe0av1pZ2JCZteLHi7H74aU88oIpH+C0K9aNmLRgwEqo V5moYX2wNChkkV0hbDoUEZfCMxL1L1YYYrZPF9gXlSKMuXqLSVGlgghiDB0bcEVX qsmh4C/c9M6ESaoZ68Lk7DcZrRiLauzPW2Arb7/2/+l6x+GCXVVd/E5yOH062Mee bkZkNSX8kIHXY6wxm+P4BsIvmf4Nx1nAHQ4MRPRG4FpJRN6cmj49li2P5jeAHQ4X iAQ4hN6bGEkb4buV80zLuYVAqXTlPJp5V7ubuhFpVcJPdVyrPEZnqhbg+0j/iclO B/rL+Gbi4yupplREY8zae3fFebVUKDI= -----END CERTIFICATE-----Generated at Wed Nov 5 16:09:46 2025 by rpki-client