$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f58cd65e-6c13-3b28-8de3-281e5f700c3e.roa File: f58cd65e-6c13-3b28-8de3-281e5f700c3e.roa (raw, json) Hash identifier: csLaZUMmgIvcsMt3KiCJLACnR7oUZD8CmSn5G0kAS0E= Subject key identifier: 0D:02:09:EA:19:EB:53:30:FB:7E:38:F4:3F:69:B2:5D:0A:67:6C:83 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584BB2F7D4CAA6649C2CE8ED5700 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f58cd65e-6c13-3b28-8de3-281e5f700c3e.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 3360 IP address blocks: 168.87.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:d4:ca:a6:64:9c:2c:e8:ed:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=1ff9a017-785e-457e-bd74-8b879bd8a44a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:97:69:51:b5:20:64:4b:9f:51:99:e0:96:5d: eb:68:a8:b0:67:04:63:97:0a:9d:ff:9c:12:ba:86: 11:9f:b2:4b:46:90:19:55:e7:b3:76:5a:b4:d3:64: 18:cf:d9:60:1b:e3:1b:43:bc:52:72:96:8a:3d:0a: 04:0c:17:99:be:1a:00:db:f0:2c:fa:8e:45:87:db: 77:be:75:a9:fd:ba:20:ed:05:54:6d:c1:70:cb:fd: 8d:df:7c:d7:32:8c:a0:b9:98:76:a5:d3:54:99:dd: cb:bc:98:10:ae:fb:8a:59:18:39:a3:56:dd:4b:98: 3a:a6:4f:83:8b:d0:d6:8b:2e:9c:8c:7b:a9:a5:c9: f4:93:9d:0a:72:be:d0:50:59:87:c9:6b:64:8b:e8: 3b:ea:f8:af:56:9b:d3:8b:e8:b1:a0:f8:dc:e3:26: 76:a8:4d:d4:a4:23:f8:dc:c2:9f:79:62:b8:71:fc: 42:97:81:3c:ca:ec:d3:b6:ef:90:10:1d:c3:03:d9: 2d:cd:a6:95:70:e1:ff:f2:42:fd:dc:32:a8:30:dc: 1e:91:12:9f:13:4c:e0:cd:1a:97:33:7f:3d:d0:45: 93:ce:e6:91:4d:05:91:06:d7:5c:8c:93:f0:da:7d: 65:36:4e:b7:62:46:4c:3b:a5:51:af:fe:fe:8d:68: 0d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:02:09:EA:19:EB:53:30:FB:7E:38:F4:3F:69:B2:5D:0A:67:6C:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f58cd65e-6c13-3b28-8de3-281e5f700c3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:ca:8c:11:f6:4a:14:42:c2:9e:c7:14:25:bc:bc:eb:87:b1: e9:a8:7c:27:68:21:2d:bc:5f:27:d4:be:97:26:31:ba:62:60: 95:31:1b:f2:f4:71:37:bd:1d:1c:aa:52:90:fd:65:24:9a:3d: 28:9c:36:8b:35:79:32:07:8d:c4:51:ea:de:93:d6:ad:78:a7: c0:0e:03:4e:5e:d3:04:64:d2:c1:61:5e:1e:98:02:d8:d1:e9: 93:fe:ab:c3:db:e2:01:db:db:22:37:a3:e9:99:ea:f3:09:de: 63:d8:dd:27:f2:e1:d2:16:7d:c8:b3:51:42:2d:2f:02:88:63: 41:f7:8f:4f:9c:f6:d9:b3:35:7c:98:4e:2e:cc:30:3d:11:3f: c2:06:0e:8d:1e:e7:9e:d7:69:0a:7a:b6:42:98:2f:89:94:d0: 17:81:0e:5c:75:b3:b2:fe:ed:af:81:c0:b7:bc:86:7a:88:89: 16:b0:73:59:c4:26:68:16:be:b8:17:c8:5d:29:5a:2a:79:b6: 88:12:09:ef:0c:65:0a:68:f2:e5:0c:66:20:d3:e9:f5:db:83: eb:b1:9d:fd:e6:15:31:b1:af:57:60:7a:dc:29:e6:ec:4c:78: 30:61:5c:a7:bd:74:8a:f9:06:cb:78:4a:78:06:27:55:57:d8: 42:eb:fe:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy99TKpmScLOjtVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk MWZmOWEwMTctNzg1ZS00NTdlLWJkNzQtOGI4NzliZDhhNDRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJdpUbUgZEufUZngll3raKiwZwRjlwqd/5wS uoYRn7JLRpAZVeezdlq002QYz9lgG+MbQ7xScpaKPQoEDBeZvhoA2/As+o5Fh9t3 vnWp/bog7QVUbcFwy/2N33zXMoyguZh2pdNUmd3LvJgQrvuKWRg5o1bdS5g6pk+D i9DWiy6cjHuppcn0k50Kcr7QUFmHyWtki+g76vivVpvTi+ixoPjc4yZ2qE3UpCP4 3MKfeWK4cfxCl4E8yuzTtu+QEB3DA9ktzaaVcOH/8kL93DKoMNwekRKfE0zgzRqX M3890EWTzuaRTQWRBtdcjJPw2n1lNk63YkZMO6VRr/7+jWgN6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA0CCeoZ61Mw+3449D9psl0KZ2yDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZjU4Y2Q2NWUtNmMxMy0z YjI4LThkZTMtMjgxZTVmNzAwYzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFeOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAHKjBH2ShRCwp7HFCW8vOuHsemofCdoIS28XyfUvpcmMbpiYJUxG/L0 cTe9HRyqUpD9ZSSaPSicNos1eTIHjcRR6t6T1q14p8AOA05e0wRk0sFhXh6YAtjR 6ZP+q8Pb4gHb2yI3o+mZ6vMJ3mPY3Sfy4dIWfcizUUItLwKIY0H3j0+c9tmzNXyY Ti7MMD0RP8IGDo0e557XaQp6tkKYL4mU0BeBDlx1s7L+7a+BwLe8hnqIiRawc1nE JmgWvrgXyF0pWip5togSCe8MZQpo8uUMZiDT6fXbg+uxnf3mFTGxr1dgetwp5uxM eDBhXKe9dIr5Bst4SngGJ1VX2ELr/uE= -----END CERTIFICATE-----Generated at Wed Nov 5 01:02:09 2025 by rpki-client