$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/fc58d922-6637-3a2b-8f51-b40b52cbb0e0.roa File: fc58d922-6637-3a2b-8f51-b40b52cbb0e0.roa (raw, json) Hash identifier: LhPbyDGgBh9tA0TLA8Xe0HhFwX5k2X0M8+C563RexsI= Subject key identifier: 7B:DC:75:3C:F9:BA:3D:7A:DC:72:A5:52:7B:72:AE:15:6F:83:E7:20 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584BA0D272D1561A4BFC537AD140 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/fc58d922-6637-3a2b-8f51-b40b52cbb0e0.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 16509 IP address blocks: 168.87.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:72:d1:56:1a:4b:fc:53:7a:d1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=5ee27aff-fef8-4d0d-a143-c8c022499b0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:5c:83:38:6a:2d:08:60:1e:d3:85:9e:d4:26: 98:d2:7d:a0:6c:43:4f:1b:67:5e:62:8f:02:c5:84: d2:f0:23:53:c6:a4:92:38:22:40:37:d2:88:c0:9e: 15:6d:24:12:d7:95:06:ae:9c:99:a5:7f:a9:d1:df: e2:fa:f7:0f:20:b4:ce:8f:e6:1f:15:c5:81:94:d5: ab:08:43:44:48:4d:0b:71:ca:92:ca:ca:69:44:7f: 03:c2:ab:50:76:20:19:24:fd:63:c7:fe:f0:63:e0: d0:80:38:9e:e0:3c:bd:26:f2:bf:23:f8:65:29:43: a6:81:f8:dc:a4:be:de:3f:f1:bd:05:61:a3:75:05: 02:54:85:84:f1:d1:91:74:85:30:a8:8e:02:ad:43: f0:83:41:fb:4b:0b:13:2d:ca:9f:27:39:b8:63:c2: 44:0c:f6:ad:95:1b:31:5e:b2:a2:d5:c9:6c:27:d7: 15:8d:b0:32:aa:41:c7:32:62:41:93:66:27:13:74: fe:64:ab:d9:0b:3a:09:25:ad:2f:79:37:cb:c5:f1: 40:56:7c:4e:99:a7:f0:8c:b0:f0:5f:53:07:f3:15: 17:25:9c:a9:ee:92:c8:aa:a7:22:41:3c:ac:01:25: ab:0b:e3:8d:00:68:b7:7a:32:40:bb:64:ef:d6:b5: 18:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:DC:75:3C:F9:BA:3D:7A:DC:72:A5:52:7B:72:AE:15:6F:83:E7:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/fc58d922-6637-3a2b-8f51-b40b52cbb0e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:e6:bf:03:e1:ba:ac:bc:6d:5f:dc:a3:ac:cf:8d:96:fb:ae: ec:f3:80:8e:a9:5d:25:93:6a:c5:c0:3e:f9:08:2c:40:4e:b7: bb:19:21:d2:ac:89:30:42:7e:23:8c:c4:53:e9:b8:e9:c0:28: b9:82:f0:a9:07:4d:4a:4b:c1:22:e3:79:ed:81:da:0e:5f:2e: 9e:3a:4a:82:1e:da:99:d7:6e:0d:0c:9b:33:a4:15:e1:df:65: f3:e2:5a:12:7c:86:77:36:27:b1:99:4d:26:6e:c4:8f:ff:d0: 0b:30:c1:b6:5c:bb:11:35:c6:e2:c7:43:c3:c3:bb:87:0b:d6: a2:b4:d2:25:db:b8:0f:e8:fa:8b:2a:53:28:43:57:1c:a7:49: 98:f3:dd:3c:75:1c:84:66:64:c6:e5:e7:74:8c:d5:ca:50:61: ff:26:b6:b3:c7:75:fb:dc:c5:19:d6:9b:c6:5e:2a:70:4d:d0: 0c:b1:13:72:c0:e5:af:80:40:ec:0f:14:5a:db:64:30:7a:fe: 8f:2e:22:b4:05:c8:8f:8d:c6:5a:e5:eb:c6:93:60:9b:43:28: 24:cc:d7:1b:58:39:3b:ca:39:7e:1a:68:c0:7d:f8:81:ac:46: 47:25:92:be:55:0e:5a:7e:18:22:4d:0d:a1:7d:a5:4c:4d:36: f6:63:d5:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0nLRVhpL/FN60UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk NWVlMjdhZmYtZmVmOC00ZDBkLWExNDMtYzhjMDIyNDk5YjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFyDOGotCGAe04We1CaY0n2gbENPG2deYo8C xYTS8CNTxqSSOCJAN9KIwJ4VbSQS15UGrpyZpX+p0d/i+vcPILTOj+YfFcWBlNWr CENESE0LccqSysppRH8DwqtQdiAZJP1jx/7wY+DQgDie4Dy9JvK/I/hlKUOmgfjc pL7eP/G9BWGjdQUCVIWE8dGRdIUwqI4CrUPwg0H7SwsTLcqfJzm4Y8JEDPatlRsx XrKi1clsJ9cVjbAyqkHHMmJBk2YnE3T+ZKvZCzoJJa0veTfLxfFAVnxOmafwjLDw X1MH8xUXJZyp7pLIqqciQTysASWrC+ONAGi3ejJAu2Tv1rUYfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHvcdTz5uj163HKlUntyrhVvg+cgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZmM1OGQ5MjItNjYzNy0z YTJiLThmNTEtYjQwYjUyY2JiMGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFeuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC/mvwPhuqy8bV/co6zPjZb7ruzzgI6pXSWTasXAPvkILEBOt7sZIdKs iTBCfiOMxFPpuOnAKLmC8KkHTUpLwSLjee2B2g5fLp46SoIe2pnXbg0MmzOkFeHf ZfPiWhJ8hnc2J7GZTSZuxI//0AswwbZcuxE1xuLHQ8PDu4cL1qK00iXbuA/o+osq UyhDVxynSZjz3Tx1HIRmZMbl53SM1cpQYf8mtrPHdfvcxRnWm8ZeKnBN0AyxE3LA 5a+AQOwPFFrbZDB6/o8uIrQFyI+Nxlrl68aTYJtDKCTM1xtYOTvKOX4aaMB9+IGs Rkclkr5VDlp+GCJNDaF9pUxNNvZj1UQ= -----END CERTIFICATE-----Generated at Wed Nov 5 20:49:06 2025 by rpki-client