$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/fe744e3c-3882-357b-b678-d6a14f744000.roa File: fe744e3c-3882-357b-b678-d6a14f744000.roa (raw, json) Hash identifier: THIUvNl3hmtAeHUkxfpxoVUpCkBdHFN5j95798eeLWg= Subject key identifier: B0:C0:99:09:EB:89:19:1F:0A:53:34:11:D6:F4:44:7C:5F:63:CA:F2 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584BB2F7D263E72AC1F0302F1D00 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/fe744e3c-3882-357b-b678-d6a14f744000.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 3360 IP address blocks: 192.85.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:d2:63:e7:2a:c1:f0:30:2f:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=17f4f961-9c86-440c-9cf2-200b2c4ea4f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:5f:81:3d:57:f0:64:f2:2b:65:26:47:90:cc: cd:a4:13:4a:96:77:df:2e:89:fb:ac:12:7e:dc:e4: 9e:9e:f5:4e:68:80:4c:9f:eb:13:cd:4e:fa:5e:45: 64:a8:34:60:e7:1d:49:ae:e7:70:63:82:80:93:e8: fd:e7:f8:45:78:9c:d2:bd:7a:d5:35:2d:5e:7a:10: b5:33:12:f5:69:49:cf:d5:79:db:a9:3e:7c:ce:b3: b6:fa:2b:12:5b:2a:6e:9f:51:33:56:bd:ea:3c:b0: 0a:33:7a:0f:25:4b:df:d9:d3:6a:3a:c9:44:2f:70: a1:6e:41:4e:b6:2c:9b:b1:d9:46:c1:1c:e9:63:ec: b1:b8:29:8f:cd:ea:c2:71:71:91:c0:1a:63:96:1f: a9:07:05:46:a9:ad:78:1f:92:77:6e:90:a8:d8:1d: 1a:d9:0d:0a:68:9f:fb:3c:9a:6b:be:81:f9:7d:0d: 65:7b:95:fa:d6:39:fb:17:53:82:5e:ba:6b:5c:23: fe:6a:ea:dd:24:2a:9c:7e:f6:80:81:e2:6b:68:f2: 54:35:92:33:77:0c:8a:f5:83:fb:b7:22:99:a8:f5: 00:4c:cb:7e:4c:b0:37:9e:50:f5:b1:69:83:d3:62: 5c:d9:a0:de:2b:04:c1:43:9b:b8:47:3e:82:27:bd: 9c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:C0:99:09:EB:89:19:1F:0A:53:34:11:D6:F4:44:7C:5F:63:CA:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/fe744e3c-3882-357b-b678-d6a14f744000.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.85.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:e4:90:07:bc:f4:d9:92:8f:dd:41:67:01:47:4d:12:c7:73: 7b:9b:27:b0:04:c7:7c:a0:d8:35:31:1b:0e:21:8e:25:09:dc: 54:24:55:7e:7d:80:08:4f:27:46:83:8c:47:e6:23:1c:aa:5f: 7f:02:8a:66:fa:36:0b:b0:f3:fe:f7:86:e7:ba:59:ae:78:f5: d7:54:35:1a:1e:8b:24:6a:2e:c5:e4:b2:0d:1b:e5:15:71:c8: da:33:c9:2e:c3:1a:bb:81:13:0b:b5:7a:82:47:39:9e:2c:d6: 26:9b:7e:a1:05:e0:92:48:3f:e0:a0:cd:a9:a8:2a:49:18:6b: b9:a3:1f:98:9c:29:8c:73:41:28:bc:40:41:99:f4:ed:f0:3f: a5:39:8f:28:0f:02:cc:3a:ff:90:d9:f6:7c:0d:10:f3:f8:46: f0:bd:40:83:37:09:67:9c:07:e6:93:77:91:1f:25:d2:a9:03: 9d:4a:43:04:46:9e:05:00:81:b7:0e:99:e8:98:cb:3e:50:2f: 29:93:5b:4c:24:a6:55:fc:ce:59:de:e2:b1:49:80:b5:4e:8a: 6a:25:ac:06:6c:2a:37:34:b7:62:dc:02:4e:bc:0b:8c:eb:68: 25:1b:80:91:7f:e4:c5:79:bf:d7:68:b3:c9:6b:38:da:8d:b2: b7:66:2e:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy99Jj5yrB8DAvHQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk MTdmNGY5NjEtOWM4Ni00NDBjLTljZjItMjAwYjJjNGVhNGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1+BPVfwZPIrZSZHkMzNpBNKlnffLon7rBJ+ 3OSenvVOaIBMn+sTzU76XkVkqDRg5x1JrudwY4KAk+j95/hFeJzSvXrVNS1eehC1 MxL1aUnP1XnbqT58zrO2+isSWypun1EzVr3qPLAKM3oPJUvf2dNqOslEL3ChbkFO tiybsdlGwRzpY+yxuCmPzerCcXGRwBpjlh+pBwVGqa14H5J3bpCo2B0a2Q0KaJ/7 PJprvoH5fQ1le5X61jn7F1OCXrprXCP+aurdJCqcfvaAgeJraPJUNZIzdwyK9YP7 tyKZqPUATMt+TLA3nlD1sWmD02Jc2aDeKwTBQ5u4Rz6CJ72cGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLDAmQnriRkfClM0Edb0RHxfY8ryMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZmU3NDRlM2MtMzg4Mi0z NTdiLWI2NzgtZDZhMTRmNzQ0MDAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFXmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFfkkAe89NmSj91BZwFHTRLHc3ubJ7AEx3yg2DUxGw4hjiUJ3FQkVX59 gAhPJ0aDjEfmIxyqX38Cimb6Nguw8/73hue6Wa549ddUNRoeiyRqLsXksg0b5RVx yNozyS7DGruBEwu1eoJHOZ4s1iabfqEF4JJIP+CgzamoKkkYa7mjH5icKYxzQSi8 QEGZ9O3wP6U5jygPAsw6/5DZ9nwNEPP4RvC9QIM3CWecB+aTd5EfJdKpA51KQwRG ngUAgbcOmeiYyz5QLymTW0wkplX8zlne4rFJgLVOimolrAZsKjc0t2LcAk68C4zr aCUbgJF/5MV5v9dos8lrONqNsrdmLn8= -----END CERTIFICATE-----Generated at Wed Nov 5 10:37:33 2025 by rpki-client