$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/04749899-dca1-3b86-8e1c-cde5934e8525.roa File: 04749899-dca1-3b86-8e1c-cde5934e8525.roa (raw, json) Hash identifier: 256IMxENnxbyL3Hav98ZLj3gdxZdmdxk3UCpqoxKtwo= Subject key identifier: 33:61:46:10:B7:CF:D1:C0:DB:07:FF:F1:85:A2:4B:BA:77:D5:75:D8 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584B4A472329593A5CDA2BA40E00 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/04749899-dca1-3b86-8e1c-cde5934e8525.roa Signing time: Tue 23 Sep 2025 13:00:40 +0000 ROA not before: Tue 23 Sep 2025 13:00:40 +0000 ROA not after: Mon 22 Dec 2025 14:00:40 +0000 asID: 203 IP address blocks: 192.238.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4a:47:23:29:59:3a:5c:da:2b:a4:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 23 13:00:40 2025 GMT Not After : Dec 22 14:00:40 2025 GMT Subject: CN=5dc60759-f2e8-4575-bee1-f52b8ca11cf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:06:86:e3:e2:bb:3e:5c:b9:e1:02:ab:7f:37: 0a:fd:9a:f0:dd:80:b3:d8:e1:fd:a8:fc:9d:f0:1f: b1:e5:47:dc:03:5f:4e:b9:1b:41:dd:c6:0d:09:7a: 01:24:45:c3:d4:7a:69:45:c5:87:cb:eb:f6:e7:57: da:d5:1f:19:77:59:46:d3:d8:64:45:b4:ba:c0:20: 27:2f:00:67:08:9d:1f:cb:d0:5f:64:e5:6a:9f:c1: ef:2b:e1:2b:c3:e9:cf:3c:d5:5d:ac:5c:03:a1:e1: 6d:02:01:42:db:25:ee:de:9a:fa:fd:a1:d7:04:24: 67:32:3a:a7:90:a1:a1:59:ef:26:72:54:96:fe:69: 8d:8e:20:56:19:66:45:b3:98:87:ea:3f:b7:36:93: cc:01:35:d2:0d:f9:26:e1:57:3e:0d:95:d1:a6:60: 7b:15:4a:af:42:1d:72:5d:28:0d:be:97:e7:ef:41: d8:54:dc:e7:97:6e:8f:0a:fc:81:9a:e9:26:76:e8: 97:cd:4a:d1:72:d5:ce:05:9a:7a:c2:a4:5b:58:9a: ad:95:9e:2d:29:20:95:bc:49:99:83:d2:e5:8e:63: 85:f8:33:db:1e:22:eb:8c:8e:be:29:5e:51:6f:4a: 2a:fb:be:e6:53:00:b7:95:df:63:1b:f8:99:02:0c: 58:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:61:46:10:B7:CF:D1:C0:DB:07:FF:F1:85:A2:4B:BA:77:D5:75:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/04749899-dca1-3b86-8e1c-cde5934e8525.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.238.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:61:15:c6:10:65:be:1c:ee:55:1b:42:05:40:40:6d:a2:06: 7f:a2:a5:47:ca:ba:59:19:7c:d3:f0:95:2c:ba:a9:05:2b:85: 01:71:81:b1:03:fb:1d:32:5c:ef:4a:8e:8e:02:e1:03:6a:d5: e5:6d:01:38:e7:f5:ad:6e:51:dd:bc:ba:65:e4:d5:67:80:9b: 1c:70:5e:5d:1a:a8:d3:8f:9d:db:4a:71:4d:69:47:86:c7:22: f5:ce:5e:2e:78:9e:7f:81:4a:9e:6d:6d:36:8f:c1:36:31:36: 58:7c:50:69:24:22:4c:af:02:7d:b6:86:f1:58:b7:af:46:d0: 4e:ef:49:b5:45:84:c2:66:e9:28:e3:61:4f:e8:9d:49:11:7d: b9:d3:16:d8:e6:e2:36:f2:35:e6:58:91:0b:0d:17:36:87:28: 9c:41:92:a1:a2:9f:7d:9d:1c:86:f9:b4:81:ac:b8:9d:d2:66: 9a:93:85:f7:0a:b0:d3:9c:da:fa:06:23:7b:d2:d3:c4:6a:bb: d8:c7:62:3c:16:71:45:5b:33:09:c1:d3:60:65:1f:f5:15:45: f4:68:f1:8a:9b:de:96:b7:0a:b4:4b:4a:78:7b:03:56:81:eb: ec:5c:d7:23:f4:1b:f7:aa:d2:6e:ea:3a:6d:be:19:43:f5:73: 53:a5:24:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtKRyMpWTpc2iukDgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDkyMzEzMDA0MFoXDTI1MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk NWRjNjA3NTktZjJlOC00NTc1LWJlZTEtZjUyYjhjYTExY2YxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAaG4+K7Ply54QKrfzcK/Zrw3YCz2OH9qPyd 8B+x5UfcA19OuRtB3cYNCXoBJEXD1HppRcWHy+v251fa1R8Zd1lG09hkRbS6wCAn LwBnCJ0fy9BfZOVqn8HvK+Erw+nPPNVdrFwDoeFtAgFC2yXu3pr6/aHXBCRnMjqn kKGhWe8mclSW/mmNjiBWGWZFs5iH6j+3NpPMATXSDfkm4Vc+DZXRpmB7FUqvQh1y XSgNvpfn70HYVNznl26PCvyBmukmduiXzUrRctXOBZp6wqRbWJqtlZ4tKSCVvEmZ g9LljmOF+DPbHiLrjI6+KV5Rb0oq+77mUwC3ld9jG/iZAgxYZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDNhRhC3z9HA2wf/8YWiS7p31XXYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMDQ3NDk4OTktZGNhMS0z Yjg2LThlMWMtY2RlNTkzNGU4NTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwO44MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIVhFcYQZb4c7lUbQgVAQG2iBn+ipUfKulkZfNPwlSy6qQUrhQFxgbED +x0yXO9Kjo4C4QNq1eVtATjn9a1uUd28umXk1WeAmxxwXl0aqNOPndtKcU1pR4bH IvXOXi54nn+BSp5tbTaPwTYxNlh8UGkkIkyvAn22hvFYt69G0E7vSbVFhMJm6Sjj YU/onUkRfbnTFtjm4jbyNeZYkQsNFzaHKJxBkqGin32dHIb5tIGsuJ3SZpqThfcK sNOc2voGI3vS08Rqu9jHYjwWcUVbMwnB02BlH/UVRfRo8Yqb3pa3CrRLSnh7A1aB 6+xc1yP0G/eq0m7qOm2+GUP1c1OlJCQ= -----END CERTIFICATE-----Generated at Mon Oct 20 02:17:13 2025 by rpki-client