$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1630334e-9116-3b82-aca3-ebe4ceae5360.roa File: 1630334e-9116-3b82-aca3-ebe4ceae5360.roa (raw, json) Hash identifier: oIR/OrKzaKrtklv1TDpazvkwsds6hUZaE5BMbHAPwGM= Subject key identifier: 17:57:44:10:EB:CA:7A:FB:7F:1F:98:59:07:C0:B3:21:93:5E:B6:4B Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584B4A471DC5B43A32254F643600 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1630334e-9116-3b82-aca3-ebe4ceae5360.roa Signing time: Tue 23 Sep 2025 13:00:40 +0000 ROA not before: Tue 23 Sep 2025 13:00:40 +0000 ROA not after: Mon 22 Dec 2025 14:00:40 +0000 asID: 203 IP address blocks: 192.57.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4a:47:1d:c5:b4:3a:32:25:4f:64:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 23 13:00:40 2025 GMT Not After : Dec 22 14:00:40 2025 GMT Subject: CN=d08b3ba0-522b-460a-afb1-5921045adb83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:87:70:be:64:8e:56:66:c3:ea:5f:21:a0:cf: 64:24:f6:62:99:8e:b9:1a:3a:28:b6:9d:2a:32:c8: 07:df:71:21:2a:d9:53:c6:16:48:e0:3b:f9:9a:fc: 8d:c6:25:d4:b9:e7:1c:25:1c:80:13:50:7a:6d:89: 9f:ee:2d:cf:45:ba:75:60:61:66:92:a9:f7:b3:0a: 38:78:67:cd:0e:2d:73:19:0b:c4:d8:c0:a5:02:a6: 2a:07:3b:14:2a:2d:8e:6e:ce:52:66:fa:83:3b:e5: 84:b8:b5:03:6e:63:55:87:67:b8:71:9c:e0:3f:d3: 16:1a:2f:dd:64:17:8d:14:d6:13:22:e3:e6:85:1e: 8c:13:d1:16:75:93:98:b8:b9:53:c0:cb:29:26:7c: 39:6a:31:97:37:76:8f:03:35:e5:b4:85:55:7e:23: 4e:1b:00:b5:84:7b:47:4f:08:fd:76:bf:ac:24:69: 34:8e:fa:0d:e0:dc:08:86:6a:03:0b:c6:5c:40:24: 15:1c:23:39:29:fb:48:59:e9:e4:de:0e:fb:61:94: 38:63:66:10:bd:e7:84:50:4a:9f:9f:8d:dc:46:29: 6c:a6:54:42:6b:d0:72:31:bf:7c:68:74:2c:b0:c1: 80:5f:4b:7c:8c:fb:3c:e2:fc:2f:45:2c:cf:22:f4: b4:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:57:44:10:EB:CA:7A:FB:7F:1F:98:59:07:C0:B3:21:93:5E:B6:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1630334e-9116-3b82-aca3-ebe4ceae5360.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.57.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:fc:f5:29:e3:e7:27:54:30:21:ea:0b:ac:a8:9d:04:ad:03: 86:49:32:87:4d:5c:16:aa:51:70:0c:56:29:7b:02:74:80:05: 5d:05:80:60:98:3a:a9:b6:cc:3f:7c:cf:b0:99:2d:d7:9c:65: 62:a8:ca:4a:10:ee:c5:5c:15:36:e1:97:53:36:c0:6d:b2:8d: 0f:90:21:97:52:c1:74:22:0d:9a:e7:f4:6c:20:e2:cd:96:f2: 63:7f:f6:8a:c1:50:86:ca:7c:c4:c4:19:82:c1:8f:21:77:c0: 33:9e:e0:3f:77:0e:e2:19:cc:32:d3:07:fd:4a:2a:f2:13:f2: 78:f4:c0:e4:e9:78:51:98:5c:12:3b:8f:dc:0d:65:77:26:62: 6f:45:d9:c0:be:9f:4f:a6:b7:eb:37:b3:f4:a4:6a:32:58:03: 8a:09:d5:41:91:e6:da:87:e9:85:7f:84:cd:21:b6:83:74:68: 9a:4b:67:bf:9b:b1:d3:d9:4b:22:32:ce:49:50:f2:e9:02:d1: 81:c0:82:b1:9a:64:93:45:af:9f:bb:a9:c1:9e:f8:55:3e:82: 02:11:12:c4:a4:05:1f:0f:0f:81:19:c4:8a:b1:26:c6:54:6f: eb:b8:23:9a:b6:5d:a1:1e:d0:ec:1b:41:fd:fd:6a:02:19:2c: 92:a8:ca:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtKRx3FtDoyJU9kNgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDkyMzEzMDA0MFoXDTI1MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk ZDA4YjNiYTAtNTIyYi00NjBhLWFmYjEtNTkyMTA0NWFkYjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4dwvmSOVmbD6l8hoM9kJPZimY65Gjootp0q MsgH33EhKtlTxhZI4Dv5mvyNxiXUueccJRyAE1B6bYmf7i3PRbp1YGFmkqn3swo4 eGfNDi1zGQvE2MClAqYqBzsUKi2Obs5SZvqDO+WEuLUDbmNVh2e4cZzgP9MWGi/d ZBeNFNYTIuPmhR6ME9EWdZOYuLlTwMspJnw5ajGXN3aPAzXltIVVfiNOGwC1hHtH Twj9dr+sJGk0jvoN4NwIhmoDC8ZcQCQVHCM5KftIWenk3g77YZQ4Y2YQveeEUEqf n43cRilsplRCa9ByMb98aHQssMGAX0t8jPs84vwvRSzPIvS01wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBdXRBDrynr7fx+YWQfAsyGTXrZLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMTYzMDMzNGUtOTExNi0z YjgyLWFjYTMtZWJlNGNlYWU1MzYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwDmQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJL89Snj5ydUMCHqC6yonQStA4ZJModNXBaqUXAMVil7AnSABV0FgGCY Oqm2zD98z7CZLdecZWKoykoQ7sVcFTbhl1M2wG2yjQ+QIZdSwXQiDZrn9Gwg4s2W 8mN/9orBUIbKfMTEGYLBjyF3wDOe4D93DuIZzDLTB/1KKvIT8nj0wOTpeFGYXBI7 j9wNZXcmYm9F2cC+n0+mt+s3s/SkajJYA4oJ1UGR5tqH6YV/hM0htoN0aJpLZ7+b sdPZSyIyzklQ8ukC0YHAgrGaZJNFr5+7qcGe+FU+ggIREsSkBR8PD4EZxIqxJsZU b+u4I5q2XaEe0OwbQf39agIZLJKoylM= -----END CERTIFICATE-----Generated at Sun Oct 19 20:41:44 2025 by rpki-client