$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/28ef903e-c341-37ee-ab6e-f0cba98db689.roa File: 28ef903e-c341-37ee-ab6e-f0cba98db689.roa (raw, json) Hash identifier: o1Auo3FQj5r0nwaIrSLe7UoP6JHELaYbCi6uGud3tLg= Subject key identifier: 43:CA:A6:E7:41:FC:8E:46:F8:83:E8:8A:AB:69:AF:AE:6C:71:57:2C Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584B4A472EF2A83EABE97D0B3A80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/28ef903e-c341-37ee-ab6e-f0cba98db689.roa Signing time: Tue 23 Sep 2025 13:00:40 +0000 ROA not before: Tue 23 Sep 2025 13:00:40 +0000 ROA not after: Mon 22 Dec 2025 14:00:40 +0000 asID: 202 IP address blocks: 205.141.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4a:47:2e:f2:a8:3e:ab:e9:7d:0b:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 23 13:00:40 2025 GMT Not After : Dec 22 14:00:40 2025 GMT Subject: CN=4160966f-fb24-4497-88f8-e631b112f291 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:90:43:32:c4:f7:84:82:25:5e:1c:bc:cc:95: d4:30:0f:34:3b:a3:a8:2e:46:80:56:a1:bf:f0:8b: 12:60:95:ec:70:35:8e:c5:10:bb:95:36:1d:83:60: c0:86:91:0f:0a:18:6b:b6:ff:ea:d5:20:82:15:4d: 85:96:80:1f:8b:4f:91:ef:86:17:4d:81:dc:a1:ba: 9b:f1:58:1d:25:ff:69:2a:74:bf:21:8c:0c:61:80: 4e:b0:8c:bd:bf:61:78:ba:3a:12:3d:85:29:c3:32: 90:68:db:04:70:5e:3b:2c:1f:f3:5e:18:47:38:26: 2c:a2:d2:36:7f:69:bd:c6:2c:43:c3:70:7d:a2:28: a5:05:5c:0f:a7:0e:9d:e8:58:ae:b4:79:05:d0:d7: a9:86:e6:24:7a:a3:3f:bf:5b:a2:50:7a:78:aa:73: 60:a3:0e:39:0c:64:8c:89:24:bd:28:c5:84:a0:51: 9c:f2:cb:fb:9d:65:b7:c3:c2:18:3c:ee:56:48:22: 3c:8b:28:58:e6:d1:47:1e:91:91:22:ef:a0:a9:24: 5f:e1:80:ef:d0:f6:a0:d5:ae:8b:4e:5b:35:2c:6e: 3a:e2:b0:5d:4f:2b:4f:36:7e:c9:be:87:c2:05:39: 33:ab:15:70:78:23:7f:b9:c4:9b:b1:c7:50:68:e2: ab:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:CA:A6:E7:41:FC:8E:46:F8:83:E8:8A:AB:69:AF:AE:6C:71:57:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/28ef903e-c341-37ee-ab6e-f0cba98db689.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 205.141.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:79:e5:17:2d:54:9b:12:d7:98:4a:ab:0f:b3:d3:f6:f1:6b: 3d:2b:a9:bc:9a:ad:11:d9:6d:b0:ca:1b:dd:11:00:a6:4c:e0: 94:31:79:bc:ec:b9:58:e1:76:a3:13:dd:e1:92:96:8f:b0:ad: 12:57:49:df:f9:33:93:bd:92:05:99:38:98:a4:0b:b9:bf:c6: 83:f5:dc:69:cd:ec:5e:15:70:5c:55:96:31:aa:3c:91:ce:76: d9:42:1b:c3:12:c1:d5:a5:83:27:86:29:19:03:42:9d:b7:ad: 9c:ab:f8:b2:5c:ca:a4:97:6a:0e:18:31:37:42:78:7a:12:55: c4:1f:6c:33:38:af:66:f0:11:a3:0f:15:a0:a0:e1:39:65:52: b2:5a:9d:4b:d1:49:1b:02:04:6f:84:b5:42:1b:2a:09:e3:2c: 61:52:da:97:54:70:27:e6:6b:f5:77:c9:3b:fb:c6:17:50:2f: ee:38:89:d8:bc:b7:b0:4a:ba:1a:51:31:cc:f1:5b:47:44:06: 1b:89:a4:a3:f6:0a:86:15:98:18:40:fd:aa:88:70:ca:75:2d: 94:5e:67:f3:a4:f5:56:f3:59:0f:e3:81:6d:1b:d4:9c:b5:26: 40:be:ba:42:c7:bb:b6:c8:75:20:34:31:ff:ea:d6:df:ca:34: 5c:66:de:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtKRy7yqD6r6X0LOoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDkyMzEzMDA0MFoXDTI1MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk NDE2MDk2NmYtZmIyNC00NDk3LTg4ZjgtZTYzMWIxMTJmMjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJBDMsT3hIIlXhy8zJXUMA80O6OoLkaAVqG/ 8IsSYJXscDWOxRC7lTYdg2DAhpEPChhrtv/q1SCCFU2FloAfi0+R74YXTYHcobqb 8VgdJf9pKnS/IYwMYYBOsIy9v2F4ujoSPYUpwzKQaNsEcF47LB/zXhhHOCYsotI2 f2m9xixDw3B9oiilBVwPpw6d6FiutHkF0NephuYkeqM/v1uiUHp4qnNgow45DGSM iSS9KMWEoFGc8sv7nWW3w8IYPO5WSCI8iyhY5tFHHpGRIu+gqSRf4YDv0Pag1a6L Tls1LG464rBdTytPNn7JvofCBTkzqxVweCN/ucSbscdQaOKrewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEPKpudB/I5G+IPoiqtpr65scVcsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMjhlZjkwM2UtYzM0MS0z N2VlLWFiNmUtZjBjYmE5OGRiNjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzY3OMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZ55RctVJsS15hKqw+z0/bxaz0rqbyarRHZbbDKG90RAKZM4JQxebzs uVjhdqMT3eGSlo+wrRJXSd/5M5O9kgWZOJikC7m/xoP13GnN7F4VcFxVljGqPJHO dtlCG8MSwdWlgyeGKRkDQp23rZyr+LJcyqSXag4YMTdCeHoSVcQfbDM4r2bwEaMP FaCg4TllUrJanUvRSRsCBG+EtUIbKgnjLGFS2pdUcCfma/V3yTv7xhdQL+44idi8 t7BKuhpRMczxW0dEBhuJpKP2CoYVmBhA/aqIcMp1LZReZ/Ok9VbzWQ/jgW0b1Jy1 JkC+ukLHu7bIdSA0Mf/q1t/KNFxm3hc= -----END CERTIFICATE-----Generated at Sun Oct 19 20:31:28 2025 by rpki-client