$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4331cee6-586b-3678-9efb-30032ba47a0c.roa File: 4331cee6-586b-3678-9efb-30032ba47a0c.roa (raw, json) Hash identifier: DsKJAPvxPK4jscgb8POuzSY+0Ra+vXDKc3HFHz9U0Do= Subject key identifier: 7F:EA:7F:66:0A:00:D0:FA:4A:E3:C1:39:46:C0:5E:A7:19:D7:B0:20 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584B5B073F5CC81B39EF255D2C40 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4331cee6-586b-3678-9efb-30032ba47a0c.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 3356 IP address blocks: 192.57.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:3f:5c:c8:1b:39:ef:25:5d:2c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=a56d961a-613a-4343-b05a-5023b428309d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:0e:e9:8b:bb:c9:1b:bf:b1:c4:68:08:fb:9e: 62:04:d0:0f:26:e8:81:05:2a:b6:1f:4a:4a:2f:da: c7:3d:2b:cf:0f:50:2c:4b:ac:f2:ae:4d:35:3f:30: de:71:d7:03:35:e1:0c:bd:ad:a7:62:9b:56:ea:ea: 46:51:a3:8e:fc:8d:1e:a3:da:9b:c1:90:76:a9:bb: dc:16:51:91:66:82:da:e7:ac:0f:95:5b:57:5e:8d: fd:a3:d5:d4:9f:30:cc:9d:fe:91:99:a7:6b:20:d5: 53:ca:4c:29:a7:63:19:95:90:12:59:b7:a9:9c:17: 9c:70:01:f0:dd:29:eb:6a:f8:e7:26:b6:7d:de:12: aa:ac:d7:d4:ed:46:d2:9d:90:52:01:74:8e:23:92: 19:86:6f:35:53:b3:6c:64:0e:c1:ea:ac:0e:28:a9: 2e:73:22:65:4a:f6:42:3e:2f:24:9f:c6:0f:02:87: 29:97:f0:7f:e2:f0:13:91:2d:34:b2:46:42:e3:9a: a5:02:07:fe:60:9c:97:cd:a5:77:11:e4:d3:a1:eb: 4f:a1:c6:71:cc:b6:a7:27:08:41:34:21:49:e5:59: bc:b6:39:36:c5:89:21:b8:14:66:2e:5b:7d:07:f3: 3b:4f:92:e0:36:83:d5:4c:c5:25:3f:c8:a0:fe:22: 39:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:EA:7F:66:0A:00:D0:FA:4A:E3:C1:39:46:C0:5E:A7:19:D7:B0:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4331cee6-586b-3678-9efb-30032ba47a0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.57.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:6c:53:cf:c7:5b:a7:ec:8d:ed:57:6e:8d:b7:d2:25:34:82: b1:e6:33:22:cb:70:b7:68:b1:29:a5:cc:01:1b:76:56:86:3c: 90:82:46:d3:53:f8:3b:02:89:8b:bb:cc:ed:7d:41:91:8a:df: be:3c:64:9f:20:f1:8a:81:a4:9b:5c:1a:d4:a0:7f:c1:6f:b7: eb:eb:a6:ca:4a:f6:78:22:b4:ea:b0:e9:44:72:84:9c:46:7e: 25:db:15:1b:3b:e0:e6:67:b9:f3:f1:b0:6b:cd:29:a7:8f:26: a2:fd:40:c8:1a:fd:3b:d9:0a:7f:73:75:95:c9:fc:04:bf:93: 36:79:05:e6:49:e4:da:28:59:7b:6a:1c:9e:d2:25:47:6a:08: 88:54:04:d2:d8:3f:dd:d3:71:f8:24:07:77:a3:36:d4:93:47: 0c:5a:31:59:bd:cd:ed:26:be:e3:e9:0c:69:de:c8:8e:fb:7d: 7d:ce:ee:aa:d2:e6:f2:0b:4f:da:b2:41:74:b4:ea:dd:d3:ca: be:07:07:78:35:85:3b:14:91:db:d9:c6:92:eb:1e:47:8b:e6: 4e:e4:03:07:12:77:f6:29:67:ca:3a:81:54:31:4c:7f:91:84: 51:c2:78:a0:d2:e7:9e:e9:d6:6b:4c:6c:6f:1f:14:ad:1c:05: 7b:b5:fa:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbBz9cyBs57yVdLEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk YTU2ZDk2MWEtNjEzYS00MzQzLWIwNWEtNTAyM2I0MjgzMDlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmw7pi7vJG7+xxGgI+55iBNAPJuiBBSq2H0pK L9rHPSvPD1AsS6zyrk01PzDecdcDNeEMva2nYptW6upGUaOO/I0eo9qbwZB2qbvc FlGRZoLa56wPlVtXXo39o9XUnzDMnf6RmadrINVTykwpp2MZlZASWbepnBeccAHw 3SnravjnJrZ93hKqrNfU7UbSnZBSAXSOI5IZhm81U7NsZA7B6qwOKKkucyJlSvZC Pi8kn8YPAocpl/B/4vATkS00skZC45qlAgf+YJyXzaV3EeTToetPocZxzLanJwhB NCFJ5Vm8tjk2xYkhuBRmLlt9B/M7T5LgNoPVTMUlP8ig/iI5lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH/qf2YKAND6SuPBOUbAXqcZ17AgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNDMzMWNlZTYtNTg2Yi0z Njc4LTllZmItMzAwMzJiYTQ3YTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDlyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAlsU8/HW6fsje1Xbo230iU0grHmMyLLcLdosSmlzAEbdlaGPJCCRtNT +DsCiYu7zO19QZGK3748ZJ8g8YqBpJtcGtSgf8Fvt+vrpspK9ngitOqw6URyhJxG fiXbFRs74OZnufPxsGvNKaePJqL9QMga/TvZCn9zdZXJ/AS/kzZ5BeZJ5NooWXtq HJ7SJUdqCIhUBNLYP93TcfgkB3ejNtSTRwxaMVm9ze0mvuPpDGneyI77fX3O7qrS 5vILT9qyQXS06t3Tyr4HB3g1hTsUkdvZxpLrHkeL5k7kAwcSd/YpZ8o6gVQxTH+R hFHCeKDS557p1mtMbG8fFK0cBXu1+hw= -----END CERTIFICATE-----Generated at Sun Oct 19 20:49:08 2025 by rpki-client