$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6481313d-e7bf-38b2-b464-ff6a0a5e7383.roa File: 6481313d-e7bf-38b2-b464-ff6a0a5e7383.roa (raw, json) Hash identifier: l7XqtfsXqg550LVsc2k/CDLKFeqGbnKn6BEAJR+cZhI= Subject key identifier: 42:B3:53:7E:F5:CA:7F:5D:35:DA:BF:E3:10:AD:3F:10:E6:14:50:1E Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584B4A4723930C9AEEA519FC4100 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6481313d-e7bf-38b2-b464-ff6a0a5e7383.roa Signing time: Tue 23 Sep 2025 13:00:40 +0000 ROA not before: Tue 23 Sep 2025 13:00:40 +0000 ROA not after: Mon 22 Dec 2025 14:00:40 +0000 asID: 3356 IP address blocks: 192.238.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4a:47:23:93:0c:9a:ee:a5:19:fc:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 23 13:00:40 2025 GMT Not After : Dec 22 14:00:40 2025 GMT Subject: CN=1b57d1c4-a931-4048-b6db-48809281e6d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:dd:52:1a:75:d3:c9:e1:cc:99:b7:8e:56:ee: 79:45:20:72:85:40:ee:0a:06:af:8c:ca:35:90:be: ea:d5:1b:8b:b8:8d:83:15:b2:6a:03:10:18:40:2f: c0:60:73:ad:bd:1d:fe:62:21:33:49:f0:f4:e3:ed: 1b:19:b3:44:f8:30:bb:10:6c:70:7b:1f:20:37:f3: 77:26:3b:72:de:77:2e:0e:b9:a4:2f:e5:da:e3:76: f2:3e:ef:10:e0:a0:d8:42:a1:c0:98:15:d6:4d:ca: c9:4b:23:8e:20:97:6b:6d:6d:bc:37:90:44:21:77: 83:6e:ac:6b:80:28:34:53:00:eb:a4:44:3a:68:46: 9d:b2:39:23:44:af:ff:0a:c9:8f:1e:18:68:56:31: 0f:c8:c1:d2:63:bb:35:cc:83:f5:bc:77:71:ff:d0: 58:56:40:45:c8:d9:44:5b:51:28:a9:58:98:7a:34: f8:83:33:5f:83:ef:0f:e8:a5:95:6f:01:5b:3f:f5: 5a:9d:17:85:fe:32:bb:44:52:c9:61:c3:45:56:9f: f1:20:77:78:6c:6c:4e:57:51:90:ba:4f:47:dd:06: 2d:af:a9:4d:98:dc:f7:0e:41:f3:4d:d1:a4:8e:c5: ca:6b:3c:47:0a:c7:9f:cd:da:ff:d6:fd:09:c4:9d: 92:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:B3:53:7E:F5:CA:7F:5D:35:DA:BF:E3:10:AD:3F:10:E6:14:50:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6481313d-e7bf-38b2-b464-ff6a0a5e7383.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.238.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:56:12:c4:d6:d6:83:98:8c:d9:d6:0c:2a:8e:26:d1:f2:ba: 20:9f:e1:6f:26:64:a4:60:79:57:d1:dd:6e:2b:27:c2:31:e4: df:f3:e4:01:63:51:ac:23:c9:4a:73:b1:e4:16:f1:4b:38:a8: c2:ac:e1:7e:e0:62:a3:01:c9:2d:40:89:a9:ea:b9:b8:58:84: fb:a7:2a:cd:40:27:6d:f9:e6:c3:d4:a6:22:3d:4b:91:bb:2b: c2:11:8d:13:cb:5b:d1:82:69:ed:e5:35:8f:5d:59:7d:1a:1a: d5:e6:fb:42:09:b6:c1:69:18:d8:e7:51:e3:80:8e:68:12:7c: 4a:75:19:51:9d:0a:ea:a8:17:c8:8a:e0:ac:b5:cd:d6:28:e4: 59:e9:46:c5:7e:27:8d:33:d9:0d:79:db:ba:07:7b:bd:2f:8b: 17:46:48:5a:56:47:fa:f7:be:06:3a:63:c5:24:e8:5e:f3:23: 30:ac:66:b2:0a:c5:47:d0:bb:16:e7:29:58:45:f2:68:d1:76: db:1d:88:4e:fa:65:85:dd:10:11:a1:a6:62:2a:d9:b4:96:2f: 12:86:7e:49:3f:93:2d:60:8d:81:43:19:08:83:5e:9e:33:a6: 83:96:d2:63:2b:80:61:56:dc:c2:a7:e8:d0:a1:04:7a:33:aa: 18:6b:ec:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtKRyOTDJrupRn8QQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDkyMzEzMDA0MFoXDTI1MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk MWI1N2QxYzQtYTkzMS00MDQ4LWI2ZGItNDg4MDkyODFlNmQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzN1SGnXTyeHMmbeOVu55RSByhUDuCgavjMo1 kL7q1RuLuI2DFbJqAxAYQC/AYHOtvR3+YiEzSfD04+0bGbNE+DC7EGxwex8gN/N3 Jjty3ncuDrmkL+Xa43byPu8Q4KDYQqHAmBXWTcrJSyOOIJdrbW28N5BEIXeDbqxr gCg0UwDrpEQ6aEadsjkjRK//CsmPHhhoVjEPyMHSY7s1zIP1vHdx/9BYVkBFyNlE W1EoqViYejT4gzNfg+8P6KWVbwFbP/VanReF/jK7RFLJYcNFVp/xIHd4bGxOV1GQ uk9H3QYtr6lNmNz3DkHzTdGkjsXKazxHCsefzdr/1v0JxJ2S/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEKzU371yn9dNdq/4xCtPxDmFFAeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNjQ4MTMxM2QtZTdiZi0z OGIyLWI0NjQtZmY2YTBhNWU3MzgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwO46MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJJWEsTW1oOYjNnWDCqOJtHyuiCf4W8mZKRgeVfR3W4rJ8Ix5N/z5AFj UawjyUpzseQW8Us4qMKs4X7gYqMByS1AianqubhYhPunKs1AJ2355sPUpiI9S5G7 K8IRjRPLW9GCae3lNY9dWX0aGtXm+0IJtsFpGNjnUeOAjmgSfEp1GVGdCuqoF8iK 4Ky1zdYo5FnpRsV+J40z2Q1527oHe70vixdGSFpWR/r3vgY6Y8Uk6F7zIzCsZrIK xUfQuxbnKVhF8mjRdtsdiE76ZYXdEBGhpmIq2bSWLxKGfkk/ky1gjYFDGQiDXp4z poOW0mMrgGFW3MKn6NChBHozqhhr7KY= -----END CERTIFICATE-----Generated at Sun Oct 19 20:43:33 2025 by rpki-client