$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/7faa02f1-f29e-300a-a671-5db0b0d8a04a.roa File: 7faa02f1-f29e-300a-a671-5db0b0d8a04a.roa (raw, json) Hash identifier: EQHXENprGCFs2NR0ww6rxvcCs1G2gn0ziIyXl+RZDD4= Subject key identifier: D0:71:B3:2E:14:87:8B:DC:CF:87:B1:16:67:D0:97:B6:F0:AF:56:EB Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584AD23BD8D528C96BC2713B3648 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/7faa02f1-f29e-300a-a671-5db0b0d8a04a.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 202 IP address blocks: 205.191.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:d8:d5:28:c9:6b:c2:71:3b:36:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=9b777573-83cf-4809-8466-bd6788bdee93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:6e:f7:b1:6d:3e:49:d5:4d:c3:70:f6:85:24: 6f:ce:a0:5f:07:11:f5:a1:47:2f:d3:9d:96:b1:ad: b1:09:6e:c8:12:74:38:ef:77:48:c1:05:30:da:38: 03:93:26:4d:ca:1a:33:7b:9d:c9:46:72:76:68:84: 1a:1c:9e:e6:05:d5:04:3e:fc:f0:74:8c:8e:ac:bf: 12:29:7b:2f:6d:3e:1b:f0:4a:c2:5f:31:ea:ef:77: 6c:3a:93:c5:12:36:55:e5:21:ee:46:a1:2f:d6:7f: 11:4e:55:9b:07:b5:c7:02:9a:49:dd:bb:a9:2c:a9: f7:39:42:e5:2f:06:88:d9:29:40:69:8b:05:43:77: a8:eb:12:98:15:d0:81:8e:29:fb:40:56:3e:d8:86: c7:12:f8:1d:f5:e5:b7:5c:ca:35:fc:31:fb:06:fc: a9:29:ba:c4:5b:56:9d:38:03:37:a7:ea:95:85:8e: a2:c8:43:c8:64:fd:3a:e3:67:a2:b7:82:da:97:eb: e9:e6:74:f5:6c:3a:29:ec:cd:e5:52:df:cc:38:8f: 59:1c:50:0f:31:11:d9:b2:c4:54:09:f0:e7:f1:dc: d0:56:6b:9f:79:4f:74:13:f5:d9:c3:f7:7a:bc:c8: 8f:00:91:d4:be:2a:11:d9:94:43:0d:55:52:3a:ae: f1:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:71:B3:2E:14:87:8B:DC:CF:87:B1:16:67:D0:97:B6:F0:AF:56:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/7faa02f1-f29e-300a-a671-5db0b0d8a04a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 205.191.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:79:7e:98:73:35:26:c2:55:1b:c5:28:ae:5d:87:e7:e0:b9: 7c:10:d0:ca:7a:2e:c9:4c:64:b9:54:91:43:14:d5:ee:fc:4b: 2c:ed:5d:da:cd:db:f8:57:17:e4:20:a4:ba:a0:68:58:8b:6f: 7d:d1:1f:99:d7:67:6b:d8:02:54:6d:af:ea:a7:e3:11:1e:67: 6d:81:1f:d2:89:8a:50:d6:2b:b8:79:6c:93:bb:a8:6d:33:f7: ac:0d:c1:92:41:29:97:07:3a:71:35:57:90:c2:89:44:d3:55: 2d:a8:93:62:8b:1a:b4:ea:de:ea:fd:3b:81:f7:31:3f:a9:0c: e9:ba:74:d6:13:8d:be:a6:19:09:80:5c:e9:ed:84:e7:49:16: cc:70:60:2a:73:f6:4a:e2:af:4b:0b:f5:3d:a4:47:a3:95:e5: 42:20:7b:10:3d:25:8e:bc:7f:9f:49:99:4a:a0:68:7b:ff:cb: 4b:98:3a:5d:7e:4b:02:3b:bf:0c:e7:05:93:2f:20:16:75:3b: f7:a8:82:b5:51:96:55:3b:85:d6:48:2d:0d:bb:b6:e2:fe:0f: cf:df:4e:13:49:82:d4:35:28:9c:25:a1:32:ff:c4:64:c8:e6: 6a:7d:14:4c:11:6e:d8:bb:8c:8d:bd:38:73:dd:d9:fb:36:b7: c3:a9:8d:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO9jVKMlrwnE7NkgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk OWI3Nzc1NzMtODNjZi00ODA5LTg0NjYtYmQ2Nzg4YmRlZTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl273sW0+SdVNw3D2hSRvzqBfBxH1oUcv052W sa2xCW7IEnQ473dIwQUw2jgDkyZNyhoze53JRnJ2aIQaHJ7mBdUEPvzwdIyOrL8S KXsvbT4b8ErCXzHq73dsOpPFEjZV5SHuRqEv1n8RTlWbB7XHAppJ3bupLKn3OULl LwaI2SlAaYsFQ3eo6xKYFdCBjin7QFY+2IbHEvgd9eW3XMo1/DH7BvypKbrEW1ad OAM3p+qVhY6iyEPIZP0642eit4Lal+vp5nT1bDop7M3lUt/MOI9ZHFAPMRHZssRU CfDn8dzQVmufeU90E/XZw/d6vMiPAJHUvioR2ZRDDVVSOq7xAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNBxsy4Uh4vcz4exFmfQl7bwr1brMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvN2ZhYTAyZjEtZjI5ZS0z MDBhLWE2NzEtNWRiMGIwZDhhMDRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzb8oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC95fphzNSbCVRvFKK5dh+fguXwQ0Mp6LslMZLlUkUMU1e78SyztXdrN 2/hXF+QgpLqgaFiLb33RH5nXZ2vYAlRtr+qn4xEeZ22BH9KJilDWK7h5bJO7qG0z 96wNwZJBKZcHOnE1V5DCiUTTVS2ok2KLGrTq3ur9O4H3MT+pDOm6dNYTjb6mGQmA XOnthOdJFsxwYCpz9krir0sL9T2kR6OV5UIgexA9JY68f59JmUqgaHv/y0uYOl1+ SwI7vwznBZMvIBZ1O/eogrVRllU7hdZILQ27tuL+D8/fThNJgtQ1KJwloTL/xGTI 5mp9FEwRbti7jI29OHPd2fs2t8Opja0= -----END CERTIFICATE-----Generated at Sat Aug 23 14:59:32 2025 by rpki-client