$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/865f51a6-3be5-374c-aa5e-ce1766089882.roa File: 865f51a6-3be5-374c-aa5e-ce1766089882.roa (raw, json) Hash identifier: SVNhS2FQf1Op3yycTfcDOPm+B/0nwtvEUdSjEHzB7DQ= Subject key identifier: E4:CB:16:85:5C:6B:38:A9:92:5C:9E:C5:10:77:EA:02:9C:7D:33:1F Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584B59A1C9A7F3F692CD97DB6A00 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/865f51a6-3be5-374c-aa5e-ce1766089882.roa Signing time: Mon 29 Sep 2025 01:00:33 +0000 ROA not before: Mon 29 Sep 2025 01:00:33 +0000 ROA not after: Sun 28 Dec 2025 02:00:33 +0000 asID: 3356 IP address blocks: 192.57.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:59:a1:c9:a7:f3:f6:92:cd:97:db:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 29 01:00:33 2025 GMT Not After : Dec 28 02:00:33 2025 GMT Subject: CN=23762caf-00d1-438c-85c8-bf0efe9405a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:71:23:2b:c3:d2:82:62:3a:2f:5c:2f:f3:54: cc:c4:8c:33:55:df:6d:d4:3a:2e:0d:da:c4:fa:2a: a3:72:21:6a:56:2f:08:a6:98:06:d1:a2:e9:c7:de: f5:01:ea:80:54:04:51:fc:0a:c6:b8:c0:48:b1:08: 2f:2f:6b:cf:97:6d:ec:52:53:e0:4e:b2:e3:8c:f6: b9:d5:48:20:95:e2:8b:c0:23:d7:1d:2f:cf:10:68: ca:de:a0:bb:6f:48:ea:1a:78:7f:88:5c:bd:ee:1a: 9e:88:54:79:34:4a:a9:50:b2:52:96:69:d3:18:63: 27:41:a3:f9:f8:b0:9b:60:3e:e5:e2:b7:56:33:03: 50:76:ea:48:48:78:6c:3c:5e:80:80:06:43:80:ad: cb:9d:f4:cd:f6:ac:2c:2f:8e:bb:6f:08:40:37:bc: d5:d0:6e:9b:0c:50:c2:4b:f3:2f:4b:95:28:dc:d2: 0d:1b:24:c0:4f:54:4f:05:38:ca:bd:0b:7b:71:47: c9:3e:5c:cf:63:06:42:72:29:9f:fb:dc:df:77:97: f8:b1:2f:d9:16:0e:97:55:a5:45:fe:da:bc:ce:49: 91:f8:c3:2b:cf:42:d6:80:35:1f:55:7c:2c:73:eb: 31:7e:a2:83:3d:04:04:9a:ee:e9:4f:a2:ed:47:5a: f0:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:CB:16:85:5C:6B:38:A9:92:5C:9E:C5:10:77:EA:02:9C:7D:33:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/865f51a6-3be5-374c-aa5e-ce1766089882.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.57.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:9f:24:b3:e3:cb:a4:42:21:08:7c:e2:e1:bf:66:1f:d8:6a: a0:f4:ee:5d:8f:27:43:96:b9:12:56:e3:cd:da:3d:37:a1:35: 85:c4:7c:90:ad:08:8d:01:8e:51:e9:ee:77:f7:8c:63:4f:6d: 2a:03:1b:a8:65:96:89:db:8e:84:11:19:83:cb:3a:41:a0:9b: a5:6a:97:a5:09:d9:33:41:61:d9:23:c6:14:6b:76:74:7f:f1: fd:0f:c1:f7:f7:18:a7:ed:8a:7b:c8:82:39:ee:59:1b:31:57: e5:ed:3c:6d:fe:4b:97:34:4a:9a:f5:5b:f1:33:d0:ff:ee:30: b7:09:c7:20:05:5a:dc:92:de:fc:02:28:bf:a9:0f:d8:ac:e8: 38:69:c8:bb:3a:63:da:25:1d:83:6f:f3:50:b1:1d:0f:2b:c8: 8d:33:36:dd:c2:a8:fc:35:93:e3:29:b0:9c:1a:23:10:87:56: 8e:51:e8:55:de:0b:cc:66:31:a1:ab:7c:83:8b:1d:b5:1d:59: 5b:0b:64:58:1b:10:77:22:da:ec:b7:f6:7f:55:4e:3f:89:50: ff:68:17:60:88:6d:12:c9:43:d9:22:f3:f4:95:d5:9f:06:ad: 68:ce:25:02:c1:44:e1:4c:de:af:d1:98:69:72:cb:41:18:24: 40:01:ea:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtZocmn8/aSzZfbagAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDkyOTAxMDAzM1oXDTI1MTIyODAyMDAzM1owLzEtMCsGA1UEAxMk MjM3NjJjYWYtMDBkMS00MzhjLTg1YzgtYmYwZWZlOTQwNWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXEjK8PSgmI6L1wv81TMxIwzVd9t1DouDdrE +iqjciFqVi8IppgG0aLpx971AeqAVARR/ArGuMBIsQgvL2vPl23sUlPgTrLjjPa5 1UggleKLwCPXHS/PEGjK3qC7b0jqGnh/iFy97hqeiFR5NEqpULJSlmnTGGMnQaP5 +LCbYD7l4rdWMwNQdupISHhsPF6AgAZDgK3LnfTN9qwsL467bwhAN7zV0G6bDFDC S/MvS5Uo3NINGyTAT1RPBTjKvQt7cUfJPlzPYwZCcimf+9zfd5f4sS/ZFg6XVaVF /tq8zkmR+MMrz0LWgDUfVXwsc+sxfqKDPQQEmu7pT6LtR1rwIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOTLFoVcazipklyexRB36gKcfTMfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvODY1ZjUxYTYtM2JlNS0z NzRjLWFhNWUtY2UxNzY2MDg5ODgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDlwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF+fJLPjy6RCIQh84uG/Zh/YaqD07l2PJ0OWuRJW483aPTehNYXEfJCt CI0BjlHp7nf3jGNPbSoDG6hllonbjoQRGYPLOkGgm6Vql6UJ2TNBYdkjxhRrdnR/ 8f0Pwff3GKftinvIgjnuWRsxV+XtPG3+S5c0Spr1W/Ez0P/uMLcJxyAFWtyS3vwC KL+pD9is6DhpyLs6Y9olHYNv81CxHQ8ryI0zNt3CqPw1k+MpsJwaIxCHVo5R6FXe C8xmMaGrfIOLHbUdWVsLZFgbEHci2uy39n9VTj+JUP9oF2CIbRLJQ9ki8/SV1Z8G rWjOJQLBROFM3q/RmGlyy0EYJEAB6qQ= -----END CERTIFICATE-----Generated at Sun Oct 19 20:24:17 2025 by rpki-client