$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/891e530d-44f1-3c62-bce7-54770e9c3e8c.roa File: 891e530d-44f1-3c62-bce7-54770e9c3e8c.roa (raw, json) Hash identifier: zSEzd8/xeZbqva9+8Nd/nmLgd8IndFQSMvMsY7ShsIA= Subject key identifier: 40:58:BA:37:72:1E:BE:19:52:C9:AE:1F:0F:63:54:74:47:D6:07:F8 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584AEE1650FAB2DA21EA43910500 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/891e530d-44f1-3c62-bce7-54770e9c3e8c.roa Signing time: Thu 21 Aug 2025 12:28:07 +0000 ROA not before: Thu 21 Aug 2025 12:28:07 +0000 ROA not after: Wed 19 Nov 2025 13:28:07 +0000 asID: 3360 IP address blocks: 206.164.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:16:50:fa:b2:da:21:ea:43:91:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 21 12:28:07 2025 GMT Not After : Nov 19 13:28:07 2025 GMT Subject: CN=543eed2b-c8cc-4609-a5c4-cb9e037a54ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e7:7d:a7:28:77:e1:71:32:a1:25:ed:bf:c3: c5:cd:1d:08:41:b3:e1:84:06:15:cf:3e:ec:cc:04: d4:76:a3:1c:05:a6:79:89:fb:41:a0:2f:0e:ba:e5: 06:97:00:6f:cc:e9:e6:eb:15:d6:24:16:83:99:ec: 15:54:0e:e7:7c:ae:c5:e1:4b:70:76:1b:57:d0:20: db:6a:35:85:3b:74:76:cf:81:c8:2d:f7:0a:71:d9: 5c:c6:20:7e:6a:74:24:88:d8:ad:fa:6d:54:ae:a4: 72:64:b4:1c:dd:cb:a8:ff:05:49:a4:2a:31:eb:12: 04:2e:47:2a:f9:dc:d1:37:3b:89:bf:52:35:25:61: 54:56:d6:f6:b1:84:0c:9f:5c:8b:a8:82:f8:08:b6: 25:80:f2:e9:0d:e9:10:48:5b:a0:40:22:27:1b:73: 21:22:36:fd:47:3a:1b:95:77:dd:1c:40:9e:0d:f7: c5:74:fe:81:a0:70:eb:30:6e:e6:17:ac:9e:fd:0b: 1e:cc:d9:df:ab:e2:5a:97:bd:7a:76:79:08:37:d8: 52:c6:d8:b2:ce:28:9f:c9:49:bd:fc:7f:93:7d:a0: 4c:b8:be:23:a1:a7:f2:93:07:f5:69:e8:4e:57:84: fe:74:73:29:af:0a:9c:34:d7:77:2b:f0:c8:20:b9: 18:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:58:BA:37:72:1E:BE:19:52:C9:AE:1F:0F:63:54:74:47:D6:07:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/891e530d-44f1-3c62-bce7-54770e9c3e8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 206.164.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:b4:38:cf:19:44:02:20:53:af:c6:7a:f1:47:15:d1:81:ae: e3:2e:7c:a8:6e:7e:d9:d9:d9:c6:c6:bc:25:cc:ee:08:9e:8b: 4b:75:d8:f7:e3:94:6f:8f:09:27:9e:66:ea:5f:e6:d7:3c:1d: f0:ab:83:fb:59:95:e4:85:9b:e7:f2:a6:04:d7:28:17:9b:81: af:6c:88:fd:6f:23:90:28:06:36:a2:0d:9c:2a:c5:cc:c0:8d: 4c:d7:98:18:5c:af:03:34:c1:60:0c:49:ac:be:ab:00:a2:68: 62:c7:0e:83:ac:eb:1b:a3:83:95:66:4c:31:3d:c6:ad:29:55: 59:90:7a:3d:aa:a1:35:6f:bc:04:75:ea:0f:97:5c:bc:d5:b4: c1:7a:17:48:4e:21:c0:cc:1a:b8:e6:e0:32:d8:52:4e:cf:15: 30:6b:90:5d:bc:dc:7f:bd:c9:e2:20:ff:21:ea:d0:a1:fd:cc: 4c:5f:ab:56:21:55:d8:e3:92:35:16:02:a9:b4:c7:ab:0f:86: f7:b3:d1:af:6c:e1:e5:a2:b2:97:d2:97:0e:5c:dd:5a:6a:7e: 42:60:30:49:1f:33:a1:78:8c:04:32:91:5b:2f:eb:9a:e5:0f: 60:1f:9a:34:31:a2:24:70:95:8f:e2:32:1a:08:a6:c9:1a:8d: 6b:76:6e:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEruFlD6stoh6kORBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDgyMTEyMjgwN1oXDTI1MTExOTEzMjgwN1owLzEtMCsGA1UEAxMk NTQzZWVkMmItYzhjYy00NjA5LWE1YzQtY2I5ZTAzN2E1NGFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ud9pyh34XEyoSXtv8PFzR0IQbPhhAYVzz7s zATUdqMcBaZ5iftBoC8OuuUGlwBvzOnm6xXWJBaDmewVVA7nfK7F4UtwdhtX0CDb ajWFO3R2z4HILfcKcdlcxiB+anQkiNit+m1UrqRyZLQc3cuo/wVJpCox6xIELkcq +dzRNzuJv1I1JWFUVtb2sYQMn1yLqIL4CLYlgPLpDekQSFugQCInG3MhIjb9Rzob lXfdHECeDffFdP6BoHDrMG7mF6ye/QsezNnfq+Jal716dnkIN9hSxtiyziifyUm9 /H+TfaBMuL4joafykwf1aehOV4T+dHMprwqcNNd3K/DIILkYpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEBYujdyHr4ZUsmuHw9jVHRH1gf4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvODkxZTUzMGQtNDRmMS0z YzYyLWJjZTctNTQ3NzBlOWMzZThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqSJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+0OM8ZRAIgU6/GevFHFdGBruMufKhuftnZ2cbGvCXM7giei0t12Pfj lG+PCSeeZupf5tc8HfCrg/tZleSFm+fypgTXKBebga9siP1vI5AoBjaiDZwqxczA jUzXmBhcrwM0wWAMSay+qwCiaGLHDoOs6xujg5VmTDE9xq0pVVmQej2qoTVvvAR1 6g+XXLzVtMF6F0hOIcDMGrjm4DLYUk7PFTBrkF283H+9yeIg/yHq0KH9zExfq1Yh VdjjkjUWAqm0x6sPhvez0a9s4eWispfSlw5c3VpqfkJgMEkfM6F4jAQykVsv65rl D2AfmjQxoiRwlY/iMhoIpskajWt2bg4= -----END CERTIFICATE-----Generated at Sat Aug 23 18:14:18 2025 by rpki-client