$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8c0f078c-4368-32ae-9fee-746a96a146ba.roa File: 8c0f078c-4368-32ae-9fee-746a96a146ba.roa (raw, json) Hash identifier: KfFC6EAv5TO8VMjVHPxY6HgSKU21AltWT9DLmdJP5Io= Subject key identifier: F4:82:5C:0B:FC:1E:79:5F:8B:95:4E:B7:23:63:1D:26:21:07:60:42 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584B5B073FF0CDC4F977D0E4D700 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8c0f078c-4368-32ae-9fee-746a96a146ba.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 3360 IP address blocks: 192.57.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:3f:f0:cd:c4:f9:77:d0:e4:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=1ae3a85b-4149-44c7-94e9-364428e39f32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d6:e2:71:62:71:3e:0e:88:b6:e1:3e:15:44: 69:8c:32:11:73:56:05:ad:56:ce:a9:6c:cd:89:9b: e6:79:fb:80:16:a9:95:4d:b9:4f:51:ab:08:fe:91: 7a:e8:da:29:46:b6:00:0f:e0:9c:3d:69:66:06:25: aa:68:29:22:e2:02:ee:ee:23:cf:1a:42:83:ba:ea: 00:36:8f:fe:9c:c3:7c:ea:66:ad:bc:e7:34:da:a7: 24:aa:00:dd:8e:90:fd:de:55:b0:02:77:5a:f9:0e: 43:6d:2b:d6:cd:56:13:17:12:b4:74:50:e3:07:34: af:19:e8:d1:e7:10:b7:07:02:80:13:6d:a2:b3:62: b6:44:9b:0e:82:26:c9:92:ff:15:65:ad:06:b5:94: f6:e6:d6:87:bc:6b:3d:d3:0f:c5:7a:d4:7b:6d:02: fd:ca:84:d9:5b:f2:be:63:00:ed:25:b4:46:a9:28: b3:ce:f9:e7:24:29:93:29:44:f3:d3:15:7a:d1:09: 73:ce:f2:56:22:bc:da:ab:90:1d:2a:fb:e1:e9:12: 06:8c:fa:37:f3:f6:3d:1b:bd:18:2e:8c:fb:a1:58: 5b:6c:78:32:a6:9d:f4:7a:1f:9d:8d:a1:03:9b:ca: 8c:47:03:d5:8d:bd:97:d6:50:8d:79:9f:27:30:bd: 0c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:82:5C:0B:FC:1E:79:5F:8B:95:4E:B7:23:63:1D:26:21:07:60:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8c0f078c-4368-32ae-9fee-746a96a146ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.57.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:81:69:d3:3c:54:e7:4c:38:5c:b2:6b:1b:e9:ed:71:04:17: 47:9c:a8:3b:5f:fb:77:be:04:9d:f4:60:1e:c1:7a:6a:fe:a1: cb:bd:6f:9f:88:df:0f:6b:71:cd:74:fa:74:cb:0b:2f:1f:78: df:be:8f:9e:4a:ef:fe:07:27:4a:61:2b:a9:c9:39:75:ea:25: bf:17:c1:d2:02:40:39:7d:36:11:68:6b:9e:d0:43:d7:fc:e9: 3f:59:93:45:9f:27:30:25:e6:c5:5f:41:10:77:2c:cf:70:65: 55:24:0b:99:a0:04:92:89:ff:2a:a8:12:f1:12:55:7d:23:d2: 8f:33:b0:be:72:a5:61:de:60:8d:0d:02:df:e2:fd:0d:2a:7b: 33:1e:94:73:84:29:ba:76:43:6f:3a:a9:e8:19:f1:a2:e6:6e: ea:6c:f6:99:48:7b:4e:76:c8:48:86:f6:c1:f6:2d:ed:1e:1b: ec:2b:d1:02:c7:78:75:c6:7b:87:90:aa:3d:c4:c2:d2:a3:28: 7f:bc:6d:6d:0d:e0:76:b2:4f:e7:3e:cf:00:2f:9a:54:a2:23: a6:ae:32:5e:d9:d0:6e:ea:7c:b4:ef:fa:af:c0:a6:08:ab:3e: 1e:1b:3d:6a:ce:de:da:a9:6f:ce:68:3c:39:8e:35:ce:29:e3: 1e:5d:f8:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbBz/wzcT5d9Dk1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk MWFlM2E4NWItNDE0OS00NGM3LTk0ZTktMzY0NDI4ZTM5ZjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9bicWJxPg6ItuE+FURpjDIRc1YFrVbOqWzN iZvmefuAFqmVTblPUasI/pF66NopRrYAD+CcPWlmBiWqaCki4gLu7iPPGkKDuuoA No/+nMN86matvOc02qckqgDdjpD93lWwAnda+Q5DbSvWzVYTFxK0dFDjBzSvGejR 5xC3BwKAE22is2K2RJsOgibJkv8VZa0GtZT25taHvGs90w/FetR7bQL9yoTZW/K+ YwDtJbRGqSizzvnnJCmTKUTz0xV60QlzzvJWIrzaq5AdKvvh6RIGjPo38/Y9G70Y Loz7oVhbbHgypp30eh+djaEDm8qMRwPVjb2X1lCNeZ8nML0M8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPSCXAv8Hnlfi5VOtyNjHSYhB2BCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvOGMwZjA3OGMtNDM2OC0z MmFlLTlmZWUtNzQ2YTk2YTE0NmJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDl1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFyBadM8VOdMOFyyaxvp7XEEF0ecqDtf+3e+BJ30YB7Bemr+ocu9b5+I 3w9rcc10+nTLCy8feN++j55K7/4HJ0phK6nJOXXqJb8XwdICQDl9NhFoa57QQ9f8 6T9Zk0WfJzAl5sVfQRB3LM9wZVUkC5mgBJKJ/yqoEvESVX0j0o8zsL5ypWHeYI0N At/i/Q0qezMelHOEKbp2Q286qegZ8aLmbups9plIe052yEiG9sH2Le0eG+wr0QLH eHXGe4eQqj3EwtKjKH+8bW0N4HayT+c+zwAvmlSiI6auMl7Z0G7qfLTv+q/Apgir Ph4bPWrO3tqpb85oPDmONc4p4x5d+OE= -----END CERTIFICATE-----Generated at Sun Oct 19 20:43:20 2025 by rpki-client