$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/941c338c-213e-3e51-9330-4013ab937b53.roa File: 941c338c-213e-3e51-9330-4013ab937b53.roa (raw, json) Hash identifier: coZxyrnkl4cF3QihWgJyvXZrL6FdmfqFQ3DU2B0IuFo= Subject key identifier: 3A:28:CE:FC:94:1F:C9:D2:E4:89:5B:B2:6C:87:83:20:4A:48:CB:5F Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584B5B07401DCB61BEC8FE20E580 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/941c338c-213e-3e51-9330-4013ab937b53.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 202 IP address blocks: 192.57.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:40:1d:cb:61:be:c8:fe:20:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=8740b1c6-40d1-49cd-b40f-76c909e6a1d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:67:9f:00:a9:b9:29:65:19:fe:ac:8e:d5:ed: a3:13:53:81:67:f1:9d:c1:d9:ff:76:02:fe:de:cf: 46:48:19:7d:c4:f5:70:79:39:a0:3f:9a:4f:31:d0: 75:a2:ed:b2:4a:ce:41:7d:09:a9:6d:e3:32:1f:20: f8:b1:d2:7b:27:67:18:b8:af:37:36:a5:93:2c:5d: 54:f2:9a:db:ea:17:77:2c:43:d1:e1:94:d0:34:f7: d9:27:21:3a:15:6c:c7:1f:37:15:8b:33:93:04:71: 7d:6b:22:21:c6:52:9d:68:06:b7:b8:11:23:be:19: cd:b5:bf:18:98:57:a7:4a:5c:1e:4d:e0:4b:aa:11: 26:b5:d3:93:9f:48:d0:e9:bf:d9:0f:08:d7:46:2a: 5e:ec:28:e0:57:73:79:3d:5d:a3:6c:d0:fa:55:39: 67:54:6e:37:ac:44:b7:3d:f4:4d:8d:68:b0:8f:fb: ba:17:8d:bc:df:dc:62:ee:eb:78:b2:ee:89:21:26: ab:40:85:f3:6c:4e:0c:bc:94:06:7f:21:49:b9:2a: 0f:87:ef:87:a2:84:e6:b7:aa:37:05:7d:89:02:27: 43:a0:59:ef:60:26:b9:19:39:1e:f8:aa:f0:e6:df: 7b:b0:70:d0:3b:99:d2:7e:70:21:7c:fb:c0:9c:97: f4:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:28:CE:FC:94:1F:C9:D2:E4:89:5B:B2:6C:87:83:20:4A:48:CB:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/941c338c-213e-3e51-9330-4013ab937b53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.57.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:ae:a2:1b:85:46:c6:00:7b:59:84:26:b8:c4:66:18:0b:3d: 0b:70:13:a5:1c:3e:d7:6b:36:51:eb:6a:d9:20:6f:7f:e3:eb: f1:ac:46:00:0a:eb:bb:a9:75:83:c6:67:f7:d4:79:3f:e0:40: 57:2d:55:29:17:52:98:e7:5b:05:1c:6c:d7:ef:f9:63:1a:fc: 39:c0:85:b2:6a:20:35:47:3d:3a:12:03:53:de:f8:ff:a6:9a: 1b:1d:0d:33:84:5b:e8:35:dc:63:d1:f9:1f:b1:3d:b8:6d:06: 44:9e:02:68:ef:04:ce:88:35:de:43:4b:0d:d1:e5:35:f5:83: 35:7f:29:db:a7:0e:0d:06:05:a6:f6:64:83:02:55:cd:5d:f1: 35:5f:4c:b9:82:0a:cb:21:4b:cf:3a:60:87:31:72:46:25:31: 94:6d:88:6b:fe:fb:ed:a8:8c:4b:eb:b4:d7:0f:6f:01:4e:1d: 7d:07:c9:25:f9:86:28:f5:4a:cb:31:e7:47:7e:c7:74:d2:6f: be:ba:50:61:6a:8b:90:d6:f2:b5:eb:db:9b:dd:50:2e:7e:53: dd:b3:4e:e3:b8:65:7f:28:10:75:1f:1b:32:f3:7c:cd:50:a2: 58:1a:15:65:1a:8e:3e:a8:2f:a4:e8:3a:ee:4f:68:25:dc:bb: 2a:21:23:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB0Ady2G+yP4g5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk ODc0MGIxYzYtNDBkMS00OWNkLWI0MGYtNzZjOTA5ZTZhMWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mefAKm5KWUZ/qyO1e2jE1OBZ/Gdwdn/dgL+ 3s9GSBl9xPVweTmgP5pPMdB1ou2ySs5BfQmpbeMyHyD4sdJ7J2cYuK83NqWTLF1U 8prb6hd3LEPR4ZTQNPfZJyE6FWzHHzcVizOTBHF9ayIhxlKdaAa3uBEjvhnNtb8Y mFenSlweTeBLqhEmtdOTn0jQ6b/ZDwjXRipe7CjgV3N5PV2jbND6VTlnVG43rES3 PfRNjWiwj/u6F42839xi7ut4su6JISarQIXzbE4MvJQGfyFJuSoPh++HooTmt6o3 BX2JAidDoFnvYCa5GTke+Krw5t97sHDQO5nSfnAhfPvAnJf0fwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDoozvyUH8nS5IlbsmyHgyBKSMtfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvOTQxYzMzOGMtMjEzZS0z ZTUxLTkzMzAtNDAxM2FiOTM3YjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDl1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABKuohuFRsYAe1mEJrjEZhgLPQtwE6UcPtdrNlHratkgb3/j6/GsRgAK 67updYPGZ/fUeT/gQFctVSkXUpjnWwUcbNfv+WMa/DnAhbJqIDVHPToSA1Pe+P+m mhsdDTOEW+g13GPR+R+xPbhtBkSeAmjvBM6INd5DSw3R5TX1gzV/KdunDg0GBab2 ZIMCVc1d8TVfTLmCCsshS886YIcxckYlMZRtiGv+++2ojEvrtNcPbwFOHX0HySX5 hij1Sssx50d+x3TSb766UGFqi5DW8rXr25vdUC5+U92zTuO4ZX8oEHUfGzLzfM1Q olgaFWUajj6oL6ToOu5PaCXcuyohIzQ= -----END CERTIFICATE-----Generated at Sun Oct 19 20:45:13 2025 by rpki-client