$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/98d85f83-4e00-3430-9a7c-520b0e5fac89.roa File: 98d85f83-4e00-3430-9a7c-520b0e5fac89.roa (raw, json) Hash identifier: dXkOwNRxeNAxwwSyzZJ0NZEvLZDFjB2TQV4Cde6qY4o= Subject key identifier: AD:FF:21:8B:F9:DB:67:F7:D3:71:BB:07:49:F8:48:2F:48:EF:D4:91 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584B5B07400814331597BD92A940 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/98d85f83-4e00-3430-9a7c-520b0e5fac89.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 3356 IP address blocks: 192.57.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:40:08:14:33:15:97:bd:92:a9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=372843d4-e6b2-4e3f-a75c-2dce362cbb0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ef:76:2b:e7:77:b9:94:32:10:22:3a:0d:ff: db:41:12:62:46:7f:6b:49:1b:74:ca:f9:4a:83:cc: 8f:a5:63:10:d2:d1:a9:e9:22:71:65:b9:5f:8b:bc: 80:4c:2b:e0:fa:fa:ef:a1:d2:22:4d:4c:87:c0:4f: bd:7c:14:5e:e8:b9:96:53:6f:08:22:ba:9c:81:55: 90:fe:71:0d:e0:65:58:76:29:6d:06:34:23:f7:28: cf:df:8b:fa:35:92:fb:16:e8:8c:87:c6:22:1b:75: 93:7c:11:bc:ff:88:e8:ab:f6:6a:ef:92:fd:27:67: ff:d8:38:57:58:fe:96:86:1c:46:58:0b:c4:ac:3a: 4f:50:d5:70:21:db:af:46:1e:91:6a:84:d1:48:a1: b0:eb:03:b6:65:77:9e:e6:8c:68:b5:a3:17:5d:aa: eb:7e:c3:89:e9:85:13:2d:80:45:45:82:05:46:55: 48:1c:b3:69:48:75:3d:11:7e:3f:8c:56:64:1b:21: b3:bb:6e:d6:3c:cb:22:49:04:57:01:a7:ce:19:b3: 57:e0:8e:9a:ff:de:26:5e:d0:45:6a:91:f4:e3:94: 25:99:0f:90:7d:f6:62:8e:b1:ab:4e:6d:84:28:72: ce:d3:d8:51:95:82:ef:af:62:d3:4c:b4:79:44:b8: 85:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:FF:21:8B:F9:DB:67:F7:D3:71:BB:07:49:F8:48:2F:48:EF:D4:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/98d85f83-4e00-3430-9a7c-520b0e5fac89.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.57.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:2f:4b:61:7a:0d:ce:d3:f0:7c:ae:cd:5b:f9:bb:ba:17:66: e8:21:ce:84:79:65:82:47:56:cb:bd:1b:b3:a9:45:b2:10:ae: b5:c0:ec:12:9b:c9:86:e8:d8:99:31:32:da:95:e6:76:e0:1c: ed:db:d7:03:bf:be:58:8b:f4:e2:2e:33:c8:ad:75:48:c4:62: a7:75:a7:9d:d6:da:02:3c:6a:66:91:64:92:57:d2:23:d1:8c: 54:61:93:7e:a4:ae:8a:e4:4a:42:91:e2:f7:36:46:e5:fb:b4: 9a:f3:f6:15:fd:5d:c2:f1:74:96:ae:46:e6:dd:62:8b:c8:da: f3:82:31:1d:95:75:44:80:2f:b1:02:0f:45:88:98:39:de:e3: f2:c3:6b:57:15:05:d5:d4:de:dc:48:0c:5b:47:ef:63:eb:71: a6:1e:a2:7a:fd:a4:17:b0:f8:f0:f3:95:f4:41:03:ad:32:13: b5:3c:19:ee:ef:31:4f:3e:9f:67:bf:9e:65:64:e2:1d:dd:3b: 23:69:a0:4d:6e:b4:6a:83:6c:38:4f:34:0f:7c:6e:0c:72:88: 11:1a:7f:b1:2c:a6:12:9a:f1:a3:ef:4c:b7:4a:d8:68:ce:37: 90:b6:7e:ca:00:13:49:52:ea:0b:04:6d:fe:cd:40:6c:a3:65: 58:c1:7a:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB0AIFDMVl72SqUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk MzcyODQzZDQtZTZiMi00ZTNmLWE3NWMtMmRjZTM2MmNiYjBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAku92K+d3uZQyECI6Df/bQRJiRn9rSRt0yvlK g8yPpWMQ0tGp6SJxZblfi7yATCvg+vrvodIiTUyHwE+9fBRe6LmWU28IIrqcgVWQ /nEN4GVYdiltBjQj9yjP34v6NZL7FuiMh8YiG3WTfBG8/4joq/Zq75L9J2f/2DhX WP6WhhxGWAvErDpPUNVwIduvRh6RaoTRSKGw6wO2ZXee5oxotaMXXarrfsOJ6YUT LYBFRYIFRlVIHLNpSHU9EX4/jFZkGyGzu27WPMsiSQRXAafOGbNX4I6a/94mXtBF apH045QlmQ+QffZijrGrTm2EKHLO09hRlYLvr2LTTLR5RLiFSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK3/IYv522f303G7B0n4SC9I79SRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvOThkODVmODMtNGUwMC0z NDMwLTlhN2MtNTIwYjBlNWZhYzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDl1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB8vS2F6Dc7T8HyuzVv5u7oXZughzoR5ZYJHVsu9G7OpRbIQrrXA7BKb yYbo2JkxMtqV5nbgHO3b1wO/vliL9OIuM8itdUjEYqd1p53W2gI8amaRZJJX0iPR jFRhk36krorkSkKR4vc2RuX7tJrz9hX9XcLxdJauRubdYovI2vOCMR2VdUSAL7EC D0WImDne4/LDa1cVBdXU3txIDFtH72PrcaYeonr9pBew+PDzlfRBA60yE7U8Ge7v MU8+n2e/nmVk4h3dOyNpoE1utGqDbDhPNA98bgxyiBEaf7EsphKa8aPvTLdK2GjO N5C2fsoAE0lS6gsEbf7NQGyjZVjBek8= -----END CERTIFICATE-----Generated at Sun Oct 19 20:53:55 2025 by rpki-client