$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a060f5d3-e452-37db-976f-7bd49ad40973.roa File: a060f5d3-e452-37db-976f-7bd49ad40973.roa (raw, json) Hash identifier: OOUSYnzdO2u2nXJwmsAyufMwk7TtfIIijrR4wnbk7B0= Subject key identifier: 99:A3:FE:67:57:C7:B8:86:3E:94:E5:C5:A0:9F:62:07:74:A4:AA:5F Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584B4D11D6CFD7D7ABFC40EE1400 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a060f5d3-e452-37db-976f-7bd49ad40973.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 3356 IP address blocks: 199.228.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:d6:cf:d7:d7:ab:fc:40:ee:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=4aa5c715-eb76-44cb-b728-99035a58ad2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:cc:6f:41:84:9d:10:f8:55:77:30:38:50:1c: 56:4d:7a:57:5e:f3:bc:54:ff:e4:fa:07:82:0d:89: 77:57:92:b8:2f:02:a4:26:02:92:24:b9:46:38:e8: b7:94:11:4e:7a:25:44:cf:5c:ec:eb:2b:b3:90:d9: 2b:4f:67:60:6b:23:bd:4d:fa:66:6a:96:43:b0:db: d9:22:44:c1:08:32:04:cf:67:f7:74:87:e1:39:ad: b6:ed:05:c4:82:f4:fa:77:b0:13:bc:14:c6:e1:f5: 0d:bd:53:5d:ce:87:be:f5:9b:db:21:15:2c:b9:69: b6:76:74:72:6b:fb:c3:05:be:ff:7d:ac:9a:e2:f7: f9:d2:d8:3f:21:d0:ce:2c:9f:0f:d3:1f:93:66:20: 98:61:1f:c6:4e:f8:ad:18:2d:52:39:75:43:6d:2b: 75:b3:b1:c5:d0:9a:9b:ea:de:88:de:49:55:d8:3b: 90:cf:17:51:52:d4:b8:26:9c:e8:99:6d:13:7c:eb: 72:a5:a9:07:f1:c7:c8:43:19:ad:1a:f1:d0:85:6b: 4d:3c:7f:4d:49:29:ed:68:67:00:ab:ea:3a:30:98: 73:91:81:a0:43:1b:91:f8:49:9a:a3:2a:6b:cb:d3: df:ef:87:9e:3e:a0:1f:fc:8d:d8:38:aa:c8:35:7c: 8d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:A3:FE:67:57:C7:B8:86:3E:94:E5:C5:A0:9F:62:07:74:A4:AA:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a060f5d3-e452-37db-976f-7bd49ad40973.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 199.228.190.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:47:b0:c0:c3:27:0c:72:f0:22:91:a1:c8:e5:0c:31:ce:6b: 4b:60:16:e9:c3:d7:71:6c:0b:ad:b9:56:1f:1e:97:24:36:1d: 5c:72:0e:cc:f2:70:24:e6:f3:6c:b8:38:2a:75:6e:f2:b6:fa: a7:15:11:d9:b9:40:d0:e7:cc:b3:86:3c:68:4c:2d:7a:84:f7: 27:ba:86:7f:3e:a9:7f:42:7c:52:24:49:e3:65:0b:8a:fe:d4: 68:de:b8:f9:f8:d7:2a:85:86:c2:e4:f0:3d:06:4c:52:2b:d1: 91:9a:37:6c:38:7e:e6:23:bc:61:71:6f:ae:05:e2:46:75:fa: ad:cc:4c:62:5f:7f:e0:8f:8d:74:fe:da:26:8d:08:fe:2c:52: 1a:b8:f2:09:1b:f4:4b:91:d9:7f:37:6f:f6:36:d6:47:12:1d: dd:60:73:f6:53:e3:cc:d7:b5:a5:f2:c4:cc:e3:02:41:81:54: 44:96:7d:7c:5f:16:f0:d2:0d:bf:da:45:5e:fb:af:cd:05:fb: 03:72:12:12:0c:1b:9e:91:5a:5d:f3:ec:09:c3:80:fb:10:2b: 0d:58:20:11:4f:8c:a9:24:ad:d0:02:b8:eb:be:1a:e0:90:05: 1c:49:8e:dc:6f:5c:46:35:26:2c:18:8b:6a:c3:e1:09:14:7d: b2:c2:20:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNEdbP19er/EDuFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk NGFhNWM3MTUtZWI3Ni00NGNiLWI3MjgtOTkwMzVhNThhZDJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8xvQYSdEPhVdzA4UBxWTXpXXvO8VP/k+geC DYl3V5K4LwKkJgKSJLlGOOi3lBFOeiVEz1zs6yuzkNkrT2dgayO9TfpmapZDsNvZ IkTBCDIEz2f3dIfhOa227QXEgvT6d7ATvBTG4fUNvVNdzoe+9ZvbIRUsuWm2dnRy a/vDBb7/faya4vf50tg/IdDOLJ8P0x+TZiCYYR/GTvitGC1SOXVDbSt1s7HF0Jqb 6t6I3klV2DuQzxdRUtS4JpzomW0TfOtypakH8cfIQxmtGvHQhWtNPH9NSSntaGcA q+o6MJhzkYGgQxuR+Emaoypry9Pf74eePqAf/I3YOKrINXyNgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJmj/mdXx7iGPpTlxaCfYgd0pKpfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYTA2MGY1ZDMtZTQ1Mi0z N2RiLTk3NmYtN2JkNDlhZDQwOTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx+S+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABdHsMDDJwxy8CKRocjlDDHOa0tgFunD13FsC625Vh8elyQ2HVxyDszy cCTm82y4OCp1bvK2+qcVEdm5QNDnzLOGPGhMLXqE9ye6hn8+qX9CfFIkSeNlC4r+ 1GjeuPn41yqFhsLk8D0GTFIr0ZGaN2w4fuYjvGFxb64F4kZ1+q3MTGJff+CPjXT+ 2iaNCP4sUhq48gkb9EuR2X83b/Y21kcSHd1gc/ZT48zXtaXyxMzjAkGBVESWfXxf FvDSDb/aRV77r80F+wNyEhIMG56RWl3z7AnDgPsQKw1YIBFPjKkkrdACuOu+GuCQ BRxJjtxvXEY1JiwYi2rD4QkUfbLCICI= -----END CERTIFICATE-----Generated at Sun Oct 19 20:31:58 2025 by rpki-client