$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a138f2ed-6160-3698-8b3c-5f44e59b68ad.roa File: a138f2ed-6160-3698-8b3c-5f44e59b68ad.roa (raw, json) Hash identifier: K/yxGElnblsx30kY6Z5ucKnsLVFg6Xu2ey3qKcAsckQ= Subject key identifier: 8F:0D:25:A9:AD:92:D5:EB:C6:86:B1:4E:F0:2A:5A:3B:1A:BF:5D:D2 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584B59A1C98C538308C74D7A6480 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a138f2ed-6160-3698-8b3c-5f44e59b68ad.roa Signing time: Mon 29 Sep 2025 01:00:33 +0000 ROA not before: Mon 29 Sep 2025 01:00:33 +0000 ROA not after: Sun 28 Dec 2025 02:00:33 +0000 asID: 3360 IP address blocks: 192.57.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:59:a1:c9:8c:53:83:08:c7:4d:7a:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 29 01:00:33 2025 GMT Not After : Dec 28 02:00:33 2025 GMT Subject: CN=6ec4dca9-f2c5-4fde-847c-9109c8aeaeb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c7:56:e4:98:b7:39:33:b2:1a:44:d3:d3:42: 0b:32:ce:9a:8f:0e:d8:26:7d:6d:f4:ba:ed:c8:cd: bb:e7:52:c7:36:94:df:e6:48:b2:3c:12:26:9a:64: e3:d8:92:6b:ac:ad:a5:9b:a2:65:45:84:fc:95:2c: aa:e8:a2:f3:a3:f9:f3:df:e9:9e:a0:13:4f:d6:22: bb:7e:e1:15:29:53:c7:4d:e8:ca:76:01:48:f2:7d: 42:e1:fa:19:54:f0:24:a7:06:6b:55:82:8b:92:00: e2:d3:7f:49:35:0a:a0:48:2c:e5:fe:8a:0a:2f:c3: c5:13:4f:d0:1b:08:02:f3:02:ec:6a:c9:8f:ae:7f: 8c:5f:1e:4e:6c:7b:da:87:9d:58:eb:8d:f6:3e:20: 17:f5:bb:f5:81:4d:63:c8:84:7f:c1:e4:60:5a:f1: d6:0e:77:8e:bb:47:fc:4f:5e:8e:37:fd:06:23:c8: a8:69:1c:13:5d:c1:a4:c5:27:e3:34:ad:84:2f:d4: 87:dd:2a:e4:61:0d:86:98:bc:72:7d:b7:a3:81:4f: 3d:f0:df:19:56:88:35:72:29:58:30:a1:2f:fe:4d: 9e:77:52:65:da:be:24:d6:c5:18:92:30:7d:76:f3: 24:8a:b8:cf:d1:76:2a:22:bf:21:c1:da:e5:2c:8e: ba:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:0D:25:A9:AD:92:D5:EB:C6:86:B1:4E:F0:2A:5A:3B:1A:BF:5D:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a138f2ed-6160-3698-8b3c-5f44e59b68ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.57.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:90:94:71:89:1f:60:30:90:f2:22:bd:77:7e:0d:7a:da:a8: 06:58:36:c1:7a:25:60:8b:6e:55:ce:cc:dd:03:34:78:ff:c0: 88:53:49:df:3c:70:c1:17:0e:3f:c4:09:0c:29:16:1a:f5:b4: 8c:1a:03:e5:f2:a7:77:41:c3:81:d8:88:eb:71:f6:25:93:71: a4:70:8a:da:8e:21:a3:31:01:00:56:28:3e:9f:dd:e7:57:40: 24:0f:4e:ae:2d:10:6a:6e:c2:00:63:49:07:2b:99:df:16:22: ea:14:44:ef:d0:95:2f:4b:88:4d:dd:13:b5:30:ed:12:7a:66: 1a:ed:e6:a6:25:08:a1:bc:15:0e:9a:c9:61:9e:fb:83:c6:86: da:12:fb:2b:0b:c4:fb:b1:83:25:6f:7b:99:65:93:31:0c:ed: b7:f6:65:38:0e:24:2d:a2:95:42:86:09:63:10:c4:8e:23:55: 6f:c6:10:4a:b7:c5:ec:ca:9e:2a:54:43:bb:db:00:0e:c8:47: 57:ee:94:52:25:fe:cd:61:7a:6e:a4:2f:de:49:e5:d1:ba:ab: 15:eb:14:3b:bd:42:ba:a5:b7:4f:87:e1:7c:d7:31:5b:bd:dc: 54:39:20:9f:0a:74:a4:7e:78:be:12:f9:e8:c5:3c:6d:70:f7: b2:2c:d5:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtZocmMU4MIx016ZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDkyOTAxMDAzM1oXDTI1MTIyODAyMDAzM1owLzEtMCsGA1UEAxMk NmVjNGRjYTktZjJjNS00ZmRlLTg0N2MtOTEwOWM4YWVhZWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMdW5Ji3OTOyGkTT00ILMs6ajw7YJn1t9Lrt yM2751LHNpTf5kiyPBImmmTj2JJrrK2lm6JlRYT8lSyq6KLzo/nz3+meoBNP1iK7 fuEVKVPHTejKdgFI8n1C4foZVPAkpwZrVYKLkgDi039JNQqgSCzl/ooKL8PFE0/Q GwgC8wLsasmPrn+MXx5ObHvah51Y6432PiAX9bv1gU1jyIR/weRgWvHWDneOu0f8 T16ON/0GI8ioaRwTXcGkxSfjNK2EL9SH3SrkYQ2GmLxyfbejgU898N8ZVog1cilY MKEv/k2ed1Jl2r4k1sUYkjB9dvMkirjP0XYqIr8hwdrlLI66GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI8NJamtktXrxoaxTvAqWjsav13SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYTEzOGYyZWQtNjE2MC0z Njk4LThiM2MtNWY0NGU1OWI2OGFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDlwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABqQlHGJH2AwkPIivXd+DXraqAZYNsF6JWCLblXOzN0DNHj/wIhTSd88 cMEXDj/ECQwpFhr1tIwaA+Xyp3dBw4HYiOtx9iWTcaRwitqOIaMxAQBWKD6f3edX QCQPTq4tEGpuwgBjSQcrmd8WIuoURO/QlS9LiE3dE7Uw7RJ6Zhrt5qYlCKG8FQ6a yWGe+4PGhtoS+ysLxPuxgyVve5llkzEM7bf2ZTgOJC2ilUKGCWMQxI4jVW/GEEq3 xezKnipUQ7vbAA7IR1fulFIl/s1hem6kL95J5dG6qxXrFDu9Qrqlt0+H4XzXMVu9 3FQ5IJ8KdKR+eL4S+ejFPG1w97Is1eg= -----END CERTIFICATE-----Generated at Mon Oct 20 05:05:03 2025 by rpki-client