$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a80aaa9e-0703-342f-b8c4-55c127b26fac.roa File: a80aaa9e-0703-342f-b8c4-55c127b26fac.roa (raw, json) Hash identifier: ImtzCdJAKAUyjTQa1RdKqU+wPh2fPaxf1a411U8hUIY= Subject key identifier: 88:2F:1E:F3:1A:98:34:A9:D6:6B:50:42:09:E8:79:01:D8:58:B5:80 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584B5B0740D7321DE0E322358B00 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a80aaa9e-0703-342f-b8c4-55c127b26fac.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 3356 IP address blocks: 192.57.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:40:d7:32:1d:e0:e3:22:35:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=cbbfd91d-3a01-4309-a1dd-e253378e4edd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:32:a8:a4:c0:0e:fa:8f:4c:8f:47:68:d2:6d: 04:a8:d8:46:b7:c8:f9:cb:83:90:96:b1:a7:ee:3c: 6d:66:a0:f0:55:29:bb:50:71:99:3d:94:48:cd:2f: 1a:cd:e1:4f:69:5b:9b:5c:b6:c8:38:e1:12:a2:eb: 03:6c:b5:e6:17:a8:26:40:ca:e3:4c:f9:76:83:0a: e5:5f:e9:5d:96:b2:99:da:cc:ea:3e:c4:e0:61:a1: 4a:a7:be:94:a8:e6:8d:85:57:18:d8:23:b4:98:ef: e3:16:33:15:75:cc:d7:c2:a2:ee:ab:0f:b6:bd:5b: f3:3a:7b:20:b5:4d:30:c4:03:34:77:7a:b4:92:ac: b9:7c:11:0c:78:d4:04:f6:a0:c3:b3:7f:e5:0d:8a: 3d:bc:50:cb:6a:ba:ea:3e:7d:81:2c:0b:f8:3c:e4: 64:f9:e9:02:61:47:e7:08:73:52:51:ca:d6:2c:09: b1:ee:bb:a1:a2:9b:89:6a:7a:c5:0e:07:ae:7b:7e: f7:2d:a0:e7:c1:94:41:41:82:37:82:8d:08:98:e2: 52:57:f5:73:b3:41:14:55:ed:55:e1:14:de:c3:1d: eb:b5:2b:66:ed:73:62:20:56:d4:f1:f4:0f:f0:99: fe:2c:31:16:97:63:37:cf:e8:cd:c2:51:f1:ea:40: 29:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:2F:1E:F3:1A:98:34:A9:D6:6B:50:42:09:E8:79:01:D8:58:B5:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a80aaa9e-0703-342f-b8c4-55c127b26fac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.57.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:9f:13:0e:39:32:0d:ca:0c:d2:96:fa:3f:ba:b0:8e:b6:6c: ab:8b:ef:f5:d4:38:21:3b:e2:8b:5f:21:9d:37:7d:50:44:47: 9e:22:c4:01:77:88:32:51:9c:77:ec:2d:45:7e:d5:39:a9:09: f5:70:4d:eb:f8:9f:2f:87:f5:cf:d8:5b:a9:33:e7:d7:36:a1: 64:9f:30:94:85:3a:65:68:eb:72:f9:33:3c:4d:7d:86:bb:0b: c1:8b:74:8c:d0:21:15:b6:a8:5a:77:c1:1c:8b:99:60:4f:ce: ba:e3:08:f6:98:89:5e:3d:78:6b:a6:bb:a5:c8:99:05:ef:59: 55:3a:7e:74:af:f0:88:43:41:2f:81:a5:13:37:5a:6b:d2:98: 66:d2:7d:26:db:66:ef:f1:62:3f:07:e1:05:5d:a0:1e:c5:ba: 79:be:8c:e6:68:50:61:52:7f:b8:67:37:8b:e2:65:bf:61:ec: e5:26:45:69:9a:c3:49:6a:50:b6:3e:cc:c0:f1:30:23:bc:ea: bc:02:4d:ff:e8:1c:4d:50:c5:39:66:77:e6:90:38:99:3e:b2: a4:48:b0:0e:49:7a:e3:1d:f5:e6:b2:dd:74:fd:8a:90:33:9e: f1:0b:12:67:42:4e:56:03:1a:ba:a2:0e:3d:3e:58:d9:a7:5c: 4d:2b:93:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB0DXMh3g4yI1iwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk Y2JiZmQ5MWQtM2EwMS00MzA5LWExZGQtZTI1MzM3OGU0ZWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTKopMAO+o9Mj0do0m0EqNhGt8j5y4OQlrGn 7jxtZqDwVSm7UHGZPZRIzS8azeFPaVubXLbIOOESousDbLXmF6gmQMrjTPl2gwrl X+ldlrKZ2szqPsTgYaFKp76UqOaNhVcY2CO0mO/jFjMVdczXwqLuqw+2vVvzOnsg tU0wxAM0d3q0kqy5fBEMeNQE9qDDs3/lDYo9vFDLarrqPn2BLAv4PORk+ekCYUfn CHNSUcrWLAmx7ruhopuJanrFDgeue373LaDnwZRBQYI3go0ImOJSV/Vzs0EUVe1V 4RTewx3rtStm7XNiIFbU8fQP8Jn+LDEWl2M3z+jNwlHx6kAplwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIgvHvMamDSp1mtQQgnoeQHYWLWAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYTgwYWFhOWUtMDcwMy0z NDJmLWI4YzQtNTVjMTI3YjI2ZmFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDlxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD2fEw45Mg3KDNKW+j+6sI62bKuL7/XUOCE74otfIZ03fVBER54ixAF3 iDJRnHfsLUV+1TmpCfVwTev4ny+H9c/YW6kz59c2oWSfMJSFOmVo63L5MzxNfYa7 C8GLdIzQIRW2qFp3wRyLmWBPzrrjCPaYiV49eGumu6XImQXvWVU6fnSv8IhDQS+B pRM3WmvSmGbSfSbbZu/xYj8H4QVdoB7Funm+jOZoUGFSf7hnN4viZb9h7OUmRWma w0lqULY+zMDxMCO86rwCTf/oHE1QxTlmd+aQOJk+sqRIsA5JeuMd9eay3XT9ipAz nvELEmdCTlYDGrqiDj0+WNmnXE0rk1g= -----END CERTIFICATE-----Generated at Mon Oct 20 02:15:08 2025 by rpki-client