$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a844ba0a-de07-3d00-929b-175519f5e67c.roa File: a844ba0a-de07-3d00-929b-175519f5e67c.roa (raw, json) Hash identifier: NlezttIhmmOI7Ger/XtVRSv1VVn80KeRwHW48r0W3qk= Subject key identifier: 5E:28:B0:11:6F:FD:D6:7B:D8:9B:56:BE:70:1C:3D:05:37:E2:FE:83 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584AD23BD8E575D3C41DB718D400 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a844ba0a-de07-3d00-929b-175519f5e67c.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 203 IP address blocks: 205.191.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:d8:e5:75:d3:c4:1d:b7:18:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=04da16c8-4ea9-4581-81d3-e83da2f7f30d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:5e:71:0c:e5:3f:b0:ed:fc:15:da:d9:6b:f0: 9d:1e:51:91:89:9d:7b:b9:b3:76:bf:30:2c:8b:3d: 3b:c8:8c:ec:fd:f2:bd:f1:d5:41:d2:6f:c6:93:f4: 31:4d:c7:a8:a4:77:60:7c:60:1a:85:71:f0:32:98: a7:49:33:58:3f:86:5c:7c:1a:07:c9:c5:48:62:2e: 49:9f:e5:a9:51:8b:4a:7f:31:c4:b8:96:59:44:79: 8a:2a:91:1f:36:82:ca:76:31:8a:6e:ef:1f:a5:88: 71:bd:76:7a:5f:9c:6d:1b:fb:e8:83:23:2d:c9:7b: 51:82:a3:60:93:67:89:a7:18:36:f7:e4:01:59:4d: 13:b5:51:71:0c:f7:98:5e:3d:d2:89:14:54:14:5c: 12:ec:e2:6e:ec:c3:24:8d:2f:07:4e:73:e1:53:d2: b9:cd:1f:fb:a5:e1:11:b1:ef:e3:ff:ee:9e:8b:9d: 20:33:cb:18:c6:66:2c:84:4e:99:64:65:81:9f:cc: 83:75:ad:a4:97:13:64:f2:b4:1b:41:5c:cd:b8:03: a4:a9:a8:69:e1:53:db:a3:a4:64:cc:66:a9:f8:62: 71:19:76:86:dd:56:3d:f1:11:ee:ea:45:9a:c9:69: 11:66:64:b0:89:8a:06:fb:f4:e9:00:e4:b5:25:17: fc:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:28:B0:11:6F:FD:D6:7B:D8:9B:56:BE:70:1C:3D:05:37:E2:FE:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a844ba0a-de07-3d00-929b-175519f5e67c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 205.191.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:0c:8e:a0:9b:09:7a:9b:e0:65:ea:1f:4b:27:10:c9:1e:29: 69:90:03:3c:4e:24:2d:9c:14:a9:ee:63:c1:a0:4f:e7:e1:fd: 97:c9:c7:9f:b6:60:95:b7:69:61:b4:a5:a7:76:bf:6f:0d:d1: c7:ae:14:f3:51:74:71:65:73:82:42:61:90:91:2f:de:d8:3a: ff:98:76:10:e4:aa:59:40:ac:95:60:08:5a:31:f3:bb:84:9a: 89:69:7f:ca:0a:5f:a9:71:ef:7c:cd:98:f3:36:d9:59:cf:9b: a2:78:8a:71:f3:31:25:b0:4c:68:b0:39:01:49:de:99:bc:7c: cb:33:25:3b:c4:6c:18:b9:a1:69:3c:31:eb:48:49:06:03:a1: 47:6e:cb:2d:15:b0:67:af:48:ef:49:26:4f:69:cb:a3:d7:f0: 34:d9:d8:d1:06:71:03:0b:13:fa:c4:a3:5f:e9:9a:da:b4:3d: 61:75:de:0b:75:9e:67:0d:e6:19:5d:cf:85:99:6e:f3:a2:c6: d7:67:ac:31:ec:ef:22:36:5c:0d:63:4d:a5:18:bc:8e:ed:5d: 5d:07:34:e8:f2:dd:99:08:36:5f:fe:e7:84:17:c1:85:85:06: 18:99:10:23:a7:07:15:4c:23:ba:60:e4:4a:7c:4e:84:27:89: c1:2e:e9:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO9jlddPEHbcY1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk MDRkYTE2YzgtNGVhOS00NTgxLTgxZDMtZTgzZGEyZjdmMzBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlF5xDOU/sO38FdrZa/CdHlGRiZ17ubN2vzAs iz07yIzs/fK98dVB0m/Gk/QxTceopHdgfGAahXHwMpinSTNYP4ZcfBoHycVIYi5J n+WpUYtKfzHEuJZZRHmKKpEfNoLKdjGKbu8fpYhxvXZ6X5xtG/vogyMtyXtRgqNg k2eJpxg29+QBWU0TtVFxDPeYXj3SiRRUFFwS7OJu7MMkjS8HTnPhU9K5zR/7peER se/j/+6ei50gM8sYxmYshE6ZZGWBn8yDda2klxNk8rQbQVzNuAOkqahp4VPbo6Rk zGap+GJxGXaG3VY98RHu6kWayWkRZmSwiYoG+/TpAOS1JRf87wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF4osBFv/dZ72JtWvnAcPQU34v6DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYTg0NGJhMGEtZGUwNy0z ZDAwLTkyOWItMTc1NTE5ZjVlNjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzb8oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACsMjqCbCXqb4GXqH0snEMkeKWmQAzxOJC2cFKnuY8GgT+fh/ZfJx5+2 YJW3aWG0pad2v28N0ceuFPNRdHFlc4JCYZCRL97YOv+YdhDkqllArJVgCFox87uE molpf8oKX6lx73zNmPM22VnPm6J4inHzMSWwTGiwOQFJ3pm8fMszJTvEbBi5oWk8 MetISQYDoUduyy0VsGevSO9JJk9py6PX8DTZ2NEGcQMLE/rEo1/pmtq0PWF13gt1 nmcN5hldz4WZbvOixtdnrDHs7yI2XA1jTaUYvI7tXV0HNOjy3ZkINl/+54QXwYWF BhiZECOnBxVMI7pg5Ep8ToQnicEu6eA= -----END CERTIFICATE-----Generated at Sat Aug 23 15:07:28 2025 by rpki-client