$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ac1a8ed2-809d-3eb9-bbf6-c77b0187f23a.roa File: ac1a8ed2-809d-3eb9-bbf6-c77b0187f23a.roa (raw, json) Hash identifier: nCajGU/SpZJmYdgaiPpMcCV9taSj73xW2rtpozMWnt0= Subject key identifier: 7E:B3:F8:12:72:DD:A7:A1:16:9B:02:9B:B7:D4:1B:69:3A:F8:49:A7 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584B4A47234D164AF3C8E06B7FF8 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ac1a8ed2-809d-3eb9-bbf6-c77b0187f23a.roa Signing time: Tue 23 Sep 2025 13:00:40 +0000 ROA not before: Tue 23 Sep 2025 13:00:40 +0000 ROA not after: Mon 22 Dec 2025 14:00:40 +0000 asID: 3356 IP address blocks: 192.238.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4a:47:23:4d:16:4a:f3:c8:e0:6b:7f:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 23 13:00:40 2025 GMT Not After : Dec 22 14:00:40 2025 GMT Subject: CN=74f93d6f-d2e5-4509-8484-de6f1e9b5a77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:13:0a:f8:4e:f3:18:b8:a1:e1:db:40:2b:5a: 8c:57:cf:41:5b:9c:d0:55:98:42:f8:37:12:4c:81: 32:cb:52:eb:d2:f5:6d:8f:53:aa:5c:02:84:c5:0f: ad:a2:ae:c9:fd:df:8d:95:70:3c:30:33:04:ed:30: 40:11:50:b8:fa:c5:e5:54:25:ee:82:dd:6c:b7:7b: 21:01:3a:4c:96:b0:7a:ab:73:53:f5:a0:a8:ca:31: df:c9:ee:35:2d:9d:58:c9:4c:de:69:58:ee:00:78: 4e:6e:7f:87:61:23:fc:17:bd:76:04:02:19:ce:8f: 31:cb:aa:70:db:d6:97:b0:75:07:0d:ae:1a:16:a7: 0c:3e:27:38:8a:c4:c8:44:e3:1c:bc:1f:9d:ad:10: 4b:af:b0:cf:72:1b:8c:50:d6:98:64:17:7a:3e:e7: ce:20:08:c7:09:69:ae:34:b7:13:73:a6:c4:c4:b4: 8d:0f:2f:3e:47:5b:a1:1d:84:91:d6:a5:39:76:e5: 69:f6:e7:76:5b:14:34:1e:4a:7b:80:57:56:d0:4e: 5b:fa:1c:12:cd:e1:77:10:02:79:3f:53:5e:d5:d9: 60:f3:76:91:95:a6:47:b3:65:7b:af:4f:3d:7a:92: 8f:48:f9:af:21:bc:61:f2:dd:51:3a:1d:36:e0:26: 40:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:B3:F8:12:72:DD:A7:A1:16:9B:02:9B:B7:D4:1B:69:3A:F8:49:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ac1a8ed2-809d-3eb9-bbf6-c77b0187f23a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.238.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:c2:16:98:a6:59:98:3e:b3:36:f7:65:2a:d2:ee:b7:7a:c9: 20:1b:09:ae:df:a4:06:8e:1e:8b:d5:9c:2d:71:0c:1b:01:bb: 20:b4:44:90:3c:b7:6a:ee:a5:13:1e:34:97:48:91:77:c5:61: 04:4b:59:ad:87:85:7e:25:9f:1b:f6:b7:21:3c:3b:07:47:a3: e7:7c:f1:0d:0c:d9:ed:17:93:b1:aa:ba:8d:fc:0d:0a:39:02: d6:80:03:32:cb:93:3e:52:b9:bb:aa:9f:ee:ee:37:96:50:d9: d0:66:fc:ae:c7:cd:b5:d8:e9:6e:e9:37:ec:33:17:2d:a7:2b: d6:a8:e1:26:80:41:4c:c0:4e:de:f1:33:f6:f8:2d:fd:ae:f7: 41:2a:f6:69:f0:de:30:e7:a3:26:d7:95:2e:96:6d:b9:7c:b2: 2d:0b:9d:39:85:f2:dc:f2:7a:f6:9d:2d:b3:5f:5d:c6:da:ce: 75:43:83:9d:6f:04:3e:b9:93:e6:2d:af:e9:84:09:04:e3:49: 03:09:0e:9d:ef:58:5c:80:2b:54:7d:0c:7c:24:13:30:02:29: 9c:a3:79:e3:67:57:08:f9:c4:ee:b1:32:4d:65:0d:10:d5:2e: 3c:0a:61:57:01:6a:d5:91:b4:87:2e:d4:10:c5:a1:24:e8:55: 78:7c:4e:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtKRyNNFkrzyOBrf/gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDkyMzEzMDA0MFoXDTI1MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk NzRmOTNkNmYtZDJlNS00NTA5LTg0ODQtZGU2ZjFlOWI1YTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRMK+E7zGLih4dtAK1qMV89BW5zQVZhC+DcS TIEyy1Lr0vVtj1OqXAKExQ+toq7J/d+NlXA8MDME7TBAEVC4+sXlVCXugt1st3sh ATpMlrB6q3NT9aCoyjHfye41LZ1YyUzeaVjuAHhObn+HYSP8F712BAIZzo8xy6pw 29aXsHUHDa4aFqcMPic4isTIROMcvB+drRBLr7DPchuMUNaYZBd6PufOIAjHCWmu NLcTc6bExLSNDy8+R1uhHYSR1qU5duVp9ud2WxQ0Hkp7gFdW0E5b+hwSzeF3EAJ5 P1Ne1dlg83aRlaZHs2V7r089epKPSPmvIbxh8t1ROh024CZACwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH6z+BJy3aehFpsCm7fUG2k6+EmnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYWMxYThlZDItODA5ZC0z ZWI5LWJiZjYtYzc3YjAxODdmMjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwO45MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAETCFpimWZg+szb3ZSrS7rd6ySAbCa7fpAaOHovVnC1xDBsBuyC0RJA8 t2rupRMeNJdIkXfFYQRLWa2HhX4lnxv2tyE8OwdHo+d88Q0M2e0Xk7Gquo38DQo5 AtaAAzLLkz5Subuqn+7uN5ZQ2dBm/K7HzbXY6W7pN+wzFy2nK9ao4SaAQUzATt7x M/b4Lf2u90Eq9mnw3jDnoybXlS6Wbbl8si0LnTmF8tzyevadLbNfXcbaznVDg51v BD65k+Ytr+mECQTjSQMJDp3vWFyAK1R9DHwkEzACKZyjeeNnVwj5xO6xMk1lDRDV LjwKYVcBatWRtIcu1BDFoSToVXh8TsM= -----END CERTIFICATE-----Generated at Mon Oct 20 22:40:38 2025 by rpki-client