$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b3af1e8f-bfaf-30a3-9710-6bbaf13ec2b9.roa File: b3af1e8f-bfaf-30a3-9710-6bbaf13ec2b9.roa (raw, json) Hash identifier: R+kFyIZV1lJAsZcpeQnCBHEKwRqkyNt0uzJ6C45mcaE= Subject key identifier: 33:1B:A7:57:FA:23:BB:34:8D:C6:9B:A7:53:9E:5C:32:3F:B9:B8:94 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584B59A1C9D2CC797953AE2D9E00 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b3af1e8f-bfaf-30a3-9710-6bbaf13ec2b9.roa Signing time: Mon 29 Sep 2025 01:00:33 +0000 ROA not before: Mon 29 Sep 2025 01:00:33 +0000 ROA not after: Sun 28 Dec 2025 02:00:33 +0000 asID: 203 IP address blocks: 192.57.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:59:a1:c9:d2:cc:79:79:53:ae:2d:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 29 01:00:33 2025 GMT Not After : Dec 28 02:00:33 2025 GMT Subject: CN=8ca3aa9a-0a8a-4f3d-9880-e8f8db9b421e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:9a:e6:a4:91:7e:d6:00:2e:46:54:31:e0:f1: b1:3c:9d:53:27:ab:22:da:37:54:ac:e2:b4:c4:08: ae:15:97:c6:35:51:07:4e:ac:0d:7d:40:40:4f:c0: 6c:8e:cf:5e:91:c1:38:0e:72:ee:d6:9b:49:42:74: ba:d8:b7:bc:ee:28:17:76:d8:3d:03:e9:c4:c3:16: 23:1a:b3:ff:1a:90:5a:f9:55:c7:90:5f:d4:37:85: 59:93:73:be:1f:5e:33:29:f5:95:49:76:9f:90:56: 47:d3:6d:57:e9:a8:45:b3:94:c4:7f:2a:a0:95:84: e2:2c:a7:bd:2c:1b:01:5c:e1:62:8c:30:c3:9f:82: be:38:ce:8f:19:7a:8c:a2:1e:da:eb:d7:d6:73:e1: 8b:18:14:ec:c4:c3:42:dd:85:0d:88:a3:2d:e8:91: 7c:d3:ec:fa:d2:13:98:a0:ac:de:72:4c:0c:10:7a: ff:fd:a6:0a:8e:51:62:84:44:a6:6c:ba:b1:4b:c2: b7:d1:39:75:05:cc:b6:20:48:6d:b7:77:34:c7:63: 4a:56:8b:61:1e:04:e3:34:41:08:79:69:93:9b:c5: 07:5f:85:41:3c:b8:76:d9:86:a7:14:c4:d4:2f:b5: 21:be:f6:c0:bc:9f:3c:8c:17:e6:01:32:85:49:9e: 7e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:1B:A7:57:FA:23:BB:34:8D:C6:9B:A7:53:9E:5C:32:3F:B9:B8:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b3af1e8f-bfaf-30a3-9710-6bbaf13ec2b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.57.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:6c:96:b8:06:53:03:e7:4c:fb:9d:33:c2:3b:87:1b:36:22: 0f:69:99:3d:0d:eb:9e:33:e7:3c:1a:93:6a:96:96:95:06:fe: 11:3b:c0:2d:f4:c5:b6:85:6d:3f:13:7d:25:50:8a:d1:8e:f5: 20:77:cf:24:03:44:b0:5e:b1:90:cc:ad:95:5f:e7:3c:09:43: b3:46:f0:55:d3:55:75:6a:ab:11:a0:0d:64:49:c4:69:d1:f8: ef:64:33:7d:54:1b:f9:38:be:8e:bc:27:93:df:a1:70:d7:e9: 8c:e6:ee:69:18:7a:5c:78:d4:17:3a:3b:65:fd:bc:e1:49:88: fa:89:ba:fa:94:06:dc:41:97:15:77:f5:68:09:fb:48:0a:5a: 84:27:1d:4e:47:85:93:b4:3b:38:47:83:a9:74:ec:4a:4b:c3: f9:85:d9:5f:f8:9b:ec:23:bf:0d:1d:68:36:23:15:62:48:5a: 63:a9:90:b1:4a:81:45:cc:d0:3e:cb:fd:f8:36:04:6f:f0:7d: 71:5b:58:14:f0:81:7f:4b:8f:be:db:ee:fd:42:d1:f5:b0:cc: a6:d2:74:f8:da:06:7b:4e:88:95:5e:53:20:8d:2f:7b:ae:a4: 6d:46:8b:99:df:7a:f8:1b:52:03:57:a9:bb:ec:51:8e:44:86: 0a:b3:15:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtZocnSzHl5U64tngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDkyOTAxMDAzM1oXDTI1MTIyODAyMDAzM1owLzEtMCsGA1UEAxMk OGNhM2FhOWEtMGE4YS00ZjNkLTk4ODAtZThmOGRiOWI0MjFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ZrmpJF+1gAuRlQx4PGxPJ1TJ6si2jdUrOK0 xAiuFZfGNVEHTqwNfUBAT8Bsjs9ekcE4DnLu1ptJQnS62Le87igXdtg9A+nEwxYj GrP/GpBa+VXHkF/UN4VZk3O+H14zKfWVSXafkFZH021X6ahFs5TEfyqglYTiLKe9 LBsBXOFijDDDn4K+OM6PGXqMoh7a69fWc+GLGBTsxMNC3YUNiKMt6JF80+z60hOY oKzeckwMEHr//aYKjlFihESmbLqxS8K30Tl1Bcy2IEhtt3c0x2NKVothHgTjNEEI eWmTm8UHX4VBPLh22YanFMTUL7UhvvbAvJ88jBfmATKFSZ5+aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDMbp1f6I7s0jcabp1OeXDI/ubiUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYjNhZjFlOGYtYmZhZi0z MGEzLTk3MTAtNmJiYWYxM2VjMmI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDlwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJslrgGUwPnTPudM8I7hxs2Ig9pmT0N654z5zwak2qWlpUG/hE7wC30 xbaFbT8TfSVQitGO9SB3zyQDRLBesZDMrZVf5zwJQ7NG8FXTVXVqqxGgDWRJxGnR +O9kM31UG/k4vo68J5PfoXDX6Yzm7mkYelx41Bc6O2X9vOFJiPqJuvqUBtxBlxV3 9WgJ+0gKWoQnHU5HhZO0OzhHg6l07EpLw/mF2V/4m+wjvw0daDYjFWJIWmOpkLFK gUXM0D7L/fg2BG/wfXFbWBTwgX9Lj77b7v1C0fWwzKbSdPjaBntOiJVeUyCNL3uu pG1Gi5nfevgbUgNXqbvsUY5EhgqzFZk= -----END CERTIFICATE-----Generated at Mon Oct 20 04:08:16 2025 by rpki-client