$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c9ac6880-13f8-3402-b332-67ac04e2b2f3.roa File: c9ac6880-13f8-3402-b332-67ac04e2b2f3.roa (raw, json) Hash identifier: VuqPf0uTStIeNdQthh9i5WExbfwpI/BLPM3SQnC/UL8= Subject key identifier: 96:59:95:02:96:2A:26:7C:25:BE:78:0B:D0:C3:A2:ED:20:8D:7D:86 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584B4A4724478BCC0939E68B8760 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c9ac6880-13f8-3402-b332-67ac04e2b2f3.roa Signing time: Tue 23 Sep 2025 13:00:40 +0000 ROA not before: Tue 23 Sep 2025 13:00:40 +0000 ROA not after: Mon 22 Dec 2025 14:00:40 +0000 asID: 203 IP address blocks: 199.228.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4a:47:24:47:8b:cc:09:39:e6:8b:87:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 23 13:00:40 2025 GMT Not After : Dec 22 14:00:40 2025 GMT Subject: CN=5c60e59f-e6dc-43ab-910d-576c269fcc04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:fd:c6:33:ae:f6:d7:a2:9e:ff:64:6f:99:0f: 54:04:82:90:f6:42:9b:76:ec:70:9e:14:67:74:05: 26:ce:25:b0:48:4c:bd:2c:08:9e:82:c8:70:f1:d3: 9e:5b:36:85:80:00:1a:77:83:c7:d6:7f:30:a3:6e: f4:28:80:36:55:6e:af:36:aa:fa:3c:73:5c:f4:ef: d0:96:54:a8:b4:33:1a:ca:06:e6:ac:fe:7e:a5:ac: fc:0c:01:4f:06:4e:4e:a8:04:91:f4:a6:ca:c2:2f: 0d:77:b6:44:40:f9:60:42:1a:63:86:9e:0a:0f:1f: 24:84:31:78:24:d0:cd:31:36:47:54:91:84:05:05: 8b:c3:ca:34:31:15:48:d9:70:55:68:c2:9b:6c:b1: c7:4a:68:ef:09:cd:79:0e:3b:79:b8:df:5a:8d:ba: 71:ec:8b:a0:8b:47:d7:7c:54:88:f8:5b:55:6b:1d: 9b:72:41:05:f5:5e:51:11:a4:93:7e:aa:fa:ac:bb: e8:de:3f:2f:aa:6a:08:07:09:04:4d:17:ba:d8:7b: 9b:1b:98:f9:cb:f4:66:86:05:dc:42:a0:9c:57:97: bc:75:84:9e:92:19:7c:a5:d5:88:22:d6:61:2c:d5: 05:3b:d5:32:0f:7b:ea:37:d0:0c:2a:53:2d:65:48: 11:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:59:95:02:96:2A:26:7C:25:BE:78:0B:D0:C3:A2:ED:20:8D:7D:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c9ac6880-13f8-3402-b332-67ac04e2b2f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 199.228.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:fb:e2:b5:18:57:f1:c3:13:d0:43:ec:7b:ea:91:69:6a:96: b3:3d:f8:80:55:79:a5:b4:3f:6a:e2:97:f7:8b:0c:31:2f:90: d7:22:20:a4:a4:33:b2:b6:c6:4b:a9:6b:ad:b8:2d:d5:23:1b: 55:fb:a6:ab:39:a5:b6:9d:8e:2b:a6:99:67:e1:3e:1b:35:a9: fe:d1:c4:11:eb:79:82:71:a5:8a:15:f4:24:69:1a:ae:98:8c: 27:f1:f2:62:2b:a4:05:46:c0:d1:40:cf:31:c5:ee:e1:9c:40: 8b:38:9a:85:0c:b5:85:3a:46:b7:1c:9a:5f:33:7b:e2:74:78: d4:52:7d:54:ff:6c:19:cd:f4:db:e3:01:94:1e:24:e8:ba:f8: 74:e2:43:e7:00:6b:b0:2a:5a:01:23:97:d2:73:ea:7c:a9:c3: 13:60:1b:5e:a9:7c:55:0c:53:3c:99:54:13:6d:ab:ee:bc:73: 95:00:82:b3:5a:80:d3:ac:0e:60:26:aa:99:78:6a:07:da:fd: 59:13:dd:80:5f:0f:c9:6a:e0:8f:2b:2a:e5:b4:e0:c2:67:64: c5:40:18:f0:31:a1:2b:e5:d7:08:3c:78:ff:f7:91:a9:ea:d0: 3b:e2:82:ab:ab:fa:aa:ab:5f:a6:d7:59:a4:db:c1:75:5a:f4: 11:3a:5f:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtKRyRHi8wJOeaLh2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDkyMzEzMDA0MFoXDTI1MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk NWM2MGU1OWYtZTZkYy00M2FiLTkxMGQtNTc2YzI2OWZjYzA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/3GM67216Ke/2RvmQ9UBIKQ9kKbduxwnhRn dAUmziWwSEy9LAiegshw8dOeWzaFgAAad4PH1n8wo270KIA2VW6vNqr6PHNc9O/Q llSotDMaygbmrP5+paz8DAFPBk5OqASR9KbKwi8Nd7ZEQPlgQhpjhp4KDx8khDF4 JNDNMTZHVJGEBQWLw8o0MRVI2XBVaMKbbLHHSmjvCc15Djt5uN9ajbpx7Iugi0fX fFSI+FtVax2bckEF9V5REaSTfqr6rLvo3j8vqmoIBwkETRe62HubG5j5y/RmhgXc QqCcV5e8dYSekhl8pdWIItZhLNUFO9UyD3vqN9AMKlMtZUgRdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJZZlQKWKiZ8Jb54C9DDou0gjX2GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYzlhYzY4ODAtMTNmOC0z NDAyLWIzMzItNjdhYzA0ZTJiMmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx+SOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG/74rUYV/HDE9BD7HvqkWlqlrM9+IBVeaW0P2ril/eLDDEvkNciIKSk M7K2xkupa624LdUjG1X7pqs5pbadjiummWfhPhs1qf7RxBHreYJxpYoV9CRpGq6Y jCfx8mIrpAVGwNFAzzHF7uGcQIs4moUMtYU6Rrccml8ze+J0eNRSfVT/bBnN9Nvj AZQeJOi6+HTiQ+cAa7AqWgEjl9Jz6nypwxNgG16pfFUMUzyZVBNtq+68c5UAgrNa gNOsDmAmqpl4agfa/VkT3YBfD8lq4I8rKuW04MJnZMVAGPAxoSvl1wg8eP/3kanq 0Dvigqur+qqrX6bXWaTbwXVa9BE6X5Q= -----END CERTIFICATE-----Generated at Sun Oct 19 20:43:03 2025 by rpki-client