$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f2680fb4-636b-31c5-984e-18c290634740.roa File: f2680fb4-636b-31c5-984e-18c290634740.roa (raw, json) Hash identifier: 9zGlFCmVRp9lfpqL1+AlSZNMIErxgFDMxy5B9i6MCEk= Subject key identifier: 63:07:19:2A:F4:04:C9:05:5C:85:A6:E8:0D:8C:45:AF:06:B5:82:8C Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584B5B073FB301EE6A07E4A3A380 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f2680fb4-636b-31c5-984e-18c290634740.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 3356 IP address blocks: 192.57.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:3f:b3:01:ee:6a:07:e4:a3:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=a097aa41-2389-4408-86f2-008a0a18c087 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a4:d5:bc:49:e4:dd:38:cd:35:24:81:94:f9: 5c:4f:c1:bf:16:e7:bc:54:cd:56:7a:6b:7f:e9:57: 35:5d:31:b2:32:e5:bb:7f:1d:eb:11:6e:f4:c5:8f: 3e:fb:8d:58:7a:79:b5:ae:f6:f1:ba:32:2e:16:6c: b5:18:09:c4:f3:ac:e7:8d:a8:28:e3:dc:9c:71:8a: 93:a2:bf:37:00:68:bb:d2:bc:8d:2b:4f:dc:ef:7e: 58:42:13:0c:e9:74:a8:d0:22:e6:e8:4b:48:46:d7: 55:cd:7f:95:e0:d7:ca:5d:f7:7a:d3:25:a7:cf:f0: 6a:55:e0:32:17:41:73:34:24:b0:e0:ae:81:65:71: 40:77:37:00:df:5f:1e:f5:ea:e5:65:1c:a4:ee:9e: cc:c4:fa:47:4b:0e:a9:ad:b2:b5:67:66:a9:8e:0c: cd:32:75:c3:97:76:d7:14:60:6f:54:b2:9a:d4:64: 73:78:ef:65:2b:94:1d:9f:7e:8a:6f:7e:a4:c0:30: 00:82:f6:7b:68:45:b3:6d:62:0d:91:59:3e:47:63: d1:01:87:fe:d0:eb:18:b0:bd:83:a7:74:a1:4e:35: 16:6b:56:0f:bf:d8:24:7d:47:e7:5c:5f:64:c9:cd: 30:e5:b8:3a:7a:1f:47:c7:fb:be:97:0b:8c:c3:ea: 09:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:07:19:2A:F4:04:C9:05:5C:85:A6:E8:0D:8C:45:AF:06:B5:82:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f2680fb4-636b-31c5-984e-18c290634740.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.57.115.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:0a:46:03:07:99:07:6e:e9:4a:dc:6b:72:67:46:d5:9c:76: 7c:6d:32:1b:87:f0:1d:a6:08:b1:e1:29:37:12:e3:09:c9:13: 0d:e8:9f:64:bc:64:47:7d:bd:53:93:ee:e3:e1:51:76:e7:9f: 4c:e4:0a:d8:7e:a7:3b:1a:2e:3d:3e:1b:b2:6b:32:13:eb:66: 23:45:a8:28:81:ec:84:1b:3d:4b:2d:3b:11:69:50:53:e1:af: 89:82:60:69:e4:fc:75:f8:31:44:77:f0:9a:7a:3d:34:4d:67: a9:ae:1d:99:73:6b:75:14:d9:4d:ce:60:4a:dc:2a:7f:72:0c: 04:c9:90:ab:7a:2a:85:40:28:7d:7a:21:7b:fd:3a:8d:22:ac: 54:91:1f:a1:24:f3:74:1b:b0:b3:81:c9:85:f0:bd:9d:5c:f4: 7f:44:72:e1:a1:e4:b2:70:b2:91:8d:6d:f7:b7:d6:39:b0:be: b8:78:8b:fe:33:50:4b:7e:38:41:1b:9b:0a:fd:47:cc:38:7d: 48:28:a0:9e:2d:a6:cf:1d:22:7a:e1:37:44:0f:3a:06:6f:af: f6:0c:06:a5:f0:0d:04:b6:0b:3d:77:d9:a4:05:9e:6b:15:e1: 08:14:e3:d6:19:51:7c:ce:59:29:10:64:3b:66:b7:d5:e7:c6: ce:f9:c7:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbBz+zAe5qB+Sjo4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk YTA5N2FhNDEtMjM4OS00NDA4LTg2ZjItMDA4YTBhMThjMDg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6TVvEnk3TjNNSSBlPlcT8G/Fue8VM1Wemt/ 6Vc1XTGyMuW7fx3rEW70xY8++41Yenm1rvbxujIuFmy1GAnE86znjago49yccYqT or83AGi70ryNK0/c735YQhMM6XSo0CLm6EtIRtdVzX+V4NfKXfd60yWnz/BqVeAy F0FzNCSw4K6BZXFAdzcA318e9erlZRyk7p7MxPpHSw6prbK1Z2apjgzNMnXDl3bX FGBvVLKa1GRzeO9lK5Qdn36Kb36kwDAAgvZ7aEWzbWINkVk+R2PRAYf+0OsYsL2D p3ShTjUWa1YPv9gkfUfnXF9kyc0w5bg6eh9Hx/u+lwuMw+oJfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGMHGSr0BMkFXIWm6A2MRa8GtYKMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZjI2ODBmYjQtNjM2Yi0z MWM1LTk4NGUtMThjMjkwNjM0NzQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDlzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8KRgMHmQdu6Urca3JnRtWcdnxtMhuH8B2mCLHhKTcS4wnJEw3on2S8 ZEd9vVOT7uPhUXbnn0zkCth+pzsaLj0+G7JrMhPrZiNFqCiB7IQbPUstOxFpUFPh r4mCYGnk/HX4MUR38Jp6PTRNZ6muHZlza3UU2U3OYErcKn9yDATJkKt6KoVAKH16 IXv9Oo0irFSRH6Ek83QbsLOByYXwvZ1c9H9EcuGh5LJwspGNbfe31jmwvrh4i/4z UEt+OEEbmwr9R8w4fUgooJ4tps8dInrhN0QPOgZvr/YMBqXwDQS2Cz132aQFnmsV 4QgU49YZUXzOWSkQZDtmt9Xnxs75x0k= -----END CERTIFICATE-----Generated at Sun Oct 19 20:44:03 2025 by rpki-client