$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/fa5aa617-850e-32c2-ab38-1f7e67d475c5.roa File: fa5aa617-850e-32c2-ab38-1f7e67d475c5.roa (raw, json) Hash identifier: 3lVuZHHVfkPFHg3Jzekv1T9Q0DT5BKJZhMOHr0mdlBg= Subject key identifier: 05:1C:9F:3E:70:02:62:57:B8:89:B4:17:02:B7:7F:84:3B:EB:AF:F8 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584B4A471D79C4A6A0B49FDBCC20 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/fa5aa617-850e-32c2-ab38-1f7e67d475c5.roa Signing time: Tue 23 Sep 2025 13:00:40 +0000 ROA not before: Tue 23 Sep 2025 13:00:40 +0000 ROA not after: Mon 22 Dec 2025 14:00:40 +0000 asID: 203 IP address blocks: 192.57.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4a:47:1d:79:c4:a6:a0:b4:9f:db:cc:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 23 13:00:40 2025 GMT Not After : Dec 22 14:00:40 2025 GMT Subject: CN=62614222-4d4f-465f-84c2-e26c5142b059 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1f:6b:5a:12:22:4f:a9:bc:83:f3:c5:d6:93: 0a:b0:e5:02:9f:c8:9a:ee:a3:e3:48:db:f2:e0:d2: 40:c1:9b:65:d8:fb:8e:2d:7a:a7:f5:af:c7:9b:82: a9:e0:ea:1b:f0:c3:55:9a:e7:3c:1f:3a:63:de:0d: 48:c1:17:93:fa:08:bb:80:92:43:bb:99:76:1d:0b: 61:77:67:c9:73:04:91:87:78:11:5a:3b:bb:af:90: 73:1a:dd:3b:9c:c4:ba:ed:ff:2b:e4:1e:01:85:e5: 99:84:e1:4b:e6:a4:82:96:a2:f2:96:c3:f1:22:eb: 5f:49:b2:24:1e:42:00:8c:16:d8:96:5d:83:d7:6f: 7b:20:5a:57:ea:e4:db:a8:7f:36:fe:33:71:9c:32: 9f:70:b6:42:c5:27:02:15:02:c2:cd:b1:8b:3a:82: de:8d:30:ca:fb:e5:95:9e:3c:c5:35:79:72:1f:cd: 85:52:f9:dc:9a:bf:dc:03:d7:ec:ed:e2:62:9c:15: 39:61:79:a2:e8:d7:84:00:1d:a2:b2:4c:a1:80:fb: 26:f0:80:d8:f6:f5:5b:5b:54:4e:42:32:4a:87:a9: 74:42:86:b8:50:6f:d1:b2:1f:31:52:74:76:3b:ca: bf:00:db:53:a5:13:35:3d:30:98:69:a4:dc:35:83: 17:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:1C:9F:3E:70:02:62:57:B8:89:B4:17:02:B7:7F:84:3B:EB:AF:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/fa5aa617-850e-32c2-ab38-1f7e67d475c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.57.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:cc:d4:2a:24:f6:15:82:ba:44:da:44:fb:00:57:ce:35:02: 6a:69:6b:d6:aa:de:7f:07:c0:8b:09:5f:26:85:78:5d:61:17: 94:37:ec:60:bd:a8:8e:34:d2:f3:d2:7a:ab:70:82:9a:04:84: 37:c1:de:fa:4d:b8:3e:61:7e:bc:40:b6:01:ea:2a:d7:37:f4: 6f:02:5f:34:7b:b0:ee:f6:26:bf:31:3f:61:e4:7f:5c:f8:2a: 60:84:09:57:bc:8f:4c:19:19:91:52:ca:e9:fc:c6:72:57:06: 8b:b1:67:e0:a3:f0:a5:e0:64:a4:11:e5:aa:14:02:28:58:93: e0:22:9e:a3:af:b1:1f:48:15:d0:e2:de:48:dc:3c:78:5a:e9: 9c:fc:4d:a7:c3:c2:07:f6:5f:20:47:e6:ae:b4:0b:26:f6:b0: fc:d3:a7:51:9b:2a:17:03:05:45:90:f0:4b:50:c8:f7:51:da: 85:70:9c:95:8e:ff:36:01:32:98:07:b4:8d:e8:b4:bf:42:13: 8e:44:8a:97:76:24:7e:ed:37:5a:7d:f2:53:63:37:0e:e2:5a: b4:46:91:4a:f3:f8:f4:5d:c7:d4:48:91:6f:fd:2f:60:a7:8f: 83:3e:1c:dd:30:64:77:65:ee:1d:64:fd:70:8d:a4:3e:f4:ad: e3:32:6b:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtKRx15xKagtJ/bzCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDkyMzEzMDA0MFoXDTI1MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk NjI2MTQyMjItNGQ0Zi00NjVmLTg0YzItZTI2YzUxNDJiMDU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAux9rWhIiT6m8g/PF1pMKsOUCn8ia7qPjSNvy 4NJAwZtl2PuOLXqn9a/Hm4Kp4Oob8MNVmuc8Hzpj3g1IwReT+gi7gJJDu5l2HQth d2fJcwSRh3gRWju7r5BzGt07nMS67f8r5B4BheWZhOFL5qSClqLylsPxIutfSbIk HkIAjBbYll2D1297IFpX6uTbqH82/jNxnDKfcLZCxScCFQLCzbGLOoLejTDK++WV njzFNXlyH82FUvncmr/cA9fs7eJinBU5YXmi6NeEAB2iskyhgPsm8IDY9vVbW1RO QjJKh6l0Qoa4UG/Rsh8xUnR2O8q/ANtTpRM1PTCYaaTcNYMXFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAUcnz5wAmJXuIm0FwK3f4Q766/4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZmE1YWE2MTctODUwZS0z MmMyLWFiMzgtMWY3ZTY3ZDQ3NWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDlgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFrM1Cok9hWCukTaRPsAV841Amppa9aq3n8HwIsJXyaFeF1hF5Q37GC9 qI400vPSeqtwgpoEhDfB3vpNuD5hfrxAtgHqKtc39G8CXzR7sO72Jr8xP2Hkf1z4 KmCECVe8j0wZGZFSyun8xnJXBouxZ+Cj8KXgZKQR5aoUAihYk+AinqOvsR9IFdDi 3kjcPHha6Zz8TafDwgf2XyBH5q60Cyb2sPzTp1GbKhcDBUWQ8EtQyPdR2oVwnJWO /zYBMpgHtI3otL9CE45Eipd2JH7tN1p98lNjNw7iWrRGkUrz+PRdx9RIkW/9L2Cn j4M+HN0wZHdl7h1k/XCNpD70reMyaxM= -----END CERTIFICATE-----Generated at Tue Oct 21 02:00:03 2025 by rpki-client