$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/fc22e2af-8f66-30f0-b10c-4797fe05506e.roa File: fc22e2af-8f66-30f0-b10c-4797fe05506e.roa (raw, json) Hash identifier: 3vXo4ic5jmogTfxjVsYBmkWCLJd2XvHhTh9ks+1sN1U= Subject key identifier: DB:9B:FC:CD:7D:B9:9D:9A:D2:3E:28:B1:73:B8:D9:41:CF:38:36:37 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584B48E1C13DEA81FDA3CD595E80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/fc22e2af-8f66-30f0-b10c-4797fe05506e.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 3356 IP address blocks: 192.57.40.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:c1:3d:ea:81:fd:a3:cd:59:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=d00ca422-69f6-40f5-b943-443744da6c9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:1e:34:06:e5:0b:4a:ac:a7:e4:13:25:d8:70: bc:e3:e4:bd:2e:c3:0d:4c:fc:5b:38:b6:f2:c8:5d: 6d:99:1d:fe:19:ef:62:bb:a7:dc:3a:35:de:95:18: e7:1d:4d:be:47:e6:24:08:e9:37:db:e0:51:1b:e1: 7d:f4:47:74:75:a6:65:12:95:99:70:ce:ce:39:d7: e2:12:8f:bd:4c:bb:2e:bc:e4:43:59:5e:29:b9:75: f9:ca:2d:0d:52:3b:16:b1:d7:6c:2e:2c:c5:b5:b6: 18:04:e0:9f:0c:f3:fb:a8:aa:88:42:af:10:9a:41: 16:7b:6e:ff:10:d7:43:47:5a:80:f8:00:b8:79:e3: c0:eb:c7:66:57:2f:24:c6:ba:6c:10:56:2e:4d:72: 49:ac:6e:16:8f:c2:ad:eb:b0:ee:4f:da:ce:b9:4e: 4e:98:11:75:77:6c:18:c6:e9:32:33:99:15:6e:e9: 96:0e:c4:06:49:75:4c:a4:15:bd:ce:3a:e3:39:d3: 1a:48:9d:b3:c4:18:2e:28:3a:75:26:87:56:f2:43: e5:a7:63:b9:89:92:4a:43:72:d8:b7:a4:10:9c:30: ac:21:ae:eb:19:e4:82:e0:eb:d2:6b:b0:f2:98:26: 52:40:53:d5:cf:45:0b:10:f6:67:21:87:a2:95:d8: 36:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:9B:FC:CD:7D:B9:9D:9A:D2:3E:28:B1:73:B8:D9:41:CF:38:36:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/fc22e2af-8f66-30f0-b10c-4797fe05506e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.57.40.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:dd:67:51:90:74:4a:5c:f6:e3:c7:d0:c7:bd:d7:33:2c:0d: 04:f8:61:8c:43:c2:b8:a3:65:ce:a0:17:a3:1c:9e:f7:1f:1a: 8a:a8:c2:02:5e:86:4f:fd:8e:68:cd:f7:2e:43:bb:eb:53:40: fb:22:7f:0d:cf:7e:87:b7:4f:46:66:56:62:bb:dd:76:11:24: d0:05:7b:e8:d4:09:d3:71:ae:fa:21:e3:9b:02:a2:9e:69:89: ef:b5:6a:99:63:b4:d5:b4:77:66:cf:de:22:0e:d6:a4:70:49: 3f:35:d0:25:71:e2:15:40:9e:c2:c6:32:71:25:c3:60:49:3e: fb:c4:73:5f:06:5b:b0:1e:0a:77:70:e3:12:36:92:6e:e5:51: 58:13:38:b5:91:8d:86:3e:18:40:51:a8:2e:fb:c8:a2:99:58: e5:ab:12:06:ce:4c:7c:19:84:9f:64:f0:2e:56:71:7c:14:fc: d1:95:39:b9:d9:7b:c4:be:7f:7e:9e:c0:01:cb:51:7d:db:01: 3a:25:24:71:f9:1a:1e:44:0e:6f:19:bb:9b:96:be:b6:c7:5d: be:29:f2:ba:be:1c:87:7b:94:9c:66:a1:6b:4d:27:b4:30:4e: d9:82:86:5f:2d:13:ab:44:e5:af:8b:91:ac:55:df:c5:b7:71: 08:4a:74:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4cE96oH9o81ZXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk ZDAwY2E0MjItNjlmNi00MGY1LWI5NDMtNDQzNzQ0ZGE2YzljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoR40BuULSqyn5BMl2HC84+S9LsMNTPxbOLby yF1tmR3+Ge9iu6fcOjXelRjnHU2+R+YkCOk32+BRG+F99Ed0daZlEpWZcM7OOdfi Eo+9TLsuvORDWV4puXX5yi0NUjsWsddsLizFtbYYBOCfDPP7qKqIQq8QmkEWe27/ ENdDR1qA+AC4eePA68dmVy8kxrpsEFYuTXJJrG4Wj8Kt67DuT9rOuU5OmBF1d2wY xukyM5kVbumWDsQGSXVMpBW9zjrjOdMaSJ2zxBguKDp1JodW8kPlp2O5iZJKQ3LY t6QQnDCsIa7rGeSC4OvSa7DymCZSQFPVz0ULEPZnIYeildg2dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNub/M19uZ2a0j4osXO42UHPODY3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZmMyMmUyYWYtOGY2Ni0z MGYwLWIxMGMtNDc5N2ZlMDU1MDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwDkoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJPdZ1GQdEpc9uPH0Me91zMsDQT4YYxDwrijZc6gF6McnvcfGoqowgJe hk/9jmjN9y5Du+tTQPsifw3Pfoe3T0ZmVmK73XYRJNAFe+jUCdNxrvoh45sCop5p ie+1apljtNW0d2bP3iIO1qRwST810CVx4hVAnsLGMnElw2BJPvvEc18GW7AeCndw 4xI2km7lUVgTOLWRjYY+GEBRqC77yKKZWOWrEgbOTHwZhJ9k8C5WcXwU/NGVObnZ e8S+f36ewAHLUX3bATolJHH5Gh5EDm8Zu5uWvrbHXb4p8rq+HId7lJxmoWtNJ7Qw TtmChl8tE6tE5a+LkaxV38W3cQhKdKM= -----END CERTIFICATE-----Generated at Mon Oct 20 05:06:06 2025 by rpki-client