$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0aad3edb-f4de-368d-be6f-225743213c50.roa File: 0aad3edb-f4de-368d-be6f-225743213c50.roa (raw, json) Hash identifier: UxVoiVK/I08JdUoi+GgAcEiPjPLNHZkpjuhMSKQdZbo= Subject key identifier: F9:55:AC:0B:81:4B:F0:47:78:AA:4A:28:40:DB:32:6A:1B:79:B8:5F Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584A698B23B119C9C7E93F8B0680 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0aad3edb-f4de-368d-be6f-225743213c50.roa Signing time: Sat 05 Jul 2025 01:00:50 +0000 ROA not before: Sat 05 Jul 2025 01:00:50 +0000 ROA not after: Fri 03 Oct 2025 01:00:50 +0000 asID: 3360 IP address blocks: 192.85.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:69:8b:23:b1:19:c9:c7:e9:3f:8b:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jul 5 01:00:50 2025 GMT Not After : Oct 3 01:00:50 2025 GMT Subject: CN=a843f407-2552-4823-992f-0bb2f6c6a26b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:60:4a:44:7a:21:53:a2:32:67:2f:d7:24:cf: dc:32:e2:41:ad:dd:55:1b:69:83:b6:ce:31:34:bf: 24:b2:d6:87:44:6f:a8:15:e5:cb:79:71:58:d7:77: 21:7a:d2:dc:10:82:ba:9f:7b:53:cf:b8:ba:73:71: 60:7c:13:bb:8d:60:e9:c6:54:5a:c7:23:fd:c9:14: ed:24:f1:c3:89:4a:19:fc:82:c1:98:0c:7d:71:66: cf:15:96:8a:9f:49:ee:ae:6c:a9:b3:72:5c:a6:d9: 05:c8:70:47:ae:b8:50:38:b6:0b:37:4d:8a:25:98: f3:1c:2e:43:70:43:63:f8:fa:42:05:43:30:84:b6: bf:a3:04:f7:28:87:bd:15:43:f9:c7:ba:39:cf:75: c0:19:a4:44:fa:70:16:52:83:b3:2e:04:84:6c:d7: 4e:7f:43:5e:c9:ae:68:c5:15:c1:80:27:b8:9d:23: 1f:b9:f6:cf:99:07:e5:f9:ba:44:d8:dd:85:71:b7: 30:97:ba:ea:4b:5e:92:7b:b2:94:18:75:8e:0a:b3: 5a:4e:47:c6:99:65:23:7b:f3:2e:4e:83:cb:49:bf: 84:03:19:ad:13:24:49:cd:e3:a8:c1:19:d5:af:ea: 05:01:4e:42:c6:c8:8e:f8:40:2c:f6:4a:96:20:e6: 54:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:55:AC:0B:81:4B:F0:47:78:AA:4A:28:40:DB:32:6A:1B:79:B8:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0aad3edb-f4de-368d-be6f-225743213c50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.85.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:ba:22:1a:8d:ef:b7:55:52:18:6b:d5:8a:85:ca:91:ad:02: 1e:98:a5:bc:10:75:ae:86:30:81:ab:c3:af:c2:41:49:12:ba: 31:04:40:e4:5e:b1:fd:5b:21:bc:07:1e:66:c2:1b:ec:51:ab: 33:7c:ed:2a:68:db:a9:07:a0:7a:28:f9:d6:05:79:ad:c4:18: bc:d2:fa:c7:6d:9d:c2:75:64:d9:d0:c9:7a:3d:73:a3:ad:f5: 0b:20:88:9a:2d:62:53:fe:fb:e7:b2:97:39:41:f4:eb:6d:9a: a8:e2:7f:f2:9e:87:5d:a2:c5:a6:57:e4:a8:28:e6:22:cd:98: 2d:11:fb:19:94:a8:ba:b6:05:62:5a:c1:d4:49:dc:0a:26:8a: ff:2e:ec:2f:df:cb:5a:b3:8f:15:09:78:ca:a9:99:53:5e:f7: 6a:71:e2:d9:46:54:d1:a8:4a:e0:99:49:c9:49:bb:4c:3f:39: 00:51:7c:37:7c:c9:bf:b3:0f:00:58:3b:61:06:36:73:3d:38: 93:8f:23:49:0c:38:2f:84:a3:1f:f7:22:ce:d4:87:08:ad:83: 46:b7:3b:81:02:47:cf:40:dd:8d:81:52:8f:0d:77:4e:18:f1: 27:6d:99:ea:7f:e9:47:e7:46:ac:43:49:e0:ab:e0:a7:86:2c: 38:88:4b:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEppiyOxGcnH6T+LBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDcwNTAxMDA1MFoXDTI1MTAwMzAxMDA1MFowLzEtMCsGA1UEAxMk YTg0M2Y0MDctMjU1Mi00ODIzLTk5MmYtMGJiMmY2YzZhMjZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGBKRHohU6IyZy/XJM/cMuJBrd1VG2mDts4x NL8kstaHRG+oFeXLeXFY13chetLcEIK6n3tTz7i6c3FgfBO7jWDpxlRaxyP9yRTt JPHDiUoZ/ILBmAx9cWbPFZaKn0nurmyps3JcptkFyHBHrrhQOLYLN02KJZjzHC5D cENj+PpCBUMwhLa/owT3KIe9FUP5x7o5z3XAGaRE+nAWUoOzLgSEbNdOf0Neya5o xRXBgCe4nSMfufbPmQfl+bpE2N2Fcbcwl7rqS16Se7KUGHWOCrNaTkfGmWUje/Mu ToPLSb+EAxmtEyRJzeOowRnVr+oFAU5CxsiO+EAs9kqWIOZUaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPlVrAuBS/BHeKpKKEDbMmobebhfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMGFhZDNlZGItZjRkZS0z NjhkLWJlNmYtMjI1NzQzMjEzYzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFU6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEa6IhqN77dVUhhr1YqFypGtAh6YpbwQda6GMIGrw6/CQUkSujEEQORe sf1bIbwHHmbCG+xRqzN87Spo26kHoHoo+dYFea3EGLzS+sdtncJ1ZNnQyXo9c6Ot 9QsgiJotYlP+++eylzlB9Ottmqjif/Keh12ixaZX5Kgo5iLNmC0R+xmUqLq2BWJa wdRJ3Aomiv8u7C/fy1qzjxUJeMqpmVNe92px4tlGVNGoSuCZSclJu0w/OQBRfDd8 yb+zDwBYO2EGNnM9OJOPI0kMOC+Eox/3Is7Uhwitg0a3O4ECR89A3Y2BUo8Nd04Y 8Sdtmep/6UfnRqxDSeCr4KeGLDiISxs= -----END CERTIFICATE-----Generated at Sun Jul 27 01:43:44 2025 by rpki-client