$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0bf462af-9a76-3762-a297-14cc5e7b1f19.roa File: 0bf462af-9a76-3762-a297-14cc5e7b1f19.roa (raw, json) Hash identifier: vwlihflQNY3atHKEFUe87Ky6Cq56j0XTxoh1yj1WZyY= Subject key identifier: 08:67:E5:D8:51:34:1D:0B:E6:D2:8A:A7:EA:64:4E:EE:44:2C:24:69 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584A78E5FB473BD6A5C312B27620 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0bf462af-9a76-3762-a297-14cc5e7b1f19.roa Signing time: Thu 10 Jul 2025 13:01:02 +0000 ROA not before: Thu 10 Jul 2025 13:01:02 +0000 ROA not after: Wed 08 Oct 2025 13:01:02 +0000 asID: 203 IP address blocks: 192.57.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:78:e5:fb:47:3b:d6:a5:c3:12:b2:76:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jul 10 13:01:02 2025 GMT Not After : Oct 8 13:01:02 2025 GMT Subject: CN=88008180-2194-4932-a732-1eb03f6306dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:21:9d:e9:70:eb:dd:6f:a9:f7:08:d0:22:01: 15:f6:fd:97:87:29:5b:38:89:03:0f:f8:37:cd:54: 8a:25:bc:8c:89:5e:60:40:07:43:e9:d6:07:a1:3e: f5:44:64:91:ab:93:da:e7:4d:c4:fa:dc:14:15:c5: a6:1a:42:7e:6b:6e:7e:37:87:b0:ce:0e:94:2e:9b: ac:bc:01:df:b8:f2:44:5c:11:d5:8c:4a:d8:54:73: 18:05:76:6b:11:93:ec:c2:b2:c2:22:4d:d8:2d:ac: 03:0b:7a:68:da:7c:c6:68:5b:38:21:b8:e8:28:dd: b8:2f:76:6f:30:93:0e:ce:b8:0c:b3:46:88:af:22: ca:79:5f:fc:64:59:0d:fc:66:eb:bc:30:4d:59:4a: 13:a2:51:9d:55:a1:ea:38:25:da:e3:bf:81:f7:36: fe:1b:e2:6f:5b:7b:59:19:d1:35:80:69:5f:b4:2c: d1:8c:6f:9e:dd:3d:da:fe:f3:d0:ab:f7:38:28:bb: 67:f1:9d:be:30:4f:d6:84:a9:2d:ef:e6:b2:34:03: d1:da:54:21:19:ff:4b:7d:be:7a:e3:cd:c1:d1:77: 98:35:b1:ba:bb:00:59:f3:2f:05:a8:4a:08:35:65: 39:56:14:bd:94:b9:38:48:b9:12:99:b3:7c:3a:4c: fd:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:67:E5:D8:51:34:1D:0B:E6:D2:8A:A7:EA:64:4E:EE:44:2C:24:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0bf462af-9a76-3762-a297-14cc5e7b1f19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.57.118.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:f6:fc:44:9f:5e:95:e4:a2:f2:ac:9a:55:89:b7:71:33:cb: 23:63:f0:86:9b:b6:d0:e3:fc:33:45:71:4d:70:39:3e:2c:69: e8:67:c4:55:91:7a:c0:09:78:62:c1:07:22:40:fc:68:2b:bc: 2c:40:50:04:f0:4f:16:a2:41:98:a2:b3:52:49:33:4c:16:b8: 28:14:22:49:1a:bb:af:93:f8:93:e9:ff:55:6a:6d:ce:20:77: 67:ab:da:fc:2d:f5:8d:fe:53:e7:64:37:e4:e3:0d:90:fb:f7: fb:13:f2:df:c7:2b:36:b7:76:7d:08:1f:ad:60:0c:ee:c5:0a: 2b:61:4a:02:f1:3d:ba:a7:67:92:fb:4d:47:71:df:cf:cd:ae: 98:28:74:1a:24:65:51:d3:2a:68:d5:3e:02:e5:84:56:dc:06: 57:b8:50:5d:9a:1c:f3:94:23:2f:a3:8a:6f:69:b4:56:cb:c3: 64:3c:5e:90:2f:d1:6e:d0:09:25:c0:91:7b:42:b2:61:43:81: c7:03:7d:a0:d1:f6:ef:0c:31:07:be:da:79:10:16:26:21:ba: d2:aa:e3:be:6c:58:b0:85:46:9a:34:ff:0c:00:c7:3c:64:55: 5d:a7:d8:b9:61:23:59:f3:14:ae:35:a3:6c:5d:21:88:86:ad: 6a:59:24:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp45ftHO9alwxKydiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDcxMDEzMDEwMloXDTI1MTAwODEzMDEwMlowLzEtMCsGA1UEAxMk ODgwMDgxODAtMjE5NC00OTMyLWE3MzItMWViMDNmNjMwNmRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyGd6XDr3W+p9wjQIgEV9v2XhylbOIkDD/g3 zVSKJbyMiV5gQAdD6dYHoT71RGSRq5Pa503E+twUFcWmGkJ+a25+N4ewzg6ULpus vAHfuPJEXBHVjErYVHMYBXZrEZPswrLCIk3YLawDC3po2nzGaFs4IbjoKN24L3Zv MJMOzrgMs0aIryLKeV/8ZFkN/GbrvDBNWUoTolGdVaHqOCXa47+B9zb+G+JvW3tZ GdE1gGlftCzRjG+e3T3a/vPQq/c4KLtn8Z2+ME/WhKkt7+ayNAPR2lQhGf9Lfb56 483B0XeYNbG6uwBZ8y8FqEoINWU5VhS9lLk4SLkSmbN8Okz9OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAhn5dhRNB0L5tKKp+pkTu5ELCRpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMGJmNDYyYWYtOWE3Ni0z NzYyLWEyOTctMTRjYzVlN2IxZjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDl2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJv2/ESfXpXkovKsmlWJt3EzyyNj8IabttDj/DNFcU1wOT4saehnxFWR esAJeGLBByJA/GgrvCxAUATwTxaiQZiis1JJM0wWuCgUIkkau6+T+JPp/1Vqbc4g d2er2vwt9Y3+U+dkN+TjDZD79/sT8t/HKza3dn0IH61gDO7FCithSgLxPbqnZ5L7 TUdx38/NrpgodBokZVHTKmjVPgLlhFbcBle4UF2aHPOUIy+jim9ptFbLw2Q8XpAv 0W7QCSXAkXtCsmFDgccDfaDR9u8MMQe+2nkQFiYhutKq475sWLCFRpo0/wwAxzxk VV2n2LlhI1nzFK41o2xdIYiGrWpZJOg= -----END CERTIFICATE-----Generated at Mon Jul 21 12:32:12 2025 by rpki-client