$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/196d5b07-ad65-3b4c-b38f-c89a7951591e.roa File: 196d5b07-ad65-3b4c-b38f-c89a7951591e.roa (raw, json) Hash identifier: PvyNOaTEkxdWnl+qEGWYqMHoIQnYgIGl22EcD5f57C8= Subject key identifier: A8:35:04:5E:49:E9:E5:CD:3F:74:0C:D9:85:D0:6D:89:8A:C9:0D:A2 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584A698B2657CD1D1487661B5580 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/196d5b07-ad65-3b4c-b38f-c89a7951591e.roa Signing time: Sat 05 Jul 2025 01:00:50 +0000 ROA not before: Sat 05 Jul 2025 01:00:50 +0000 ROA not after: Fri 03 Oct 2025 01:00:50 +0000 asID: 203 IP address blocks: 192.85.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:69:8b:26:57:cd:1d:14:87:66:1b:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jul 5 01:00:50 2025 GMT Not After : Oct 3 01:00:50 2025 GMT Subject: CN=f822fc48-ab16-438c-9824-80c8da0a765a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ba:46:92:7d:2d:44:71:1d:05:83:9c:54:45: 24:42:06:7c:62:e4:66:41:ed:fb:d2:a3:e7:34:28: 9c:c0:5a:1b:82:13:7e:f3:d0:9b:51:9b:63:e1:fa: c0:20:a4:85:aa:9b:03:bd:d3:c2:d9:0a:64:31:d3: 44:37:12:81:4a:19:fa:d8:5d:21:40:f9:d6:f6:e2: 9c:0b:c1:11:db:d7:1f:9b:88:e2:88:2d:11:b1:b9: ea:47:08:53:05:f2:3b:4e:d9:ae:aa:e8:1a:52:41: 6f:24:f0:1d:10:43:39:5c:fa:15:99:9f:0e:b8:87: 3e:63:92:e5:93:ac:6e:6a:5d:bb:db:18:95:6a:f5: d8:6c:70:a2:f2:a5:67:ee:91:0c:5c:0f:d4:50:ba: 06:60:93:e1:f8:aa:1c:d0:13:9d:61:8a:c6:42:b1: 47:3d:58:b7:8b:8f:be:69:8d:e1:45:21:7e:67:a2: 4e:7f:02:fd:57:17:9c:a6:e6:76:30:95:5a:cf:b7: 9c:df:e1:53:0e:2c:f2:0a:ee:d9:cf:9b:84:bd:c6: 5d:11:80:74:77:ad:79:6b:29:4f:13:84:f9:81:4b: ed:6f:39:28:d9:e5:59:4b:b8:dd:6d:80:25:ba:8e: b9:70:eb:7f:6b:f0:4e:79:42:4c:4d:c4:6c:7a:0d: 8c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:35:04:5E:49:E9:E5:CD:3F:74:0C:D9:85:D0:6D:89:8A:C9:0D:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/196d5b07-ad65-3b4c-b38f-c89a7951591e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.85.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:46:27:29:b4:f7:f1:e9:68:12:11:d2:d7:4e:39:cf:95:9a: 62:61:94:46:d2:d1:4e:ad:4b:a1:e2:22:b3:74:66:08:7b:e4: e1:71:d5:2d:81:79:01:58:21:7d:29:40:f6:47:f1:2b:61:17: 71:4f:7d:a6:de:07:23:06:9a:88:70:c1:31:e2:df:95:da:45: 6c:be:d7:81:ba:f0:3f:08:00:3f:64:34:db:3b:2e:ed:d8:f1: fe:6d:3e:61:4c:1e:ad:d4:f5:f9:1a:b7:c7:c2:1b:42:6a:29: 81:56:f0:01:1f:40:4d:63:90:f6:b8:75:fb:df:d5:25:87:01: e9:cb:a0:22:91:36:c5:71:f6:36:f5:85:2a:4d:93:d0:0b:9f: da:a7:bf:d3:52:de:1d:ec:92:9b:16:d9:46:27:0c:50:c9:1b: e7:7d:b5:d2:f7:c9:62:83:2f:b7:00:6b:b4:b6:1e:75:08:bc: ee:fe:b4:27:a9:ac:8b:78:fd:d7:5d:3e:f0:62:ce:e6:56:8d: 39:56:ab:6a:31:be:38:ad:24:70:54:f0:3c:e7:70:0f:89:cd: 96:13:78:bc:88:d9:48:2e:33:8d:4e:8f:c3:5e:82:9f:a5:0a: 00:80:17:9f:3a:ef:61:bc:44:12:6a:cd:e2:9f:5a:2e:9d:2d: f9:7f:ac:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEppiyZXzR0Uh2YbVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDcwNTAxMDA1MFoXDTI1MTAwMzAxMDA1MFowLzEtMCsGA1UEAxMk ZjgyMmZjNDgtYWIxNi00MzhjLTk4MjQtODBjOGRhMGE3NjVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrpGkn0tRHEdBYOcVEUkQgZ8YuRmQe370qPn NCicwFobghN+89CbUZtj4frAIKSFqpsDvdPC2QpkMdNENxKBShn62F0hQPnW9uKc C8ER29cfm4jiiC0RsbnqRwhTBfI7TtmuqugaUkFvJPAdEEM5XPoVmZ8OuIc+Y5Ll k6xual272xiVavXYbHCi8qVn7pEMXA/UULoGYJPh+Koc0BOdYYrGQrFHPVi3i4++ aY3hRSF+Z6JOfwL9VxecpuZ2MJVaz7ec3+FTDizyCu7Zz5uEvcZdEYB0d615aylP E4T5gUvtbzko2eVZS7jdbYAluo65cOt/a/BOeUJMTcRseg2MqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKg1BF5J6eXNP3QM2YXQbYmKyQ2iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMTk2ZDViMDctYWQ2NS0z YjRjLWIzOGYtYzg5YTc5NTE1OTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFWMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGlGJym09/HpaBIR0tdOOc+VmmJhlEbS0U6tS6HiIrN0Zgh75OFx1S2B eQFYIX0pQPZH8SthF3FPfabeByMGmohwwTHi35XaRWy+14G68D8IAD9kNNs7Lu3Y 8f5tPmFMHq3U9fkat8fCG0JqKYFW8AEfQE1jkPa4dfvf1SWHAenLoCKRNsVx9jb1 hSpNk9ALn9qnv9NS3h3skpsW2UYnDFDJG+d9tdL3yWKDL7cAa7S2HnUIvO7+tCep rIt4/dddPvBizuZWjTlWq2oxvjitJHBU8DzncA+JzZYTeLyI2UguM41Oj8Negp+l CgCAF58672G8RBJqzeKfWi6dLfl/rCM= -----END CERTIFICATE-----Generated at Mon Jul 21 07:26:47 2025 by rpki-client