$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/289c3ffb-8f18-3eb0-ad88-9eb2781b8ab3.roa File: 289c3ffb-8f18-3eb0-ad88-9eb2781b8ab3.roa (raw, json) Hash identifier: UJtINoAgQ9Q5uzX/GhbMNaz+HRVt8JBAELb4clK+AJQ= Subject key identifier: FB:D5:2B:87:FA:1C:72:83:EB:74:24:71:0E:46:80:71:3E:0D:09:08 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584A698B2546066F6D02F0FBEEC0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/289c3ffb-8f18-3eb0-ad88-9eb2781b8ab3.roa Signing time: Sat 05 Jul 2025 01:00:50 +0000 ROA not before: Sat 05 Jul 2025 01:00:50 +0000 ROA not after: Fri 03 Oct 2025 01:00:50 +0000 asID: 202 IP address blocks: 192.85.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:69:8b:25:46:06:6f:6d:02:f0:fb:ee:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jul 5 01:00:50 2025 GMT Not After : Oct 3 01:00:50 2025 GMT Subject: CN=4c8e5f98-d4a2-4e3f-a53c-edfb85b55f81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ac:75:4c:d5:0b:b5:7c:61:23:c0:11:9e:06: df:aa:cd:19:c5:d5:eb:21:20:fe:8a:0d:30:88:ce: d4:97:17:e3:5f:24:89:2f:4b:9c:0a:49:86:0e:17: ba:c5:ac:c6:ff:37:95:28:58:c5:3f:a3:a8:44:c7: d4:fa:3a:6e:a2:02:04:83:f6:fa:39:20:d9:41:82: 74:23:91:80:13:55:f2:6b:2f:98:c8:fd:73:e1:2a: d3:6b:ba:23:4d:11:61:ca:52:c2:46:5e:e9:46:f0: 6a:49:a6:6c:0d:1e:6d:c2:8e:7b:de:1c:9d:db:7a: c2:a8:c0:f3:34:6b:8d:e0:2c:98:cf:2c:78:3f:2e: c8:80:dd:35:f8:bf:be:26:1b:d6:6a:9d:e6:92:36: 48:6b:96:41:91:6f:4f:1d:87:5c:2d:bc:be:70:3e: ad:93:a5:2a:85:1a:67:4e:e2:c9:cf:6d:5c:56:aa: 3b:ab:9a:95:17:28:07:4c:6c:38:c8:64:3e:bf:a0: d1:89:ac:cc:00:c3:a1:79:80:8a:55:1b:8c:d9:52: 85:5a:68:72:ea:f9:01:0a:2b:b5:54:05:7b:73:2c: 4e:08:c4:8d:35:70:84:af:66:38:34:b4:43:b3:b5: 7e:09:c8:97:d8:08:02:56:dc:7c:26:6f:90:6f:0a: 6a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:D5:2B:87:FA:1C:72:83:EB:74:24:71:0E:46:80:71:3E:0D:09:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/289c3ffb-8f18-3eb0-ad88-9eb2781b8ab3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.85.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:0a:f2:0b:d9:29:01:58:3a:c8:e8:a1:eb:2b:a3:50:f3:98: 95:c3:3b:d6:f1:70:53:a7:18:dd:74:83:ba:f7:86:58:87:0f: 8a:fe:f1:bf:ef:7a:2e:d8:bf:52:84:b1:ad:18:dd:23:0c:ed: 00:8f:4d:5d:1e:89:79:fe:98:cc:89:83:6b:14:69:77:0e:84: 61:f4:3f:c2:a9:37:9c:86:5c:a9:b1:46:78:1f:1b:be:a8:65: 4b:59:ad:3f:e2:13:42:8a:da:bc:34:e0:c9:ed:76:d5:f0:e2: dc:e5:b5:1f:b8:0e:65:dd:76:4e:c6:fc:1b:cb:fb:a7:30:e0: 68:14:8f:e7:41:9f:47:c7:1a:b6:ad:3f:fa:8e:f4:52:fe:30: a2:83:e9:35:0c:a2:da:51:65:30:69:51:98:20:26:6d:52:98: 94:7f:84:6f:a3:8a:8f:f5:3a:66:06:fd:ac:ac:6c:38:0e:a0: e1:27:d0:91:2d:09:b3:1b:1a:52:58:8d:85:b3:18:ab:d4:9f: e4:54:11:71:d2:9e:9c:cb:a3:65:46:5a:1b:b9:52:67:05:8f: 24:f2:16:3e:db:4c:52:81:2f:9f:2b:6b:0d:69:75:2f:ca:0b: a9:c4:7d:36:67:d6:f2:0f:9d:91:e5:cc:22:df:80:8d:b2:b1: a4:7b:66:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEppiyVGBm9tAvD77sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDcwNTAxMDA1MFoXDTI1MTAwMzAxMDA1MFowLzEtMCsGA1UEAxMk NGM4ZTVmOTgtZDRhMi00ZTNmLWE1M2MtZWRmYjg1YjU1ZjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6x1TNULtXxhI8ARngbfqs0ZxdXrISD+ig0w iM7UlxfjXySJL0ucCkmGDhe6xazG/zeVKFjFP6OoRMfU+jpuogIEg/b6OSDZQYJ0 I5GAE1Xyay+YyP1z4SrTa7ojTRFhylLCRl7pRvBqSaZsDR5two573hyd23rCqMDz NGuN4CyYzyx4Py7IgN01+L++JhvWap3mkjZIa5ZBkW9PHYdcLby+cD6tk6UqhRpn TuLJz21cVqo7q5qVFygHTGw4yGQ+v6DRiazMAMOheYCKVRuM2VKFWmhy6vkBCiu1 VAV7cyxOCMSNNXCEr2Y4NLRDs7V+CciX2AgCVtx8Jm+Qbwpq9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPvVK4f6HHKD63QkcQ5GgHE+DQkIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMjg5YzNmZmItOGYxOC0z ZWIwLWFkODgtOWViMjc4MWI4YWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFVYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAsK8gvZKQFYOsjooesro1DzmJXDO9bxcFOnGN10g7r3hliHD4r+8b/v ei7Yv1KEsa0Y3SMM7QCPTV0eiXn+mMyJg2sUaXcOhGH0P8KpN5yGXKmxRngfG76o ZUtZrT/iE0KK2rw04MntdtXw4tzltR+4DmXddk7G/BvL+6cw4GgUj+dBn0fHGrat P/qO9FL+MKKD6TUMotpRZTBpUZggJm1SmJR/hG+jio/1OmYG/aysbDgOoOEn0JEt CbMbGlJYjYWzGKvUn+RUEXHSnpzLo2VGWhu5UmcFjyTyFj7bTFKBL58raw1pdS/K C6nEfTZn1vIPnZHlzCLfgI2ysaR7Zv8= -----END CERTIFICATE-----Generated at Mon Jul 21 18:11:50 2025 by rpki-client