$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5b370caf-082e-3372-a9e8-5edb60bcb0a2.roa File: 5b370caf-082e-3372-a9e8-5edb60bcb0a2.roa (raw, json) Hash identifier: IchPYiNNrKc4h4pF9I3aXQDEi4gH5AQsbJJ0fVZK5aE= Subject key identifier: DB:29:66:76:68:25:04:66:34:00:98:5C:A7:3D:39:A3:AD:E5:50:05 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584A698B289FA2E5648B3759C280 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5b370caf-082e-3372-a9e8-5edb60bcb0a2.roa Signing time: Sat 05 Jul 2025 01:00:50 +0000 ROA not before: Sat 05 Jul 2025 01:00:50 +0000 ROA not after: Fri 03 Oct 2025 01:00:50 +0000 asID: 203 IP address blocks: 199.228.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:69:8b:28:9f:a2:e5:64:8b:37:59:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jul 5 01:00:50 2025 GMT Not After : Oct 3 01:00:50 2025 GMT Subject: CN=a185d3c7-dead-4ba6-8990-fa7ecc9e90c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:de:e2:d1:8d:52:e0:21:68:b4:f8:77:a7:ca: 31:cd:3e:93:74:27:88:96:f8:f2:76:ce:54:c4:a9: 5e:82:15:00:16:1c:ec:17:fe:a6:d2:02:2e:59:dd: 6b:ac:da:b4:9e:73:14:5b:6f:a0:d1:3d:f0:ad:26: 65:30:4f:f9:0f:9e:a2:25:0f:42:2f:a8:1f:a2:1f: a8:ca:d2:13:68:28:c4:8b:22:bc:54:3e:b9:aa:3c: f2:c9:77:55:0c:34:90:d5:7a:0a:9f:61:34:0b:ee: 90:ee:86:9b:ac:bc:4e:1a:c5:ce:63:4c:30:58:65: 5c:f4:38:2a:22:37:a1:a2:3b:f6:39:db:72:87:a1: f0:ba:22:9d:cb:5b:42:82:bd:33:6e:b8:53:38:4a: bb:74:dd:2a:cf:95:29:90:61:13:aa:06:85:1d:42: e0:35:2c:5e:f1:d1:dc:9c:37:ed:75:db:de:47:40: bf:ff:b7:b4:bb:81:25:2f:55:bd:8b:73:a5:4c:4c: 15:a0:ea:05:6c:0f:82:41:35:77:f0:f0:e0:c5:e2: 37:84:52:19:fc:ac:24:5f:dc:25:af:49:89:2e:25: 73:93:96:53:1f:9d:8c:2f:dc:fa:25:9c:7b:75:75: 9d:84:49:d9:f5:aa:a8:01:cd:5e:00:15:d0:7b:ef: 19:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:29:66:76:68:25:04:66:34:00:98:5C:A7:3D:39:A3:AD:E5:50:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5b370caf-082e-3372-a9e8-5edb60bcb0a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 199.228.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:a7:0c:89:c2:c9:fb:06:1b:3b:d7:f0:dc:cc:ed:88:ba:6e: ef:2d:b2:30:5c:32:94:2b:33:6d:34:11:de:d0:c2:e0:c7:06: a2:f2:5e:2e:c9:b0:8f:c3:f1:a7:9f:aa:d0:e1:3b:2f:a2:4f: 15:4a:55:ce:cd:c1:b2:dd:37:1f:2a:7b:d6:0f:51:88:f7:a2: 1c:66:91:ba:2c:12:13:a2:f9:c8:df:3c:ed:11:a4:63:dd:4d: 72:34:c3:68:dd:e4:a1:6b:b0:db:29:a9:17:8e:54:af:2f:92: 02:13:9d:bd:5c:4a:86:4c:32:9e:34:52:95:6a:50:ad:d4:9f: 82:cf:87:0c:8c:49:d8:1f:eb:53:e1:1c:d5:99:ba:96:f4:47: 75:4e:2f:7a:db:3e:c5:c3:13:3b:53:91:f8:eb:2a:3d:a6:ff: b5:ac:2a:97:19:4b:44:b5:da:09:c3:c2:ab:da:09:05:17:bf: 09:5f:54:e0:e3:61:a9:00:85:9f:d6:a6:fe:b1:fd:e2:9b:47: a2:c8:90:06:14:1b:a1:ca:d6:98:0c:9f:30:e9:5d:57:2f:1a: 13:8a:6d:a3:7e:ce:69:5d:ba:35:fc:df:c2:70:29:c4:82:bb: 00:28:a0:57:8b:e6:92:5f:87:63:80:82:e4:f8:0a:fb:6f:5c: d4:25:db:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEppiyifouVkizdZwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDcwNTAxMDA1MFoXDTI1MTAwMzAxMDA1MFowLzEtMCsGA1UEAxMk YTE4NWQzYzctZGVhZC00YmE2LTg5OTAtZmE3ZWNjOWU5MGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlt7i0Y1S4CFotPh3p8oxzT6TdCeIlvjyds5U xKleghUAFhzsF/6m0gIuWd1rrNq0nnMUW2+g0T3wrSZlME/5D56iJQ9CL6gfoh+o ytITaCjEiyK8VD65qjzyyXdVDDSQ1XoKn2E0C+6Q7oabrLxOGsXOY0wwWGVc9Dgq Ijehojv2Odtyh6HwuiKdy1tCgr0zbrhTOEq7dN0qz5UpkGETqgaFHULgNSxe8dHc nDftddveR0C//7e0u4ElL1W9i3OlTEwVoOoFbA+CQTV38PDgxeI3hFIZ/KwkX9wl r0mJLiVzk5ZTH52ML9z6JZx7dXWdhEnZ9aqoAc1eABXQe+8ZvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNspZnZoJQRmNACYXKc9OaOt5VAFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNWIzNzBjYWYtMDgyZS0z MzcyLWE5ZTgtNWVkYjYwYmNiMGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx+SPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJmnDInCyfsGGzvX8NzM7Yi6bu8tsjBcMpQrM200Ed7QwuDHBqLyXi7J sI/D8aefqtDhOy+iTxVKVc7NwbLdNx8qe9YPUYj3ohxmkbosEhOi+cjfPO0RpGPd TXI0w2jd5KFrsNspqReOVK8vkgITnb1cSoZMMp40UpVqUK3Un4LPhwyMSdgf61Ph HNWZupb0R3VOL3rbPsXDEztTkfjrKj2m/7WsKpcZS0S12gnDwqvaCQUXvwlfVODj YakAhZ/Wpv6x/eKbR6LIkAYUG6HK1pgMnzDpXVcvGhOKbaN+zmldujX838JwKcSC uwAooFeL5pJfh2OAguT4CvtvXNQl2ys= -----END CERTIFICATE-----Generated at Mon Jul 21 12:24:34 2025 by rpki-client