$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/815630ed-dca1-39aa-95e5-118f8e1106c1.roa File: 815630ed-dca1-39aa-95e5-118f8e1106c1.roa (raw, json) Hash identifier: Y69yFhha50tABxKntjZXazlPQ2w/6wnUSJZvsKQMxOc= Subject key identifier: 43:C5:BF:BA:D4:10:D8:CF:7B:7B:6F:87:AC:EB:60:CE:10:A8:0F:42 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584A7D15FDC675D37DD0EBF2B500 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/815630ed-dca1-39aa-95e5-118f8e1106c1.roa Signing time: Sat 12 Jul 2025 01:00:50 +0000 ROA not before: Sat 12 Jul 2025 01:00:50 +0000 ROA not after: Fri 10 Oct 2025 01:00:50 +0000 asID: 3360 IP address blocks: 192.57.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7d:15:fd:c6:75:d3:7d:d0:eb:f2:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jul 12 01:00:50 2025 GMT Not After : Oct 10 01:00:50 2025 GMT Subject: CN=2e61b22e-b0bb-4e36-b9b5-6b5becea4525 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:93:06:0b:9e:e7:5a:c4:78:33:78:a3:71:0b: 14:71:09:66:2f:8a:b1:93:eb:bd:75:5f:6d:82:6d: e3:a4:a7:78:9f:8c:4b:87:a3:24:3b:bd:31:f2:5b: d6:78:c7:4a:0f:51:5a:87:75:7f:ea:4f:7d:25:8f: 90:37:76:b8:43:1f:f8:4e:15:af:76:b2:34:fe:45: cc:e3:7a:df:fe:ff:b3:fa:af:6e:f2:76:bc:34:b2: c4:59:a4:8c:84:46:f7:d9:b0:36:3e:8b:48:23:89: be:e4:1a:21:4a:58:c3:98:aa:64:ec:78:46:a7:55: 7a:a1:1a:e3:be:ec:3c:92:a4:55:06:87:58:09:82: d4:dd:79:53:fc:46:bc:cb:e7:a8:14:58:9f:64:7e: 3f:48:39:78:ce:5f:36:53:64:94:1e:14:00:e8:6b: 85:88:cb:74:d0:44:01:a2:5f:5d:7c:c8:99:24:a0: 3a:3e:70:d2:e5:56:a2:1a:36:22:2a:25:6c:d1:57: 88:33:bb:92:4e:9d:d9:7f:50:16:83:51:ff:cf:52: de:b5:8a:ff:28:46:20:f7:15:df:9f:dd:fb:c5:18: e5:0b:aa:32:24:4b:8d:d0:79:be:f1:45:d1:82:dc: aa:51:86:cf:d4:50:d3:c9:41:02:26:e7:e9:80:83: 8e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:C5:BF:BA:D4:10:D8:CF:7B:7B:6F:87:AC:EB:60:CE:10:A8:0F:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/815630ed-dca1-39aa-95e5-118f8e1106c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.57.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:5c:a0:33:8b:67:ea:ca:94:b7:87:45:01:32:51:5d:20:03: eb:ec:25:29:98:77:7d:b3:39:03:69:7e:44:3b:83:c5:47:43: 55:ed:a2:a4:ef:ed:8f:a8:ff:d0:f2:6e:79:7f:b4:69:63:e5: c9:7b:55:9d:37:21:cc:af:76:d6:1e:4e:56:ad:76:c2:61:74: 7d:66:be:f7:58:f9:7f:8e:02:98:8a:bb:bf:3f:8a:7f:a4:6a: 4b:9a:59:67:29:9d:d2:e0:15:8e:ed:19:16:ca:fe:19:69:1e: 78:ce:92:97:ec:10:29:7f:1b:c7:41:87:d4:46:cb:f6:d9:7b: db:40:37:f9:72:48:4e:f8:2a:f4:8f:63:41:0f:9d:97:4d:10: 8b:57:4b:f8:31:02:3f:26:57:14:48:24:a0:c4:06:50:d4:1c: 86:62:de:fa:ee:67:b6:04:29:75:0e:f0:ff:b5:50:c0:65:91: 90:af:e3:b5:98:19:4c:f7:91:f5:4a:55:3a:8f:8a:e5:f5:c0: 55:97:ec:01:5e:b3:6d:a5:82:eb:1d:e0:63:9b:e3:1c:13:06: a6:1e:3a:48:c1:ef:bc:1c:90:54:01:28:91:c9:0c:5e:56:07: 5b:74:85:71:1f:08:1a:d4:c8:77:99:d2:73:b9:30:32:ed:0b: bd:21:c1:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp9Ff3GddN90OvytQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDcxMjAxMDA1MFoXDTI1MTAxMDAxMDA1MFowLzEtMCsGA1UEAxMk MmU2MWIyMmUtYjBiYi00ZTM2LWI5YjUtNmI1YmVjZWE0NTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJMGC57nWsR4M3ijcQsUcQlmL4qxk+u9dV9t gm3jpKd4n4xLh6MkO70x8lvWeMdKD1Fah3V/6k99JY+QN3a4Qx/4ThWvdrI0/kXM 43rf/v+z+q9u8na8NLLEWaSMhEb32bA2PotII4m+5BohSljDmKpk7HhGp1V6oRrj vuw8kqRVBodYCYLU3XlT/Ea8y+eoFFifZH4/SDl4zl82U2SUHhQA6GuFiMt00EQB ol9dfMiZJKA6PnDS5VaiGjYiKiVs0VeIM7uSTp3Zf1AWg1H/z1LetYr/KEYg9xXf n937xRjlC6oyJEuN0Hm+8UXRgtyqUYbP1FDTyUECJufpgIOO3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEPFv7rUENjPe3tvh6zrYM4QqA9CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvODE1NjMwZWQtZGNhMS0z OWFhLTk1ZTUtMTE4ZjhlMTEwNmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwDmYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADlcoDOLZ+rKlLeHRQEyUV0gA+vsJSmYd32zOQNpfkQ7g8VHQ1XtoqTv 7Y+o/9Dybnl/tGlj5cl7VZ03IcyvdtYeTlatdsJhdH1mvvdY+X+OApiKu78/in+k akuaWWcpndLgFY7tGRbK/hlpHnjOkpfsECl/G8dBh9RGy/bZe9tAN/lySE74KvSP Y0EPnZdNEItXS/gxAj8mVxRIJKDEBlDUHIZi3vruZ7YEKXUO8P+1UMBlkZCv47WY GUz3kfVKVTqPiuX1wFWX7AFes22lgusd4GOb4xwTBqYeOkjB77wckFQBKJHJDF5W B1t0hXEfCBrUyHeZ0nO5MDLtC70hwYE= -----END CERTIFICATE-----Generated at Sun Jul 27 01:44:16 2025 by rpki-client