$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a138f2ed-6160-3698-8b3c-5f44e59b68ad.roa File: a138f2ed-6160-3698-8b3c-5f44e59b68ad.roa (raw, json) Hash identifier: 3orsOZz8GmQJqLJ0CdZbMrI4fcMhAgHZBwRBqwFSRHo= Subject key identifier: 0C:59:17:D9:4C:3E:2A:33:73:06:81:BE:70:15:17:08:27:5D:AA:94 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584A78E5FA1C08FF840C1DDA7080 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a138f2ed-6160-3698-8b3c-5f44e59b68ad.roa Signing time: Thu 10 Jul 2025 13:01:02 +0000 ROA not before: Thu 10 Jul 2025 13:01:02 +0000 ROA not after: Wed 08 Oct 2025 13:01:02 +0000 asID: 3360 IP address blocks: 192.57.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:78:e5:fa:1c:08:ff:84:0c:1d:da:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jul 10 13:01:02 2025 GMT Not After : Oct 8 13:01:02 2025 GMT Subject: CN=4dff1ac7-03cf-4a1b-8a37-5a28ff2d5ee0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:d6:b8:59:63:b2:ba:0d:fa:b1:c4:e8:80:a7: 6d:52:b8:55:37:4d:1c:24:be:7e:8b:ee:44:0d:52: 13:18:85:90:b2:c7:5c:60:2e:e2:81:fa:91:41:2e: 1c:96:8d:13:f4:52:83:8b:55:79:69:cd:99:26:40: eb:a5:74:d5:d3:34:9c:5d:87:01:50:fe:43:25:fd: f3:5d:17:a0:3b:38:26:a6:d3:56:53:76:01:52:56: 7b:12:5e:0b:b4:7c:3e:30:29:d4:9e:24:ab:ac:c5: 4f:2c:a9:aa:36:66:a9:3c:53:e8:5c:e7:49:6c:bb: 1b:c0:e6:fc:b6:2f:33:53:7e:b5:9f:74:71:89:11: c3:14:74:9b:a1:ee:b3:94:39:d8:a1:8d:53:6a:4d: 3d:aa:b5:90:8a:04:de:8c:ad:52:b5:45:7e:8f:61: e4:33:67:71:b1:d4:1c:d3:aa:6a:6a:8c:e1:b3:38: 88:5e:92:9d:a0:66:96:ce:92:27:a7:67:2a:c1:37: 62:26:fa:f8:44:50:7e:f5:bc:d4:d6:d7:91:b7:76: e9:0e:73:ad:96:df:fc:05:51:22:12:be:e4:d0:3c: 48:0d:57:e9:9e:1c:f7:79:fe:e4:a5:bf:c7:46:83: 5d:01:f2:51:38:d1:13:5b:8e:0d:52:9e:61:56:a5: c4:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:59:17:D9:4C:3E:2A:33:73:06:81:BE:70:15:17:08:27:5D:AA:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a138f2ed-6160-3698-8b3c-5f44e59b68ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.57.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:14:bd:42:9d:df:db:7f:cd:45:38:ac:c7:87:6e:2c:97:03: 8f:b3:46:9c:96:8d:d1:ed:de:f8:5c:73:db:6e:c6:ec:27:76: c5:52:00:ea:98:7d:01:7b:33:87:65:ab:4e:3a:d4:28:ea:27: eb:eb:75:1b:59:12:d4:d4:ae:c7:99:bb:ce:9b:49:b9:ea:58: a3:e7:1c:ab:e6:af:fe:00:28:86:89:26:15:f4:46:10:4e:b2: 38:6f:ac:7c:4c:59:5c:ce:38:3a:ba:65:e6:c9:b2:48:ad:b0: e5:3d:04:12:9d:f2:83:89:58:48:16:92:67:c4:10:88:3d:a3: f2:a4:75:ee:07:1f:22:6a:69:ee:a0:ad:98:f3:ad:e7:35:13: 96:d0:99:38:bd:7b:9b:47:66:4f:f7:04:18:de:71:f9:eb:a2: 83:2d:32:60:86:63:63:ff:53:27:3f:d5:63:63:09:2e:47:9d: 32:29:55:ee:93:3e:53:02:6f:0c:99:91:bc:70:15:17:a4:f2: 6e:3e:3c:77:f5:0c:f4:18:8b:33:cb:c5:0c:3a:c7:dc:b9:80: 88:17:c8:2a:e8:33:64:fc:c5:af:75:23:fb:d6:fb:55:a0:20: 15:a4:33:75:62:51:4d:18:81:08:7d:8c:83:c9:16:88:1d:18: 99:45:95:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp45focCP+EDB3acIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDcxMDEzMDEwMloXDTI1MTAwODEzMDEwMlowLzEtMCsGA1UEAxMk NGRmZjFhYzctMDNjZi00YTFiLThhMzctNWEyOGZmMmQ1ZWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgda4WWOyug36scTogKdtUrhVN00cJL5+i+5E DVITGIWQssdcYC7igfqRQS4clo0T9FKDi1V5ac2ZJkDrpXTV0zScXYcBUP5DJf3z XRegOzgmptNWU3YBUlZ7El4LtHw+MCnUniSrrMVPLKmqNmapPFPoXOdJbLsbwOb8 ti8zU361n3RxiRHDFHSboe6zlDnYoY1Tak09qrWQigTejK1StUV+j2HkM2dxsdQc 06pqaozhsziIXpKdoGaWzpInp2cqwTdiJvr4RFB+9bzU1teRt3bpDnOtlt/8BVEi Er7k0DxIDVfpnhz3ef7kpb/HRoNdAfJRONETW44NUp5hVqXEJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAxZF9lMPiozcwaBvnAVFwgnXaqUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYTEzOGYyZWQtNjE2MC0z Njk4LThiM2MtNWY0NGU1OWI2OGFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDlwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQUvUKd39t/zUU4rMeHbiyXA4+zRpyWjdHt3vhcc9tuxuwndsVSAOqY fQF7M4dlq0461CjqJ+vrdRtZEtTUrseZu86bSbnqWKPnHKvmr/4AKIaJJhX0RhBO sjhvrHxMWVzOODq6ZebJskitsOU9BBKd8oOJWEgWkmfEEIg9o/Kkde4HHyJqae6g rZjzrec1E5bQmTi9e5tHZk/3BBjecfnrooMtMmCGY2P/Uyc/1WNjCS5HnTIpVe6T PlMCbwyZkbxwFRek8m4+PHf1DPQYizPLxQw6x9y5gIgXyCroM2T8xa91I/vW+1Wg IBWkM3ViUU0YgQh9jIPJFogdGJlFld0= -----END CERTIFICATE-----Generated at Sun Jul 27 01:40:53 2025 by rpki-client