$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b4e902ef-3861-3de8-9e6b-51aa1b246987.roa File: b4e902ef-3861-3de8-9e6b-51aa1b246987.roa (raw, json) Hash identifier: 4JQP5SybATY7IVOP+a+NgFc3cc7BvENfgfp+nyGrDqc= Subject key identifier: 39:BC:3F:C8:5C:15:4A:20:2F:B9:6F:41:79:B5:ED:8F:B4:73:FE:01 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584A698B22A323E93E25794F5680 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b4e902ef-3861-3de8-9e6b-51aa1b246987.roa Signing time: Sat 05 Jul 2025 01:00:50 +0000 ROA not before: Sat 05 Jul 2025 01:00:50 +0000 ROA not after: Fri 03 Oct 2025 01:00:50 +0000 asID: 3360 IP address blocks: 192.57.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:69:8b:22:a3:23:e9:3e:25:79:4f:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jul 5 01:00:50 2025 GMT Not After : Oct 3 01:00:50 2025 GMT Subject: CN=6784739d-1ae9-4c0e-8169-44c66256e762 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:6a:c5:f8:86:ba:d5:f3:e7:82:0a:52:ef:36: 7f:1a:33:02:06:33:26:97:6f:2e:aa:8e:9b:bf:09: e0:e1:4c:2d:21:89:3d:ee:be:79:d4:c3:71:08:34: 78:bc:5b:0e:29:2f:c8:71:da:a2:21:8a:8d:0c:4b: 16:1e:15:1f:fa:d0:7a:bc:47:02:4f:ed:6a:14:0d: 95:ea:0f:ab:7a:eb:4f:8e:b4:72:7c:f2:7e:5b:6d: bd:eb:5c:ee:13:46:29:8d:08:2f:10:1f:f1:18:c8: e6:4e:40:cf:07:6c:81:fb:94:e3:f4:31:34:d0:fe: 7e:ae:c4:c4:02:a6:2b:ac:ff:3e:a1:89:54:a2:fe: ec:bb:25:bd:33:e9:7a:65:50:b0:4a:e6:80:c0:27: 5a:94:3d:d1:54:b8:c1:b6:e0:bb:39:5a:33:96:03: a2:c7:ea:76:3b:db:6a:59:78:9a:7f:cf:86:12:1c: fd:aa:f3:2a:8a:d0:aa:ed:b7:3b:0b:a6:08:7a:0d: d7:40:72:72:ca:bc:e7:57:f5:08:71:42:42:3a:10: 7a:d9:b2:85:4d:3e:91:44:42:f5:74:0b:ba:4b:74: dc:34:16:dc:41:ca:6d:a8:0f:55:a9:38:d1:d5:bd: b3:85:3d:55:9a:0b:83:84:85:87:24:60:81:ab:24: 2b:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:BC:3F:C8:5C:15:4A:20:2F:B9:6F:41:79:B5:ED:8F:B4:73:FE:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b4e902ef-3861-3de8-9e6b-51aa1b246987.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.57.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:ce:05:3d:35:a4:b7:54:2d:a2:12:ea:b9:52:32:d6:26:1d: 31:ca:ec:1b:57:6f:9f:27:5a:8c:0e:af:5a:7d:84:d7:1b:13: c1:96:7d:ec:ca:a8:d9:4e:65:c3:d2:bc:f4:78:87:df:d4:03: 9b:e7:73:d9:10:df:be:e7:53:8d:a2:9c:c0:77:03:c1:02:c1: 4a:ed:af:8f:a6:3e:8a:ce:ff:c5:f3:91:c7:cf:2d:98:06:3a: 0e:41:9a:fb:85:5f:bd:9d:c5:f4:61:af:f3:22:f9:ce:3f:2f: 40:74:ec:83:a9:11:c9:b9:9c:8d:ad:b4:b9:e7:bb:7b:27:2f: da:9b:68:5c:89:f0:76:d4:96:69:b2:7a:89:73:2b:21:77:40: 7f:f5:4d:d2:bc:48:79:10:62:15:0f:13:a7:b4:7e:8f:d6:5c: fe:6c:13:54:58:89:6b:27:00:a4:4b:df:8c:21:e0:61:c6:2b: bc:81:68:5a:2c:1c:1b:8c:7e:74:e3:91:3e:8a:3b:4b:45:da: 85:04:6b:57:b8:7c:49:25:5f:59:9a:74:24:e6:94:d4:1d:23: 21:29:9d:63:bb:42:bb:f2:d8:a4:a7:32:3f:22:2f:69:c9:da: db:d7:ab:88:34:6e:91:80:97:1e:87:e4:8b:65:08:2a:e2:54: 97:99:4d:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEppiyKjI+k+JXlPVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDcwNTAxMDA1MFoXDTI1MTAwMzAxMDA1MFowLzEtMCsGA1UEAxMk Njc4NDczOWQtMWFlOS00YzBlLTgxNjktNDRjNjYyNTZlNzYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmrF+Ia61fPnggpS7zZ/GjMCBjMml28uqo6b vwng4UwtIYk97r551MNxCDR4vFsOKS/IcdqiIYqNDEsWHhUf+tB6vEcCT+1qFA2V 6g+reutPjrRyfPJ+W22961zuE0YpjQgvEB/xGMjmTkDPB2yB+5Tj9DE00P5+rsTE AqYrrP8+oYlUov7suyW9M+l6ZVCwSuaAwCdalD3RVLjBtuC7OVozlgOix+p2O9tq WXiaf8+GEhz9qvMqitCq7bc7C6YIeg3XQHJyyrznV/UIcUJCOhB62bKFTT6RREL1 dAu6S3TcNBbcQcptqA9VqTjR1b2zhT1VmguDhIWHJGCBqyQrpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDm8P8hcFUogL7lvQXm17Y+0c/4BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYjRlOTAyZWYtMzg2MS0z ZGU4LTllNmItNTFhYTFiMjQ2OTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwDmQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI3OBT01pLdULaIS6rlSMtYmHTHK7BtXb58nWowOr1p9hNcbE8GWfezK qNlOZcPSvPR4h9/UA5vnc9kQ377nU42inMB3A8ECwUrtr4+mPorO/8XzkcfPLZgG Og5BmvuFX72dxfRhr/Mi+c4/L0B07IOpEcm5nI2ttLnnu3snL9qbaFyJ8HbUlmmy eolzKyF3QH/1TdK8SHkQYhUPE6e0fo/WXP5sE1RYiWsnAKRL34wh4GHGK7yBaFos HBuMfnTjkT6KO0tF2oUEa1e4fEklX1madCTmlNQdIyEpnWO7Qrvy2KSnMj8iL2nJ 2tvXq4g0bpGAlx6H5ItlCCriVJeZTc4= -----END CERTIFICATE-----Generated at Sun Jul 27 01:43:46 2025 by rpki-client