$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ff52eb5b-3f24-3e24-9cd9-bfac8fe65e2f.roa File: ff52eb5b-3f24-3e24-9cd9-bfac8fe65e2f.roa (raw, json) Hash identifier: DwdO3RYnv4PYZeRCxqn+NW75+3Q8ZEBxiMECyoDgSNI= Subject key identifier: 61:C4:B8:0C:99:D6:B2:C0:3B:B2:9F:A6:90:15:5F:0F:86:E6:4B:AB Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584A6C55DEE5C72AB8CEE3EE7D80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ff52eb5b-3f24-3e24-9cd9-bfac8fe65e2f.roa Signing time: Sun 06 Jul 2025 01:00:49 +0000 ROA not before: Sun 06 Jul 2025 01:00:49 +0000 ROA not after: Sat 04 Oct 2025 01:00:49 +0000 asID: 202 IP address blocks: 216.240.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6c:55:de:e5:c7:2a:b8:ce:e3:ee:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jul 6 01:00:49 2025 GMT Not After : Oct 4 01:00:49 2025 GMT Subject: CN=5d89c9e1-9d03-42e1-8c0e-c0cffd61af27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:08:cf:9f:7e:26:bb:31:1e:2c:21:b5:e2:18: ba:89:d6:c6:96:6f:68:83:2b:98:a8:8a:e6:55:8d: b1:43:f7:76:7e:d9:31:1e:db:a6:be:76:ff:53:d5: c3:71:fe:9d:71:7d:16:41:b0:d9:65:ca:59:3c:6d: 80:f3:17:29:ea:91:fa:6a:7c:c0:83:5b:c1:6b:27: dd:5c:4e:8d:21:e5:20:91:2c:c6:63:a3:c0:de:00: 2c:51:f0:af:71:dc:9f:be:6a:dc:02:9b:82:62:e8: b0:54:02:b4:32:f9:e8:b4:07:f7:de:f7:8a:2c:09: 30:1e:7e:35:63:7d:cc:56:0d:41:31:24:c0:30:32: 2b:92:1f:89:29:4c:e6:e1:a9:a0:c2:d7:82:8d:c7: 33:19:19:64:e2:0b:44:dc:e7:25:2e:6c:d2:d1:cc: f3:3f:e6:9a:fd:4c:31:d2:d1:53:09:d2:c1:b5:7d: ac:e0:de:0d:b1:54:24:fa:7d:2d:72:46:12:07:5d: 56:ef:3c:fa:4b:13:45:8f:ad:e8:11:cc:9b:ea:aa: 40:d2:60:fe:15:f2:5a:62:9f:0a:a8:f5:18:d7:22: 27:fb:c2:8b:4a:c6:cc:36:c8:aa:1d:f3:fe:0f:d2: 67:11:47:38:94:66:3d:24:ec:1f:52:b4:19:3e:59: 27:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:C4:B8:0C:99:D6:B2:C0:3B:B2:9F:A6:90:15:5F:0F:86:E6:4B:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ff52eb5b-3f24-3e24-9cd9-bfac8fe65e2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 216.240.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:3f:31:5f:15:b3:b6:64:7c:8b:a1:37:79:19:4b:9e:4a:1a: 4e:f1:c1:51:8c:e8:cb:2b:9d:93:38:c5:37:ce:84:af:3f:91: dd:a3:93:be:a5:4c:97:7c:29:b6:08:3a:09:54:90:06:1f:f6: 00:e9:03:b6:94:ac:70:3e:71:bc:b9:30:b7:80:c2:ab:4e:65: 70:1e:67:2b:2b:fa:30:49:e0:6a:85:82:8e:74:58:ae:9a:35: 84:28:63:f1:ff:6f:e0:5c:62:88:90:25:e7:81:15:95:9c:a0: 9a:82:f9:ea:e0:cb:74:f1:8f:94:33:74:cc:f2:92:44:bd:b3: 8d:5d:42:28:ac:b3:92:c0:66:e3:90:0e:f6:7b:67:c8:03:72: c4:c3:e0:77:19:b8:bf:a4:ad:40:4f:1b:04:a3:0a:26:4c:5f: 0b:4f:8a:e7:87:9b:e2:e6:c4:20:c6:d3:02:fb:1b:15:ee:8b: 0f:45:34:bb:d9:6a:ed:02:50:28:2b:d2:56:d2:32:ff:8e:ab: 15:d1:64:53:73:2f:ea:d8:0c:a2:0f:13:cd:4c:c7:e7:14:28: 74:5c:35:4f:d0:44:11:60:ac:34:8a:b7:64:d6:d8:0f:d4:ea: 6c:93:d2:7f:8f:63:fd:3a:b2:fc:5b:21:59:52:7e:e4:e8:3f: 24:18:d7:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpsVd7lxyq4zuPufYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDcwNjAxMDA0OVoXDTI1MTAwNDAxMDA0OVowLzEtMCsGA1UEAxMk NWQ4OWM5ZTEtOWQwMy00MmUxLThjMGUtYzBjZmZkNjFhZjI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAjPn34muzEeLCG14hi6idbGlm9ogyuYqIrm VY2xQ/d2ftkxHtumvnb/U9XDcf6dcX0WQbDZZcpZPG2A8xcp6pH6anzAg1vBayfd XE6NIeUgkSzGY6PA3gAsUfCvcdyfvmrcApuCYuiwVAK0MvnotAf33veKLAkwHn41 Y33MVg1BMSTAMDIrkh+JKUzm4amgwteCjcczGRlk4gtE3OclLmzS0czzP+aa/Uwx 0tFTCdLBtX2s4N4NsVQk+n0tckYSB11W7zz6SxNFj63oEcyb6qpA0mD+FfJaYp8K qPUY1yIn+8KLSsbMNsiqHfP+D9JnEUc4lGY9JOwfUrQZPlknsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGHEuAyZ1rLAO7KfppAVXw+G5kurMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZmY1MmViNWItM2YyNC0z ZTI0LTljZDktYmZhYzhmZTY1ZTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2PDAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJs/MV8Vs7ZkfIuhN3kZS55KGk7xwVGM6MsrnZM4xTfOhK8/kd2jk76l TJd8KbYIOglUkAYf9gDpA7aUrHA+cby5MLeAwqtOZXAeZysr+jBJ4GqFgo50WK6a NYQoY/H/b+BcYoiQJeeBFZWcoJqC+ergy3Txj5QzdMzykkS9s41dQiiss5LAZuOQ DvZ7Z8gDcsTD4HcZuL+krUBPGwSjCiZMXwtPiueHm+LmxCDG0wL7GxXuiw9FNLvZ au0CUCgr0lbSMv+OqxXRZFNzL+rYDKIPE81Mx+cUKHRcNU/QRBFgrDSKt2TW2A/U 6myT0n+PY/06svxbIVlSfuToPyQY1xs= -----END CERTIFICATE-----Generated at Mon Jul 21 18:08:06 2025 by rpki-client