$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4dd0e681-9788-3d8f-b319-7b0dab1f4c76.roa File: 4dd0e681-9788-3d8f-b319-7b0dab1f4c76.roa (raw, json) Hash identifier: yiAf1kqnOR9LpneENabCCLx0bMtu6wFpHcz3OlHmmoA= Subject key identifier: 34:33:6D:C4:53:27:7E:17:16:25:0C:8A:94:0B:73:0F:6E:99:75:13 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584B047C0C4CC49E7D7E4C98F180 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4dd0e681-9788-3d8f-b319-7b0dab1f4c76.roa Signing time: Fri 29 Aug 2025 13:00:41 +0000 ROA not before: Fri 29 Aug 2025 13:00:41 +0000 ROA not after: Thu 27 Nov 2025 14:00:41 +0000 asID: 202 IP address blocks: 206.164.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:7c:0c:4c:c4:9e:7d:7e:4c:98:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 29 13:00:41 2025 GMT Not After : Nov 27 14:00:41 2025 GMT Subject: CN=fe3bdd38-ac2e-48af-afa7-8772c12dd742 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f4:f9:a3:55:8a:a5:03:84:51:fb:4e:1e:bf: 6c:41:4f:1d:ee:84:d0:73:a0:c5:e5:6a:dc:92:3a: ac:67:df:89:d8:ae:f7:b5:d0:cf:25:36:92:57:f5: a4:b1:80:69:59:75:7d:ba:cc:b2:c9:23:d8:5d:bc: 80:d6:d6:74:e8:00:2f:c1:34:1a:87:54:d5:18:a1: dc:b2:54:f9:95:ea:10:00:5a:77:14:66:17:ba:2c: a3:db:fc:0a:9f:2c:33:fd:61:b7:09:e2:4d:3d:cb: 40:1b:b2:03:ba:6b:f9:88:3a:00:99:ee:64:10:5e: ad:75:f8:4a:8a:59:5d:4d:24:08:ed:21:5e:ff:13: 04:86:37:a3:1d:57:1c:32:b4:18:86:83:89:f3:2f: 8b:b1:ea:97:81:3a:7b:a6:b6:e1:c2:df:1f:84:e3: be:e7:0c:92:30:dd:ba:44:a7:b7:68:f2:a6:e1:49: ba:96:de:02:4f:a0:17:83:3e:ac:6d:d5:a4:96:53: 10:7e:7a:62:52:62:e3:eb:9b:60:6e:96:ce:25:74: 46:5a:a6:88:08:c1:60:2d:90:a1:a9:26:de:c5:0d: 95:dd:95:1e:0b:49:5f:03:8e:95:c8:79:d9:1b:13: 50:e0:57:38:b1:f3:60:a9:19:3a:82:c2:8b:f3:09: c3:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:33:6D:C4:53:27:7E:17:16:25:0C:8A:94:0B:73:0F:6E:99:75:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4dd0e681-9788-3d8f-b319-7b0dab1f4c76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 206.164.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:4e:0d:a9:d8:55:2f:ff:94:8d:39:8e:36:f3:a3:b7:31:1f: 91:1d:8e:09:39:a4:bf:a1:5e:79:93:0b:e9:99:67:d6:b0:b2: 70:f5:f6:bc:e1:c4:2e:ea:10:8f:b7:94:b2:ce:c6:65:c7:9c: f3:a7:f8:f4:87:5d:ed:92:57:ac:31:72:2c:81:9a:97:cb:81: 52:d2:ca:86:02:40:25:58:b1:bb:96:f5:82:08:a5:da:cc:70: ab:df:ee:d1:0a:6f:e3:2a:72:6d:b1:04:ba:e5:1e:49:a9:62: 9c:2c:e5:02:2b:66:49:8d:e2:5a:bd:7a:2b:76:a2:d8:5a:58: 9b:85:82:0b:81:86:c6:26:ea:6d:eb:6a:dd:9f:bc:fe:a8:b6: 9d:59:59:61:83:97:71:29:6f:77:62:2f:92:4d:1b:2b:a3:f9: 1f:82:c0:60:5a:20:81:96:ff:a2:66:65:97:2b:fd:e7:1a:d5: 2b:f7:05:67:a3:37:f9:ed:18:5a:28:ca:41:4a:f6:48:43:07: dc:ad:10:3c:2a:24:74:a4:ef:93:01:d8:94:f8:9e:79:c3:3f: 1f:2a:81:f1:68:8a:56:5a:67:7c:e1:0d:69:0c:03:d7:30:89: 18:57:3a:f6:ff:d9:28:34:7f:ef:14:b5:1b:08:6f:0b:5b:2b: 6b:aa:ba:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsEfAxMxJ59fkyY8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk ZmUzYmRkMzgtYWMyZS00OGFmLWFmYTctODc3MmMxMmRkNzQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/T5o1WKpQOEUftOHr9sQU8d7oTQc6DF5Wrc kjqsZ9+J2K73tdDPJTaSV/WksYBpWXV9usyyySPYXbyA1tZ06AAvwTQah1TVGKHc slT5leoQAFp3FGYXuiyj2/wKnywz/WG3CeJNPctAG7IDumv5iDoAme5kEF6tdfhK illdTSQI7SFe/xMEhjejHVccMrQYhoOJ8y+LseqXgTp7prbhwt8fhOO+5wySMN26 RKe3aPKm4Um6lt4CT6AXgz6sbdWkllMQfnpiUmLj65tgbpbOJXRGWqaICMFgLZCh qSbexQ2V3ZUeC0lfA46VyHnZGxNQ4Fc4sfNgqRk6gsKL8wnDqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDQzbcRTJ34XFiUMipQLcw9umXUTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNGRkMGU2ODEtOTc4OC0z ZDhmLWIzMTktN2IwZGFiMWY0Yzc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqSKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJtODanYVS//lI05jjbzo7cxH5Edjgk5pL+hXnmTC+mZZ9awsnD19rzh xC7qEI+3lLLOxmXHnPOn+PSHXe2SV6wxciyBmpfLgVLSyoYCQCVYsbuW9YIIpdrM cKvf7tEKb+Mqcm2xBLrlHkmpYpws5QIrZkmN4lq9eit2othaWJuFgguBhsYm6m3r at2fvP6otp1ZWWGDl3Epb3diL5JNGyuj+R+CwGBaIIGW/6JmZZcr/eca1Sv3BWej N/ntGFooykFK9khDB9ytEDwqJHSk75MB2JT4nnnDPx8qgfFoilZaZ3zhDWkMA9cw iRhXOvb/2Sg0f+8UtRsIbwtbK2uqun8= -----END CERTIFICATE-----Generated at Sat Sep 6 10:17:38 2025 by rpki-client