$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/643b9ccb-ad14-3b04-8e99-7af9f6b7d00c.roa File: 643b9ccb-ad14-3b04-8e99-7af9f6b7d00c.roa (raw, json) Hash identifier: KR1wdk5nfNy3VEzS9s8JsJlGreKf8lVOYXAI+l7ZL4o= Subject key identifier: A7:9C:E2:5D:70:42:98:58:79:F2:ED:CC:32:33:9C:B9:5D:01:82:0B Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584B047C0AEF16639DE51C72D8E0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/643b9ccb-ad14-3b04-8e99-7af9f6b7d00c.roa Signing time: Fri 29 Aug 2025 13:00:41 +0000 ROA not before: Fri 29 Aug 2025 13:00:41 +0000 ROA not after: Thu 27 Nov 2025 14:00:41 +0000 asID: 3360 IP address blocks: 15.176.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:7c:0a:ef:16:63:9d:e5:1c:72:d8:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 29 13:00:41 2025 GMT Not After : Nov 27 14:00:41 2025 GMT Subject: CN=c21d9b9d-d18c-4482-9a20-979b9ed6e08b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:40:0e:7a:d3:bd:43:47:07:c1:4b:8b:da:ac: 02:53:9d:77:2a:27:27:d8:bd:9b:74:1b:7a:b2:7b: ea:88:6e:67:ac:bf:e9:09:9a:e0:35:8c:24:ea:e2: a0:76:2d:b0:b7:ed:3a:93:af:56:db:47:01:0f:51: 11:4b:11:a0:25:16:56:52:4f:8a:8f:d2:2e:69:bc: ad:f4:4d:15:15:63:8a:d6:01:28:b3:18:02:ad:a7: 49:0e:29:48:0c:84:95:12:a8:3f:85:c3:09:2f:88: 60:2a:b9:73:38:63:1f:33:a2:d4:ee:d9:ea:68:b3: d2:3a:89:fb:75:0f:41:c1:9b:36:97:92:1d:9a:23: af:48:34:bd:af:58:c7:76:29:a3:09:93:4a:0a:4e: e1:94:cd:e6:a4:ea:66:ba:ed:04:f3:0c:b2:ef:76: a8:4e:fd:11:b7:9b:ab:15:4b:57:87:6b:82:ce:2d: e9:6a:9e:01:7d:5d:f0:72:ad:1f:97:e8:67:52:be: 4d:5e:5d:0b:0f:b5:0b:9f:29:0c:29:2e:04:b4:0c: b6:ad:0a:97:dd:88:1a:31:4a:d1:8e:72:9a:c0:4f: d5:43:35:28:81:75:c1:cb:51:9b:b4:d8:ed:4c:1a: 22:85:b8:d8:c0:9b:32:e1:9e:a3:4b:0c:6d:27:17: 09:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:9C:E2:5D:70:42:98:58:79:F2:ED:CC:32:33:9C:B9:5D:01:82:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/643b9ccb-ad14-3b04-8e99-7af9f6b7d00c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 15.176.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:47:44:46:56:ff:04:28:d9:0c:12:b4:1b:f0:52:69:43:2e: dd:56:92:d9:2c:3c:bd:49:46:ef:66:bd:cd:df:1b:02:24:04: 3e:37:0a:6e:fe:a8:e9:6a:5a:67:da:58:f7:ee:45:4c:2f:a5: 53:84:80:50:52:ad:74:34:8d:6e:e1:2b:3f:bc:45:65:8e:40: 9a:0c:37:f3:37:7d:e3:3e:45:5c:67:13:20:66:54:c7:0d:ad: f9:49:e0:0e:e6:20:cf:6c:b6:b8:09:49:63:8b:40:81:dd:39: 95:78:b6:1a:bf:cd:ec:84:30:29:63:8c:fd:37:84:68:01:78: 91:ff:f3:58:d9:5f:5f:b6:e7:3c:a0:52:92:81:87:fc:70:0d: 92:22:ac:80:cf:5f:25:52:20:69:40:9c:8f:c3:e3:38:b1:bc: 0d:f0:88:ca:8b:33:f8:d0:30:bd:99:c7:41:7c:d7:60:33:8d: 4e:1d:f4:af:6c:e3:c2:11:22:ce:16:e1:bb:00:cd:46:aa:a9: 5e:bd:a5:87:c3:a2:23:c3:9d:44:6f:a5:f2:18:80:05:a4:70: ad:4f:57:a1:59:7e:09:40:0b:2d:d9:16:6c:e5:60:e5:21:b7: 28:62:21:6e:8e:6f:3d:02:f5:c6:3d:15:47:30:b8:3c:05:b5: 42:09:84:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsEfArvFmOd5Rxy2OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk YzIxZDliOWQtZDE4Yy00NDgyLTlhMjAtOTc5YjllZDZlMDhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUAOetO9Q0cHwUuL2qwCU513Kicn2L2bdBt6 snvqiG5nrL/pCZrgNYwk6uKgdi2wt+06k69W20cBD1ERSxGgJRZWUk+Kj9Iuabyt 9E0VFWOK1gEosxgCradJDilIDISVEqg/hcMJL4hgKrlzOGMfM6LU7tnqaLPSOon7 dQ9BwZs2l5IdmiOvSDS9r1jHdimjCZNKCk7hlM3mpOpmuu0E8wyy73aoTv0Rt5ur FUtXh2uCzi3pap4BfV3wcq0fl+hnUr5NXl0LD7ULnykMKS4EtAy2rQqX3YgaMUrR jnKawE/VQzUogXXBy1GbtNjtTBoihbjYwJsy4Z6jSwxtJxcJBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKec4l1wQphYefLtzDIznLldAYILMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNjQzYjljY2ItYWQxNC0z YjA0LThlOTktN2FmOWY2YjdkMDBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQED7BwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABRHREZW/wQo2QwStBvwUmlDLt1WktksPL1JRu9mvc3fGwIkBD43Cm7+ qOlqWmfaWPfuRUwvpVOEgFBSrXQ0jW7hKz+8RWWOQJoMN/M3feM+RVxnEyBmVMcN rflJ4A7mIM9strgJSWOLQIHdOZV4thq/zeyEMCljjP03hGgBeJH/81jZX1+25zyg UpKBh/xwDZIirIDPXyVSIGlAnI/D4zixvA3wiMqLM/jQML2Zx0F812AzjU4d9K9s 48IRIs4W4bsAzUaqqV69pYfDoiPDnURvpfIYgAWkcK1PV6FZfglACy3ZFmzlYOUh tyhiIW6Obz0C9cY9FUcwuDwFtUIJhIk= -----END CERTIFICATE-----Generated at Fri Sep 12 05:37:05 2025 by rpki-client