$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8aafb081-7770-39d7-a60c-756a4c8962aa.roa File: 8aafb081-7770-39d7-a60c-756a4c8962aa.roa (raw, json) Hash identifier: 3RDt7FkH8/uayUfymONdHj4RCjKsCJbzJ1kL9E59Tfs= Subject key identifier: F8:F1:CB:99:A5:0C:D8:DA:73:74:56:E5:B2:E0:EC:10:A7:F3:6B:AA Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584A682604935113507B527DA6C0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8aafb081-7770-39d7-a60c-756a4c8962aa.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 203 IP address blocks: 192.57.40.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 01 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:26:04:93:51:13:50:7b:52:7d:a6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=8c87a4ac-da5b-4296-b114-c088ab08afc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:4c:8b:d0:16:cc:6c:e6:b2:a7:66:06:d7:c1: a7:d8:2f:9b:64:78:52:a1:95:02:98:5a:ff:2a:33: cb:22:85:01:ad:c5:df:4c:ff:0f:1c:cd:97:02:d5: 2e:a8:b6:3c:98:83:25:ca:37:2a:43:e6:37:0c:de: e4:91:60:56:d5:f4:a3:a5:6e:b3:13:34:0b:94:b1: c3:3a:09:f0:7b:7b:fe:2a:b0:5e:21:d5:6a:46:a4: 80:4c:9f:d0:b1:dd:34:9d:de:40:4d:da:b9:84:f9: 47:77:9b:6e:42:b6:a5:38:8b:c4:5c:33:8e:5c:e7: ca:59:49:b1:4f:67:0a:21:64:34:e2:ea:9d:d0:32: 55:7c:4e:87:0f:8e:d8:95:ce:65:9d:d6:f4:72:6b: 7d:5d:a3:1b:12:02:ab:a8:3b:16:b8:c2:65:ce:f9: d3:c5:0f:b0:c6:b1:0a:95:76:0b:42:98:58:c6:a7: a6:90:94:e0:a7:eb:86:60:8d:7a:26:35:c1:6e:51: 09:53:4e:72:a2:bb:08:a7:aa:0d:c7:ff:0c:9e:3a: 3d:65:43:80:f1:ac:aa:04:7e:be:9a:c5:b5:a5:18: 32:dc:51:8b:8d:53:19:37:74:45:52:83:e2:22:82: 12:cb:e9:31:9c:57:ca:cb:10:5e:3c:85:75:31:5a: 4c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:F1:CB:99:A5:0C:D8:DA:73:74:56:E5:B2:E0:EC:10:A7:F3:6B:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8aafb081-7770-39d7-a60c-756a4c8962aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.57.40.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:36:08:2f:e1:30:c6:8c:2c:b9:fa:04:86:b6:7a:44:e7:65: 1b:56:58:67:a9:50:cb:a3:6a:27:36:8e:2d:8f:6f:83:c9:1d: 7f:16:b9:d1:50:5e:73:09:95:02:22:d3:41:c0:2b:ce:94:df: a5:77:37:12:d3:d8:76:1b:bc:23:77:d4:7b:96:f9:d6:72:d0: 19:53:65:30:e7:7f:49:9b:d4:1d:d7:ae:91:ce:4c:7f:47:cb: a1:79:9d:de:a7:b8:cb:0d:10:2f:56:c3:44:dd:71:df:0d:e8: 67:6b:ed:8e:c1:0f:83:71:0d:9c:45:9a:e1:aa:4f:30:19:8d: 08:5a:5a:f4:50:fe:f9:fb:46:8f:4e:f2:1f:96:f7:7c:c6:e6: be:61:ef:44:9e:72:c2:d5:61:f1:65:ef:1f:23:8f:1f:0e:47: 66:cf:51:67:12:cb:57:1a:e3:3c:de:f0:dc:83:99:25:95:36: 27:7f:95:0c:92:bc:b8:e8:ff:31:8a:de:13:6e:9b:7f:9b:f3: ca:2e:02:f2:8d:11:14:75:76:3f:c7:a5:c2:7f:27:fc:d8:c1: 90:46:87:a8:a9:8d:35:8e:09:28:18:24:e8:ea:ea:81:26:b0: 90:7f:30:b0:58:43:41:a8:e7:ca:77:ac:9b:fb:8f:bd:8c:0a: 1d:2c:4f:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpoJgSTURNQe1J9psAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk OGM4N2E0YWMtZGE1Yi00Mjk2LWIxMTQtYzA4OGFiMDhhZmM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0yL0BbMbOayp2YG18Gn2C+bZHhSoZUCmFr/ KjPLIoUBrcXfTP8PHM2XAtUuqLY8mIMlyjcqQ+Y3DN7kkWBW1fSjpW6zEzQLlLHD Ognwe3v+KrBeIdVqRqSATJ/Qsd00nd5ATdq5hPlHd5tuQralOIvEXDOOXOfKWUmx T2cKIWQ04uqd0DJVfE6HD47Ylc5lndb0cmt9XaMbEgKrqDsWuMJlzvnTxQ+wxrEK lXYLQphYxqemkJTgp+uGYI16JjXBblEJU05yorsIp6oNx/8Mnjo9ZUOA8ayqBH6+ msW1pRgy3FGLjVMZN3RFUoPiIoISy+kxnFfKyxBePIV1MVpM6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPjxy5mlDNjac3RW5bLg7BCn82uqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvOGFhZmIwODEtNzc3MC0z OWQ3LWE2MGMtNzU2YTRjODk2MmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwDkoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJo2CC/hMMaMLLn6BIa2ekTnZRtWWGepUMujaic2ji2Pb4PJHX8WudFQ XnMJlQIi00HAK86U36V3NxLT2HYbvCN31HuW+dZy0BlTZTDnf0mb1B3XrpHOTH9H y6F5nd6nuMsNEC9Ww0Tdcd8N6Gdr7Y7BD4NxDZxFmuGqTzAZjQhaWvRQ/vn7Ro9O 8h+W93zG5r5h70SecsLVYfFl7x8jjx8OR2bPUWcSy1ca4zze8NyDmSWVNid/lQyS vLjo/zGK3hNum3+b88ouAvKNERR1dj/HpcJ/J/zYwZBGh6ipjTWOCSgYJOjq6oEm sJB/MLBYQ0Go58p3rJv7j72MCh0sT6o= -----END CERTIFICATE-----Generated at Wed Jul 30 23:45:55 2025 by rpki-client