$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a060f5d3-e452-37db-976f-7bd49ad40973.roa File: a060f5d3-e452-37db-976f-7bd49ad40973.roa (raw, json) Hash identifier: YYgrUPnqWeAOGqgYc8n3FYejbkn+Gg9H70cQR9eZP4I= Subject key identifier: 42:AB:42:2D:38:C7:8F:35:05:AE:76:9D:02:55:E5:46:DE:3E:5E:3C Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584A6C55D828D22DACBEBE46B440 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a060f5d3-e452-37db-976f-7bd49ad40973.roa Signing time: Sun 06 Jul 2025 01:00:49 +0000 ROA not before: Sun 06 Jul 2025 01:00:49 +0000 ROA not after: Sat 04 Oct 2025 01:00:49 +0000 asID: 3356 IP address blocks: 199.228.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 01 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6c:55:d8:28:d2:2d:ac:be:be:46:b4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jul 6 01:00:49 2025 GMT Not After : Oct 4 01:00:49 2025 GMT Subject: CN=5d760bf0-0f02-41a8-8b3f-12d646bcfa2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:5d:e3:da:b1:c7:06:cd:90:28:3f:c1:8e:2e: ee:46:f9:65:0f:fc:58:2e:d4:5c:0c:cc:60:ae:4f: b0:58:e6:a1:93:0b:e9:d6:e2:7e:6f:bf:a7:d0:c5: d8:7d:f2:d4:1a:5c:85:92:35:17:63:30:69:67:50: cf:70:2b:7f:bb:2c:0c:65:22:85:73:2f:a3:6c:4d: 05:dd:79:d9:70:8a:20:aa:d2:20:5e:ba:a6:d3:34: bf:2a:33:d3:cd:bb:d3:28:c9:50:3f:27:c1:8f:aa: 25:8e:87:3f:a9:a3:bb:dc:50:aa:90:4e:88:c3:9b: 74:c4:93:ae:4c:4f:be:9d:e7:b6:39:cf:00:0b:2c: da:2b:51:1f:0b:13:21:b4:80:69:1e:c6:ae:1c:3b: 2f:9d:aa:96:e9:f1:7a:b6:f3:67:91:c7:35:79:79: 6d:87:57:da:86:9f:97:d9:a0:f9:b2:e6:d8:ad:77: f7:b7:66:91:03:0c:89:03:c5:5b:3f:e4:b0:dd:81: 71:3a:69:2e:10:6e:d5:0d:35:53:a0:0f:c1:8e:cb: 5a:ea:d8:bc:d2:48:c0:a5:6c:f4:76:e4:5d:f7:bb: d4:ee:cb:76:4c:94:23:11:5e:67:c3:6b:c9:d7:7b: 3a:63:9e:ea:cf:e7:e6:6d:ef:bc:72:6c:11:62:5f: 5f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:AB:42:2D:38:C7:8F:35:05:AE:76:9D:02:55:E5:46:DE:3E:5E:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a060f5d3-e452-37db-976f-7bd49ad40973.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 199.228.190.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:5c:6e:47:7b:14:06:e3:e7:a9:33:57:ae:89:13:39:cf:d8: ec:c8:8f:72:ea:fb:d6:2d:7a:ff:d4:e1:91:d0:2f:83:bd:42: 8d:53:35:1c:8b:31:00:23:ab:eb:a6:28:ec:ed:fd:2f:59:bb: 16:1c:f9:61:ef:af:ba:cf:6c:19:86:46:74:c4:a1:68:18:c8: 42:53:22:4b:59:94:db:7a:5b:e6:99:c1:ee:6f:79:1e:0b:82: 32:42:00:c3:05:1d:6a:7b:ac:58:93:b5:c9:01:2f:ec:7d:7c: 23:9d:29:7c:0a:0e:d2:04:de:bb:12:d8:bd:c1:53:c2:68:a3: 63:28:07:91:13:4f:0b:f6:7a:21:a8:d8:26:01:87:ff:ac:4d: e1:bc:41:8c:64:be:a9:e7:7c:55:59:05:63:db:80:a0:c0:fe: 67:2e:2b:c1:cd:75:95:8c:e2:51:93:1a:51:bf:c7:14:89:99: 68:bd:52:6f:2a:ff:db:28:67:58:22:e1:9a:52:f5:64:23:79: 50:2d:1b:47:7b:91:b0:12:5c:80:b4:9e:c0:16:77:fb:2f:42: 3d:da:76:52:82:e6:69:b1:1d:fd:01:f8:9f:b1:4c:3b:20:a8: 84:b7:5a:6f:a8:93:ae:32:ff:32:20:84:a2:81:5c:61:ad:e7: a8:6f:2f:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpsVdgo0i2svr5GtEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDcwNjAxMDA0OVoXDTI1MTAwNDAxMDA0OVowLzEtMCsGA1UEAxMk NWQ3NjBiZjAtMGYwMi00MWE4LThiM2YtMTJkNjQ2YmNmYTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAil3j2rHHBs2QKD/Bji7uRvllD/xYLtRcDMxg rk+wWOahkwvp1uJ+b7+n0MXYffLUGlyFkjUXYzBpZ1DPcCt/uywMZSKFcy+jbE0F 3XnZcIogqtIgXrqm0zS/KjPTzbvTKMlQPyfBj6oljoc/qaO73FCqkE6Iw5t0xJOu TE++nee2Oc8ACyzaK1EfCxMhtIBpHsauHDsvnaqW6fF6tvNnkcc1eXlth1fahp+X 2aD5subYrXf3t2aRAwyJA8VbP+Sw3YFxOmkuEG7VDTVToA/Bjsta6ti80kjApWz0 duRd97vU7st2TJQjEV5nw2vJ13s6Y57qz+fmbe+8cmwRYl9fYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEKrQi04x481Ba52nQJV5UbePl48MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYTA2MGY1ZDMtZTQ1Mi0z N2RiLTk3NmYtN2JkNDlhZDQwOTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx+S+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABJcbkd7FAbj56kzV66JEznP2OzIj3Lq+9Ytev/U4ZHQL4O9Qo1TNRyL MQAjq+umKOzt/S9ZuxYc+WHvr7rPbBmGRnTEoWgYyEJTIktZlNt6W+aZwe5veR4L gjJCAMMFHWp7rFiTtckBL+x9fCOdKXwKDtIE3rsS2L3BU8Joo2MoB5ETTwv2eiGo 2CYBh/+sTeG8QYxkvqnnfFVZBWPbgKDA/mcuK8HNdZWM4lGTGlG/xxSJmWi9Um8q /9soZ1gi4ZpS9WQjeVAtG0d7kbASXIC0nsAWd/svQj3adlKC5mmxHf0B+J+xTDsg qIS3Wm+ok64y/zIghKKBXGGt56hvL1U= -----END CERTIFICATE-----Generated at Wed Jul 30 23:42:38 2025 by rpki-client