$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ac1a8ed2-809d-3eb9-bbf6-c77b0187f23a.roa File: ac1a8ed2-809d-3eb9-bbf6-c77b0187f23a.roa (raw, json) Hash identifier: iHcaNBhWfOutvX0YGfy5Hq5NAQQhwW5h0+A3z7nCvVc= Subject key identifier: C2:8C:31:F0:A6:77:6F:0B:74:80:6F:3A:22:2F:CD:71:1B:58:C5:E3 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584A698B277C8BA3E3CC35B19880 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ac1a8ed2-809d-3eb9-bbf6-c77b0187f23a.roa Signing time: Sat 05 Jul 2025 01:00:50 +0000 ROA not before: Sat 05 Jul 2025 01:00:50 +0000 ROA not after: Fri 03 Oct 2025 01:00:50 +0000 asID: 3356 IP address blocks: 192.238.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 01 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:69:8b:27:7c:8b:a3:e3:cc:35:b1:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jul 5 01:00:50 2025 GMT Not After : Oct 3 01:00:50 2025 GMT Subject: CN=afd1802a-c685-42e8-99ba-5e273e709836 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7c:f1:0f:5d:a8:c2:11:a7:1b:97:11:b6:a0: 56:37:f4:91:6b:5e:b8:76:4e:ac:e8:75:8e:0b:aa: 7e:9e:0c:fa:90:63:9a:10:0e:a9:3e:8b:56:12:89: 0e:e9:49:62:e4:42:51:79:84:cf:48:26:29:53:e9: 1c:06:4c:1d:3b:e0:27:b4:41:f1:2c:a7:81:73:f6: af:73:40:4c:d0:5d:33:35:cd:78:94:6b:1e:a9:a5: 69:c2:60:c9:8b:1b:be:27:48:d2:52:03:61:94:af: 54:69:a8:eb:97:27:3b:35:7b:48:99:7c:e7:cf:bb: 06:3e:a6:3a:16:d1:8b:0f:0d:f7:23:ec:af:63:c3: 7b:08:f4:ee:ae:4a:68:9e:d4:57:90:5d:f7:ca:a8: 4f:3f:25:cd:f0:3a:81:a9:e4:62:60:32:24:75:ca: 62:67:49:ec:b1:7a:73:04:17:f4:61:28:5a:ae:64: 20:2e:84:81:5b:06:1a:ae:8e:de:78:ed:00:39:4a: 95:69:03:ea:b9:1f:7b:67:5d:46:f0:49:70:3c:83: 18:c5:6a:42:88:08:48:9a:7c:58:cd:9c:01:25:dd: 98:4b:f9:07:91:86:23:a3:59:c8:b3:e3:f9:9d:de: 39:52:df:de:71:bb:26:8c:e7:50:d4:dd:31:e5:14: 9f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:8C:31:F0:A6:77:6F:0B:74:80:6F:3A:22:2F:CD:71:1B:58:C5:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ac1a8ed2-809d-3eb9-bbf6-c77b0187f23a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.238.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:77:b7:ca:da:bc:a5:49:f2:fb:a2:f8:aa:05:ac:a1:37:b2: 2e:4b:32:b2:d3:1f:23:8c:92:b5:a1:df:44:0a:e2:8c:08:ba: a4:df:16:31:99:8d:ac:47:e9:00:fe:71:8c:fe:c1:a3:d5:ee: bd:7c:0d:4e:fc:21:c0:16:af:e6:98:86:2e:5a:18:91:4a:d8: 03:b4:49:7e:64:d6:a0:dc:bd:ed:48:d8:6e:7f:e1:9f:4c:27: e4:46:86:bd:d5:1e:47:54:ab:5f:17:4e:c8:4c:49:d6:af:94: 72:95:a4:b3:32:ff:a5:3a:2c:2d:a8:4c:15:d3:bf:27:71:ba: 33:5f:9c:d8:d0:7e:94:a5:87:c2:fe:5d:33:ae:4e:44:78:fc: 0e:6a:f6:2b:2c:b9:63:25:42:97:10:21:ba:cd:78:5e:eb:a3: cd:67:ef:2c:6e:6a:b0:80:dd:77:68:97:aa:45:ec:bf:dc:e6: 3a:75:95:a1:4b:c7:52:d4:00:a6:6a:bb:24:58:8d:52:e7:eb: 14:b0:a3:ea:15:f8:98:fc:52:db:e4:54:a6:f5:41:c3:d4:60: a2:f3:5a:78:54:01:e4:39:04:e4:ed:4b:1f:0d:ce:9d:d3:73: 66:aa:2e:47:5d:68:f3:ec:8b:64:8d:1d:b5:d3:76:4c:0c:5b: cb:c5:ae:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEppiyd8i6PjzDWxmIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDcwNTAxMDA1MFoXDTI1MTAwMzAxMDA1MFowLzEtMCsGA1UEAxMk YWZkMTgwMmEtYzY4NS00MmU4LTk5YmEtNWUyNzNlNzA5ODM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnzxD12owhGnG5cRtqBWN/SRa164dk6s6HWO C6p+ngz6kGOaEA6pPotWEokO6Uli5EJReYTPSCYpU+kcBkwdO+AntEHxLKeBc/av c0BM0F0zNc14lGseqaVpwmDJixu+J0jSUgNhlK9Uaajrlyc7NXtImXznz7sGPqY6 FtGLDw33I+yvY8N7CPTurkpontRXkF33yqhPPyXN8DqBqeRiYDIkdcpiZ0nssXpz BBf0YSharmQgLoSBWwYaro7eeO0AOUqVaQPquR97Z11G8ElwPIMYxWpCiAhImnxY zZwBJd2YS/kHkYYjo1nIs+P5nd45Ut/ecbsmjOdQ1N0x5RSf7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMKMMfCmd28LdIBvOiIvzXEbWMXjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYWMxYThlZDItODA5ZC0z ZWI5LWJiZjYtYzc3YjAxODdmMjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwO45MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHR3t8ravKVJ8vui+KoFrKE3si5LMrLTHyOMkrWh30QK4owIuqTfFjGZ jaxH6QD+cYz+waPV7r18DU78IcAWr+aYhi5aGJFK2AO0SX5k1qDcve1I2G5/4Z9M J+RGhr3VHkdUq18XTshMSdavlHKVpLMy/6U6LC2oTBXTvydxujNfnNjQfpSlh8L+ XTOuTkR4/A5q9issuWMlQpcQIbrNeF7ro81n7yxuarCA3Xdol6pF7L/c5jp1laFL x1LUAKZquyRYjVLn6xSwo+oV+Jj8UtvkVKb1QcPUYKLzWnhUAeQ5BOTtSx8Nzp3T c2aqLkddaPPsi2SNHbXTdkwMW8vFrms= -----END CERTIFICATE-----Generated at Wed Jul 30 23:40:30 2025 by rpki-client