$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bf1709a8-5527-3981-b54d-35b9428c7fae.roa File: bf1709a8-5527-3981-b54d-35b9428c7fae.roa (raw, json) Hash identifier: jHIp5LQCrd0YCwDLxcqdF9F5RggQs/IbOKldd7VzJ8Y= Subject key identifier: 29:EB:9D:3C:E5:74:4D:27:CD:ED:C8:F7:8E:18:8F:AC:59:2A:E3:8D Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584A698B2344A46A3FF3A9DBE440 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bf1709a8-5527-3981-b54d-35b9428c7fae.roa Signing time: Sat 05 Jul 2025 01:00:50 +0000 ROA not before: Sat 05 Jul 2025 01:00:50 +0000 ROA not after: Fri 03 Oct 2025 01:00:50 +0000 asID: 3356 IP address blocks: 192.85.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 01 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:69:8b:23:44:a4:6a:3f:f3:a9:db:e4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jul 5 01:00:50 2025 GMT Not After : Oct 3 01:00:50 2025 GMT Subject: CN=c199b1f6-6c51-4161-b3e5-d6ed5e4e8051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:dd:8d:fd:11:19:8d:9b:91:fe:ec:55:e9:48: 02:6c:9c:70:94:ee:2f:bc:05:bd:78:fa:1a:0e:d5: 6d:2d:ce:72:35:f5:4d:0f:03:51:50:7a:30:e5:4f: c3:3a:c7:af:fe:69:99:36:83:e4:50:ef:af:07:76: 69:ea:1c:3b:e7:4b:12:4e:60:15:ec:6a:94:8c:73: d2:f3:3f:93:56:d2:2e:06:e5:4c:3e:c5:d3:d8:79: 73:7e:82:69:23:5a:4d:63:2d:67:71:6d:ea:cb:fb: 7f:d7:b5:cf:6e:93:03:26:27:a2:39:47:bb:8b:15: fc:9f:3b:82:47:b0:36:42:c7:96:bc:a6:c2:36:1a: 51:27:eb:62:44:07:89:83:31:4f:04:44:b7:e1:b6: 8f:d8:f5:3a:97:0b:0c:46:57:0a:8c:47:58:66:73: d8:83:b2:6c:2d:ab:22:94:35:76:22:30:2a:d9:96: 8c:3c:34:87:29:a1:d9:ec:2a:fc:e9:dd:06:e2:bc: 33:d0:a1:9a:46:6a:4e:cc:ee:26:c8:f7:c6:d2:a1: 84:24:91:c7:24:2f:7f:ac:97:29:1c:87:37:af:43: 94:5f:78:94:45:ef:88:37:85:2d:a5:92:b8:0b:79: cf:46:e3:5d:06:5a:99:1e:da:24:12:11:ad:8c:a7: d9:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:EB:9D:3C:E5:74:4D:27:CD:ED:C8:F7:8E:18:8F:AC:59:2A:E3:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bf1709a8-5527-3981-b54d-35b9428c7fae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.85.47.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:c7:dd:6e:e4:10:67:4c:e3:51:06:34:cb:97:b6:0b:5f:2d: 12:be:19:61:83:4a:57:fa:91:da:70:c6:95:9c:e5:b8:2f:7f: 49:7e:4e:4f:b1:6f:34:ea:d8:65:86:a2:07:1c:b9:a9:c9:00: 78:ee:c2:97:19:e2:40:a7:c4:61:7f:1c:ae:f9:14:25:eb:cd: 35:75:be:11:41:45:77:61:1f:6d:14:5d:c5:5b:da:2a:d3:aa: 5e:ab:95:77:e1:2e:4c:45:ab:78:5f:86:92:b8:5e:23:a7:c1: 95:c0:27:1b:b3:6d:fb:10:38:32:dc:7c:a2:a5:5c:85:f4:35: d3:81:22:2f:ff:91:df:e8:56:c5:5f:dd:0a:77:97:10:4c:82: 12:a0:37:74:41:4a:9b:b2:9a:64:1a:8b:2a:35:f2:53:6d:2d: ea:87:12:70:6a:66:16:27:7e:70:b4:32:72:4d:04:f9:1e:54: 4b:23:70:79:ba:57:1b:2d:5f:81:4e:64:93:f8:08:0f:d6:5e: 22:0a:fe:8b:b5:ed:f0:23:ef:2d:0a:0f:97:bc:7b:d6:9c:a5: 95:86:f7:f9:74:ee:f1:3d:78:73:d4:fa:d8:67:ec:9e:a2:8c: 64:0c:83:a6:87:f2:d1:b7:52:b2:6f:85:2c:7e:76:4d:a3:db: 86:19:93:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEppiyNEpGo/86nb5EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDcwNTAxMDA1MFoXDTI1MTAwMzAxMDA1MFowLzEtMCsGA1UEAxMk YzE5OWIxZjYtNmM1MS00MTYxLWIzZTUtZDZlZDVlNGU4MDUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnd2N/REZjZuR/uxV6UgCbJxwlO4vvAW9ePoa DtVtLc5yNfVNDwNRUHow5U/DOsev/mmZNoPkUO+vB3Zp6hw750sSTmAV7GqUjHPS 8z+TVtIuBuVMPsXT2HlzfoJpI1pNYy1ncW3qy/t/17XPbpMDJieiOUe7ixX8nzuC R7A2QseWvKbCNhpRJ+tiRAeJgzFPBES34baP2PU6lwsMRlcKjEdYZnPYg7JsLasi lDV2IjAq2ZaMPDSHKaHZ7Cr86d0G4rwz0KGaRmpOzO4myPfG0qGEJJHHJC9/rJcp HIc3r0OUX3iURe+IN4UtpZK4C3nPRuNdBlqZHtokEhGtjKfZEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCnrnTzldE0nze3I944Yj6xZKuONMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYmYxNzA5YTgtNTUyNy0z OTgxLWI1NGQtMzViOTQyOGM3ZmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFUvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEHH3W7kEGdM41EGNMuXtgtfLRK+GWGDSlf6kdpwxpWc5bgvf0l+Tk+x bzTq2GWGogccuanJAHjuwpcZ4kCnxGF/HK75FCXrzTV1vhFBRXdhH20UXcVb2irT ql6rlXfhLkxFq3hfhpK4XiOnwZXAJxuzbfsQODLcfKKlXIX0NdOBIi//kd/oVsVf 3Qp3lxBMghKgN3RBSpuymmQaiyo18lNtLeqHEnBqZhYnfnC0MnJNBPkeVEsjcHm6 VxstX4FOZJP4CA/WXiIK/ou17fAj7y0KD5e8e9acpZWG9/l07vE9eHPU+thn7J6i jGQMg6aH8tG3UrJvhSx+dk2j24YZk00= -----END CERTIFICATE-----Generated at Wed Jul 30 23:45:54 2025 by rpki-client