$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/da2041c9-be6f-38da-8e73-a0b951a5a156.roa File: da2041c9-be6f-38da-8e73-a0b951a5a156.roa (raw, json) Hash identifier: VR0dRGH8+vCdZdf7+9OCsg1RLXtkAW4uMuiCaAjKvPk= Subject key identifier: 46:93:B4:AA:6E:3F:8E:01:0F:81:A0:1E:A1:8B:97:A5:1F:C4:0A:DD Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584A698B322FBD49BCDB92A5AEF0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/da2041c9-be6f-38da-8e73-a0b951a5a156.roa Signing time: Sat 05 Jul 2025 01:00:50 +0000 ROA not before: Sat 05 Jul 2025 01:00:50 +0000 ROA not after: Fri 03 Oct 2025 01:00:50 +0000 asID: 3356 IP address blocks: 205.141.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 01 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:69:8b:32:2f:bd:49:bc:db:92:a5:ae:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jul 5 01:00:50 2025 GMT Not After : Oct 3 01:00:50 2025 GMT Subject: CN=5439e00c-20e9-4217-82e2-3db1c5ad67f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:66:92:62:8e:7a:1b:07:db:36:8f:20:0f:4c: 44:e4:e4:3a:f8:8a:91:76:87:35:b9:cc:e1:72:4c: 52:28:40:d8:f2:00:cc:74:04:21:97:f3:55:67:c5: 9e:22:97:3e:28:ed:c0:e7:99:06:ae:13:e2:d0:1a: 6f:3f:a9:2b:27:71:91:16:27:28:a6:0d:30:1b:1a: d4:23:d7:a1:a2:49:37:9a:a5:17:eb:33:e6:e6:12: f0:5d:5d:b4:76:d3:45:46:5b:df:6a:97:98:0e:8a: 8d:d6:b1:93:88:04:61:e5:31:18:a9:bd:92:f6:88: 60:85:b0:c3:a8:22:ed:55:b5:fd:c5:b3:19:5c:6b: 7c:3e:01:11:89:21:4b:ba:ee:47:87:82:64:c8:8a: 8a:7b:11:33:e9:99:6f:cd:07:1e:81:57:cb:8c:c1: 0e:7c:02:58:f0:f7:3b:70:4d:84:a2:a5:0f:77:e7: be:f6:5d:6a:2e:c3:f2:62:fa:02:33:87:22:76:78: f5:56:a0:7e:32:5a:dd:2a:81:9c:34:5c:03:f8:f5: 57:34:9e:2b:a0:67:70:66:74:df:fa:64:d9:28:63: 52:95:f0:97:f3:95:5e:c9:22:da:7d:bf:47:0b:68: d2:41:09:fb:a2:61:c2:8f:ab:0b:e3:94:f0:ea:5c: 0e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:93:B4:AA:6E:3F:8E:01:0F:81:A0:1E:A1:8B:97:A5:1F:C4:0A:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/da2041c9-be6f-38da-8e73-a0b951a5a156.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 205.141.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:88:26:33:5a:9a:07:e4:1d:c6:33:1b:8c:1a:68:1d:db:d3: 77:37:59:e2:27:ff:de:69:80:e5:40:5f:55:0c:e7:19:24:20: 86:d2:b7:c7:bd:c8:99:bf:86:0d:da:39:c9:aa:ef:8a:81:36: e2:7b:74:f0:18:de:3d:b5:52:98:52:10:a3:5b:aa:63:4c:83: c3:d8:8a:e3:96:54:e3:55:b4:49:71:80:fd:a2:a7:38:ab:b0: a1:4b:43:82:05:33:04:b8:0b:f4:48:e4:7c:3b:f4:3b:3b:95: 49:ee:83:6a:42:8f:05:1c:c9:7b:c9:f6:56:08:e9:b8:c4:19: 67:2e:c5:e2:2d:36:7b:4e:63:82:1d:f1:e5:fb:71:bb:73:8d: bd:a1:17:cb:d7:cb:95:84:a0:f8:f2:62:b7:41:c7:9c:2e:06: 70:55:1d:48:11:19:a4:c8:34:a8:78:31:45:f0:9a:32:66:d4: 41:09:c6:de:0f:2e:4e:86:2d:1b:5c:70:89:4a:bf:3f:e6:14: 12:1c:28:e1:e3:99:a9:48:99:ab:ff:76:47:f3:5e:8a:a9:04: 4b:a4:21:f7:55:ac:a9:bb:5f:b1:31:4d:62:4f:ce:5c:42:a0: d2:a9:0f:24:f7:6b:81:44:ed:2f:92:92:21:40:cf:f8:c8:bd: 34:b5:2b:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEppizIvvUm825KlrvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDcwNTAxMDA1MFoXDTI1MTAwMzAxMDA1MFowLzEtMCsGA1UEAxMk NTQzOWUwMGMtMjBlOS00MjE3LTgyZTItM2RiMWM1YWQ2N2Y1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWaSYo56GwfbNo8gD0xE5OQ6+IqRdoc1uczh ckxSKEDY8gDMdAQhl/NVZ8WeIpc+KO3A55kGrhPi0BpvP6krJ3GRFicopg0wGxrU I9ehokk3mqUX6zPm5hLwXV20dtNFRlvfapeYDoqN1rGTiARh5TEYqb2S9ohghbDD qCLtVbX9xbMZXGt8PgERiSFLuu5Hh4JkyIqKexEz6ZlvzQcegVfLjMEOfAJY8Pc7 cE2EoqUPd+e+9l1qLsPyYvoCM4cidnj1VqB+MlrdKoGcNFwD+PVXNJ4roGdwZnTf +mTZKGNSlfCX85VeySLafb9HC2jSQQn7omHCj6sL45Tw6lwO9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEaTtKpuP44BD4GgHqGLl6UfxArdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZGEyMDQxYzktYmU2Zi0z OGRhLThlNzMtYTBiOTUxYTVhMTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzY3PMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACuIJjNamgfkHcYzG4waaB3b03c3WeIn/95pgOVAX1UM5xkkIIbSt8e9 yJm/hg3aOcmq74qBNuJ7dPAY3j21UphSEKNbqmNMg8PYiuOWVONVtElxgP2ipzir sKFLQ4IFMwS4C/RI5Hw79Ds7lUnug2pCjwUcyXvJ9lYI6bjEGWcuxeItNntOY4Id 8eX7cbtzjb2hF8vXy5WEoPjyYrdBx5wuBnBVHUgRGaTINKh4MUXwmjJm1EEJxt4P Lk6GLRtccIlKvz/mFBIcKOHjmalImav/dkfzXoqpBEukIfdVrKm7X7ExTWJPzlxC oNKpDyT3a4FE7S+SkiFAz/jIvTS1K+4= -----END CERTIFICATE-----Generated at Wed Jul 30 23:47:35 2025 by rpki-client