$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/766eb068-340f-4e16-9d08-04181e100ca2/0d248661-3701-312c-ab98-1a0848201b0a.roa File: 0d248661-3701-312c-ab98-1a0848201b0a.roa (raw, json) Hash identifier: 23Ueq4i+83Az7h5zRHxgjBDckGkNtVjsFwb0ecK8gSI= Subject key identifier: D0:76:B5:70:49:08:A6:CD:2A:23:10:DD:6C:87:B4:5F:2A:AE:7A:27 Certificate issuer: /CN=766eb068-340f-4e16-9d08-04181e100ca2 Certificate serial: 010D0C9F4328584A9FFB9413E7B847C969DDFE80 Authority key identifier: 09:5F:AA:AA:CA:2F:82:BD:AF:19:2B:3A:7B:DC:B5:FC:44:69:C7:2C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/766eb068-340f-4e16-9d08-04181e100ca2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/766eb068-340f-4e16-9d08-04181e100ca2/0d248661-3701-312c-ab98-1a0848201b0a.roa Signing time: Thu 24 Jul 2025 13:01:02 +0000 ROA not before: Thu 24 Jul 2025 13:01:02 +0000 ROA not after: Wed 22 Oct 2025 13:01:02 +0000 asID: 63278 IP address blocks: 192.64.30.0/23 maxlen: 23 192.64.30.0/24 maxlen: 24 192.64.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/766eb068-340f-4e16-9d08-04181e100ca2/766eb068-340f-4e16-9d08-04181e100ca2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/766eb068-340f-4e16-9d08-04181e100ca2/766eb068-340f-4e16-9d08-04181e100ca2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/766eb068-340f-4e16-9d08-04181e100ca2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:fb:94:13:e7:b8:47:c9:69:dd:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=766eb068-340f-4e16-9d08-04181e100ca2 Validity Not Before: Jul 24 13:01:02 2025 GMT Not After : Oct 22 13:01:02 2025 GMT Subject: CN=f567938d-19bc-4dce-94ff-67dee83a7838 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ef:69:ec:c9:0b:b2:d1:e6:ee:49:c5:45:98: 6d:1c:0a:54:c2:62:8e:7d:78:6b:2e:b3:0d:56:ec: 3c:3e:83:11:a4:b0:2c:72:2d:c7:5e:a4:41:66:b9: 55:8f:69:ca:74:8f:43:7c:15:5b:fe:8b:4f:be:81: 93:e6:7a:da:c9:93:f5:27:6a:42:1e:f3:1b:a7:35: ac:39:cb:4e:f2:98:79:fa:0d:e1:f0:be:39:70:30: c0:b7:ff:37:3d:55:48:5c:7a:e4:5f:d7:f3:b8:71: b0:00:03:71:e1:b5:12:64:c9:cd:79:d8:25:33:b6: 55:d5:db:a4:06:f3:6a:7d:80:49:12:22:3b:3e:0d: 91:f8:4c:e6:20:be:00:93:53:ec:b1:5d:7e:27:ea: 0b:f8:69:af:97:7a:35:9d:da:8c:cc:53:41:4c:95: a6:49:87:26:cc:85:26:5a:54:85:71:80:b4:a9:58: 85:91:ac:59:9c:6b:d1:e5:18:9a:22:d5:0f:9a:a4: 48:68:a7:1b:a6:a3:39:6f:50:e2:82:8b:d9:d5:9b: 0a:a8:25:50:80:7b:16:2f:80:1d:fe:05:33:f7:b7: ac:c8:48:a2:83:08:60:20:aa:d5:e2:20:70:03:e9: ab:ce:e2:23:2c:c1:e5:fd:78:2b:c9:1d:00:8a:ad: 68:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:76:B5:70:49:08:A6:CD:2A:23:10:DD:6C:87:B4:5F:2A:AE:7A:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/766eb068-340f-4e16-9d08-04181e100ca2/0d248661-3701-312c-ab98-1a0848201b0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/766eb068-340f-4e16-9d08-04181e100ca2/766eb068-340f-4e16-9d08-04181e100ca2.crl X509v3 Authority Key Identifier: keyid:09:5F:AA:AA:CA:2F:82:BD:AF:19:2B:3A:7B:DC:B5:FC:44:69:C7:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/766eb068-340f-4e16-9d08-04181e100ca2.cer sbgp-ipAddrBlock: critical IPv4: 192.64.30.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:ca:f7:fb:a6:97:56:de:ec:ec:2b:0d:4e:b0:d9:77:12:a2: 6c:68:a7:42:eb:c7:2f:39:21:a0:79:a7:32:3a:82:17:91:5c: 45:5f:c5:8d:66:e9:2e:d4:00:b9:1e:88:29:39:0f:a1:dd:b7: 1b:00:27:81:c1:ed:f3:69:2b:3d:06:cc:c6:ca:c5:9c:e9:2f: 6c:0e:e2:08:f0:91:db:39:f9:9d:47:39:9f:68:2f:54:f6:14: f2:35:cd:00:d6:57:80:ac:d2:26:9d:62:a9:bd:28:33:66:86: f3:ca:61:79:20:5d:29:82:91:e9:fb:d5:59:60:bc:45:f1:86: 25:d0:3b:4c:fb:ac:55:df:bb:d7:82:73:6e:d6:15:5f:0d:fe: c0:62:63:e2:81:35:c9:68:67:0b:17:10:61:98:55:56:dc:73: e4:c5:72:5e:41:59:d6:a6:30:36:ca:32:ab:2f:e9:0f:c4:1e: c0:67:ca:81:8c:a3:d9:3f:41:6f:e4:2d:78:55:db:74:3b:d1: 9f:7f:28:a2:ee:9c:07:3c:c7:52:25:1b:65:44:d7:70:27:2a: 34:e6:a8:ba:b9:f2:fb:9d:4c:a5:7e:c1:a4:14:88:78:6e:82: e5:a1:38:0d:11:3b:f4:ec:95:f4:28:49:2c:dc:66:00:bf:9b: 4c:3e:23:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqf+5QT57hHyWnd/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY2ZWIwNjgtMzQwZi00ZTE2LTlkMDgtMDQxODFlMTAw Y2EyMB4XDTI1MDcyNDEzMDEwMloXDTI1MTAyMjEzMDEwMlowLzEtMCsGA1UEAxMk ZjU2NzkzOGQtMTliYy00ZGNlLTk0ZmYtNjdkZWU4M2E3ODM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxe9p7MkLstHm7knFRZhtHApUwmKOfXhrLrMN Vuw8PoMRpLAsci3HXqRBZrlVj2nKdI9DfBVb/otPvoGT5nrayZP1J2pCHvMbpzWs OctO8ph5+g3h8L45cDDAt/83PVVIXHrkX9fzuHGwAANx4bUSZMnNedglM7ZV1duk BvNqfYBJEiI7Pg2R+EzmIL4Ak1PssV1+J+oL+Gmvl3o1ndqMzFNBTJWmSYcmzIUm WlSFcYC0qViFkaxZnGvR5RiaItUPmqRIaKcbpqM5b1DigovZ1ZsKqCVQgHsWL4Ad /gUz97esyEiigwhgIKrV4iBwA+mrzuIjLMHl/XgryR0Aiq1ozQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNB2tXBJCKbNKiMQ3WyHtF8qrnonMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83NjZl YjA2OC0zNDBmLTRlMTYtOWQwOC0wNDE4MWUxMDBjYTIvMGQyNDg2NjEtMzcwMS0z MTJjLWFiOTgtMWEwODQ4MjAxYjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzY2ZWIwNjgtMzQwZi00ZTE2LTlk MDgtMDQxODFlMTAwY2EyLzc2NmViMDY4LTM0MGYtNGUxNi05ZDA4LTA0MTgxZTEw MGNhMi5jcmwwHwYDVR0jBBgwFoAUCV+qqsovgr2vGSs6e9y1/ERpxywwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi83NjZlYjA2OC0zNDBmLTRlMTYtOWQwOC0wNDE4 MWUxMDBjYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwEAeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADHK9/uml1be7OwrDU6w2XcSomxop0Lrxy85IaB5pzI6gheRXEVfxY1m 6S7UALkeiCk5D6HdtxsAJ4HB7fNpKz0GzMbKxZzpL2wO4gjwkds5+Z1HOZ9oL1T2 FPI1zQDWV4Cs0iadYqm9KDNmhvPKYXkgXSmCken71VlgvEXxhiXQO0z7rFXfu9eC c27WFV8N/sBiY+KBNcloZwsXEGGYVVbcc+TFcl5BWdamMDbKMqsv6Q/EHsBnyoGM o9k/QW/kLXhV23Q70Z9/KKLunAc8x1IlG2VE13AnKjTmqLq58vudTKV+waQUiHhu guWhOA0RO/TslfQoSSzcZgC/m0w+I2c= -----END CERTIFICATE-----Generated at Wed Aug 6 10:20:09 2025 by rpki-client