$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4a13f0af-13de-3e9c-bebf-7dfaba4cc58e.roa File: 4a13f0af-13de-3e9c-bebf-7dfaba4cc58e.roa (raw, json) Hash identifier: agp+/DvCBXUS4DC7QcFhd9bph6C5heekR1gZyqezSqc= Subject key identifier: 0F:1F:FC:58:AD:93:8F:A5:13:0A:2C:6E:B7:25:44:7F:37:42:FB:39 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584F3E47E2C5F6914868FFAEFD80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4a13f0af-13de-3e9c-bebf-7dfaba4cc58e.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 202 IP address blocks: 192.85.78.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:e2:c5:f6:91:48:68:ff:ae:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=d8a7cbee-587f-4fb8-a712-b29194cdc671 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:6e:6d:dd:9d:14:7f:9b:71:2d:51:dc:a4:c2: fb:c2:e9:bc:ca:10:e1:8b:93:ff:ac:65:db:be:20: 72:df:12:71:5b:b6:39:ea:34:a6:53:9f:d2:70:73: 16:2e:a9:a3:86:69:0b:a3:65:07:f2:20:4b:5a:6d: 44:5e:ad:6e:08:41:ce:fc:7f:bc:90:63:2a:fb:74: 4a:ca:e7:53:3a:8d:d7:ac:fa:6b:57:e1:ec:38:40: 1a:85:c5:d7:b4:59:d4:64:53:d9:91:8f:da:c6:2f: a9:2b:14:ea:e2:29:8b:55:79:da:d8:da:d1:78:d7: c4:95:5c:b6:df:c2:0d:d2:18:80:0e:f6:87:25:5f: db:30:56:43:3e:b4:1f:bd:76:97:79:ce:e4:24:78: 45:e1:08:93:3c:bd:bf:d6:42:f2:7e:02:67:20:c5: 34:bd:f3:e1:d1:08:bc:9f:9c:18:70:e8:b8:55:78: d4:c0:97:13:0d:53:8a:ee:27:9d:1e:9d:6e:54:d2: 8b:33:3c:27:73:6e:12:d3:b9:1b:7f:9d:5e:7a:01: 06:0e:9a:e8:1a:0b:8b:ec:ce:1a:2b:21:11:26:e0: be:de:f8:d0:63:3a:3d:bb:55:6e:00:84:8b:4d:9d: f2:28:62:a4:35:87:1f:f7:0d:76:14:24:9b:cd:56: 1d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:1F:FC:58:AD:93:8F:A5:13:0A:2C:6E:B7:25:44:7F:37:42:FB:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4a13f0af-13de-3e9c-bebf-7dfaba4cc58e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.85.78.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:83:39:71:e4:7c:0d:b0:1e:74:12:6b:99:38:c0:93:1d:b9: b1:42:d3:09:7c:07:c1:e8:6b:2e:cc:18:75:4d:b8:f2:06:1a: ac:30:6d:5b:57:8a:51:61:29:64:24:8a:a1:e1:97:fe:af:97: 94:bd:78:3e:34:50:28:7d:26:62:8f:01:e3:25:3e:e3:a1:1f: bf:b9:22:10:c8:54:b4:25:60:1a:09:ea:9d:9c:3f:c2:27:b5: 7d:67:42:c5:b5:86:17:ad:46:86:e8:93:67:11:e6:0a:cd:a3: a3:ce:0a:e7:fb:75:17:f2:55:c2:5a:11:3d:af:bd:ba:6d:5c: 91:24:8b:24:b1:63:48:c2:ff:ea:bb:d4:71:af:61:21:b0:cf: a2:44:c7:02:ee:a6:cb:1f:67:ff:9d:d9:d7:ea:33:59:d0:04: 75:a5:44:8c:21:4c:51:ae:06:fa:f9:c3:c7:6b:73:03:08:81: 03:b1:9f:d4:d7:4e:23:82:2d:af:74:ab:74:e0:05:f8:d1:da: d8:8d:b1:9a:4c:93:b2:29:24:b4:5c:80:87:4f:f9:54:6e:2a: 26:99:f5:9a:30:02:63:92:0c:80:71:f2:a6:19:07:50:a7:96: db:e8:8d:12:b6:05:92:73:1c:b3:b9:6f:82:09:a3:ca:d1:59: 48:fa:b1:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R+LF9pFIaP+u/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk ZDhhN2NiZWUtNTg3Zi00ZmI4LWE3MTItYjI5MTk0Y2RjNjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq25t3Z0Uf5txLVHcpML7wum8yhDhi5P/rGXb viBy3xJxW7Y56jSmU5/ScHMWLqmjhmkLo2UH8iBLWm1EXq1uCEHO/H+8kGMq+3RK yudTOo3XrPprV+HsOEAahcXXtFnUZFPZkY/axi+pKxTq4imLVXna2NrReNfElVy2 38IN0hiADvaHJV/bMFZDPrQfvXaXec7kJHhF4QiTPL2/1kLyfgJnIMU0vfPh0Qi8 n5wYcOi4VXjUwJcTDVOK7iedHp1uVNKLMzwnc24S07kbf51eegEGDproGguL7M4a KyERJuC+3vjQYzo9u1VuAISLTZ3yKGKkNYcf9w12FCSbzVYdUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA8f/Fitk4+lEwosbrclRH83Qvs5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNGExM2YwYWYtMTNkZS0z ZTljLWJlYmYtN2RmYWJhNGNjNThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwFVOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSDOXHkfA2wHnQSa5k4wJMdubFC0wl8B8Hoay7MGHVNuPIGGqwwbVtX ilFhKWQkiqHhl/6vl5S9eD40UCh9JmKPAeMlPuOhH7+5IhDIVLQlYBoJ6p2cP8In tX1nQsW1hhetRobok2cR5grNo6POCuf7dRfyVcJaET2vvbptXJEkiySxY0jC/+q7 1HGvYSGwz6JExwLupssfZ/+d2dfqM1nQBHWlRIwhTFGuBvr5w8drcwMIgQOxn9TX TiOCLa90q3TgBfjR2tiNsZpMk7IpJLRcgIdP+VRuKiaZ9ZowAmOSDIBx8qYZB1Cn ltvojRK2BZJzHLO5b4IJo8rRWUj6sao= -----END CERTIFICATE-----Generated at Mon Sep 21 17:15:10 2026 by rpki-client