$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/915690e8-0d9a-30b3-a924-298e0b5a6ef9.roa File: 915690e8-0d9a-30b3-a924-298e0b5a6ef9.roa (raw, json) Hash identifier: UXkqYI6W1HkLJI7vn1cePTOLsyDwbUrnX4GxpQRin/Q= Subject key identifier: 48:CE:5A:AC:55:CA:5F:FF:DB:A5:77:6B:B2:1C:36:76:14:26:00:8F Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584BB2F7D21F9223E140758C98E0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/915690e8-0d9a-30b3-a924-298e0b5a6ef9.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 3360 IP address blocks: 192.85.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:d2:1f:92:23:e1:40:75:8c:98:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=1d0ccf68-e661-432f-8a79-698951dd3a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:7c:27:33:ec:45:0f:b7:84:25:cd:8b:f4:df: 0a:6e:18:84:dd:28:3c:e8:59:47:e7:98:c6:73:e6: 62:8f:cf:01:2c:41:38:a8:83:72:0e:2b:7f:3a:a7: ff:64:d9:d7:75:b4:6a:87:16:44:52:16:59:3b:ff: 80:36:ad:65:f4:e1:2d:e4:3e:9c:6f:02:a8:2a:51: 9c:09:28:ff:37:f7:ef:7d:07:35:af:80:a5:ac:eb: a0:77:27:85:b0:f0:d1:7d:71:fb:b3:1a:c2:9a:96: bc:98:78:d9:c2:03:27:22:ed:82:d9:ac:a5:81:7c: e7:a5:14:75:1e:0c:62:57:b1:e1:f8:78:99:81:71: 9c:fe:a4:2d:ec:4e:ed:33:63:a6:ea:c3:d0:11:8e: 2b:63:10:c6:eb:1b:58:18:db:b8:d3:a6:b8:f8:dd: 52:22:f9:33:70:1f:92:90:e1:bc:b1:df:2a:26:88: 16:c0:3e:c9:48:3b:8e:b6:c8:ea:8c:e7:c1:0c:57: 7b:3a:ed:07:3c:4c:8d:83:21:04:0c:5e:c2:db:f8: a6:d0:67:d1:a3:c2:2a:27:d2:63:59:0d:e4:08:72: e2:b0:c6:58:9b:b3:60:04:84:0e:ca:8e:b6:5b:06: 12:8a:d3:94:19:a5:20:a2:bd:ab:1e:36:6c:c1:20: 20:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:CE:5A:AC:55:CA:5F:FF:DB:A5:77:6B:B2:1C:36:76:14:26:00:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/915690e8-0d9a-30b3-a924-298e0b5a6ef9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.85.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:f1:30:5b:09:0e:f3:ef:1a:27:09:10:a2:a0:dc:4b:22:b5: dc:e6:5a:c8:55:2f:bb:18:bc:5e:fe:0b:58:02:d7:e2:83:a7: 44:e1:85:6d:e4:85:ab:65:ab:5b:59:f5:a0:47:d8:c6:7d:fb: d9:84:95:5d:a2:00:a9:27:41:95:70:66:4d:a1:22:f3:be:89: 58:4a:f2:68:81:1c:2b:ad:85:21:e7:4c:41:ec:d6:15:ad:0a: 87:1b:03:f7:b9:e3:dc:46:7e:80:2e:a2:82:56:ff:43:37:dd: 60:cc:43:c4:b3:19:ed:74:61:87:b3:92:f4:f2:95:3c:34:af: aa:58:a1:1c:0f:bf:bc:db:d2:ed:13:a8:1d:e5:5f:b9:79:26: 4f:88:74:95:b7:00:d8:ab:a9:88:b1:f0:15:5e:08:09:41:c9: 80:53:3c:5b:3a:f1:93:b3:fd:6c:80:83:85:21:26:92:07:37: 43:df:9e:6d:b4:fe:bf:36:f8:36:3f:e3:d7:8d:e1:a1:71:14: bb:a8:a7:a5:d2:24:4f:46:3e:ae:dd:49:44:e7:3e:97:bf:6b: 8d:f8:bf:06:19:bd:0e:7f:20:46:53:f9:63:b3:9d:14:21:ca: f2:7a:16:09:c4:61:5a:45:56:a0:1a:18:e7:da:ea:e5:37:68: a5:62:6d:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy99IfkiPhQHWMmOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk MWQwY2NmNjgtZTY2MS00MzJmLThhNzktNjk4OTUxZGQzYTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5nwnM+xFD7eEJc2L9N8KbhiE3Sg86FlH55jG c+Zij88BLEE4qINyDit/Oqf/ZNnXdbRqhxZEUhZZO/+ANq1l9OEt5D6cbwKoKlGc CSj/N/fvfQc1r4ClrOugdyeFsPDRfXH7sxrCmpa8mHjZwgMnIu2C2aylgXznpRR1 HgxiV7Hh+HiZgXGc/qQt7E7tM2Om6sPQEY4rYxDG6xtYGNu406a4+N1SIvkzcB+S kOG8sd8qJogWwD7JSDuOtsjqjOfBDFd7Ou0HPEyNgyEEDF7C2/im0GfRo8IqJ9Jj WQ3kCHLisMZYm7NgBIQOyo62WwYSitOUGaUgor2rHjZswSAgmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEjOWqxVyl//26V3a7IcNnYUJgCPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvOTE1NjkwZTgtMGQ5YS0z MGIzLWE5MjQtMjk4ZTBiNWE2ZWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFXRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3xMFsJDvPvGicJEKKg3EsitdzmWshVL7sYvF7+C1gC1+KDp0ThhW3k hatlq1tZ9aBH2MZ9+9mElV2iAKknQZVwZk2hIvO+iVhK8miBHCuthSHnTEHs1hWt CocbA/e549xGfoAuooJW/0M33WDMQ8SzGe10YYezkvTylTw0r6pYoRwPv7zb0u0T qB3lX7l5Jk+IdJW3ANirqYix8BVeCAlByYBTPFs68ZOz/WyAg4UhJpIHN0Pfnm20 /r82+DY/49eN4aFxFLuop6XSJE9GPq7dSUTnPpe/a434vwYZvQ5/IEZT+WOznRQh yvJ6FgnEYVpFVqAaGOfa6uU3aKVibYU= -----END CERTIFICATE-----Generated at Wed Nov 5 11:58:58 2025 by rpki-client