$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b8e9bac5-7c4b-3cd6-a3f9-3a0894812fc9.roa File: b8e9bac5-7c4b-3cd6-a3f9-3a0894812fc9.roa (raw, json) Hash identifier: +RNPJBIaCfaPzHoss7atDkRAYNkh1wC6FELBdl6ewp8= Subject key identifier: AA:95:59:FC:24:9F:E5:38:3C:EA:26:54:15:37:A6:09:28:E7:7A:86 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584EF7177A3E94895FEA35510B80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b8e9bac5-7c4b-3cd6-a3f9-3a0894812fc9.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 202 IP address blocks: 192.85.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:7a:3e:94:89:5f:ea:35:51:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=3042a78f-1cf3-4fb3-bd98-145ad159b874 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:1d:56:f7:11:e9:45:33:28:f2:44:52:a1:9d: a8:3c:3c:f0:d6:c5:8f:02:76:e5:78:f9:b0:07:06: 74:da:6e:33:95:d6:41:18:dd:8d:f9:e4:a4:6b:31: 05:67:8d:a8:d1:0c:8e:d0:0d:44:6a:cf:7d:a4:1a: d9:29:38:ab:54:33:1d:cf:d1:f8:58:a0:3b:9b:56: 43:a5:3f:90:b6:b0:30:8a:90:3a:02:2b:53:7f:92: 01:c9:70:e5:a5:8b:7f:32:09:ae:0a:a2:ff:e2:b4: a3:02:ea:d8:6e:1a:11:54:1d:2e:77:9c:28:f9:42: 17:f3:a2:d9:4c:8d:eb:3b:f4:52:cf:3c:83:3e:e1: b8:86:02:6a:94:e1:2a:9f:2d:43:32:99:d0:fd:19: 90:b6:41:d3:63:1b:ec:50:69:be:bc:75:3c:72:79: e5:66:39:8b:7e:98:4a:36:8f:91:94:a7:1e:17:fe: 4a:20:88:32:83:fd:94:1a:9d:ef:6f:f8:f0:cd:1f: 1e:c2:cc:9f:09:3f:1a:78:2f:97:a0:69:fc:fc:73: df:ff:d1:f6:bd:d8:22:9c:f8:4c:15:86:6f:34:c2: f7:db:57:6c:9a:dd:5c:ac:ca:71:8f:61:b1:9e:1e: 3c:60:34:6b:59:b4:dd:44:ac:a7:8a:b4:9b:c8:6e: 66:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:95:59:FC:24:9F:E5:38:3C:EA:26:54:15:37:A6:09:28:E7:7A:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b8e9bac5-7c4b-3cd6-a3f9-3a0894812fc9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.85.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:01:fc:46:7a:80:3d:15:3c:97:dd:ba:83:d0:81:3e:80:9d: 2f:ec:7c:60:ca:78:40:b0:dc:fc:98:43:27:05:1e:92:ec:2f: 59:da:b5:c7:b1:c9:80:e6:89:98:6a:02:fe:30:80:2a:d2:45: 6b:f3:3b:67:e5:8b:f9:38:c3:a0:e9:7e:be:d9:f0:83:63:ea: d1:d0:b0:c9:d8:7f:66:34:48:f8:fb:9a:39:63:94:49:fc:e1: 51:7d:fb:00:6b:cc:50:06:7c:6c:76:67:10:00:f4:a8:3f:d4: 26:70:93:70:13:09:cb:49:00:1c:27:16:fb:39:4c:0c:a2:76: 9f:2a:49:d0:3c:88:b4:3b:91:de:57:d4:c4:d3:88:9b:03:91: 94:95:b7:83:64:cb:2c:31:74:52:a3:40:f4:76:96:d2:dd:2a: 26:02:61:00:89:c3:3a:a8:0b:40:d0:9f:9c:81:84:b9:e5:b1: 83:47:9e:8f:3c:92:ab:86:94:cc:07:f3:e9:e7:8c:dc:45:2b: 00:e0:ea:ea:4a:94:17:ba:8c:ef:25:4e:57:b0:9e:83:fc:88: 07:a6:e4:c5:d1:15:5c:a8:99:6e:01:03:17:02:04:af:24:97: 54:95:e3:ec:0a:d1:8b:4c:c5:d1:ac:18:98:49:02:2f:63:7b: 06:36:65:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F3o+lIlf6jVRC4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk MzA0MmE3OGYtMWNmMy00ZmIzLWJkOTgtMTQ1YWQxNTliODc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnR1W9xHpRTMo8kRSoZ2oPDzw1sWPAnblePmw BwZ02m4zldZBGN2N+eSkazEFZ42o0QyO0A1Eas99pBrZKTirVDMdz9H4WKA7m1ZD pT+QtrAwipA6AitTf5IByXDlpYt/MgmuCqL/4rSjAurYbhoRVB0ud5wo+UIX86LZ TI3rO/RSzzyDPuG4hgJqlOEqny1DMpnQ/RmQtkHTYxvsUGm+vHU8cnnlZjmLfphK No+RlKceF/5KIIgyg/2UGp3vb/jwzR8ewsyfCT8aeC+XoGn8/HPf/9H2vdginPhM FYZvNML321dsmt1crMpxj2Gxnh48YDRrWbTdRKynirSbyG5mHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKqVWfwkn+U4POomVBU3pgko53qGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYjhlOWJhYzUtN2M0Yi0z Y2Q2LWEzZjktM2EwODk0ODEyZmM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFXmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEkB/EZ6gD0VPJfduoPQgT6AnS/sfGDKeECw3PyYQycFHpLsL1natcex yYDmiZhqAv4wgCrSRWvzO2fli/k4w6Dpfr7Z8INj6tHQsMnYf2Y0SPj7mjljlEn8 4VF9+wBrzFAGfGx2ZxAA9Kg/1CZwk3ATCctJABwnFvs5TAyidp8qSdA8iLQ7kd5X 1MTTiJsDkZSVt4NkyywxdFKjQPR2ltLdKiYCYQCJwzqoC0DQn5yBhLnlsYNHno88 kquGlMwH8+nnjNxFKwDg6upKlBe6jO8lTlewnoP8iAem5MXRFVyomW4BAxcCBK8k l1SV4+wK0YtMxdGsGJhJAi9jewY2ZXc= -----END CERTIFICATE-----Generated at Mon Sep 21 21:45:26 2026 by rpki-client