$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d525276d-4107-3afe-877a-c2b1c82a534b.roa File: d525276d-4107-3afe-877a-c2b1c82a534b.roa (raw, json) Hash identifier: FsXy8eOp/mtnyxnQycqrFM9/AfyHL5rjU92s7UIomwc= Subject key identifier: 01:47:BD:A4:FF:16:93:94:74:76:82:C3:36:00:B1:D7:46:C4:EE:E7 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584EA798123B64DF2BE8F133E000 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d525276d-4107-3afe-877a-c2b1c82a534b.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 202 IP address blocks: 192.85.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:98:12:3b:64:df:2b:e8:f1:33:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=6930e3b0-a2b0-4aad-a977-bf5f97cf2661 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ff:73:3d:5d:d4:d0:4b:58:29:50:a0:90:73: 42:d7:7d:df:57:ab:07:dc:40:7e:f3:63:cf:23:c1: 01:da:e3:e3:b0:7c:95:11:55:8e:eb:1e:a0:75:01: b6:59:86:85:ab:a4:26:b6:96:db:67:a3:ae:eb:34: bd:e7:d6:ba:72:ef:9a:45:7d:71:7b:c8:f4:03:d1: 95:7e:dd:af:1e:e0:6a:85:16:cd:67:b8:7b:0d:dd: e6:aa:a2:c8:d8:3e:f0:8e:4f:15:b1:da:9f:2e:ff: 64:50:b5:28:80:1a:af:73:55:87:e3:6a:a7:04:8b: f2:15:f9:b6:1c:fb:4a:ab:47:42:16:dc:30:fb:dc: 1f:40:8f:51:e3:cd:16:63:1d:8c:02:cc:6b:f9:f0: 30:2b:27:b1:0b:ae:9e:5e:70:0a:3d:52:de:60:76: 9c:21:41:88:b0:76:6c:d3:a2:7e:b2:56:21:7f:2b: a7:66:8e:f1:b4:bd:51:7e:3c:77:85:79:48:4f:42: 99:4a:fc:57:40:52:2f:f1:85:f4:78:87:88:c1:b3: 7e:66:6a:45:36:35:a4:ea:4b:c0:19:0e:67:59:17: 39:43:f3:c2:c4:17:f4:0b:d8:58:0a:20:de:bd:b5: 01:16:e8:5a:72:eb:fc:e0:14:0e:f0:93:72:29:c9: 4a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:47:BD:A4:FF:16:93:94:74:76:82:C3:36:00:B1:D7:46:C4:EE:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d525276d-4107-3afe-877a-c2b1c82a534b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.85.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:e5:f8:de:64:f9:3d:54:83:c8:a1:59:da:e2:a0:0e:02:e5: 21:23:0d:3b:2d:af:16:88:2a:94:42:48:ec:d6:d6:8a:f2:cc: b0:3a:66:f9:6f:7f:46:ef:80:ee:a4:82:f6:c9:53:c2:5f:5a: 45:b0:e9:df:12:70:34:a5:a5:00:d8:b2:1d:3d:fe:a9:b2:66: 3a:6d:8e:53:ab:b9:1c:40:ff:d4:27:de:6a:28:08:d8:c9:a8: 1c:4e:4f:c5:58:78:0e:5e:c7:a6:b1:20:19:dc:98:f5:19:3a: 0f:7e:41:f3:9f:aa:3d:36:b4:28:5c:f8:ef:c0:3f:5b:bb:d4: ec:f7:d7:72:b6:4d:09:b3:5b:8c:f8:50:8d:a9:90:59:b6:80: be:cc:c6:9b:74:4c:4e:6f:6e:2c:2a:49:79:0c:2c:dd:6c:0e: b0:ee:24:94:d9:33:9d:1e:9d:b4:26:8f:55:b1:fc:f1:84:36: b2:80:ef:b2:46:20:de:36:b2:32:b2:7f:b9:1f:79:f7:cf:e4: 4a:9a:2a:69:08:a6:0d:9e:89:e3:88:cf:2f:2b:73:3e:e6:b1: 4a:69:97:e5:d4:12:94:b6:db:e4:3c:b0:ea:84:4e:0f:35:10: 7a:e7:5d:17:8f:51:b9:c6:0c:8f:d9:1c:af:93:c2:07:8d:cf: 4c:33:a3:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmBI7ZN8r6PEz4AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NjkzMGUzYjAtYTJiMC00YWFkLWE5NzctYmY1Zjk3Y2YyNjYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/9zPV3U0EtYKVCgkHNC133fV6sH3EB+82PP I8EB2uPjsHyVEVWO6x6gdQG2WYaFq6QmtpbbZ6Ou6zS959a6cu+aRX1xe8j0A9GV ft2vHuBqhRbNZ7h7Dd3mqqLI2D7wjk8VsdqfLv9kULUogBqvc1WH42qnBIvyFfm2 HPtKq0dCFtww+9wfQI9R480WYx2MAsxr+fAwKyexC66eXnAKPVLeYHacIUGIsHZs 06J+slYhfyunZo7xtL1Rfjx3hXlIT0KZSvxXQFIv8YX0eIeIwbN+ZmpFNjWk6kvA GQ5nWRc5Q/PCxBf0C9hYCiDevbUBFuhacuv84BQO8JNyKclKGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAFHvaT/FpOUdHaCwzYAsddGxO7nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZDUyNTI3NmQtNDEwNy0z YWZlLTg3N2EtYzJiMWM4MmE1MzRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFUXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAjl+N5k+T1Ug8ihWdrioA4C5SEjDTstrxaIKpRCSOzW1oryzLA6Zvlv f0bvgO6kgvbJU8JfWkWw6d8ScDSlpQDYsh09/qmyZjptjlOruRxA/9Qn3mooCNjJ qBxOT8VYeA5ex6axIBncmPUZOg9+QfOfqj02tChc+O/AP1u71Oz313K2TQmzW4z4 UI2pkFm2gL7Mxpt0TE5vbiwqSXkMLN1sDrDuJJTZM50enbQmj1Wx/PGENrKA77JG IN42sjKyf7kfeffP5EqaKmkIpg2eieOIzy8rcz7msUppl+XUEpS22+Q8sOqETg81 EHrnXRePUbnGDI/ZHK+TwgeNz0wzo7U= -----END CERTIFICATE-----Generated at Wed Jul 29 07:42:00 2026 by rpki-client