$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0e399cbe-cac1-37f4-9041-74a6b5fc57ae.roa File: 0e399cbe-cac1-37f4-9041-74a6b5fc57ae.roa (raw, json) Hash identifier: EHC3NeM/7VPjsdrOF6SufxS1OO9qhwVgbi26dN54omc= Subject key identifier: 28:8C:DC:C4:E2:3A:64:3E:07:D3:68:D7:62:C3:0E:0B:0B:95:76:E1 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584B4A471E25196F30725F4AAE80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0e399cbe-cac1-37f4-9041-74a6b5fc57ae.roa Signing time: Tue 23 Sep 2025 13:00:40 +0000 ROA not before: Tue 23 Sep 2025 13:00:40 +0000 ROA not after: Mon 22 Dec 2025 14:00:40 +0000 asID: 3360 IP address blocks: 192.85.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4a:47:1e:25:19:6f:30:72:5f:4a:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 23 13:00:40 2025 GMT Not After : Dec 22 14:00:40 2025 GMT Subject: CN=8c517cb5-fde4-42d1-9e8f-e7c1e55ef457 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:75:34:82:9e:45:23:54:33:33:92:47:fd:8f: 9a:d2:73:cd:fd:a7:31:59:b3:4e:b2:1d:14:05:14: a9:f7:80:6e:0f:36:ac:5d:b8:43:b0:84:b9:63:9a: 5e:bc:fa:9c:a8:ac:43:57:16:7f:39:32:88:48:98: 48:02:93:f5:b1:34:b6:af:10:27:92:c8:55:58:cd: e9:a2:41:4d:af:a8:42:77:6d:bb:46:c8:90:4a:49: fc:2e:c7:24:3d:5d:c0:0a:bc:91:78:d1:ff:d3:49: 60:cd:92:18:0c:3c:93:98:f0:80:a5:9a:23:dc:d6: dc:bd:6a:aa:ed:63:9c:3d:22:91:c5:bd:e3:d3:7d: dd:27:10:61:33:65:f7:03:28:b8:49:e4:0e:e0:cb: 2e:89:30:d5:f5:e3:6c:e8:fe:12:43:b5:e7:f5:53: 3a:ad:5a:fb:f1:7b:e7:f8:da:51:42:9e:f2:8c:6c: f2:12:8d:ee:98:1b:8e:92:5b:41:81:50:ac:6e:d2: fe:54:ef:7b:48:4a:ff:0f:af:d2:ae:f0:fd:ea:d4: f2:5f:0b:d1:cc:53:f2:54:51:4a:fd:2a:91:19:bd: a4:14:eb:92:68:bb:97:df:42:3d:13:70:ce:5a:15: 9a:46:73:d1:9c:e1:52:f3:5b:11:89:9c:74:73:c2: 86:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:8C:DC:C4:E2:3A:64:3E:07:D3:68:D7:62:C3:0E:0B:0B:95:76:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0e399cbe-cac1-37f4-9041-74a6b5fc57ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.85.47.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:25:81:88:90:15:7b:d5:1c:e2:ba:4e:48:6f:b1:ec:ee:ea: 71:8b:87:b0:8e:f2:b1:4e:17:5a:fc:0c:c6:87:2d:ca:24:4e: 01:d6:2c:75:8f:ee:33:51:ec:70:23:0e:4b:5c:bc:07:7a:18: c2:34:92:1a:ff:4a:bd:7e:59:67:d8:f1:ab:f2:a3:27:bd:c8: cb:95:62:90:dc:b9:da:1f:36:44:4e:cf:51:e5:65:85:5d:9e: 86:4d:a7:d4:a4:23:6b:58:a9:4f:28:ac:ff:17:53:7c:4c:e2: af:c7:d0:ee:ce:09:66:ed:ea:bc:01:1c:5e:45:2c:a0:2b:17: 60:36:ba:b6:53:2e:40:ce:33:9f:75:9d:1e:14:61:a1:8f:06: 5f:38:10:92:4d:c6:86:a2:0a:8a:43:23:a5:a1:5b:6d:11:02: b8:12:2c:90:f9:55:6b:bd:9e:20:e7:4e:0f:35:55:d2:75:e8: 11:1d:9f:5e:fb:d2:92:31:85:d9:f2:3f:12:34:84:13:6a:a4: 5e:47:e4:e6:87:66:3d:f2:9b:b3:33:a9:87:85:31:62:ae:51: 05:26:cd:c8:48:de:39:50:fc:70:87:e6:6c:4f:cb:6d:b1:58: a2:50:c6:d9:02:48:47:a0:5f:2d:a2:74:ca:95:9c:31:ea:b2: 46:c2:4c:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtKRx4lGW8wcl9KroAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDkyMzEzMDA0MFoXDTI1MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk OGM1MTdjYjUtZmRlNC00MmQxLTllOGYtZTdjMWU1NWVmNDU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3U0gp5FI1QzM5JH/Y+a0nPN/acxWbNOsh0U BRSp94BuDzasXbhDsIS5Y5pevPqcqKxDVxZ/OTKISJhIApP1sTS2rxAnkshVWM3p okFNr6hCd227RsiQSkn8LsckPV3ACryReNH/00lgzZIYDDyTmPCApZoj3NbcvWqq 7WOcPSKRxb3j033dJxBhM2X3Ayi4SeQO4MsuiTDV9eNs6P4SQ7Xn9VM6rVr78Xvn +NpRQp7yjGzyEo3umBuOkltBgVCsbtL+VO97SEr/D6/SrvD96tTyXwvRzFPyVFFK /SqRGb2kFOuSaLuX30I9E3DOWhWaRnPRnOFS81sRiZx0c8KGsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCiM3MTiOmQ+B9No12LDDgsLlXbhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMGUzOTljYmUtY2FjMS0z N2Y0LTkwNDEtNzRhNmI1ZmM1N2FlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFUvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8lgYiQFXvVHOK6Tkhvsezu6nGLh7CO8rFOF1r8DMaHLcokTgHWLHWP 7jNR7HAjDktcvAd6GMI0khr/Sr1+WWfY8avyoye9yMuVYpDcudofNkROz1HlZYVd noZNp9SkI2tYqU8orP8XU3xM4q/H0O7OCWbt6rwBHF5FLKArF2A2urZTLkDOM591 nR4UYaGPBl84EJJNxoaiCopDI6WhW20RArgSLJD5VWu9niDnTg81VdJ16BEdn177 0pIxhdnyPxI0hBNqpF5H5OaHZj3ym7MzqYeFMWKuUQUmzchI3jlQ/HCH5mxPy22x WKJQxtkCSEegXy2idMqVnDHqskbCTCM= -----END CERTIFICATE-----Generated at Sun Oct 19 20:45:05 2025 by rpki-client