$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/148f57e5-a69e-3867-8d75-2518d154bc4c.roa File: 148f57e5-a69e-3867-8d75-2518d154bc4c.roa (raw, json) Hash identifier: ioYkmaOo0xhn4I207ERIEgzq1FHI2Gq4wrvcovx0QgA= Subject key identifier: 6F:4F:0C:A0:34:03:E8:B4:67:A5:E0:C0:16:5E:18:03:0A:37:E3:9E Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584D0A77A9956508C65ED736E360 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/148f57e5-a69e-3867-8d75-2518d154bc4c.roa Signing time: Tue 03 Mar 2026 02:00:32 +0000 ROA not before: Tue 03 Mar 2026 02:00:32 +0000 ROA not after: Mon 01 Jun 2026 01:00:32 +0000 asID: 3356 IP address blocks: 192.85.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0a:77:a9:95:65:08:c6:5e:d7:36:e3:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 3 02:00:32 2026 GMT Not After : Jun 1 01:00:32 2026 GMT Subject: CN=87abcd01-a566-4c76-a3ae-a7a46d58460a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ce:a0:b0:22:16:72:33:08:c8:eb:e4:3e:b7: be:af:ed:a1:68:45:d6:40:06:30:ce:03:9c:c7:ec: be:b2:02:73:21:72:60:c4:08:8d:44:3d:9d:64:07: 39:ac:58:3e:56:f8:3e:45:e3:6b:71:2a:e7:e8:c3: f2:de:88:45:9a:03:c8:d2:56:65:0a:5a:f4:e0:2b: 24:2f:fb:e7:33:12:38:01:23:37:df:c2:55:5c:37: 47:54:30:4a:bc:2e:60:67:c4:74:d9:ff:2a:65:18: 35:40:ac:77:2c:f8:b6:bc:dc:20:2c:4e:6a:45:ea: 13:c7:3d:9c:4c:57:b9:c9:55:fd:67:e4:ee:a3:91: 79:a2:24:29:be:98:ef:43:74:af:57:8d:7c:a4:fb: 57:d9:90:9f:b0:b6:cb:5a:44:36:1c:6c:69:cb:e1: ca:fb:95:35:e4:aa:21:18:75:09:fa:83:49:32:0b: 66:01:60:8b:5c:8f:07:01:ed:6b:29:cb:14:4e:c1: 8e:5e:d6:a2:7d:c0:7b:65:b2:c3:c9:35:da:72:22: 56:ae:d8:27:e0:30:8f:fa:97:5b:a3:e4:cd:c2:0a: 1f:a2:e5:a1:93:e9:c8:80:6a:e3:e5:7b:15:51:23: 64:df:46:c2:16:8e:3d:4b:20:18:0a:a6:5c:4c:68: 0e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:4F:0C:A0:34:03:E8:B4:67:A5:E0:C0:16:5E:18:03:0A:37:E3:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/148f57e5-a69e-3867-8d75-2518d154bc4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.85.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:9b:91:fe:c2:4b:51:23:19:2f:db:9c:56:b6:46:9d:63:0a: eb:bd:7a:40:1f:42:27:1e:52:cf:09:64:14:66:66:8f:74:0f: a2:54:ac:c6:c3:0c:9f:2b:23:e1:c9:1d:56:5c:d6:c8:86:fc: 70:d7:c4:d0:a6:89:16:1b:71:43:ba:36:2c:37:fe:0c:49:76: c1:11:57:a7:2c:95:13:79:75:c7:85:4e:e7:1b:27:e1:a7:cb: 5e:ce:55:7c:84:a1:76:01:3f:f1:66:31:e5:c6:49:ab:58:11: e8:f3:92:a5:5f:71:20:ff:30:b8:dc:b8:44:16:43:54:33:e7: 10:cc:fa:bf:61:e1:d1:c2:e2:25:be:6d:80:bf:d4:e9:5f:28: 41:1a:b0:12:36:5e:6d:3c:0a:dd:de:6b:c7:3e:63:d7:ae:44: 08:38:d2:e8:65:5a:5e:4b:b8:39:52:96:09:2d:b4:61:21:27: 54:79:cd:40:32:53:dd:cf:5c:4b:34:5d:d9:b3:fa:80:30:c4: 92:d7:8f:b4:a2:56:3d:97:46:f4:e8:ed:aa:03:7a:05:86:55: 79:ca:fa:30:46:19:42:39:51:8d:6c:d7:20:f0:9f:1b:01:12: f2:68:a0:11:46:9d:bc:9c:9e:17:85:8d:a0:c9:90:86:c7:87: 2e:65:3e:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Kd6mVZQjGXtc242AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDMwMzAyMDAzMloXDTI2MDYwMTAxMDAzMlowLzEtMCsGA1UEAxMk ODdhYmNkMDEtYTU2Ni00Yzc2LWEzYWUtYTdhNDZkNTg0NjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3s6gsCIWcjMIyOvkPre+r+2haEXWQAYwzgOc x+y+sgJzIXJgxAiNRD2dZAc5rFg+Vvg+ReNrcSrn6MPy3ohFmgPI0lZlClr04Csk L/vnMxI4ASM338JVXDdHVDBKvC5gZ8R02f8qZRg1QKx3LPi2vNwgLE5qReoTxz2c TFe5yVX9Z+Tuo5F5oiQpvpjvQ3SvV418pPtX2ZCfsLbLWkQ2HGxpy+HK+5U15Koh GHUJ+oNJMgtmAWCLXI8HAe1rKcsUTsGOXtaifcB7ZbLDyTXaciJWrtgn4DCP+pdb o+TNwgofouWhk+nIgGrj5XsVUSNk30bCFo49SyAYCqZcTGgOZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG9PDKA0A+i0Z6XgwBZeGAMKN+OeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMTQ4ZjU3ZTUtYTY5ZS0z ODY3LThkNzUtMjUxOGQxNTRiYzRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFVZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKbkf7CS1EjGS/bnFa2Rp1jCuu9ekAfQiceUs8JZBRmZo90D6JUrMbD DJ8rI+HJHVZc1siG/HDXxNCmiRYbcUO6Niw3/gxJdsERV6cslRN5dceFTucbJ+Gn y17OVXyEoXYBP/FmMeXGSatYEejzkqVfcSD/MLjcuEQWQ1Qz5xDM+r9h4dHC4iW+ bYC/1OlfKEEasBI2Xm08Ct3ea8c+Y9euRAg40uhlWl5LuDlSlgkttGEhJ1R5zUAy U93PXEs0Xdmz+oAwxJLXj7SiVj2XRvTo7aoDegWGVXnK+jBGGUI5UY1s1yDwnxsB EvJooBFGnbycnheFjaDJkIbHhy5lPq8= -----END CERTIFICATE-----Generated at Thu Mar 26 15:53:25 2026 by rpki-client