$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/20999d70-d23c-3156-a415-7b2a358700b8.roa File: 20999d70-d23c-3156-a415-7b2a358700b8.roa (raw, json) Hash identifier: Nxt6VHBzM0DN0Fo2SutqG0V+2ely4qjnYB1Zdjjj3S8= Subject key identifier: 8A:A9:D2:29:81:DD:6E:6E:81:55:22:1B:A3:13:C2:50:8A:A4:E9:55 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584B4A472077CB453E8A9FE94E00 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/20999d70-d23c-3156-a415-7b2a358700b8.roa Signing time: Tue 23 Sep 2025 13:00:40 +0000 ROA not before: Tue 23 Sep 2025 13:00:40 +0000 ROA not after: Mon 22 Dec 2025 14:00:40 +0000 asID: 3360 IP address blocks: 192.85.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4a:47:20:77:cb:45:3e:8a:9f:e9:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 23 13:00:40 2025 GMT Not After : Dec 22 14:00:40 2025 GMT Subject: CN=684b972f-13bc-4fc1-8a0b-0acdce071aff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:5f:f0:7b:08:d4:0f:aa:cd:75:c5:f8:b6:c8: f4:a5:10:77:13:e9:49:04:40:70:bb:1f:8c:47:3d: 39:8a:8d:f7:b2:d0:f7:59:f8:ed:da:b5:d4:62:5f: 88:20:3d:f7:65:fc:93:ed:67:c6:d5:fd:ab:f7:0a: ea:22:66:99:6d:6e:f1:b6:eb:9a:ab:3c:96:66:9a: ae:e7:b9:14:41:1f:75:15:fb:a7:7b:60:e5:10:41: 59:42:68:be:50:82:92:ed:af:92:26:cf:db:9b:bb: 9c:be:73:68:1e:6a:ad:b1:a4:22:3d:1d:3e:ef:40: a3:c8:a0:d1:97:d0:49:a1:14:1d:3a:0f:1e:e5:c2: 7e:d9:6a:81:a1:d2:d5:97:7f:0f:a6:fc:7f:4a:b6: 6f:a7:be:7f:24:2c:03:c3:73:8c:25:6d:db:4e:3a: a3:fc:59:31:34:a1:3b:f3:ab:5d:3e:e1:e3:47:93: 81:96:05:2c:73:f4:3e:86:69:15:8f:90:67:84:1c: cc:77:5b:4b:ce:6c:3b:5d:98:91:9f:58:93:6f:76: 85:d6:b4:15:e8:a7:ae:72:ca:1d:d5:ac:df:f2:74: b0:c3:c6:b9:cf:8f:ed:c4:9d:af:f0:d0:80:b6:10: 34:52:13:f2:7d:f5:99:a3:b1:8c:90:e1:da:be:20: d7:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:A9:D2:29:81:DD:6E:6E:81:55:22:1B:A3:13:C2:50:8A:A4:E9:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/20999d70-d23c-3156-a415-7b2a358700b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.85.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:82:98:d8:54:9d:cd:b6:7d:42:4b:06:bf:f1:89:86:ce:1e: 3f:00:7c:8c:39:2d:7d:f4:bc:7a:e0:be:93:fc:89:bf:23:ef: 9f:9c:7b:8c:d6:51:09:43:2d:e1:4f:57:b6:d7:f6:ad:d3:e8: 63:03:70:fb:2f:dd:6c:81:6d:dd:8c:af:53:ae:6b:29:1a:09: 44:73:5e:c3:75:bb:49:62:86:0a:74:79:8e:1d:bf:c5:6c:b0: e4:bd:38:4d:18:27:9d:fa:9e:cf:0c:b7:bf:f0:92:97:9d:c3: 18:d3:f3:d9:65:3a:d0:73:fc:9e:95:1c:ff:b5:ec:bc:56:70: 21:13:e4:97:70:0a:48:e2:03:9d:0e:9c:d2:ab:b7:63:56:0e: 13:2a:ae:82:f2:c7:ea:43:ae:68:38:f8:24:86:88:48:f8:86: ee:96:aa:6e:40:76:df:cd:46:92:80:5d:f3:17:af:02:dc:da: 74:4f:71:17:f9:42:3e:86:21:8d:42:1e:00:ad:76:fb:40:9d: 10:f6:17:c5:dd:2b:89:e3:0e:65:27:bb:5a:4f:f8:a6:4b:0d: 6d:14:52:dd:aa:38:10:92:8d:67:04:15:b4:d8:b1:6b:89:cd: 64:85:82:f1:7b:61:6f:0e:f8:12:68:e1:b2:2b:c7:d4:6b:6c: d1:dd:41:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtKRyB3y0U+ip/pTgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDkyMzEzMDA0MFoXDTI1MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk Njg0Yjk3MmYtMTNiYy00ZmMxLThhMGItMGFjZGNlMDcxYWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2l/wewjUD6rNdcX4tsj0pRB3E+lJBEBwux+M Rz05io33stD3Wfjt2rXUYl+IID33ZfyT7WfG1f2r9wrqImaZbW7xtuuaqzyWZpqu 57kUQR91Ffune2DlEEFZQmi+UIKS7a+SJs/bm7ucvnNoHmqtsaQiPR0+70CjyKDR l9BJoRQdOg8e5cJ+2WqBodLVl38Ppvx/SrZvp75/JCwDw3OMJW3bTjqj/FkxNKE7 86tdPuHjR5OBlgUsc/Q+hmkVj5BnhBzMd1tLzmw7XZiRn1iTb3aF1rQV6Keucsod 1azf8nSww8a5z4/txJ2v8NCAthA0UhPyffWZo7GMkOHaviDXAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIqp0imB3W5ugVUiG6MTwlCKpOlVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMjA5OTlkNzAtZDIzYy0z MTU2LWE0MTUtN2IyYTM1ODcwMGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFVYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFCCmNhUnc22fUJLBr/xiYbOHj8AfIw5LX30vHrgvpP8ib8j75+ce4zW UQlDLeFPV7bX9q3T6GMDcPsv3WyBbd2Mr1OuaykaCURzXsN1u0lihgp0eY4dv8Vs sOS9OE0YJ536ns8Mt7/wkpedwxjT89llOtBz/J6VHP+17LxWcCET5JdwCkjiA50O nNKrt2NWDhMqroLyx+pDrmg4+CSGiEj4hu6Wqm5Adt/NRpKAXfMXrwLc2nRPcRf5 Qj6GIY1CHgCtdvtAnRD2F8XdK4njDmUnu1pP+KZLDW0UUt2qOBCSjWcEFbTYsWuJ zWSFgvF7YW8O+BJo4bIrx9RrbNHdQUo= -----END CERTIFICATE-----Generated at Sun Oct 19 20:45:03 2025 by rpki-client