$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/35593a2a-164d-3cc9-a54f-199cfc695243.roa File: 35593a2a-164d-3cc9-a54f-199cfc695243.roa (raw, json) Hash identifier: HKPSaSdTzd6s3CRSH3ojLVvcE80joJazu+wc7qlP/O0= Subject key identifier: 2D:89:F4:39:66:E6:27:B5:4C:6B:9C:72:64:D5:AC:77:03:45:62:61 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584D0A77A7D59BDFD1D1B9ABF860 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/35593a2a-164d-3cc9-a54f-199cfc695243.roa Signing time: Tue 03 Mar 2026 02:00:32 +0000 ROA not before: Tue 03 Mar 2026 02:00:32 +0000 ROA not after: Mon 01 Jun 2026 01:00:32 +0000 asID: 3356 IP address blocks: 192.85.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0a:77:a7:d5:9b:df:d1:d1:b9:ab:f8:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 3 02:00:32 2026 GMT Not After : Jun 1 01:00:32 2026 GMT Subject: CN=3c8a7f0d-0418-4d9e-a734-01f5e929f679 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:3a:5a:cd:3b:95:d3:22:17:c7:0b:65:1b:5c: e9:95:8c:c4:9d:fc:f8:96:7b:70:b9:cd:30:b1:09: e0:e0:b5:d7:da:93:7c:b4:cf:6d:02:1f:51:dc:a3: 8f:68:62:2b:75:07:cc:62:17:25:e0:e1:ee:94:fc: 49:79:1a:bd:22:ce:73:6f:6a:a2:0f:21:a7:0a:04: 4c:5b:0a:9a:a8:dc:cd:6d:67:44:80:ff:8e:09:87: e4:04:8e:cb:4e:55:a8:b9:77:cf:7c:03:a6:61:7f: 79:78:45:6f:b4:62:26:23:de:a1:c3:b1:a1:70:2a: a7:d1:19:75:6a:42:55:0e:f1:e0:43:2c:44:e8:47: 40:6f:6d:f9:7d:75:ce:37:49:39:66:1a:df:16:20: 06:64:3b:95:25:1f:94:23:10:9a:3a:a3:98:fa:fc: d8:d4:5b:b0:40:d5:f3:fb:3e:9c:38:1c:57:66:9e: d2:23:3f:0e:fd:1d:3c:d1:18:8d:3a:54:5d:d4:85: 77:c2:21:05:4d:f8:72:c7:2a:18:6f:8f:45:de:b0: 7c:d7:e3:29:d7:97:fe:6d:64:2a:ea:b4:2b:23:59: 9c:26:1a:15:65:f3:9f:81:7d:e2:a6:c8:16:53:40: 41:a2:a4:28:3c:56:a5:db:58:5b:d8:4e:9a:83:9f: 53:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:89:F4:39:66:E6:27:B5:4C:6B:9C:72:64:D5:AC:77:03:45:62:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/35593a2a-164d-3cc9-a54f-199cfc695243.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.85.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:8e:df:f3:f0:1b:b9:97:26:85:a2:46:e1:26:71:00:35:cf: 80:11:56:34:51:88:e8:34:55:dd:0a:12:32:8d:14:22:a8:65: 45:2f:59:d0:7b:fb:ad:44:6c:f0:5d:63:ac:f5:6a:db:f0:ec: 31:5d:54:27:64:08:b3:d2:68:ce:a3:c4:c6:4a:22:83:46:b7: 27:11:6c:a6:25:89:59:2c:cc:79:8a:79:3b:1d:80:b7:a0:3f: bd:87:b1:e6:c4:36:db:44:62:ee:9c:ae:c1:1f:30:d1:07:07: 7a:7a:dd:8f:1b:70:3f:6c:9e:3c:f9:85:52:2e:4a:a8:14:d0: 0d:cc:a8:ba:ab:e8:53:1e:32:90:83:90:37:56:62:54:a2:4c: be:b6:ea:22:5d:17:6d:68:f9:c1:01:5c:f3:c7:4d:fb:90:31: 3e:50:25:dd:3a:22:72:87:5b:60:c6:7e:e5:ef:69:00:62:04: fb:31:22:87:88:76:be:c8:34:7a:5f:43:88:f9:cb:a0:1b:6e: d8:8a:c1:23:e1:fc:0a:dd:6a:1f:a9:6e:9c:80:da:0a:b7:a7: c2:57:28:45:19:86:4a:f8:a7:ab:c2:38:f5:33:dd:23:3b:39: 25:61:cc:65:2b:fc:80:00:4a:74:68:fd:9f:8c:6f:22:2e:f5: 6f:21:13:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Kd6fVm9/R0bmr+GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDMwMzAyMDAzMloXDTI2MDYwMTAxMDAzMlowLzEtMCsGA1UEAxMk M2M4YTdmMGQtMDQxOC00ZDllLWE3MzQtMDFmNWU5MjlmNjc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDpazTuV0yIXxwtlG1zplYzEnfz4lntwuc0w sQng4LXX2pN8tM9tAh9R3KOPaGIrdQfMYhcl4OHulPxJeRq9Is5zb2qiDyGnCgRM WwqaqNzNbWdEgP+OCYfkBI7LTlWouXfPfAOmYX95eEVvtGImI96hw7GhcCqn0Rl1 akJVDvHgQyxE6EdAb235fXXON0k5ZhrfFiAGZDuVJR+UIxCaOqOY+vzY1FuwQNXz +z6cOBxXZp7SIz8O/R080RiNOlRd1IV3wiEFTfhyxyoYb49F3rB81+Mp15f+bWQq 6rQrI1mcJhoVZfOfgX3ipsgWU0BBoqQoPFal21hb2E6ag59TRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC2J9Dlm5ie1TGuccmTVrHcDRWJhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMzU1OTNhMmEtMTY0ZC0z Y2M5LWE1NGYtMTk5Y2ZjNjk1MjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFU6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAImO3/PwG7mXJoWiRuEmcQA1z4ARVjRRiOg0Vd0KEjKNFCKoZUUvWdB7 +61EbPBdY6z1atvw7DFdVCdkCLPSaM6jxMZKIoNGtycRbKYliVkszHmKeTsdgLeg P72HsebENttEYu6crsEfMNEHB3p63Y8bcD9snjz5hVIuSqgU0A3MqLqr6FMeMpCD kDdWYlSiTL626iJdF21o+cEBXPPHTfuQMT5QJd06InKHW2DGfuXvaQBiBPsxIoeI dr7INHpfQ4j5y6AbbtiKwSPh/Ardah+pbpyA2gq3p8JXKEUZhkr4p6vCOPUz3SM7 OSVhzGUr/IAASnRo/Z+MbyIu9W8hE+A= -----END CERTIFICATE-----Generated at Fri Mar 27 01:28:29 2026 by rpki-client