$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4a13f0af-13de-3e9c-bebf-7dfaba4cc58e.roa File: 4a13f0af-13de-3e9c-bebf-7dfaba4cc58e.roa (raw, json) Hash identifier: jKKGiChQAwsah6HVyft+NXKmiupx9lUBpwVXKxfFmao= Subject key identifier: 67:82:2E:1A:A4:02:0E:AD:E4:D5:48:2D:4F:04:D0:18:0C:87:64:ED Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584B1AD1848D8B0388839E5F8AC0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4a13f0af-13de-3e9c-bebf-7dfaba4cc58e.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 202 IP address blocks: 192.85.78.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:84:8d:8b:03:88:83:9e:5f:8a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=dd3cd3f6-0db4-429b-b5e6-bfbd63b7d7e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:00:5d:51:88:34:a8:8f:80:16:41:db:64:52: 64:45:29:2a:89:98:24:b7:81:e0:f1:99:5a:8e:39: e8:9c:2e:3d:05:08:e4:15:55:70:02:53:f7:67:12: 0e:e1:09:25:53:2c:27:30:6d:70:03:e7:17:d4:36: a6:a8:79:88:93:b8:e6:cd:e7:63:73:ff:72:89:c1: eb:2e:25:98:d5:ce:fc:f2:7d:99:9f:f1:31:d8:d8: 68:13:ac:6b:0e:a5:89:a0:04:9a:d2:72:a1:91:dc: 7c:78:0c:ab:07:ed:d4:9a:a8:f4:5c:28:17:50:12: 9e:82:2e:3a:c7:3c:75:10:c1:2c:d0:04:70:5f:7f: 39:38:e2:f8:3c:f8:ac:b5:0f:bd:03:ad:97:e9:69: 89:4f:31:4f:69:ce:ec:b2:d2:e8:de:15:7f:f3:2c: 36:20:a0:04:df:7c:a9:0d:ac:cf:ad:b0:76:33:fa: 94:b9:3f:61:25:85:ed:2c:60:3c:d2:fb:cb:af:71: b6:77:f8:44:70:b2:89:a3:8b:80:a7:8d:c6:9c:02: 78:73:6e:c8:64:aa:68:42:da:a4:0a:55:36:d7:8a: 35:80:81:18:44:a3:e4:2d:f4:5b:1d:18:e5:0f:5a: f8:97:62:89:59:38:c6:30:50:a1:96:91:9d:ae:05: 68:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:82:2E:1A:A4:02:0E:AD:E4:D5:48:2D:4F:04:D0:18:0C:87:64:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4a13f0af-13de-3e9c-bebf-7dfaba4cc58e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.85.78.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:fb:38:bc:3f:16:df:58:c5:b8:8a:54:de:c9:e4:96:04:b9: a3:86:4c:3c:c0:00:91:38:84:d0:70:9e:f1:71:04:4a:e0:a9: b4:4a:c9:46:19:bf:73:4e:d3:4a:1d:fb:84:03:62:71:b6:33: 4f:e6:44:6d:a5:4f:98:f0:aa:09:58:93:5d:5a:58:a2:8f:23: 63:5a:c3:e5:77:db:87:2f:e9:a5:8a:4f:86:8c:9c:07:13:d3: 4c:8d:9a:84:d8:d6:22:ce:3b:54:a1:09:31:0a:c9:a5:3e:63: ca:d7:4f:bc:93:ec:b3:9c:8d:4b:cc:f9:68:d5:4c:5f:c5:35: 40:63:5b:47:42:ad:97:bd:ae:15:1d:d3:59:e5:ff:64:00:12: d4:63:b0:eb:55:c1:6b:6a:72:cc:21:fb:a4:fe:90:e2:2a:f3: 99:a8:9f:92:bd:46:99:24:b3:2c:6b:5c:61:a1:80:d0:6a:05: 5f:ab:78:ec:a6:c7:de:5b:45:32:24:af:bd:c2:fe:c5:e2:12: e8:15:cc:6b:aa:d8:7a:c6:68:0f:ca:bf:b1:fa:3e:13:21:c1: 84:f1:d4:42:10:c9:de:fb:58:db:00:60:50:f1:67:2e:6d:71: e6:53:f9:b2:cc:7d:ac:ac:04:5a:32:83:83:83:cf:85:79:e7: 2c:8f:b1:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0YSNiwOIg55fisAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk ZGQzY2QzZjYtMGRiNC00MjliLWI1ZTYtYmZiZDYzYjdkN2UyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6QBdUYg0qI+AFkHbZFJkRSkqiZgkt4Hg8Zla jjnonC49BQjkFVVwAlP3ZxIO4QklUywnMG1wA+cX1DamqHmIk7jmzedjc/9yicHr LiWY1c788n2Zn/Ex2NhoE6xrDqWJoASa0nKhkdx8eAyrB+3Umqj0XCgXUBKegi46 xzx1EMEs0ARwX385OOL4PPistQ+9A62X6WmJTzFPac7sstLo3hV/8yw2IKAE33yp DazPrbB2M/qUuT9hJYXtLGA80vvLr3G2d/hEcLKJo4uAp43GnAJ4c27IZKpoQtqk ClU214o1gIEYRKPkLfRbHRjlD1r4l2KJWTjGMFChlpGdrgVo7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGeCLhqkAg6t5NVILU8E0BgMh2TtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNGExM2YwYWYtMTNkZS0z ZTljLWJlYmYtN2RmYWJhNGNjNThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwFVOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEf7OLw/Ft9YxbiKVN7J5JYEuaOGTDzAAJE4hNBwnvFxBErgqbRKyUYZ v3NO00od+4QDYnG2M0/mRG2lT5jwqglYk11aWKKPI2Naw+V324cv6aWKT4aMnAcT 00yNmoTY1iLOO1ShCTEKyaU+Y8rXT7yT7LOcjUvM+WjVTF/FNUBjW0dCrZe9rhUd 01nl/2QAEtRjsOtVwWtqcswh+6T+kOIq85mon5K9RpkksyxrXGGhgNBqBV+reOym x95bRTIkr73C/sXiEugVzGuq2HrGaA/Kv7H6PhMhwYTx1EIQyd77WNsAYFDxZy5t ceZT+bLMfaysBFoyg4ODz4V55yyPsYs= -----END CERTIFICATE-----Generated at Sun Oct 19 20:26:44 2025 by rpki-client