$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5d473a3a-6ed2-30cd-af1d-2b18e3c7538a.roa File: 5d473a3a-6ed2-30cd-af1d-2b18e3c7538a.roa (raw, json) Hash identifier: 5sPQtrC16kX2xapUhB93Eg5aV89uMAu30fnxUvSnmog= Subject key identifier: 86:F9:38:5C:0D:DF:9D:09:93:FE:AE:87:63:F9:88:8A:F9:62:A4:67 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584D0A77A783BFA9427F7B902E40 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5d473a3a-6ed2-30cd-af1d-2b18e3c7538a.roa Signing time: Tue 03 Mar 2026 02:00:32 +0000 ROA not before: Tue 03 Mar 2026 02:00:32 +0000 ROA not after: Mon 01 Jun 2026 01:00:32 +0000 asID: 3360 IP address blocks: 192.85.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0a:77:a7:83:bf:a9:42:7f:7b:90:2e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 3 02:00:32 2026 GMT Not After : Jun 1 01:00:32 2026 GMT Subject: CN=b920084c-13c3-4120-8e6e-8f25412da30e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f9:c0:49:ed:99:94:74:bb:ac:56:29:5f:23: f5:79:26:43:3f:3d:a7:b5:ac:82:c6:b5:43:c9:16: d9:2f:a5:98:6c:8b:a0:2d:1d:a6:bc:9a:0a:44:20: e1:16:c4:6b:60:f0:2e:31:b9:63:63:26:63:94:a8: 3e:1a:e9:95:cb:16:c0:30:79:5d:61:ea:6b:39:84: b4:bd:90:2c:c4:58:01:04:0f:f0:30:a2:5b:42:1a: 5b:6a:1a:2f:51:d0:9f:85:7d:0b:c1:eb:78:aa:30: 0e:b5:d8:ba:13:9f:44:8b:0f:c4:64:d7:f9:a4:ae: ce:4c:1f:15:a5:1c:df:2e:17:8e:31:0b:18:e5:ce: 7b:a7:05:e9:ab:78:f6:8d:10:2b:f8:89:8d:c8:43: bc:de:bc:48:f4:64:04:ff:76:ce:f0:b1:04:b8:2b: aa:7c:75:81:7c:19:0a:af:55:da:af:90:19:0c:cd: df:84:0b:16:90:b5:f1:31:5a:1a:b2:e1:a1:4e:fd: 66:dc:bd:c4:27:3c:7e:ac:13:dc:21:0a:06:de:7b: 0b:45:1a:b0:f5:2f:86:37:fc:de:0c:1e:b3:b0:91: 00:21:26:63:05:77:6b:f7:0f:35:37:33:5f:76:5e: e7:7d:91:c8:77:d0:a7:6c:0c:85:df:d2:85:09:aa: 89:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:F9:38:5C:0D:DF:9D:09:93:FE:AE:87:63:F9:88:8A:F9:62:A4:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5d473a3a-6ed2-30cd-af1d-2b18e3c7538a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.85.51.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:d5:74:11:ca:36:95:8c:58:44:42:9b:c9:29:df:b4:06:da: 4d:51:9d:8e:b2:bd:3f:9a:44:1c:ae:31:a6:f3:48:7a:68:90: 33:df:28:a9:a5:c8:2c:51:12:cd:60:04:1a:55:6a:a0:9f:2c: 5d:56:d8:c3:30:ed:a1:42:78:45:41:7e:e7:09:d3:a3:21:13: fc:f8:de:79:b2:15:0a:6b:d2:51:70:e4:8a:36:d2:15:f4:e8: 83:12:c9:bb:be:e4:4b:2b:45:20:86:ea:73:cd:ca:bf:48:61: 9f:4f:5e:06:32:f7:e0:8b:bf:54:12:a7:cd:a1:c2:3e:da:bc: aa:08:f9:a4:0b:c6:f8:bf:23:25:55:ec:3b:0a:d3:12:b3:64: a1:5f:e8:49:2e:cb:3c:9f:64:ae:50:a7:e1:15:5c:76:be:a5: f4:a4:01:0c:97:91:20:56:17:f6:ad:87:eb:cd:70:19:37:29: c6:d0:47:d5:5c:d1:b0:f9:b6:33:e0:09:25:3a:96:64:0c:ce: 88:13:a3:fb:85:90:4a:27:10:b4:cb:69:46:93:d8:d5:6e:a0: 65:0e:2b:17:e8:bd:b4:b0:77:b3:0f:32:1d:f1:d8:b1:22:6e: 20:73:b3:de:87:08:c4:e3:d4:b3:13:05:1e:02:a4:ba:27:db: 3f:1c:28:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Kd6eDv6lCf3uQLkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDMwMzAyMDAzMloXDTI2MDYwMTAxMDAzMlowLzEtMCsGA1UEAxMk YjkyMDA4NGMtMTNjMy00MTIwLThlNmUtOGYyNTQxMmRhMzBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvnASe2ZlHS7rFYpXyP1eSZDPz2ntayCxrVD yRbZL6WYbIugLR2mvJoKRCDhFsRrYPAuMbljYyZjlKg+GumVyxbAMHldYeprOYS0 vZAsxFgBBA/wMKJbQhpbahovUdCfhX0Lwet4qjAOtdi6E59Eiw/EZNf5pK7OTB8V pRzfLheOMQsY5c57pwXpq3j2jRAr+ImNyEO83rxI9GQE/3bO8LEEuCuqfHWBfBkK r1Xar5AZDM3fhAsWkLXxMVoasuGhTv1m3L3EJzx+rBPcIQoG3nsLRRqw9S+GN/ze DB6zsJEAISZjBXdr9w81NzNfdl7nfZHId9CnbAyF39KFCaqJvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIb5OFwN350Jk/6uh2P5iIr5YqRnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNWQ0NzNhM2EtNmVkMi0z MGNkLWFmMWQtMmIxOGUzYzc1MzhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFUzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH7VdBHKNpWMWERCm8kp37QG2k1RnY6yvT+aRByuMabzSHpokDPfKKml yCxREs1gBBpVaqCfLF1W2MMw7aFCeEVBfucJ06MhE/z43nmyFQpr0lFw5Io20hX0 6IMSybu+5EsrRSCG6nPNyr9IYZ9PXgYy9+CLv1QSp82hwj7avKoI+aQLxvi/IyVV 7DsK0xKzZKFf6EkuyzyfZK5Qp+EVXHa+pfSkAQyXkSBWF/ath+vNcBk3KcbQR9Vc 0bD5tjPgCSU6lmQMzogTo/uFkEonELTLaUaT2NVuoGUOKxfovbSwd7MPMh3x2LEi biBzs96HCMTj1LMTBR4CpLon2z8cKKw= -----END CERTIFICATE-----Generated at Thu Mar 26 22:26:55 2026 by rpki-client