$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6178a435-c337-3f47-b5de-1740f2e1be1d.roa File: 6178a435-c337-3f47-b5de-1740f2e1be1d.roa (raw, json) Hash identifier: 405RRIZZ7Uw27LyDFnmT29MD2c9ro46qvdgJZSh3Br8= Subject key identifier: CB:3F:F7:CA:3B:B0:00:1C:6F:47:83:44:11:CF:F8:B3:8C:10:0A:C7 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584B59A1C7953BCC078862460D50 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6178a435-c337-3f47-b5de-1740f2e1be1d.roa Signing time: Mon 29 Sep 2025 01:00:33 +0000 ROA not before: Mon 29 Sep 2025 01:00:33 +0000 ROA not after: Sun 28 Dec 2025 02:00:33 +0000 asID: 3356 IP address blocks: 192.85.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:59:a1:c7:95:3b:cc:07:88:62:46:0d:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 29 01:00:33 2025 GMT Not After : Dec 28 02:00:33 2025 GMT Subject: CN=5dc9b2c5-536f-4f07-b7f5-5ae6415ed5d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:80:c9:03:5d:dc:bb:6d:ee:84:2b:7e:6e:22: 64:41:55:92:e0:0a:50:9c:f2:e7:43:5a:85:40:80: 19:9d:ad:f9:b3:4e:48:cd:b4:ee:8f:8f:c7:1a:20: 9c:cc:d3:a1:e6:7c:4f:22:c3:7b:b0:29:ca:58:65: d1:31:8a:2b:4d:ef:05:83:2b:2c:15:b2:87:08:af: f6:bf:27:69:e2:3c:13:39:7a:60:9b:7a:ba:b2:5c: 03:af:06:b1:53:6c:a5:87:6d:f7:8a:60:65:35:ac: a7:72:7b:46:49:24:63:b4:e1:02:23:16:6d:a3:4a: be:68:d5:88:0c:6c:e2:e9:bf:11:96:41:50:a5:0f: 23:11:ed:87:c3:71:b5:66:a6:1b:6b:71:2a:22:14: c9:81:ec:9b:f4:ab:9f:25:2c:d0:bb:cf:ff:48:ab: c3:a8:db:40:25:39:d4:fe:67:8d:f5:01:32:71:3d: 5b:4e:07:90:d6:58:95:65:7d:e6:67:af:36:e9:b0: 82:7d:7a:48:10:91:fa:32:16:67:6e:b9:36:e5:8b: f1:04:a7:db:3c:a0:03:ec:6e:38:ab:82:fc:d3:85: a6:9b:60:b9:59:d0:34:d4:6d:c7:f4:2f:76:ae:e3: d5:05:08:a7:e2:8d:38:3f:e9:b8:5b:2d:c9:79:6e: 7a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:3F:F7:CA:3B:B0:00:1C:6F:47:83:44:11:CF:F8:B3:8C:10:0A:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6178a435-c337-3f47-b5de-1740f2e1be1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.85.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:b5:02:51:f4:4c:94:e6:ce:ec:c5:95:00:a0:ad:a9:3e:3e: 91:6c:13:4c:ad:91:c5:28:7f:4b:08:1c:f8:ca:b9:2f:33:f7: 72:1d:a4:be:0a:8d:15:a2:47:e6:15:9c:68:8f:f6:cb:df:f0: 2e:76:b2:fd:fe:70:6d:70:5e:d2:af:1a:4b:77:ee:0f:a8:18: 4f:69:9c:7e:77:40:93:72:65:62:41:9e:c4:21:a4:7c:33:37: 6c:7b:94:8b:d7:82:bd:73:51:db:66:d0:71:c1:a9:53:0c:9d: c9:a9:ea:34:d1:04:b9:85:95:14:00:8b:36:f7:c5:8a:f7:31: fa:35:e6:17:70:ae:7e:40:8c:81:13:47:2d:77:eb:43:eb:1d: 4c:0a:3c:98:ee:2e:95:92:f7:ee:6f:5e:db:72:4f:3d:e1:d6: 5a:bb:7c:8f:66:b1:c5:93:9f:74:40:a0:ba:4d:b7:13:00:8a: 4f:6d:61:66:d3:05:36:48:e2:06:ff:b3:e5:22:8d:bb:b4:62: 7c:29:4f:0b:f7:01:5b:dd:2e:02:ef:87:d7:9f:dd:98:49:3e: cd:99:76:56:49:e6:fc:3a:63:01:10:00:15:f5:2b:77:fa:54: a5:cf:10:24:40:3b:a1:ef:56:c0:09:2c:47:60:11:33:2c:f3: 2f:9b:5e:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtZoceVO8wHiGJGDVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDkyOTAxMDAzM1oXDTI1MTIyODAyMDAzM1owLzEtMCsGA1UEAxMk NWRjOWIyYzUtNTM2Zi00ZjA3LWI3ZjUtNWFlNjQxNWVkNWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4DJA13cu23uhCt+biJkQVWS4ApQnPLnQ1qF QIAZna35s05IzbTuj4/HGiCczNOh5nxPIsN7sCnKWGXRMYorTe8FgyssFbKHCK/2 vydp4jwTOXpgm3q6slwDrwaxU2ylh233imBlNayncntGSSRjtOECIxZto0q+aNWI DGzi6b8RlkFQpQ8jEe2Hw3G1ZqYba3EqIhTJgeyb9KufJSzQu8//SKvDqNtAJTnU /meN9QEycT1bTgeQ1liVZX3mZ6826bCCfXpIEJH6MhZnbrk25YvxBKfbPKAD7G44 q4L804Wmm2C5WdA01G3H9C92ruPVBQin4o04P+m4Wy3JeW56hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMs/98o7sAAcb0eDRBHP+LOMEArHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNjE3OGE0MzUtYzMzNy0z ZjQ3LWI1ZGUtMTc0MGYyZTFiZTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFUXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI61AlH0TJTmzuzFlQCgrak+PpFsE0ytkcUof0sIHPjKuS8z93IdpL4K jRWiR+YVnGiP9svf8C52sv3+cG1wXtKvGkt37g+oGE9pnH53QJNyZWJBnsQhpHwz N2x7lIvXgr1zUdtm0HHBqVMMncmp6jTRBLmFlRQAizb3xYr3Mfo15hdwrn5AjIET Ry1360PrHUwKPJjuLpWS9+5vXttyTz3h1lq7fI9mscWTn3RAoLpNtxMAik9tYWbT BTZI4gb/s+Uijbu0YnwpTwv3AVvdLgLvh9ef3ZhJPs2ZdlZJ5vw6YwEQABX1K3f6 VKXPECRAO6HvVsAJLEdgETMs8y+bXkA= -----END CERTIFICATE-----Generated at Mon Oct 20 10:28:40 2025 by rpki-client