$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/83816df6-0fd2-3776-94a8-5804ec3e377c.roa File: 83816df6-0fd2-3776-94a8-5804ec3e377c.roa (raw, json) Hash identifier: qcZhm41DO1n6p7l6YvgYpjQyu+6XlabCCQoUpdeEu5E= Subject key identifier: DE:A1:29:99:2A:E9:71:4D:C6:37:B2:AC:1B:50:34:B0:B7:C0:7A:A3 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584B4A4720EE7CB97775E7FC8640 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/83816df6-0fd2-3776-94a8-5804ec3e377c.roa Signing time: Tue 23 Sep 2025 13:00:40 +0000 ROA not before: Tue 23 Sep 2025 13:00:40 +0000 ROA not after: Mon 22 Dec 2025 14:00:40 +0000 asID: 202 IP address blocks: 192.85.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4a:47:20:ee:7c:b9:77:75:e7:fc:86:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 23 13:00:40 2025 GMT Not After : Dec 22 14:00:40 2025 GMT Subject: CN=7f15bdf1-11d1-4d36-9069-e4c5ef6e7269 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:3a:3c:81:11:c9:bb:8a:5e:e5:03:0d:a7:11: d4:af:e2:c6:f3:57:77:80:2d:48:4c:6a:c5:68:0d: ab:2b:af:06:d7:94:0f:7d:f1:a8:29:32:74:9e:fb: 26:87:f6:ca:f7:b1:ba:2d:62:ae:e6:8d:06:e0:cd: 45:42:a9:ca:6c:81:4b:76:5b:ef:fc:9d:71:7c:73: a1:73:df:62:b2:91:55:77:33:00:47:2f:5f:25:e6: 9e:4c:47:f2:1b:32:cf:f4:c0:18:44:66:0a:b3:18: 05:5d:e1:4e:bc:66:dd:c8:19:ba:02:e2:c6:e4:12: 65:c7:b3:89:0c:55:48:b5:54:44:a0:2e:3e:62:98: 57:2a:b6:86:b9:f1:f0:5d:69:05:4c:4e:d2:a6:5f: 40:fc:9d:f6:51:10:01:e1:c9:a8:07:eb:82:59:a8: 1c:21:2c:48:98:9d:1d:89:2d:b0:f6:71:c8:ea:10: 2f:cf:2d:0a:06:d9:cf:79:3f:6d:9a:1d:b8:e3:92: 35:e5:73:e8:62:25:3f:c8:5d:59:40:88:02:9d:08: d4:69:83:5e:f2:ba:66:c2:65:95:32:12:12:8b:d9: 4c:b3:f9:6e:04:c7:92:17:10:9b:4e:0d:f7:0a:6c: cb:e3:6e:24:eb:22:2d:87:d0:81:7f:5f:53:44:78: cf:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:A1:29:99:2A:E9:71:4D:C6:37:B2:AC:1B:50:34:B0:B7:C0:7A:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/83816df6-0fd2-3776-94a8-5804ec3e377c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.85.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:e6:f6:bc:20:52:36:ca:d6:23:7d:ed:d9:a5:21:ee:83:2e: 49:9b:34:af:37:73:44:5e:da:f6:e8:21:c2:4d:04:65:65:98: 24:1b:19:44:9d:c6:ec:18:27:5c:93:c9:bf:df:98:1b:e4:43: 5b:2d:29:1f:9e:a3:67:4e:c9:19:8e:4a:ca:bd:ea:de:10:63: b4:8e:2f:6b:9d:19:bc:cf:ec:c8:a9:40:8e:74:88:02:0c:96: 93:68:00:81:dc:2d:91:36:9a:24:4f:50:76:b8:0e:ed:9b:5d: 4a:ee:d2:4b:70:a1:11:79:d6:71:95:23:99:df:87:3f:32:d4: 77:67:7b:43:37:5b:82:1d:45:eb:d0:7c:94:7c:e2:c0:39:87: d7:02:98:ef:8e:18:44:c3:64:a7:cb:80:97:82:7b:d7:a8:01: 9c:5f:ef:45:a6:fc:a8:70:4b:b3:d2:d3:5f:31:1a:9b:da:1a: 7d:8c:f9:8c:2d:8f:fb:5e:1f:de:88:35:00:7a:27:9b:d1:a4: df:70:a4:fb:e7:79:e5:ee:ed:fb:a1:d3:5e:17:dd:66:6e:3a: 4c:59:24:90:56:74:94:28:44:c7:e7:55:0d:64:2f:3e:4c:d2: 82:27:82:da:f0:d6:29:89:34:82:a3:46:77:f0:86:2b:10:52: 0a:a8:90:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtKRyDufLl3def8hkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDkyMzEzMDA0MFoXDTI1MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk N2YxNWJkZjEtMTFkMS00ZDM2LTkwNjktZTRjNWVmNmU3MjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjo8gRHJu4pe5QMNpxHUr+LG81d3gC1ITGrF aA2rK68G15QPffGoKTJ0nvsmh/bK97G6LWKu5o0G4M1FQqnKbIFLdlvv/J1xfHOh c99ispFVdzMARy9fJeaeTEfyGzLP9MAYRGYKsxgFXeFOvGbdyBm6AuLG5BJlx7OJ DFVItVREoC4+YphXKraGufHwXWkFTE7Spl9A/J32URAB4cmoB+uCWagcISxImJ0d iS2w9nHI6hAvzy0KBtnPeT9tmh2445I15XPoYiU/yF1ZQIgCnQjUaYNe8rpmwmWV MhISi9lMs/luBMeSFxCbTg33CmzL424k6yIth9CBf19TRHjPnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN6hKZkq6XFNxjeyrBtQNLC3wHqjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvODM4MTZkZjYtMGZkMi0z Nzc2LTk0YTgtNTgwNGVjM2UzNzdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFVZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADHm9rwgUjbK1iN97dmlIe6DLkmbNK83c0Re2vboIcJNBGVlmCQbGUSd xuwYJ1yTyb/fmBvkQ1stKR+eo2dOyRmOSsq96t4QY7SOL2udGbzP7MipQI50iAIM lpNoAIHcLZE2miRPUHa4Du2bXUru0ktwoRF51nGVI5nfhz8y1Hdne0M3W4IdRevQ fJR84sA5h9cCmO+OGETDZKfLgJeCe9eoAZxf70Wm/KhwS7PS018xGpvaGn2M+Ywt j/teH96INQB6J5vRpN9wpPvneeXu7fuh014X3WZuOkxZJJBWdJQoRMfnVQ1kLz5M 0oIngtrw1imJNIKjRnfwhisQUgqokFM= -----END CERTIFICATE-----Generated at Sun Oct 19 20:42:28 2025 by rpki-client