$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/88fbdccf-30cf-3061-8568-4b9965ec2071.roa File: 88fbdccf-30cf-3061-8568-4b9965ec2071.roa (raw, json) Hash identifier: NZ3OlB1v2PUdeX/0Zih02YuTKnsfShgLAi5m8VHmCQU= Subject key identifier: 33:3E:DD:15:69:C7:B6:B4:C1:7E:0F:76:2F:DC:80:49:4A:8F:74:D2 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584EF7177A0D3BC0C5BB917FC640 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/88fbdccf-30cf-3061-8568-4b9965ec2071.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 202 IP address blocks: 192.85.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:7a:0d:3b:c0:c5:bb:91:7f:c6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=646a5a01-4f5b-4732-8d0d-6bff9823ef37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:b3:1d:31:48:cc:dd:53:ea:dc:1f:34:02:f9: 0e:1d:b6:89:e3:8c:e4:14:26:27:6d:e4:31:5a:a0: b6:35:fe:ab:e2:85:10:a2:ee:9f:72:21:4d:75:30: b1:fd:e8:80:a9:5f:ae:36:6c:72:f4:48:6e:9f:5a: 2d:ec:c4:f8:31:c5:ef:f0:67:ee:11:a9:e1:3b:85: 8b:83:84:47:b1:40:4d:89:a4:01:fe:d8:c4:b9:d3: 05:c4:f4:aa:71:30:18:cd:ed:88:5a:2a:b6:74:f7: 6f:9c:1f:42:0c:f1:7d:ad:61:11:f3:62:e5:80:50: f7:2f:e3:0a:55:81:74:bb:cf:56:6a:4b:8f:15:8f: 7e:ad:0c:27:f8:e1:39:f0:e1:ff:fd:3d:3a:f9:7a: 8e:f8:68:92:8a:48:20:b8:17:af:79:1f:69:cc:6b: 97:97:08:a2:34:43:cf:15:a2:0c:95:41:8b:5d:2f: 84:3c:f5:44:b0:29:d3:ae:d0:c7:f4:be:ca:d8:67: 6e:a4:38:3d:df:17:ed:dd:8f:51:ad:27:f2:ab:dc: 5f:24:ba:91:dd:11:52:17:90:d3:30:21:26:82:af: 85:94:9f:e9:dc:7c:5d:da:c0:0d:d7:28:aa:e1:00: 3c:c6:78:02:ac:67:53:41:45:93:d8:d9:59:62:5e: 28:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:3E:DD:15:69:C7:B6:B4:C1:7E:0F:76:2F:DC:80:49:4A:8F:74:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/88fbdccf-30cf-3061-8568-4b9965ec2071.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.85.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:99:f2:b8:ee:08:4b:8d:b6:d5:87:fe:ea:4e:bb:f2:72:fa: 93:32:fd:42:10:39:44:db:83:cf:0c:8f:04:0e:3a:b7:81:53: f2:1f:4c:67:68:f8:26:df:68:ac:15:ea:ac:66:bc:52:58:ca: 0e:e1:7c:1b:7c:2f:2b:86:b7:e5:c5:3b:0f:8c:1a:d3:49:b1: bc:6d:b2:90:d2:d2:00:0f:84:8c:22:e5:84:e0:95:30:0e:67: 56:1a:a9:2e:91:f6:84:c4:21:50:01:a0:94:e0:90:43:2e:4a: 51:2b:14:de:f6:ba:59:9e:9f:7f:e6:b0:1f:ab:19:b5:0b:c1: e3:60:59:e6:1d:ed:12:82:e9:60:9a:d5:56:bc:c2:4f:eb:4c: 23:15:af:22:5b:50:ad:6d:e5:19:7c:3b:8f:07:28:ee:45:53: b9:68:cb:cf:3a:a7:6f:3c:7b:a7:f6:bc:14:a0:f3:30:4e:36: a3:90:d8:55:b4:0e:2c:7e:59:e7:5b:2e:1b:20:c9:ba:41:c4: 49:3d:07:b0:bf:88:15:6e:df:73:fb:0e:2d:a0:2a:63:a6:b6: 29:70:90:d1:d6:54:17:00:bb:77:e5:b4:f6:57:5a:e5:ae:76: ef:9a:06:3c:41:13:be:e2:a9:f8:a1:e6:c5:30:ae:78:4a:3c: f0:af:a3:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F3oNO8DFu5F/xkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk NjQ2YTVhMDEtNGY1Yi00NzMyLThkMGQtNmJmZjk4MjNlZjM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLMdMUjM3VPq3B80AvkOHbaJ44zkFCYnbeQx WqC2Nf6r4oUQou6fciFNdTCx/eiAqV+uNmxy9Ehun1ot7MT4McXv8GfuEanhO4WL g4RHsUBNiaQB/tjEudMFxPSqcTAYze2IWiq2dPdvnB9CDPF9rWER82LlgFD3L+MK VYF0u89WakuPFY9+rQwn+OE58OH//T06+XqO+GiSikgguBeveR9pzGuXlwiiNEPP FaIMlUGLXS+EPPVEsCnTrtDH9L7K2GdupDg93xft3Y9RrSfyq9xfJLqR3RFSF5DT MCEmgq+FlJ/p3Hxd2sAN1yiq4QA8xngCrGdTQUWT2NlZYl4oQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDM+3RVpx7a0wX4Pdi/cgElKj3TSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvODhmYmRjY2YtMzBjZi0z MDYxLTg1NjgtNGI5OTY1ZWMyMDcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFXRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFeZ8rjuCEuNttWH/upOu/Jy+pMy/UIQOUTbg88MjwQOOreBU/IfTGdo +CbfaKwV6qxmvFJYyg7hfBt8LyuGt+XFOw+MGtNJsbxtspDS0gAPhIwi5YTglTAO Z1YaqS6R9oTEIVABoJTgkEMuSlErFN72ulmen3/msB+rGbULweNgWeYd7RKC6WCa 1Va8wk/rTCMVryJbUK1t5Rl8O48HKO5FU7loy886p288e6f2vBSg8zBONqOQ2FW0 Dix+WedbLhsgybpBxEk9B7C/iBVu33P7Di2gKmOmtilwkNHWVBcAu3fltPZXWuWu du+aBjxBE77iqfih5sUwrnhKPPCvo9k= -----END CERTIFICATE-----Generated at Mon Sep 28 10:53:56 2026 by rpki-client