$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/97ee2311-ca30-38b3-a703-3295e852e513.roa File: 97ee2311-ca30-38b3-a703-3295e852e513.roa (raw, json) Hash identifier: B57WjxWDh9z6gQbWYAhgqsTojE4apr3ZE3Pg3S9MqIk= Subject key identifier: D0:F7:2F:C9:09:48:38:06:C8:0B:A9:3C:E7:DE:42:09:BD:C6:D4:19 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584F497718B30515F95AFAC73000 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/97ee2311-ca30-38b3-a703-3295e852e513.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 3360 IP address blocks: 192.85.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:77:18:b3:05:15:f9:5a:fa:c7:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c63cbf25-06bd-43bd-996c-08eea0d77728 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:86:cd:79:b9:2a:b9:20:09:f5:c4:3f:e1:c7: d1:9f:bf:0e:1c:f5:49:03:8e:34:8f:dc:50:4f:94: 80:ab:63:25:cb:43:41:c2:cf:cc:2f:7b:3a:97:0a: ba:d3:9f:cd:b8:8d:4a:1c:c8:27:0e:db:32:68:cc: 3f:87:72:d5:68:60:1c:c2:78:67:d0:3c:73:0d:a0: 0a:4b:f2:03:08:54:60:b9:25:b2:64:ce:d5:d3:9b: 3d:ca:bd:6b:92:18:e9:65:a0:50:da:45:41:8d:e0: 9d:a0:cf:5f:ac:19:ab:84:86:e6:7f:f3:a9:95:57: b9:23:47:2e:38:16:a2:0f:7d:61:0a:2d:d1:3d:3e: 60:e7:16:c2:71:9d:79:7b:cf:1e:5f:79:94:99:30: 39:c7:2e:ec:92:67:f4:51:03:5e:05:c0:94:86:ef: 94:d8:32:1b:30:4a:5a:45:cc:35:51:d5:4c:0d:3d: 66:45:c3:f7:d3:62:23:21:cd:54:06:d9:aa:5f:38: 21:63:99:f0:ff:2e:73:ff:65:6d:d0:3b:1a:ca:ea: 6c:1c:0f:45:4d:97:6e:71:86:95:a5:0c:19:07:c9: 94:5d:98:92:d3:3d:1c:dc:f4:71:c6:78:87:fb:a0: db:02:f9:76:3c:71:a3:f6:2f:26:c7:2e:16:ac:9c: 63:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:F7:2F:C9:09:48:38:06:C8:0B:A9:3C:E7:DE:42:09:BD:C6:D4:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/97ee2311-ca30-38b3-a703-3295e852e513.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.85.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:61:fb:5d:87:5f:f9:d0:2d:d4:b2:94:3c:38:bf:2d:ab:66: d1:be:6e:75:93:68:d6:63:be:7d:ae:2e:a7:95:34:5e:e0:cd: ca:34:16:40:cf:4f:f9:43:a4:4a:ef:cd:83:e6:b1:3e:fa:fd: 14:e0:09:f3:b2:0f:d6:70:43:a9:da:fa:fb:38:26:1d:05:d2: 45:9b:31:c7:33:d4:70:e0:8b:bc:cc:3b:fb:9d:75:0f:59:f2: c1:3a:7b:9f:f1:58:ef:78:70:a8:b6:60:8b:8d:ba:3c:72:d1: fa:4b:b2:eb:6a:8c:bb:5b:ee:67:a2:76:1d:8b:b5:59:73:a4: 5e:02:e1:7a:c6:0d:cb:ae:17:6e:7c:8a:1a:0d:d9:ac:e5:33: d9:ca:8b:57:61:2a:28:ff:a9:36:0d:98:92:06:f0:70:66:5b: 63:dc:67:7f:31:39:5b:dd:1b:e3:c8:02:c6:76:18:17:d3:31: 16:3b:4b:fb:d5:ce:ad:86:1f:79:bd:34:f0:32:8d:13:73:a1: c5:00:02:5b:5e:c3:43:71:c2:ed:82:1e:ba:21:50:97:aa:f7: 84:22:46:55:75:ce:6a:cf:20:f7:ab:28:df:71:c8:60:b5:38: d1:e6:26:aa:63:cb:5a:25:a1:ce:6f:34:71:61:9a:54:3a:e6: 79:bd:cd:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdxizBRX5WvrHMAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YzYzY2JmMjUtMDZiZC00M2JkLTk5NmMtMDhlZWEwZDc3NzI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4bNebkquSAJ9cQ/4cfRn78OHPVJA440j9xQ T5SAq2Mly0NBws/ML3s6lwq605/NuI1KHMgnDtsyaMw/h3LVaGAcwnhn0DxzDaAK S/IDCFRguSWyZM7V05s9yr1rkhjpZaBQ2kVBjeCdoM9frBmrhIbmf/OplVe5I0cu OBaiD31hCi3RPT5g5xbCcZ15e88eX3mUmTA5xy7skmf0UQNeBcCUhu+U2DIbMEpa Rcw1UdVMDT1mRcP302IjIc1UBtmqXzghY5nw/y5z/2Vt0DsayupsHA9FTZducYaV pQwZB8mUXZiS0z0c3PRxxniH+6DbAvl2PHGj9i8mxy4WrJxj3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFND3L8kJSDgGyAupPOfeQgm9xtQZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvOTdlZTIzMTEtY2EzMC0z OGIzLWE3MDMtMzI5NWU4NTJlNTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFXLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACxh+12HX/nQLdSylDw4vy2rZtG+bnWTaNZjvn2uLqeVNF7gzco0FkDP T/lDpErvzYPmsT76/RTgCfOyD9ZwQ6na+vs4Jh0F0kWbMccz1HDgi7zMO/uddQ9Z 8sE6e5/xWO94cKi2YIuNujxy0fpLsutqjLtb7meidh2LtVlzpF4C4XrGDcuuF258 ihoN2azlM9nKi1dhKij/qTYNmJIG8HBmW2PcZ38xOVvdG+PIAsZ2GBfTMRY7S/vV zq2GH3m9NPAyjRNzocUAAltew0Nxwu2CHrohUJeq94QiRlV1zmrPIPerKN9xyGC1 ONHmJqpjy1oloc5vNHFhmlQ65nm9zVw= -----END CERTIFICATE-----Generated at Mon Sep 28 21:55:50 2026 by rpki-client