$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a7e26c7a-b1e6-3d01-ae02-7faa09a46c52.roa File: a7e26c7a-b1e6-3d01-ae02-7faa09a46c52.roa (raw, json) Hash identifier: 5hUMFtoFCMlF8HJeW904Mm19PBfSG6OaJRw/JJRoYAA= Subject key identifier: D0:3B:FF:3B:6D:E1:ED:E7:87:74:8B:F1:8A:0B:0B:81:74:E7:87:C2 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584B4A4721CC3ADD0B49CE154700 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a7e26c7a-b1e6-3d01-ae02-7faa09a46c52.roa Signing time: Tue 23 Sep 2025 13:00:40 +0000 ROA not before: Tue 23 Sep 2025 13:00:40 +0000 ROA not after: Mon 22 Dec 2025 14:00:40 +0000 asID: 3356 IP address blocks: 192.85.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4a:47:21:cc:3a:dd:0b:49:ce:15:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 23 13:00:40 2025 GMT Not After : Dec 22 14:00:40 2025 GMT Subject: CN=c27598a6-c2a0-4a29-ae27-a44a962d8305 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:7d:aa:8d:4f:1f:39:70:1d:7d:6d:2a:2b:ad: ad:3f:e8:3c:50:cd:c2:22:ce:ea:73:94:94:ec:ac: d0:83:fe:34:90:93:f8:d8:2e:4b:6e:93:01:21:ad: 89:5b:3b:80:11:ed:83:48:5e:bc:8e:2b:7c:9a:b7: 30:76:3e:86:1e:4d:bc:8d:3c:f1:70:9c:8d:42:3f: c2:34:37:fb:e9:c2:36:50:84:5f:89:dd:87:3f:53: d6:63:8e:60:5f:16:8d:e9:a5:74:e9:fc:57:8c:c9: 96:f1:63:8b:22:a7:dc:b2:fc:5e:8c:e8:de:0c:a2: 94:ae:db:16:ac:c0:af:9e:0b:d6:92:d2:c2:2c:65: 32:d5:af:b4:40:0c:c8:9a:54:cb:3f:44:43:7d:d0: 60:46:42:6c:08:1d:dd:15:d5:dc:67:f5:7d:c6:cd: 6c:30:1e:b4:1a:f5:cc:e4:6b:44:ca:ec:c6:ca:92: 17:d1:23:7e:a1:0e:58:6d:09:cd:8c:11:98:a2:04: 83:24:92:28:9c:72:09:10:ad:22:c7:69:d7:87:6d: 64:df:2c:f3:00:98:17:a4:36:5c:d3:11:0c:16:b9: ad:bd:a1:d7:a7:d9:4c:e3:74:70:cf:26:16:2f:33: 2d:ae:17:68:e3:39:55:83:e7:2e:1a:d7:4e:4f:c2: 6a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:3B:FF:3B:6D:E1:ED:E7:87:74:8B:F1:8A:0B:0B:81:74:E7:87:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a7e26c7a-b1e6-3d01-ae02-7faa09a46c52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.85.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:77:6d:2c:b3:70:6e:1a:8d:8d:02:35:4c:9a:97:25:ed:24: 1a:c9:8f:21:12:5b:ad:14:be:a3:84:1e:33:24:3c:e9:14:45: 38:62:1a:0b:33:91:10:91:ab:9a:73:cf:cc:54:0d:3e:6d:47: f9:da:40:0c:4f:ff:fe:c5:1f:a2:9b:2a:71:12:23:06:6e:bd: 16:33:64:a6:b4:ee:c9:36:1e:2e:b1:ad:ef:a3:23:cc:3e:2c: 37:b7:48:f6:84:d3:fc:78:e6:10:8d:59:d2:13:bb:3f:c6:b3: cc:e3:63:09:71:5e:cf:47:7e:57:5e:b3:30:d8:61:4e:c7:9e: 7f:0f:a4:3a:84:a8:23:ba:bc:f0:ed:f4:88:5e:78:01:69:fd: 1e:11:bf:ec:88:db:df:22:a2:c5:ff:36:2d:3b:c0:1b:a5:f5: 5f:0c:9b:7b:90:c1:55:c2:58:59:32:32:53:8b:43:e9:a3:e3: 48:d8:61:e6:c2:09:3d:fd:e7:26:a6:34:91:bb:8b:95:bc:97: aa:63:f1:7c:45:e1:c1:81:6f:c7:e1:5e:16:b5:36:8e:dc:40: c4:e9:97:58:09:b2:01:2a:1e:0e:0c:2e:31:87:aa:ed:7e:69: 7a:71:18:80:51:10:13:d7:eb:16:a5:b9:3c:2d:18:f6:af:96: c0:1d:59:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtKRyHMOt0LSc4VRwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDkyMzEzMDA0MFoXDTI1MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk YzI3NTk4YTYtYzJhMC00YTI5LWFlMjctYTQ0YTk2MmQ4MzA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0H2qjU8fOXAdfW0qK62tP+g8UM3CIs7qc5SU 7KzQg/40kJP42C5LbpMBIa2JWzuAEe2DSF68jit8mrcwdj6GHk28jTzxcJyNQj/C NDf76cI2UIRfid2HP1PWY45gXxaN6aV06fxXjMmW8WOLIqfcsvxejOjeDKKUrtsW rMCvngvWktLCLGUy1a+0QAzImlTLP0RDfdBgRkJsCB3dFdXcZ/V9xs1sMB60GvXM 5GtEyuzGypIX0SN+oQ5YbQnNjBGYogSDJJIonHIJEK0ix2nXh21k3yzzAJgXpDZc 0xEMFrmtvaHXp9lM43RwzyYWLzMtrhdo4zlVg+cuGtdOT8JqUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNA7/ztt4e3nh3SL8YoLC4F054fCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYTdlMjZjN2EtYjFlNi0z ZDAxLWFlMDItN2ZhYTA5YTQ2YzUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFWMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABB3bSyzcG4ajY0CNUyalyXtJBrJjyESW60UvqOEHjMkPOkURThiGgsz kRCRq5pzz8xUDT5tR/naQAxP//7FH6KbKnESIwZuvRYzZKa07sk2Hi6xre+jI8w+ LDe3SPaE0/x45hCNWdITuz/Gs8zjYwlxXs9HfldeszDYYU7Hnn8PpDqEqCO6vPDt 9IheeAFp/R4Rv+yI298iosX/Ni07wBul9V8Mm3uQwVXCWFkyMlOLQ+mj40jYYebC CT395yamNJG7i5W8l6pj8XxF4cGBb8fhXha1No7cQMTpl1gJsgEqHg4MLjGHqu1+ aXpxGIBREBPX6xaluTwtGPavlsAdWW8= -----END CERTIFICATE-----Generated at Mon Oct 20 04:07:26 2025 by rpki-client