$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e5ac2027-987a-3f35-bfa4-aab957e5aac8.roa File: e5ac2027-987a-3f35-bfa4-aab957e5aac8.roa (raw, json) Hash identifier: Ni7csqZyaaFYkCQHTtVUAlsSpdUvQGzRb4TOZM1F/OU= Subject key identifier: 5D:10:91:FB:0B:35:D8:7C:A3:AD:F9:17:17:57:83:1C:83:BD:3E:A4 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584B59A1C7BE76370CE552553880 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e5ac2027-987a-3f35-bfa4-aab957e5aac8.roa Signing time: Mon 29 Sep 2025 01:00:33 +0000 ROA not before: Mon 29 Sep 2025 01:00:33 +0000 ROA not after: Sun 28 Dec 2025 02:00:33 +0000 asID: 203 IP address blocks: 192.85.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:59:a1:c7:be:76:37:0c:e5:52:55:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 29 01:00:33 2025 GMT Not After : Dec 28 02:00:33 2025 GMT Subject: CN=adeb3d7b-bbd6-430a-bd92-70e869f3ace2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d9:d6:7f:dc:ab:31:32:b4:8a:d1:a2:21:f5: ef:12:1c:6a:51:7f:cc:01:d9:42:13:2a:62:92:d4: cc:aa:b4:0e:54:f2:59:07:d2:65:82:8d:76:da:3a: c9:3c:9e:04:7b:5e:39:e4:68:c8:f3:aa:82:90:95: 83:3f:24:9b:73:dc:28:98:e5:bc:0e:d0:16:77:07: 64:cb:cd:87:83:14:00:6e:88:61:d5:af:99:c3:4d: 91:28:dd:0a:f4:47:9e:c6:be:91:d2:a4:d0:05:c5: f2:ce:f0:dc:87:f4:cd:8d:b2:bc:81:8b:26:00:a9: 85:68:5b:5f:a9:02:48:17:a8:b9:ad:a8:09:6d:8a: 58:81:63:83:bb:22:33:61:71:65:6d:68:ac:cb:81: 14:3c:2d:44:27:1e:a8:dc:cf:18:1d:36:c9:ce:20: 41:0f:e1:49:6b:b9:53:36:57:99:b3:48:37:ec:a6: a5:00:04:b0:d6:4b:2f:37:d3:60:df:09:f2:41:61: e8:11:a9:b0:b2:af:00:8d:bd:0e:bf:85:61:ae:d5: e1:cc:b6:05:e6:73:eb:28:7a:bc:ed:cb:77:0e:a1: 89:1a:64:04:fb:ac:32:e3:a5:13:22:ac:6d:db:93: 55:18:84:ac:21:8c:f8:39:be:61:a1:64:7a:88:c2: 23:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:10:91:FB:0B:35:D8:7C:A3:AD:F9:17:17:57:83:1C:83:BD:3E:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e5ac2027-987a-3f35-bfa4-aab957e5aac8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.85.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:d4:93:fd:4b:9e:68:ed:2e:79:a2:ac:8c:3c:1a:d5:db:98: 8e:da:79:ba:3a:ff:da:0e:bf:85:52:67:64:be:9c:d1:39:cb: 69:71:d1:f5:86:08:ee:90:e3:8c:11:17:3a:27:b2:a3:36:e6: 5e:90:11:bd:9a:74:4e:fb:f8:e3:d7:23:73:ae:5a:89:94:43: c7:92:0d:29:66:f2:f4:f2:a2:4c:5d:38:c1:ed:2f:c3:53:6f: 10:c2:88:2a:08:c6:0a:34:32:f0:ec:90:df:2a:da:c4:3b:0b: fc:c2:a8:3e:55:17:72:8a:16:a7:2b:89:75:f1:64:3c:56:dc: 32:6a:48:a3:66:38:e9:5b:13:0b:fb:8e:5d:3f:9e:14:84:ac: 10:14:91:99:34:56:f9:d4:3c:a0:56:17:ad:97:bc:10:68:7b: e6:0b:59:39:10:f4:31:b2:82:27:c3:53:48:eb:89:15:17:b2: e5:4e:79:34:58:3f:5f:90:f0:e2:80:f9:61:c3:b9:62:07:01: a3:41:8b:c4:9a:b3:49:0b:2b:85:dc:f9:d5:8e:db:19:cb:45: 30:86:80:38:36:bd:ae:07:9e:7f:9e:c7:64:97:2f:da:89:88: 6d:a4:06:8c:c6:d3:1a:5a:96:07:24:f0:d3:55:05:f7:3c:ad: 26:2c:bd:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtZoce+djcM5VJVOIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDkyOTAxMDAzM1oXDTI1MTIyODAyMDAzM1owLzEtMCsGA1UEAxMk YWRlYjNkN2ItYmJkNi00MzBhLWJkOTItNzBlODY5ZjNhY2UyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9nWf9yrMTK0itGiIfXvEhxqUX/MAdlCEypi ktTMqrQOVPJZB9Jlgo122jrJPJ4Ee1455GjI86qCkJWDPySbc9womOW8DtAWdwdk y82HgxQAbohh1a+Zw02RKN0K9Eeexr6R0qTQBcXyzvDch/TNjbK8gYsmAKmFaFtf qQJIF6i5ragJbYpYgWODuyIzYXFlbWisy4EUPC1EJx6o3M8YHTbJziBBD+FJa7lT NleZs0g37KalAASw1ksvN9Ng3wnyQWHoEamwsq8Ajb0Ov4VhrtXhzLYF5nPrKHq8 7ct3DqGJGmQE+6wy46UTIqxt25NVGISsIYz4Ob5hoWR6iMIjAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF0QkfsLNdh8o635FxdXgxyDvT6kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZTVhYzIwMjctOTg3YS0z ZjM1LWJmYTQtYWFiOTU3ZTVhYWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFUXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJjUk/1LnmjtLnmirIw8GtXbmI7aebo6/9oOv4VSZ2S+nNE5y2lx0fWG CO6Q44wRFzonsqM25l6QEb2adE77+OPXI3OuWomUQ8eSDSlm8vTyokxdOMHtL8NT bxDCiCoIxgo0MvDskN8q2sQ7C/zCqD5VF3KKFqcriXXxZDxW3DJqSKNmOOlbEwv7 jl0/nhSErBAUkZk0VvnUPKBWF62XvBBoe+YLWTkQ9DGygifDU0jriRUXsuVOeTRY P1+Q8OKA+WHDuWIHAaNBi8Sas0kLK4Xc+dWO2xnLRTCGgDg2va4Hnn+ex2SXL9qJ iG2kBozG0xpalgck8NNVBfc8rSYsvX0= -----END CERTIFICATE-----Generated at Sun Oct 19 20:41:34 2025 by rpki-client