$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/20999d70-d23c-3156-a415-7b2a358700b8.roa File: 20999d70-d23c-3156-a415-7b2a358700b8.roa (raw, json) Hash identifier: hn7YZtVEZySurZ/G6Fvi08RnBNn1Ah4xP6nRbhkiyLs= Subject key identifier: 1F:43:93:6C:F3:2F:15:58:B7:67:18:F9:90:A2:D3:BE:E1:6C:5E:A7 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584F497715A7FD8862F70CF5E380 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/20999d70-d23c-3156-a415-7b2a358700b8.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 3360 IP address blocks: 192.85.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:77:15:a7:fd:88:62:f7:0c:f5:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0851fdb3-e132-4968-838c-3e7aa589dea8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f3:52:22:ac:aa:6d:7c:0f:39:c1:c1:48:06: db:ac:4b:d4:1e:c9:f9:51:80:64:bc:e7:0f:8e:f9: 52:0e:55:2f:c0:cd:2d:0b:bf:89:10:3d:b1:7a:24: ea:9c:65:9a:b1:4d:18:0c:28:8a:88:05:50:2d:12: 0f:a1:39:5a:ce:b6:eb:5b:1e:80:73:f0:80:d9:ff: d6:41:1d:c5:9b:c3:7f:ee:cd:12:ae:3e:5c:2b:f1: 67:29:e9:e6:e1:ab:49:ba:89:56:ff:7d:fe:2b:9c: fb:6a:8e:0d:eb:55:94:c5:aa:48:af:b1:cc:b3:91: 2b:29:29:74:56:06:60:23:8b:88:6a:d2:24:9b:6c: c5:9f:5b:6e:d3:14:b7:e7:1f:f1:8a:c9:3d:77:f0: 21:e7:12:09:37:30:18:81:51:57:7f:4d:66:59:08: 7a:29:f4:e1:49:ae:83:9f:cf:7f:fb:c3:48:98:be: 33:14:77:3a:74:26:da:09:8b:e5:ff:76:91:6b:49: f5:53:f3:4c:08:3b:55:08:bf:db:98:a3:5e:76:49: 8c:c4:37:b2:8e:49:79:b8:60:32:3b:34:3a:9d:9c: 88:09:a6:9c:c2:6d:ed:5a:da:6a:b5:58:2c:e5:56: c9:dc:7e:9f:28:0e:af:56:99:10:29:8e:2b:2c:a5: f8:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:43:93:6C:F3:2F:15:58:B7:67:18:F9:90:A2:D3:BE:E1:6C:5E:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/20999d70-d23c-3156-a415-7b2a358700b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.85.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:74:55:82:e6:1e:af:13:6f:0b:35:4f:28:52:16:6b:12:39: c0:51:44:db:d5:cf:d1:31:4b:a2:e3:89:a9:7a:fa:28:64:3c: 99:49:af:b7:08:44:97:18:4a:5a:f2:30:58:52:ab:6c:be:ad: 1b:9f:c4:4b:e8:aa:bf:47:bc:76:31:16:39:0f:3e:d3:a1:1a: ed:e6:20:74:bd:37:2a:00:13:9d:51:5c:f4:af:c2:fe:13:35: 5f:af:a2:43:af:77:76:76:72:fb:0f:07:5a:9a:a1:db:7f:56: 38:47:8f:f4:c9:2e:7f:b3:c4:57:35:a3:f5:3e:5d:64:70:00: 4b:7a:de:47:57:51:31:6f:34:36:8f:d3:eb:ae:e5:27:10:07: 65:6a:fb:0d:a2:28:89:78:87:01:70:1a:c4:b8:37:94:38:05: 83:01:63:19:86:bc:a1:90:00:f2:f1:41:c4:09:63:76:20:d7: e9:9f:21:99:f0:60:40:5f:a5:f3:fc:f7:af:4f:05:5e:43:60: ec:94:1e:83:44:21:c0:cb:b1:03:ef:78:49:60:01:e6:5c:17: 63:81:09:d9:03:26:c1:0a:1d:9f:a4:58:c6:f7:97:85:20:68: a0:51:d1:53:c6:c7:2f:1c:ec:9e:c3:0a:95:6b:22:03:02:4e: 91:04:e0:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdxWn/Yhi9wz144AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDg1MWZkYjMtZTEzMi00OTY4LTgzOGMtM2U3YWE1ODlkZWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPNSIqyqbXwPOcHBSAbbrEvUHsn5UYBkvOcP jvlSDlUvwM0tC7+JED2xeiTqnGWasU0YDCiKiAVQLRIPoTlazrbrWx6Ac/CA2f/W QR3Fm8N/7s0Srj5cK/FnKenm4atJuolW/33+K5z7ao4N61WUxapIr7HMs5ErKSl0 VgZgI4uIatIkm2zFn1tu0xS35x/xisk9d/Ah5xIJNzAYgVFXf01mWQh6KfThSa6D n89/+8NImL4zFHc6dCbaCYvl/3aRa0n1U/NMCDtVCL/bmKNedkmMxDeyjkl5uGAy OzQ6nZyICaacwm3tWtpqtVgs5VbJ3H6fKA6vVpkQKY4rLKX4cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB9Dk2zzLxVYt2cY+ZCi077hbF6nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMjA5OTlkNzAtZDIzYy0z MTU2LWE0MTUtN2IyYTM1ODcwMGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFVYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJ0VYLmHq8Tbws1TyhSFmsSOcBRRNvVz9ExS6Ljial6+ihkPJlJr7cI RJcYSlryMFhSq2y+rRufxEvoqr9HvHYxFjkPPtOhGu3mIHS9NyoAE51RXPSvwv4T NV+vokOvd3Z2cvsPB1qaodt/VjhHj/TJLn+zxFc1o/U+XWRwAEt63kdXUTFvNDaP 0+uu5ScQB2Vq+w2iKIl4hwFwGsS4N5Q4BYMBYxmGvKGQAPLxQcQJY3Yg1+mfIZnw YEBfpfP8969PBV5DYOyUHoNEIcDLsQPveElgAeZcF2OBCdkDJsEKHZ+kWMb3l4Ug aKBR0VPGxy8c7J7DCpVrIgMCTpEE4Ck= -----END CERTIFICATE-----Generated at Tue Oct 6 15:49:59 2026 by rpki-client