$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2de8e6ef-3d24-3b3c-9507-5f963b94a688.roa File: 2de8e6ef-3d24-3b3c-9507-5f963b94a688.roa (raw, json) Hash identifier: c0A1cdVlV6z9ocbMWDMGFLQJWjOi3Jvgt1faaPAcHEE= Subject key identifier: 40:CA:28:91:E1:80:15:FD:C3:C0:41:75:13:D5:28:BF:87:A1:B6:DB Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584B4A471DD7976B0F44878FB280 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2de8e6ef-3d24-3b3c-9507-5f963b94a688.roa Signing time: Tue 23 Sep 2025 13:00:40 +0000 ROA not before: Tue 23 Sep 2025 13:00:40 +0000 ROA not after: Mon 22 Dec 2025 14:00:40 +0000 asID: 3360 IP address blocks: 192.85.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4a:47:1d:d7:97:6b:0f:44:87:8f:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 23 13:00:40 2025 GMT Not After : Dec 22 14:00:40 2025 GMT Subject: CN=ad734662-b2c0-4d63-8b8a-ffa2f4451d61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f4:39:00:63:30:75:62:a7:33:df:eb:11:0e: e0:37:c7:3a:51:55:c4:9b:fa:43:01:d2:92:af:f6: 22:23:af:4d:ee:56:97:60:99:f5:7e:20:a9:68:3c: d2:f2:2c:aa:58:7a:c8:80:9d:d3:0d:71:53:e1:df: cd:b7:31:de:e9:73:8b:be:22:4e:64:d4:b9:05:9c: ee:58:d8:10:f6:bf:2d:71:16:53:e9:4d:c9:25:2e: 29:27:31:b9:f1:43:a2:c0:9d:7f:50:46:67:99:e8: 8e:61:1c:d0:67:45:a7:86:d6:64:2d:90:05:76:e7: 6c:51:fb:09:4a:15:91:9d:4f:59:41:97:9a:69:79: 09:8c:a2:08:c6:26:5e:98:b2:ec:bd:4d:c7:ec:e7: 16:67:27:93:42:d8:60:b5:d1:59:2f:95:bc:df:43: 2f:ab:47:61:43:b9:ab:b3:a4:b9:ef:56:27:26:e2: 0a:99:18:09:6e:e0:22:70:db:74:cf:6f:d0:35:aa: 5a:21:83:0a:c9:1d:ab:8b:e0:1b:90:ef:6f:9e:49: 5a:1a:36:e6:bd:2a:9f:95:ac:27:f4:4f:1c:55:b4: 0f:5e:ec:82:44:00:df:a0:77:47:03:f9:c2:4a:cd: 56:51:00:f7:5a:d6:99:fe:6d:e2:6e:c4:bc:0a:d1: 86:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:CA:28:91:E1:80:15:FD:C3:C0:41:75:13:D5:28:BF:87:A1:B6:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2de8e6ef-3d24-3b3c-9507-5f963b94a688.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.85.30.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:d8:a1:62:0d:e9:d5:87:2d:8a:9c:b5:9f:05:26:05:be:ae: 91:bf:09:b8:c9:10:6a:fa:e9:b4:6c:55:bb:60:f0:18:bc:a9: a2:8b:29:d6:98:4a:85:99:8b:d5:7e:fb:76:e5:a5:4b:dd:b8: 9e:88:34:c3:ef:37:e7:56:50:b8:1f:91:49:83:34:15:76:14: 59:a6:f9:3e:b0:bc:0e:3e:c3:c7:c6:fc:d6:17:e6:b4:a3:43: ad:bd:38:e7:66:d5:6b:3f:5b:8d:38:62:29:d3:41:36:81:f7: 8b:8f:bf:e1:e7:78:a2:8b:60:9a:0d:43:fc:eb:d3:68:e1:2c: 07:bf:50:a3:0c:39:05:a9:75:61:1b:a3:63:80:95:2a:45:39: bc:fc:fb:42:e3:79:8d:9b:ee:7d:ef:6a:94:db:a4:bc:13:95: 7a:57:dc:38:54:e8:3e:34:5c:97:c6:22:69:61:9e:a5:ef:76: e6:b0:7b:75:87:11:bd:e4:42:ad:03:25:fd:99:5a:47:54:80: e5:c5:39:f4:1b:46:78:3c:b8:88:35:57:e7:49:02:7c:59:19: b3:59:fb:f4:d2:64:e4:e6:94:99:62:81:66:91:bf:b0:7c:d5: 39:db:4a:1e:b5:48:2d:d7:e0:69:88:65:99:ac:ff:57:83:eb: ca:62:8a:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtKRx3Xl2sPRIePsoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDkyMzEzMDA0MFoXDTI1MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk YWQ3MzQ2NjItYjJjMC00ZDYzLThiOGEtZmZhMmY0NDUxZDYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfQ5AGMwdWKnM9/rEQ7gN8c6UVXEm/pDAdKS r/YiI69N7laXYJn1fiCpaDzS8iyqWHrIgJ3TDXFT4d/NtzHe6XOLviJOZNS5BZzu WNgQ9r8tcRZT6U3JJS4pJzG58UOiwJ1/UEZnmeiOYRzQZ0WnhtZkLZAFdudsUfsJ ShWRnU9ZQZeaaXkJjKIIxiZemLLsvU3H7OcWZyeTQthgtdFZL5W830Mvq0dhQ7mr s6S571YnJuIKmRgJbuAicNt0z2/QNapaIYMKyR2ri+AbkO9vnklaGjbmvSqflawn 9E8cVbQPXuyCRADfoHdHA/nCSs1WUQD3WtaZ/m3ibsS8CtGGDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEDKKJHhgBX9w8BBdRPVKL+HobbbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMmRlOGU2ZWYtM2QyNC0z YjNjLTk1MDctNWY5NjNiOTRhNjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFUeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJbYoWIN6dWHLYqctZ8FJgW+rpG/CbjJEGr66bRsVbtg8Bi8qaKLKdaY SoWZi9V++3blpUvduJ6INMPvN+dWULgfkUmDNBV2FFmm+T6wvA4+w8fG/NYX5rSj Q629OOdm1Ws/W404YinTQTaB94uPv+HneKKLYJoNQ/zr02jhLAe/UKMMOQWpdWEb o2OAlSpFObz8+0LjeY2b7n3vapTbpLwTlXpX3DhU6D40XJfGImlhnqXvduawe3WH Eb3kQq0DJf2ZWkdUgOXFOfQbRng8uIg1V+dJAnxZGbNZ+/TSZOTmlJligWaRv7B8 1TnbSh61SC3X4GmIZZms/1eD68piivA= -----END CERTIFICATE-----Generated at Wed Oct 29 05:15:54 2025 by rpki-client