$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3b90050c-d2a1-3bf0-8ca9-9cdf8ad816cd.roa File: 3b90050c-d2a1-3bf0-8ca9-9cdf8ad816cd.roa (raw, json) Hash identifier: 41JMMnRId7vNl5evuu01K5osmNGDE3U7J7/0GX0MO7c= Subject key identifier: 36:63:1E:43:11:75:7B:DF:C9:9D:2E:76:14:EC:B0:D4:40:E5:D8:43 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584F9A687F3DCA994A37C2B3EA40 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3b90050c-d2a1-3bf0-8ca9-9cdf8ad816cd.roa Signing time: Sat 24 Oct 2026 01:00:12 +0000 ROA not before: Sat 24 Oct 2026 01:00:12 +0000 ROA not after: Fri 22 Jan 2027 02:00:12 +0000 asID: 203 IP address blocks: 192.85.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 31 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9a:68:7f:3d:ca:99:4a:37:c2:b3:ea:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 24 01:00:12 2026 GMT Not After : Jan 22 02:00:12 2027 GMT Subject: CN=6ab2687f-52fa-4959-8782-7717b4be592d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:3d:3c:24:06:6c:44:64:81:8c:66:34:8f:36: 13:9a:f5:8b:fe:76:f7:33:c7:b6:2b:52:01:cf:d8: d1:f6:bc:b4:da:2e:10:f9:af:3e:2d:d4:18:05:bf: b7:b9:1a:70:bc:80:8c:b0:c8:e1:24:93:01:e8:b8: 6e:4b:62:0b:87:d5:9f:a9:3e:91:41:b5:bb:27:9c: e4:47:b7:77:fc:f5:b8:c0:e3:52:0f:ef:05:10:4b: 9b:59:ee:70:33:70:08:b8:ee:ff:3a:cd:29:5e:ce: 6a:01:c1:bc:6e:ce:24:7e:94:e4:9a:ce:05:8a:7b: 68:0a:d9:d0:42:09:9b:f2:ad:c5:63:e9:73:d8:da: b6:88:e0:85:c3:c4:20:ac:02:5e:17:3b:82:ba:0a: cb:82:c6:36:80:57:6d:dc:13:44:0e:08:df:55:17: bf:62:ef:2b:56:ce:bf:86:15:86:23:a0:c1:38:cc: 1a:7b:34:cd:7c:8b:13:21:47:01:9a:9f:81:67:64: 20:45:0a:fa:70:09:2e:bd:a5:c8:3b:41:b5:41:82: b6:5a:30:8b:19:2f:10:7d:92:12:c1:2f:27:ed:5b: cc:bb:b0:dd:06:cd:18:b3:4f:d2:a3:56:15:29:52: 85:a7:32:fd:71:b4:d6:9d:f6:54:a4:aa:8a:e0:10: 74:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:63:1E:43:11:75:7B:DF:C9:9D:2E:76:14:EC:B0:D4:40:E5:D8:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3b90050c-d2a1-3bf0-8ca9-9cdf8ad816cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.85.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:b3:ff:0d:7c:f0:1a:f9:81:c4:95:57:5b:94:4b:1a:32:c7: 42:0d:9a:d9:d6:cd:d2:af:e0:ed:fc:50:d5:e2:d6:75:9a:75: 1a:75:a1:5b:a2:48:13:26:a0:ce:c9:60:dc:d0:a7:41:cc:37: ee:20:62:01:e2:e4:de:80:0b:5d:4a:5a:20:5e:7f:5a:bc:b4: 95:e3:24:40:0b:fc:65:a3:18:41:d7:cc:17:21:31:d2:74:19: c1:82:e4:f0:e3:40:d5:18:f6:41:c9:7c:37:2c:6b:b0:3c:bb: 73:46:7e:b0:9e:1f:fb:f9:9c:bd:a7:66:78:8f:30:79:61:8b: 2f:96:87:d4:1e:98:44:11:69:17:01:66:70:5f:74:68:f9:fa: 3c:fc:74:13:b3:3b:e5:d0:b4:87:ff:f3:e3:67:ff:bb:05:62: 67:4f:54:13:40:8f:90:5f:ca:0e:f4:1b:b7:ee:9d:9b:87:b5: 0f:3b:11:88:ad:03:8e:ce:0b:ec:4f:dc:b8:6d:58:15:33:24: a3:e1:d4:1a:61:f8:bb:4e:49:d1:59:33:08:32:33:a6:7a:f9: 12:3b:a1:b1:9f:45:c5:b0:02:b4:2e:dd:bc:11:6b:50:e7:d2: e0:c9:f5:99:ae:93:66:0e:fc:41:a4:ea:bc:23:96:97:d2:10: 66:7a:65:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+aaH89yplKN8Kz6kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MTAyNDAxMDAxMloXDTI3MDEyMjAyMDAxMlowLzEtMCsGA1UEAxMk NmFiMjY4N2YtNTJmYS00OTU5LTg3ODItNzcxN2I0YmU1OTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnz08JAZsRGSBjGY0jzYTmvWL/nb3M8e2K1IB z9jR9ry02i4Q+a8+LdQYBb+3uRpwvICMsMjhJJMB6LhuS2ILh9WfqT6RQbW7J5zk R7d3/PW4wONSD+8FEEubWe5wM3AIuO7/Os0pXs5qAcG8bs4kfpTkms4FintoCtnQ Qgmb8q3FY+lz2Nq2iOCFw8QgrAJeFzuCugrLgsY2gFdt3BNEDgjfVRe/Yu8rVs6/ hhWGI6DBOMwaezTNfIsTIUcBmp+BZ2QgRQr6cAkuvaXIO0G1QYK2WjCLGS8QfZIS wS8n7VvMu7DdBs0Ys0/So1YVKVKFpzL9cbTWnfZUpKqK4BB0TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDZjHkMRdXvfyZ0udhTssNRA5dhDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvM2I5MDA1MGMtZDJhMS0z YmYwLThjYTktOWNkZjhhZDgxNmNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFXRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCz/w188Br5gcSVV1uUSxoyx0INmtnWzdKv4O38UNXi1nWadRp1oVui SBMmoM7JYNzQp0HMN+4gYgHi5N6AC11KWiBef1q8tJXjJEAL/GWjGEHXzBchMdJ0 GcGC5PDjQNUY9kHJfDcsa7A8u3NGfrCeH/v5nL2nZniPMHlhiy+Wh9QemEQRaRcB ZnBfdGj5+jz8dBOzO+XQtIf/8+Nn/7sFYmdPVBNAj5Bfyg70G7funZuHtQ87EYit A47OC+xP3LhtWBUzJKPh1Bph+LtOSdFZMwgyM6Z6+RI7obGfRcWwArQu3bwRa1Dn 0uDJ9Zmuk2YO/EGk6rwjlpfSEGZ6ZUY= -----END CERTIFICATE-----Generated at Fri Oct 30 02:55:17 2026 by rpki-client