$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3f55779e-b3f7-3660-8596-69dc7b02d206.roa File: 3f55779e-b3f7-3660-8596-69dc7b02d206.roa (raw, json) Hash identifier: Q9Y8XSX378pSk6DpuwXwn8sbasImjsPX59o+/fnsXSE= Subject key identifier: 71:22:57:EE:FD:40:F2:E6:05:1E:24:B4:AF:2A:A6:1B:B8:5F:49:98 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584DFA70841C94229A17C5999740 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3f55779e-b3f7-3660-8596-69dc7b02d206.roa Signing time: Thu 28 May 2026 01:00:10 +0000 ROA not before: Thu 28 May 2026 01:00:10 +0000 ROA not after: Wed 26 Aug 2026 01:00:10 +0000 asID: 203 IP address blocks: 192.85.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fa:70:84:1c:94:22:9a:17:c5:99:97:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: May 28 01:00:10 2026 GMT Not After : Aug 26 01:00:10 2026 GMT Subject: CN=05c0990f-33f2-4af7-8b17-99325775dc94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:b1:fb:20:6c:6d:ba:87:a7:67:51:a9:59:00: f7:08:93:05:15:8b:7e:b9:51:88:fa:68:88:b7:7c: d1:ea:26:bb:13:4a:f7:c4:49:1a:e7:0c:8d:b5:5d: 55:82:0c:8b:7b:24:5c:f1:07:68:5f:81:f1:ea:20: 66:0b:37:ef:c5:4f:7a:d5:ec:64:22:c5:24:53:ba: 82:7d:ba:c2:7f:96:3f:f7:e4:f3:b9:4c:a6:bd:46: 83:de:03:46:b2:b1:9b:93:b5:9d:56:4d:60:31:b2: 6a:34:20:ce:52:f1:db:57:cf:8e:bb:aa:58:3e:fe: b6:93:6f:89:ae:f0:2f:77:5c:15:3d:f5:69:2c:1c: 3c:ee:28:9c:91:24:ca:06:18:c6:1c:76:14:13:7b: 0b:77:3a:12:7f:65:f3:57:ba:fa:40:d0:9f:93:d8: 8d:a9:52:e2:fb:6e:26:e9:ef:12:e7:ed:f4:9a:65: 65:01:4a:d3:f5:6e:cc:0b:63:7e:2d:60:a4:c3:3a: b4:fc:46:78:1d:0d:c3:04:8b:8c:49:9a:9b:7b:5b: ff:b4:95:9d:47:77:28:57:88:b5:11:76:d5:e1:26: fd:44:29:67:d9:74:25:96:a4:27:09:97:00:1b:cb: 8c:6d:f6:66:33:46:0c:94:ba:cf:5b:15:42:1c:a1: 00:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:22:57:EE:FD:40:F2:E6:05:1E:24:B4:AF:2A:A6:1B:B8:5F:49:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3f55779e-b3f7-3660-8596-69dc7b02d206.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.85.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:d2:47:a4:c8:19:bb:20:44:fb:0e:70:d5:0a:b1:35:cd:cc: 9a:12:19:90:21:88:8a:dc:9a:b1:2e:90:dc:fe:02:0f:26:86: d5:db:04:c1:6f:7e:53:58:38:2a:2f:06:92:59:0f:ef:2a:d2: a5:d1:2a:0d:50:03:15:dc:96:3c:47:09:e8:97:33:d9:97:72: 33:29:55:81:99:23:80:bc:d2:79:51:7d:d1:43:a2:ad:83:c1: 21:45:60:27:80:db:ce:19:17:1e:66:6c:18:6d:a7:61:99:87: 40:05:1a:40:76:d5:e7:80:ba:18:38:d2:e1:e9:90:2a:b8:5a: a5:c2:42:0d:cf:40:40:be:f7:4b:7a:df:0d:0a:a9:cf:85:c9: 49:00:bc:bd:cc:d6:48:f2:a5:77:a8:0a:dd:b3:c8:6b:05:1f: 9c:b4:bf:b2:fb:85:5b:76:1a:2b:53:73:b6:dd:20:26:81:36: a2:3d:94:ad:60:95:e1:8e:80:fe:42:2d:f8:ff:47:1b:64:a8: e4:4b:74:de:13:f7:f1:1c:57:64:a9:9d:38:0b:ec:ca:54:60: 6f:48:11:43:e7:50:63:5c:ad:55:43:2e:98:af:7c:2c:d4:09: 7b:04:25:75:9c:38:2e:71:31:8c:58:50:b7:38:bd:b5:0b:de: e0:05:c0:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE36cIQclCKaF8WZl0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDUyODAxMDAxMFoXDTI2MDgyNjAxMDAxMFowLzEtMCsGA1UEAxMk MDVjMDk5MGYtMzNmMi00YWY3LThiMTctOTkzMjU3NzVkYzk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLH7IGxtuoenZ1GpWQD3CJMFFYt+uVGI+miI t3zR6ia7E0r3xEka5wyNtV1VggyLeyRc8QdoX4Hx6iBmCzfvxU961exkIsUkU7qC fbrCf5Y/9+TzuUymvUaD3gNGsrGbk7WdVk1gMbJqNCDOUvHbV8+Ou6pYPv62k2+J rvAvd1wVPfVpLBw87iickSTKBhjGHHYUE3sLdzoSf2XzV7r6QNCfk9iNqVLi+24m 6e8S5+30mmVlAUrT9W7MC2N+LWCkwzq0/EZ4HQ3DBIuMSZqbe1v/tJWdR3coV4i1 EXbV4Sb9RCln2XQllqQnCZcAG8uMbfZmM0YMlLrPWxVCHKEA1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHEiV+79QPLmBR4ktK8qphu4X0mYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvM2Y1NTc3OWUtYjNmNy0z NjYwLTg1OTYtNjlkYzdiMDJkMjA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFV8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrSR6TIGbsgRPsOcNUKsTXNzJoSGZAhiIrcmrEukNz+Ag8mhtXbBMFv flNYOCovBpJZD+8q0qXRKg1QAxXcljxHCeiXM9mXcjMpVYGZI4C80nlRfdFDoq2D wSFFYCeA284ZFx5mbBhtp2GZh0AFGkB21eeAuhg40uHpkCq4WqXCQg3PQEC+90t6 3w0Kqc+FyUkAvL3M1kjypXeoCt2zyGsFH5y0v7L7hVt2GitTc7bdICaBNqI9lK1g leGOgP5CLfj/RxtkqORLdN4T9/EcV2SpnTgL7MpUYG9IEUPnUGNcrVVDLpivfCzU CXsEJXWcOC5xMYxYULc4vbUL3uAFwFY= -----END CERTIFICATE-----Generated at Mon Jun 8 17:54:43 2026 by rpki-client