$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/85c55188-26d2-3a58-bb6e-8e1547299c37.roa File: 85c55188-26d2-3a58-bb6e-8e1547299c37.roa (raw, json) Hash identifier: ILfsoZ0WcaM16ik7MhpS0P/dNYluO8s2wjnhPO4nS6Q= Subject key identifier: C7:5B:3B:6A:20:87:6E:17:CB:17:27:29:E1:98:63:24:D3:B8:B8:4A Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584F9A6881A2617319A7E72B6A80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/85c55188-26d2-3a58-bb6e-8e1547299c37.roa Signing time: Sat 24 Oct 2026 01:00:12 +0000 ROA not before: Sat 24 Oct 2026 01:00:12 +0000 ROA not after: Fri 22 Jan 2027 02:00:12 +0000 asID: 203 IP address blocks: 192.57.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9a:68:81:a2:61:73:19:a7:e7:2b:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 24 01:00:12 2026 GMT Not After : Jan 22 02:00:12 2027 GMT Subject: CN=c4430476-9090-4f11-8715-741848574179 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:87:1c:80:a4:15:47:9b:28:8e:8a:7b:03:47: c2:da:e5:26:bd:e0:5d:ff:8a:f9:57:91:44:e1:4c: f7:51:31:ae:20:24:71:ec:25:4b:12:70:cf:7a:46: 11:ca:23:dc:2f:67:a6:47:d6:e4:a7:f0:d2:ff:a3: f9:7c:02:90:b3:51:6e:9f:15:f6:c0:43:ef:aa:7a: 24:e9:20:f2:d4:40:ca:a0:7d:29:32:b2:f8:5e:38: 60:b4:4a:be:ff:e1:26:7f:bf:f2:05:a2:0a:77:e3: 98:6f:fd:5e:9d:11:a3:27:af:7f:85:e8:6d:d2:06: 53:ff:17:80:e8:32:0b:4b:99:15:32:07:b3:22:83: 18:c4:62:c1:31:48:87:4d:d4:2b:57:9a:2d:ac:da: f6:b1:5f:99:dc:48:9b:8b:8d:15:7f:8a:84:80:f2: 85:ff:1e:6e:f2:8d:74:7f:30:fc:0d:44:f4:63:f6: e7:3e:ea:b3:75:24:8d:bc:79:ed:d8:87:2b:ae:af: 89:23:00:5e:aa:b2:c4:c4:12:db:8b:d5:a1:13:b2: 2d:54:ce:c0:9f:51:8e:e7:e0:25:ec:7d:d8:7a:45: 79:af:18:9f:2c:47:25:48:d8:8e:c9:29:50:75:74: 06:18:c5:90:26:96:4c:ce:ab:da:78:89:95:93:79: 03:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:5B:3B:6A:20:87:6E:17:CB:17:27:29:E1:98:63:24:D3:B8:B8:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/85c55188-26d2-3a58-bb6e-8e1547299c37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.57.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:12:8b:82:e1:04:15:25:5f:0c:0e:d8:54:8a:2c:5d:50:30: 37:45:a0:6a:78:7d:08:5c:5c:1a:28:66:3c:0c:d6:90:1a:ca: 84:d5:fa:12:0e:3b:4d:60:ce:3e:dc:93:6e:e0:a6:ff:e4:0d: 1a:c9:30:e6:58:78:23:dd:c3:d8:9d:2b:aa:df:dc:f0:0b:f1: 92:a3:0a:42:53:cf:bf:a3:55:4a:db:d8:f2:ea:c4:4b:0c:70: 80:b4:40:06:d2:95:86:d6:ac:d1:85:e1:18:ec:9d:a1:2e:24: c0:df:ac:1b:28:cc:48:57:99:b0:37:2e:1b:e2:a2:b4:25:8f: d3:3c:a4:2e:dd:50:5c:0b:30:52:b0:cf:22:c6:d0:75:b2:02: cb:d2:03:2c:d0:6f:c7:7f:18:cb:4e:c2:0d:09:42:a6:f7:4d: 52:2d:1e:ed:17:17:c6:f6:fe:8c:60:86:40:80:35:47:20:52: 44:c2:f3:bb:5f:d3:27:d0:47:46:b9:a0:8f:c8:87:8d:49:7f: c4:79:84:6a:d6:0c:81:3f:3c:47:bc:3c:47:03:0f:e4:1a:fd: ff:12:bd:94:d1:3b:63:56:09:ac:4c:d5:ae:ab:6f:9c:e0:c3: a4:e9:41:b7:57:55:b0:26:fd:53:25:b4:49:91:be:9d:cf:ce: 4f:4d:43:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+aaIGiYXMZp+craoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MTAyNDAxMDAxMloXDTI3MDEyMjAyMDAxMlowLzEtMCsGA1UEAxMk YzQ0MzA0NzYtOTA5MC00ZjExLTg3MTUtNzQxODQ4NTc0MTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgoccgKQVR5sojop7A0fC2uUmveBd/4r5V5FE 4Uz3UTGuICRx7CVLEnDPekYRyiPcL2emR9bkp/DS/6P5fAKQs1FunxX2wEPvqnok 6SDy1EDKoH0pMrL4XjhgtEq+/+Emf7/yBaIKd+OYb/1enRGjJ69/heht0gZT/xeA 6DILS5kVMgezIoMYxGLBMUiHTdQrV5otrNr2sV+Z3Eibi40Vf4qEgPKF/x5u8o10 fzD8DUT0Y/bnPuqzdSSNvHnt2Icrrq+JIwBeqrLExBLbi9WhE7ItVM7An1GO5+Al 7H3YekV5rxifLEclSNiOySlQdXQGGMWQJpZMzqvaeImVk3kDxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMdbO2ogh24XyxcnKeGYYyTTuLhKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvODVjNTUxODgtMjZkMi0z YTU4LWJiNmUtOGUxNTQ3Mjk5YzM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDntMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG4Si4LhBBUlXwwO2FSKLF1QMDdFoGp4fQhcXBooZjwM1pAayoTV+hIO O01gzj7ck27gpv/kDRrJMOZYeCPdw9idK6rf3PAL8ZKjCkJTz7+jVUrb2PLqxEsM cIC0QAbSlYbWrNGF4RjsnaEuJMDfrBsozEhXmbA3LhviorQlj9M8pC7dUFwLMFKw zyLG0HWyAsvSAyzQb8d/GMtOwg0JQqb3TVItHu0XF8b2/oxghkCANUcgUkTC87tf 0yfQR0a5oI/Ih41Jf8R5hGrWDIE/PEe8PEcDD+Qa/f8SvZTRO2NWCaxM1a6rb5zg w6TpQbdXVbAm/VMltEmRvp3Pzk9NQwA= -----END CERTIFICATE-----Generated at Tue Oct 27 16:43:01 2026 by rpki-client