$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/fd99a413-23b2-3844-91db-e7249f85b48a.roa File: fd99a413-23b2-3844-91db-e7249f85b48a.roa (raw, json) Hash identifier: M0TtjB2bJKjyGGaTSP56PRec5tzJXXtfrkt+IAgkPgM= Subject key identifier: CC:E2:6D:1E:2C:41:FA:3B:3E:57:1C:8A:30:B8:77:AE:C0:E7:55:E6 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584D0A77AB07A49EB5D953EAC220 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/fd99a413-23b2-3844-91db-e7249f85b48a.roa Signing time: Tue 03 Mar 2026 02:00:32 +0000 ROA not before: Tue 03 Mar 2026 02:00:32 +0000 ROA not after: Mon 01 Jun 2026 01:00:32 +0000 asID: 202 IP address blocks: 192.85.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 13 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0a:77:ab:07:a4:9e:b5:d9:53:ea:c2:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 3 02:00:32 2026 GMT Not After : Jun 1 01:00:32 2026 GMT Subject: CN=cb0ef636-c996-46ca-bbd4-2d879779fca3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8e:77:8e:6b:f2:c1:56:75:01:87:a9:df:fa: 78:d5:1a:73:d9:cf:a2:c2:ca:5d:ae:d3:bc:72:47: 46:7f:c9:0c:7a:a6:44:a7:50:2a:eb:17:a2:66:9b: 44:fd:0e:08:b8:0c:f3:1b:fe:6e:e8:de:82:bd:30: f5:b5:9f:a5:d9:13:60:f1:5a:5f:e5:f6:c4:9f:da: 8c:2a:77:3a:24:27:7d:40:f2:46:d0:cd:d7:eb:e9: 32:17:6c:ea:94:82:f0:c2:cd:f2:45:21:6d:ad:f4: 6d:a0:85:80:72:20:af:2e:49:ce:fe:c6:17:52:f6: 83:61:a5:88:22:75:e5:be:61:fc:ca:5a:cf:55:24: 58:0f:8e:85:c2:02:15:1f:c4:60:aa:d9:12:11:15: f5:f4:89:cd:60:fc:12:ed:d7:60:de:ae:d8:a5:0a: 0f:cf:13:35:e0:49:c6:ed:3a:38:66:8e:d6:57:44: e8:c8:93:1e:e1:17:85:e0:1a:9c:9a:c8:c8:3c:49: 18:28:c1:b0:b0:b0:f2:24:99:af:7e:bc:03:61:de: ce:c5:b3:70:1f:57:e9:f9:de:52:2d:6a:77:78:58: 16:c0:55:30:55:ba:05:4b:3a:b0:b5:16:85:01:d6: 1d:8b:93:44:2b:4a:80:12:17:ec:db:19:96:67:d1: 4c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:E2:6D:1E:2C:41:FA:3B:3E:57:1C:8A:30:B8:77:AE:C0:E7:55:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/fd99a413-23b2-3844-91db-e7249f85b48a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.85.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:50:45:5c:ef:1f:57:6f:40:0f:06:45:3a:ec:a1:9e:0b:6f: ab:74:00:13:68:f1:e5:2d:7f:99:fe:f4:52:c3:34:80:98:b4: 39:00:55:70:be:0b:72:25:a5:6d:f6:52:22:37:8b:ff:33:90: 8c:21:f4:d8:d1:cf:3d:56:30:5e:d2:68:73:f8:a3:fa:0f:63: 5a:0f:79:b1:b1:dc:a1:2b:b3:54:15:7e:47:b8:e1:d9:38:b8: 81:57:3c:b9:5f:b1:85:42:31:2b:df:ab:8c:bf:f7:8f:54:98: c3:6f:fa:a5:49:cb:ad:8b:c3:2f:62:d3:77:cd:11:0d:e1:8c: 6b:0c:72:f5:da:db:8d:f7:d5:b1:1a:f2:d3:2c:5b:68:db:8f: 50:d2:c4:6e:6e:a2:4b:98:d4:fb:7f:a8:c7:8d:80:17:67:57: 63:a9:9b:39:34:4f:81:d2:86:05:06:6d:ec:67:ae:bc:cf:fd: b4:bc:6f:24:10:a2:f1:af:0f:c4:4d:55:37:41:f4:50:56:be: 1e:44:9e:1b:b0:51:7d:e8:06:b3:b8:74:23:2e:6c:cc:e3:00: a7:41:53:4e:d2:81:00:ee:d1:ce:a1:ca:10:4e:c9:69:d1:ac: e4:af:8c:30:cb:34:9a:5c:a8:be:b3:b6:d6:b3:ce:8d:90:1a: bd:cd:9c:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Kd6sHpJ612VPqwiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDMwMzAyMDAzMloXDTI2MDYwMTAxMDAzMlowLzEtMCsGA1UEAxMk Y2IwZWY2MzYtYzk5Ni00NmNhLWJiZDQtMmQ4Nzk3NzlmY2EzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqo53jmvywVZ1AYep3/p41Rpz2c+iwspdrtO8 ckdGf8kMeqZEp1Aq6xeiZptE/Q4IuAzzG/5u6N6CvTD1tZ+l2RNg8Vpf5fbEn9qM Knc6JCd9QPJG0M3X6+kyF2zqlILwws3yRSFtrfRtoIWAciCvLknO/sYXUvaDYaWI InXlvmH8ylrPVSRYD46FwgIVH8RgqtkSERX19InNYPwS7ddg3q7YpQoPzxM14EnG 7To4Zo7WV0ToyJMe4ReF4BqcmsjIPEkYKMGwsLDyJJmvfrwDYd7OxbNwH1fp+d5S LWp3eFgWwFUwVboFSzqwtRaFAdYdi5NEK0qAEhfs2xmWZ9FM2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMzibR4sQfo7PlccijC4d67A51XmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZmQ5OWE0MTMtMjNiMi0z ODQ0LTkxZGItZTcyNDlmODViNDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFXLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJQRVzvH1dvQA8GRTrsoZ4Lb6t0ABNo8eUtf5n+9FLDNICYtDkAVXC+ C3IlpW32UiI3i/8zkIwh9NjRzz1WMF7SaHP4o/oPY1oPebGx3KErs1QVfke44dk4 uIFXPLlfsYVCMSvfq4y/949UmMNv+qVJy62Lwy9i03fNEQ3hjGsMcvXa24331bEa 8tMsW2jbj1DSxG5uokuY1Pt/qMeNgBdnV2Opmzk0T4HShgUGbexnrrzP/bS8byQQ ovGvD8RNVTdB9FBWvh5EnhuwUX3oBrO4dCMubMzjAKdBU07SgQDu0c6hyhBOyWnR rOSvjDDLNJpcqL6zttazzo2QGr3NnAw= -----END CERTIFICATE-----Generated at Wed Mar 11 20:51:13 2026 by rpki-client