$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/09e138b7-dd57-3812-b335-d17c646b1c7a.roa File: 09e138b7-dd57-3812-b335-d17c646b1c7a.roa (raw, json) Hash identifier: bYODlwCxrTvtLMFwmEv2EW7fd816JKB6eEq/c4GJU7M= Subject key identifier: FA:F1:C8:DB:5B:17:9C:1A:4B:C0:99:27:C4:84:4D:18:F8:AB:EA:9C Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584D0A77ACE87D00D3D564404EE0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/09e138b7-dd57-3812-b335-d17c646b1c7a.roa Signing time: Tue 03 Mar 2026 02:00:32 +0000 ROA not before: Tue 03 Mar 2026 02:00:32 +0000 ROA not after: Mon 01 Jun 2026 01:00:32 +0000 asID: 3356 IP address blocks: 199.228.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0a:77:ac:e8:7d:00:d3:d5:64:40:4e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 3 02:00:32 2026 GMT Not After : Jun 1 01:00:32 2026 GMT Subject: CN=e45d02b5-0372-46ce-a1e2-dbcf51462cf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:fd:26:76:0a:33:6f:62:a0:86:67:9f:ad:88: 45:88:8e:94:07:8d:53:f8:38:a7:4f:fc:56:0d:13: 11:a2:3e:a8:df:af:fe:1d:b7:23:d1:a2:20:2e:80: bc:92:0c:c6:92:13:d6:23:1e:25:33:f5:98:02:44: 6b:b9:74:cd:51:e3:e3:33:5f:66:71:37:a3:5d:ef: 81:75:34:9a:20:ac:6f:ef:14:4e:88:6e:e2:5d:de: 74:c6:76:f8:46:2a:8f:a5:1f:19:97:df:b4:8e:ee: ae:80:11:2b:9b:14:0c:b0:90:b4:42:98:2a:a8:69: a0:9e:c7:c8:d7:11:11:e0:b3:bb:aa:5f:08:ad:64: d5:f5:5e:4e:c4:f9:02:fc:d2:c6:cd:2b:5e:e2:52: ac:24:a6:6a:cd:52:fe:c6:ed:62:f3:89:1d:fd:6c: 4a:20:18:60:d6:80:28:0d:b5:a7:e5:af:00:42:7f: 5e:10:0b:32:f0:e4:fc:f5:88:f0:5d:66:00:4a:8c: b1:14:42:c3:e4:f9:2e:2e:3f:0a:11:20:a9:5a:20: 27:af:a6:9a:d6:4c:7a:e4:de:38:45:87:8f:2b:a2: 98:da:02:18:b1:c7:83:2d:6e:89:bf:a8:d7:49:d7: a2:37:97:42:13:ee:a6:73:ec:04:4e:81:52:95:ef: 54:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:F1:C8:DB:5B:17:9C:1A:4B:C0:99:27:C4:84:4D:18:F8:AB:EA:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/09e138b7-dd57-3812-b335-d17c646b1c7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 199.228.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:5c:56:db:84:44:58:47:a6:51:d8:74:21:c2:bd:95:4b:69: e9:1d:2f:db:a6:81:13:91:c2:90:db:a8:d3:84:4b:f5:6a:65: f8:dc:14:ab:38:76:e4:b3:9f:19:66:f7:9d:c5:e9:4e:a7:25: 4f:3a:5a:f7:77:01:38:e5:c3:b2:ca:bd:a4:44:d4:cb:59:60: 40:fe:4f:0b:46:07:1e:e2:6b:b3:da:51:a2:3e:ee:10:a6:f5: 3f:b1:e1:27:0f:8e:59:dd:b0:9b:5a:db:01:6b:e2:93:80:4a: 39:a7:a0:ef:81:48:4b:d2:6c:c0:58:56:0e:b0:df:31:1d:cd: 96:37:22:eb:94:d9:43:5c:67:17:07:79:b3:28:40:6c:86:4d: a1:49:2f:f3:02:8c:b8:d0:8a:10:5f:d1:fd:7c:3d:bd:19:61: 9a:00:d6:c6:9c:c3:bc:b6:20:5f:07:41:1f:66:1a:16:8e:a3: fb:ad:db:70:84:d0:7f:10:86:6e:44:3f:a0:31:82:7d:6b:f1: b4:88:17:d5:eb:e9:52:08:94:3a:99:9c:c8:98:8d:17:63:f3: 8f:06:d3:11:97:29:99:87:f1:e3:00:82:45:58:b0:03:c3:59: 48:af:1d:1a:db:31:c0:e9:97:b0:d2:eb:14:95:34:52:3b:72: c3:e4:67:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Kd6zofQDT1WRATuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDMwMzAyMDAzMloXDTI2MDYwMTAxMDAzMlowLzEtMCsGA1UEAxMk ZTQ1ZDAyYjUtMDM3Mi00NmNlLWExZTItZGJjZjUxNDYyY2Y1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjP0mdgozb2KghmefrYhFiI6UB41T+DinT/xW DRMRoj6o36/+Hbcj0aIgLoC8kgzGkhPWIx4lM/WYAkRruXTNUePjM19mcTejXe+B dTSaIKxv7xROiG7iXd50xnb4RiqPpR8Zl9+0ju6ugBErmxQMsJC0QpgqqGmgnsfI 1xER4LO7ql8IrWTV9V5OxPkC/NLGzSte4lKsJKZqzVL+xu1i84kd/WxKIBhg1oAo DbWn5a8AQn9eEAsy8OT89YjwXWYASoyxFELD5PkuLj8KESCpWiAnr6aa1kx65N44 RYePK6KY2gIYsceDLW6Jv6jXSdeiN5dCE+6mc+wEToFSle9UNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPrxyNtbF5waS8CZJ8SETRj4q+qcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMDllMTM4YjctZGQ1Ny0z ODEyLWIzMzUtZDE3YzY0NmIxYzdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx+SOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGhcVtuERFhHplHYdCHCvZVLaekdL9umgRORwpDbqNOES/VqZfjcFKs4 duSznxlm953F6U6nJU86Wvd3ATjlw7LKvaRE1MtZYED+TwtGBx7ia7PaUaI+7hCm 9T+x4ScPjlndsJta2wFr4pOASjmnoO+BSEvSbMBYVg6w3zEdzZY3IuuU2UNcZxcH ebMoQGyGTaFJL/MCjLjQihBf0f18Pb0ZYZoA1sacw7y2IF8HQR9mGhaOo/ut23CE 0H8Qhm5EP6Axgn1r8bSIF9Xr6VIIlDqZnMiYjRdj848G0xGXKZmH8eMAgkVYsAPD WUivHRrbMcDpl7DS6xSVNFI7csPkZ/Q= -----END CERTIFICATE-----Generated at Thu Mar 26 22:12:28 2026 by rpki-client