$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1bd9c3e1-67f1-3265-936e-81197290f1fc.roa File: 1bd9c3e1-67f1-3265-936e-81197290f1fc.roa (raw, json) Hash identifier: fYGHayoR+65lUpmX+amp5ViwWCQYUObqAlAscG2Hxw8= Subject key identifier: 61:46:20:52:32:D9:CE:D5:79:E3:F1:E8:05:BA:63:A2:3F:ED:5E:70 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584D4A8FB329F6DB62E09A267700 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1bd9c3e1-67f1-3265-936e-81197290f1fc.roa Signing time: Thu 26 Mar 2026 01:00:32 +0000 ROA not before: Thu 26 Mar 2026 01:00:32 +0000 ROA not after: Wed 24 Jun 2026 01:00:32 +0000 asID: 203 IP address blocks: 199.42.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:8f:b3:29:f6:db:62:e0:9a:26:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 26 01:00:32 2026 GMT Not After : Jun 24 01:00:32 2026 GMT Subject: CN=8eee5a61-bb58-4f58-ad18-9a351f001f48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:de:57:28:66:21:31:9e:ac:92:5e:2b:d5:f2: a5:3b:23:e0:25:5f:09:21:64:2a:54:bd:65:05:53: b0:7a:5a:ed:6f:50:3c:2b:eb:21:c5:54:d9:b3:97: 67:97:d0:15:a6:46:79:62:6c:73:0a:63:24:2b:46: 2a:99:bd:04:9f:40:45:17:de:3d:64:28:86:98:01: bc:a9:68:df:bc:66:9c:6d:2f:fc:42:f6:1e:69:03: 32:8f:17:e5:a8:66:54:65:35:bc:5b:e0:71:f9:5c: 98:70:f4:55:93:6c:56:2c:36:2a:f2:ea:fe:1c:03: 19:32:eb:57:f8:ab:f3:fd:d3:f0:c0:9b:3f:2f:11: bb:96:23:87:26:28:d3:ac:17:ee:60:fd:a8:f7:a7: c3:b1:ac:a6:79:57:d3:14:bc:b2:ee:e3:cb:02:ad: 8a:aa:10:d3:51:e6:b9:2e:17:45:b5:42:95:fc:41: f6:74:64:cf:48:79:60:c3:08:65:2a:45:52:59:f0: f8:13:2e:90:51:3e:e7:3b:e0:2f:dd:16:f2:15:87: a3:9c:e1:93:31:74:9f:d4:d1:18:5b:de:3f:5a:ac: 7f:c6:cc:58:76:d5:57:a2:95:ef:71:9f:46:69:12: 07:1a:53:b0:51:7e:9f:dd:98:b1:53:38:4a:70:08: 9b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:46:20:52:32:D9:CE:D5:79:E3:F1:E8:05:BA:63:A2:3F:ED:5E:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1bd9c3e1-67f1-3265-936e-81197290f1fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 199.42.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:89:b6:7d:6e:8e:b1:90:9a:1e:0a:dc:22:85:02:22:92:ee: b5:65:10:51:a2:91:45:86:e0:e0:8a:3a:cd:93:94:4f:66:fe: 4b:58:03:25:20:65:09:6b:48:1e:0c:96:76:a8:3e:9a:ce:e6: 03:85:28:d4:f5:56:78:63:3f:4d:0f:78:41:a3:d6:b7:9d:47: 70:90:72:b6:6d:1f:20:1a:7a:1c:f7:b9:0e:54:d9:ce:57:a1: c5:e2:60:c1:35:8f:db:b1:34:61:14:ea:fa:8f:94:ae:f7:13: 68:81:e1:96:5a:e5:af:0b:12:d0:92:6c:28:f8:bd:31:1b:25: 68:26:2a:d5:02:16:50:08:87:7e:3f:d6:8d:5c:5d:c3:e0:8c: e0:1f:a9:18:16:a8:fb:d3:3c:dc:a0:2f:b0:8b:d3:cf:f6:9e: 6e:9a:36:de:8c:2d:6a:a4:39:86:4b:7a:e4:bf:00:aa:b4:9c: 21:02:f0:b6:84:b5:fc:47:56:30:0f:49:44:2f:e7:30:ba:ed: d8:4d:60:4e:db:ad:6f:ec:7a:74:f3:d0:69:27:e8:f7:c6:8e: 67:d1:b5:c9:e0:14:93:18:05:5a:ab:e0:e9:57:0d:2e:5b:d2: ad:dc:39:d1:99:8d:94:ba:7c:69:4f:f8:20:84:6d:d6:a6:71: c5:48:42:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Kj7Mp9tti4JomdwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk OGVlZTVhNjEtYmI1OC00ZjU4LWFkMTgtOWEzNTFmMDAxZjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoN5XKGYhMZ6skl4r1fKlOyPgJV8JIWQqVL1l BVOwelrtb1A8K+shxVTZs5dnl9AVpkZ5YmxzCmMkK0Yqmb0En0BFF949ZCiGmAG8 qWjfvGacbS/8QvYeaQMyjxflqGZUZTW8W+Bx+VyYcPRVk2xWLDYq8ur+HAMZMutX +Kvz/dPwwJs/LxG7liOHJijTrBfuYP2o96fDsaymeVfTFLyy7uPLAq2KqhDTUea5 LhdFtUKV/EH2dGTPSHlgwwhlKkVSWfD4Ey6QUT7nO+Av3RbyFYejnOGTMXSf1NEY W94/Wqx/xsxYdtVXopXvcZ9GaRIHGlOwUX6f3ZixUzhKcAibmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGFGIFIy2c7VeePx6AW6Y6I/7V5wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMWJkOWMzZTEtNjdmMS0z MjY1LTkzNmUtODExOTcyOTBmMWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxyoMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH2Jtn1ujrGQmh4K3CKFAiKS7rVlEFGikUWG4OCKOs2TlE9m/ktYAyUg ZQlrSB4MlnaoPprO5gOFKNT1VnhjP00PeEGj1redR3CQcrZtHyAaehz3uQ5U2c5X ocXiYME1j9uxNGEU6vqPlK73E2iB4ZZa5a8LEtCSbCj4vTEbJWgmKtUCFlAIh34/ 1o1cXcPgjOAfqRgWqPvTPNygL7CL08/2nm6aNt6MLWqkOYZLeuS/AKq0nCEC8LaE tfxHVjAPSUQv5zC67dhNYE7brW/senTz0Gkn6PfGjmfRtcngFJMYBVqr4OlXDS5b 0q3cOdGZjZS6fGlP+CCEbdamccVIQm4= -----END CERTIFICATE-----Generated at Thu Mar 26 23:03:51 2026 by rpki-client