$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1cad5c47-9aff-3502-b3c4-990556f3e3f3.roa File: 1cad5c47-9aff-3502-b3c4-990556f3e3f3.roa (raw, json) Hash identifier: xxO1kx0R54Fs0Hkr9wP5n34S0ajc1fbglWx/CauO0V4= Subject key identifier: BD:48:83:CC:22:AB:31:C5:7B:52:C9:79:B1:1A:A5:64:A2:8E:87:40 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584F7E7DD1C881E189E9D44C64C0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1cad5c47-9aff-3502-b3c4-990556f3e3f3.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 60204 IP address blocks: 206.164.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:d1:c8:81:e1:89:e9:d4:4c:64:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=de8838ec-2f21-4113-b3e0-bc64b2f84c6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:85:68:35:74:dd:96:81:2d:52:01:b5:53:b7: f6:55:92:6a:c9:8d:0e:65:bf:10:47:2d:0a:66:ba: 8f:ac:66:6a:47:68:e3:db:56:2e:61:2d:6a:91:fa: b7:d7:ae:74:4c:64:51:e1:73:11:fb:68:b6:48:01: b5:57:89:1e:e0:09:aa:90:e0:61:a9:0b:45:e7:88: ab:4f:3e:39:68:a5:d8:52:c6:61:be:fa:79:0b:cd: 11:13:6e:ba:a5:a1:4a:5c:88:ec:74:16:11:9b:e0: 14:0e:49:cb:bd:13:7c:13:3b:48:80:a7:87:3a:93: ef:63:1c:f8:66:f2:69:2d:e2:89:ce:42:11:0f:74: 51:df:7e:dc:72:db:1b:1a:a9:12:aa:b2:04:ec:b4: c7:09:4b:48:b7:04:95:d9:d7:b2:77:33:d2:fd:fe: bc:03:18:51:80:d0:9f:2e:96:5f:5b:65:69:45:1b: 45:25:88:c1:ff:2c:40:5b:74:e5:a9:b3:17:ea:22: 92:ae:c8:6b:7c:6d:7f:93:01:cd:83:37:f2:73:d6: 34:98:d4:b6:96:90:20:24:bf:4e:36:19:42:23:9e: dd:62:da:13:38:47:f1:4a:ab:26:aa:81:b6:d9:ed: 57:53:39:1b:55:e2:f1:3d:22:65:62:b3:b2:cf:95: 7d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:48:83:CC:22:AB:31:C5:7B:52:C9:79:B1:1A:A5:64:A2:8E:87:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1cad5c47-9aff-3502-b3c4-990556f3e3f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 206.164.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:31:1b:fa:c3:f2:56:e3:8d:01:9f:e9:27:13:2c:5c:8b:5f: d8:22:c0:59:55:07:0a:6a:c4:ff:53:82:1e:02:28:3d:ba:34: c6:68:2a:94:d0:ba:85:45:76:c9:ed:79:7f:d4:ca:bb:e1:97: 20:b7:5e:33:1d:c4:f6:fa:5a:4a:4d:a1:37:cc:1b:03:c9:13: 29:05:b3:a0:f4:3f:ff:43:30:59:e4:8e:78:29:fe:a2:29:33: f7:b6:ef:f3:47:ce:95:c1:7f:33:be:83:26:75:05:b3:b2:a5: 31:48:b0:86:31:c9:a6:1a:00:3d:8e:f9:43:d6:0f:dc:b2:f8: 83:f2:d0:47:1b:7c:50:a3:5c:dd:02:c3:a2:c8:c7:b1:00:6e: 7a:17:cd:0c:4d:d7:0e:71:fe:d0:cb:89:68:f0:aa:e1:85:e0: 21:57:c9:5f:df:96:de:66:7e:d0:83:43:c0:2a:36:d8:c3:db: ba:58:c3:1e:ff:6b:fd:f0:b9:c2:79:b2:83:dd:5d:57:bc:a1: 91:2a:33:6a:c1:1c:82:a5:a7:27:50:d0:f7:75:3e:1c:d1:3b: aa:36:b0:08:d3:e4:20:83:49:e8:d6:7e:ed:68:0a:26:ea:36: fe:eb:c8:41:2e:dc:30:c5:e4:51:90:cb:03:2e:a1:68:02:49: d1:49:c0:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9+fdHIgeGJ6dRMZMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk ZGU4ODM4ZWMtMmYyMS00MTEzLWIzZTAtYmM2NGIyZjg0YzZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIVoNXTdloEtUgG1U7f2VZJqyY0OZb8QRy0K ZrqPrGZqR2jj21YuYS1qkfq31650TGRR4XMR+2i2SAG1V4ke4AmqkOBhqQtF54ir Tz45aKXYUsZhvvp5C80RE266paFKXIjsdBYRm+AUDknLvRN8EztIgKeHOpPvYxz4 ZvJpLeKJzkIRD3RR337cctsbGqkSqrIE7LTHCUtItwSV2deydzPS/f68AxhRgNCf LpZfW2VpRRtFJYjB/yxAW3TlqbMX6iKSrshrfG1/kwHNgzfyc9Y0mNS2lpAgJL9O NhlCI57dYtoTOEfxSqsmqoG22e1XUzkbVeLxPSJlYrOyz5V9SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL1Ig8wiqzHFe1LJebEapWSijodAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMWNhZDVjNDctOWFmZi0z NTAyLWIzYzQtOTkwNTU2ZjNlM2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzqQgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH4xG/rD8lbjjQGf6ScTLFyLX9giwFlVBwpqxP9Tgh4CKD26NMZoKpTQ uoVFdsnteX/UyrvhlyC3XjMdxPb6WkpNoTfMGwPJEykFs6D0P/9DMFnkjngp/qIp M/e27/NHzpXBfzO+gyZ1BbOypTFIsIYxyaYaAD2O+UPWD9yy+IPy0EcbfFCjXN0C w6LIx7EAbnoXzQxN1w5x/tDLiWjwquGF4CFXyV/flt5mftCDQ8AqNtjD27pYwx7/ a/3wucJ5soPdXVe8oZEqM2rBHIKlpydQ0Pd1PhzRO6o2sAjT5CCDSejWfu1oCibq Nv7ryEEu3DDF5FGQywMuoWgCSdFJwME= -----END CERTIFICATE-----Generated at Wed Oct 14 04:50:07 2026 by rpki-client