$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2411ce27-c6f2-3cfd-8fdc-2a6b407f8824.roa File: 2411ce27-c6f2-3cfd-8fdc-2a6b407f8824.roa (raw, json) Hash identifier: R9SZZpNGm5Duot2L5nH4rzgNUnQo1W5RKAzRd0uYyYQ= Subject key identifier: BE:59:88:AE:85:E6:E8:93:1A:74:ED:1F:11:54:37:66:C0:C2:5E:BC Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584F49761296CEE73C5F2C5EC700 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2411ce27-c6f2-3cfd-8fdc-2a6b407f8824.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 3360 IP address blocks: 192.57.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:12:96:ce:e7:3c:5f:2c:5e:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=7e75be70-168c-46b5-960d-31ced592e190 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c4:31:d4:b6:fa:51:b6:b0:7e:0c:21:aa:71: 53:d2:f7:70:c6:34:a2:61:7b:e1:3f:39:43:26:6c: 30:26:98:a6:95:78:b7:35:b2:5b:ef:a6:8d:86:be: 7f:7c:b5:40:a8:41:01:90:4c:b8:70:40:1d:22:94: 45:74:dd:3a:8d:f7:e1:cd:38:58:19:0d:6f:b2:4f: e1:8b:8e:1e:bf:f1:b3:33:ce:84:63:37:19:cf:96: be:8e:d6:98:cd:e2:ea:ae:49:40:6c:e8:ff:64:9d: 99:d1:d5:47:05:bc:1c:88:d8:c0:7e:3e:fb:75:d6: e0:c6:3e:b3:f2:c1:0a:c1:bf:ce:66:60:f4:98:d6: 45:2d:f0:0b:9c:3f:5a:f9:eb:f4:33:fa:f3:7a:8e: f3:0b:5e:bf:b6:2e:e9:e3:e7:39:4a:5a:bf:81:7c: ec:d2:05:25:d5:3d:c9:46:2f:93:18:8e:c2:4d:c4: 0e:25:8b:cc:1f:ab:8b:24:de:39:8e:7b:12:2d:59: 51:b7:46:78:19:96:ac:14:a9:c0:f1:25:50:e7:39: 26:f3:2a:c8:ab:07:36:75:b6:85:8b:66:58:0f:dd: 9d:cd:e7:93:07:8c:7c:5d:82:43:a8:be:ab:36:f1: 45:0e:d5:bb:6c:16:49:99:3e:88:fd:9d:18:db:28: 9b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:59:88:AE:85:E6:E8:93:1A:74:ED:1F:11:54:37:66:C0:C2:5E:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2411ce27-c6f2-3cfd-8fdc-2a6b407f8824.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.57.118.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:24:fd:90:97:73:24:b1:91:03:74:b4:9f:df:b5:1c:82:8d: b3:e1:0a:5e:2b:e7:66:cb:ae:4c:9f:3b:59:71:04:6a:a6:d5: 1f:ba:e0:77:b5:bf:1c:40:53:3a:d8:08:02:c2:f6:dd:6b:e2: 09:60:41:c5:22:ba:24:89:11:ef:82:1d:55:2d:4a:08:be:c7: 25:5a:60:f6:e1:48:00:ad:d9:91:bf:50:f5:db:a0:78:71:74: 14:04:d1:f4:ec:1e:56:57:18:0c:af:57:6f:bb:b3:d0:7b:de: 6e:83:d9:0d:71:a5:3d:a9:0f:c9:9e:28:73:05:e9:17:f9:da: 1a:f7:f3:15:64:a7:59:7a:aa:02:36:f4:d6:3a:8c:c7:5c:1b: 14:08:4f:f8:0e:04:aa:b5:2c:b7:00:89:fc:da:0b:81:10:fe: 5d:5d:b4:1f:f1:4e:b5:0a:5b:e8:3c:5b:41:d5:79:b9:3a:1e: f0:87:49:2c:bc:af:ab:d8:fd:66:79:72:c5:46:c3:5e:50:7f: 08:11:aa:c3:7b:98:3b:46:c1:c6:f8:22:bc:c4:ab:3c:0e:62: b2:40:de:6a:bf:ac:73:f3:57:ab:c9:27:85:e9:d6:ec:d9:62: 95:2e:63:d2:57:4a:6d:e8:a8:dc:8e:57:1d:69:5c:6a:e8:a1: 42:b7:67:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdhKWzuc8XyxexwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk N2U3NWJlNzAtMTY4Yy00NmI1LTk2MGQtMzFjZWQ1OTJlMTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcQx1Lb6UbawfgwhqnFT0vdwxjSiYXvhPzlD JmwwJpimlXi3NbJb76aNhr5/fLVAqEEBkEy4cEAdIpRFdN06jffhzThYGQ1vsk/h i44ev/GzM86EYzcZz5a+jtaYzeLqrklAbOj/ZJ2Z0dVHBbwciNjAfj77ddbgxj6z 8sEKwb/OZmD0mNZFLfALnD9a+ev0M/rzeo7zC16/ti7p4+c5Slq/gXzs0gUl1T3J Ri+TGI7CTcQOJYvMH6uLJN45jnsSLVlRt0Z4GZasFKnA8SVQ5zkm8yrIqwc2dbaF i2ZYD92dzeeTB4x8XYJDqL6rNvFFDtW7bBZJmT6I/Z0Y2yibfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL5ZiK6F5uiTGnTtHxFUN2bAwl68MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMjQxMWNlMjctYzZmMi0z Y2ZkLThmZGMtMmE2YjQwN2Y4ODI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDl2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABMk/ZCXcySxkQN0tJ/ftRyCjbPhCl4r52bLrkyfO1lxBGqm1R+64He1 vxxAUzrYCALC9t1r4glgQcUiuiSJEe+CHVUtSgi+xyVaYPbhSACt2ZG/UPXboHhx dBQE0fTsHlZXGAyvV2+7s9B73m6D2Q1xpT2pD8meKHMF6Rf52hr38xVkp1l6qgI2 9NY6jMdcGxQIT/gOBKq1LLcAifzaC4EQ/l1dtB/xTrUKW+g8W0HVebk6HvCHSSy8 r6vY/WZ5csVGw15QfwgRqsN7mDtGwcb4IrzEqzwOYrJA3mq/rHPzV6vJJ4Xp1uzZ YpUuY9JXSm3oqNyOVx1pXGrooUK3Z1E= -----END CERTIFICATE-----Generated at Sat Sep 26 18:58:48 2026 by rpki-client