$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/242704e6-6aa0-3f71-a550-f92875418865.roa File: 242704e6-6aa0-3f71-a550-f92875418865.roa (raw, json) Hash identifier: 9XGt7zMkaXCc6ZdnuZokM4Ak5wXeNLrP1TS+Gl8Ho6w= Subject key identifier: 9E:EE:6E:0A:60:80:76:F9:FC:1B:6E:22:F7:50:48:61:84:83:BB:02 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584D4A8FAEAC2F671411A9E3B080 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/242704e6-6aa0-3f71-a550-f92875418865.roa Signing time: Thu 26 Mar 2026 01:00:32 +0000 ROA not before: Thu 26 Mar 2026 01:00:32 +0000 ROA not after: Wed 24 Jun 2026 01:00:32 +0000 asID: 203 IP address blocks: 206.164.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:8f:ae:ac:2f:67:14:11:a9:e3:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 26 01:00:32 2026 GMT Not After : Jun 24 01:00:32 2026 GMT Subject: CN=6925046b-7f18-49fd-a080-6f5f0837ab63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:56:33:6f:1a:62:ff:20:f1:9b:73:11:4c:7f: f3:45:72:26:6a:47:7f:bb:51:73:eb:c5:b3:34:d5: 8a:73:21:ca:5b:10:12:c0:ef:38:01:5a:fb:d5:a6: 37:9b:71:51:ee:6d:68:06:88:03:95:48:d3:9f:6b: 27:2f:a7:92:4f:68:e0:6f:71:4b:b3:1f:37:50:c5: 16:bf:9a:85:59:ac:98:44:5e:e9:12:63:35:6e:e6: 92:c7:cc:6e:f5:f4:73:6b:db:3e:96:06:3d:6a:0d: 6c:33:f4:51:0b:c6:7e:c7:3a:5e:b3:ed:82:99:66: 99:1a:c6:6f:14:9b:7e:46:be:43:0e:21:29:8c:d2: d5:4a:72:21:a4:63:41:40:d8:cf:23:ad:dd:b2:bf: d6:3a:72:6d:11:87:a0:fb:c0:56:56:0f:b0:50:1a: a2:f2:e7:80:6c:dc:dd:31:e5:e8:f1:d5:3d:69:fb: 99:6c:c0:76:44:9d:ea:6a:2e:27:d2:54:44:32:4d: 1f:0e:de:07:3c:42:3e:c8:71:69:f5:e0:c8:2e:87: ad:51:d6:b7:81:12:94:2c:f6:ef:f8:97:95:86:64: 4c:ef:cd:72:fa:df:49:47:ed:9b:2d:93:d5:b8:9d: 4b:00:49:22:90:e6:21:66:b1:19:4e:44:66:ce:ca: 80:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:EE:6E:0A:60:80:76:F9:FC:1B:6E:22:F7:50:48:61:84:83:BB:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/242704e6-6aa0-3f71-a550-f92875418865.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 206.164.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:a4:06:88:c7:cd:36:37:f2:01:6e:4a:17:11:e5:f7:19:57: 55:44:92:1f:fa:57:92:0a:a1:c8:46:e8:15:13:fa:e1:08:b3: c8:5f:de:68:05:b9:ab:a0:f6:fe:4d:60:84:a5:e4:99:3a:91: ab:7e:e7:89:b4:83:6d:d9:43:b0:23:6f:55:49:c8:f7:38:e6: 71:95:4a:96:d1:9b:94:83:b6:01:ab:79:1f:b9:7e:20:05:46: b2:e3:e1:b9:81:51:58:bb:b5:63:21:ee:75:8e:03:68:db:3d: 8e:bc:b1:86:fd:6a:a5:67:c6:a2:af:d0:31:1e:1b:2f:fb:3f: de:8d:c0:2d:91:53:61:3c:21:9f:83:ad:8b:5e:f6:96:da:29: e8:b6:ba:78:e7:bc:a5:d6:05:6c:e1:cf:5b:7e:a1:f5:95:53: e8:34:ef:5f:38:7c:dc:7a:dd:e3:d3:2b:3a:e1:42:f1:0b:dd: 47:cf:0e:68:0f:29:55:0d:ac:67:e3:47:58:40:79:26:9f:3f: cb:9b:1c:05:b7:d9:f8:86:c0:5e:c4:98:1f:c3:42:94:1f:62: ed:fc:4d:8d:f8:e0:74:5a:43:85:e9:7a:04:d0:54:e2:5d:80: 96:23:93:6f:b7:0f:ea:10:b5:30:ae:98:b7:44:71:8c:15:dc: 60:ec:f6:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Kj66sL2cUEanjsIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk NjkyNTA0NmItN2YxOC00OWZkLWEwODAtNmY1ZjA4MzdhYjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglYzbxpi/yDxm3MRTH/zRXImakd/u1Fz68Wz NNWKcyHKWxASwO84AVr71aY3m3FR7m1oBogDlUjTn2snL6eST2jgb3FLsx83UMUW v5qFWayYRF7pEmM1buaSx8xu9fRza9s+lgY9ag1sM/RRC8Z+xzpes+2CmWaZGsZv FJt+Rr5DDiEpjNLVSnIhpGNBQNjPI63dsr/WOnJtEYeg+8BWVg+wUBqi8ueAbNzd MeXo8dU9afuZbMB2RJ3qai4n0lREMk0fDt4HPEI+yHFp9eDILoetUda3gRKULPbv +JeVhmRM781y+t9JR+2bLZPVuJ1LAEkikOYhZrEZTkRmzsqAPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ7ubgpggHb5/BtuIvdQSGGEg7sCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMjQyNzA0ZTYtNmFhMC0z ZjcxLWE1NTAtZjkyODc1NDE4ODY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqTuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFSkBojHzTY38gFuShcR5fcZV1VEkh/6V5IKochG6BUT+uEIs8hf3mgF uaug9v5NYISl5Jk6kat+54m0g23ZQ7Ajb1VJyPc45nGVSpbRm5SDtgGreR+5fiAF RrLj4bmBUVi7tWMh7nWOA2jbPY68sYb9aqVnxqKv0DEeGy/7P96NwC2RU2E8IZ+D rYte9pbaKei2unjnvKXWBWzhz1t+ofWVU+g07184fNx63ePTKzrhQvEL3UfPDmgP KVUNrGfjR1hAeSafP8ubHAW32fiGwF7EmB/DQpQfYu38TY344HRaQ4XpegTQVOJd gJYjk2+3D+oQtTCumLdEcYwV3GDs9pk= -----END CERTIFICATE-----Generated at Thu Mar 26 21:20:16 2026 by rpki-client