$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/36fff40a-5371-3197-864c-6f7ec60a819a.roa File: 36fff40a-5371-3197-864c-6f7ec60a819a.roa (raw, json) Hash identifier: 4WQw99rS08MEtN5QffRg+fCEL61Y0CdgW7/E+N7+abg= Subject key identifier: 29:6F:E3:FE:2C:42:62:A2:3C:DD:EC:11:21:2C:DB:AD:C1:9F:06:5E Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584F4976E575C90087E10621C380 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/36fff40a-5371-3197-864c-6f7ec60a819a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 203 IP address blocks: 216.240.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:e5:75:c9:00:87:e1:06:21:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3dc1de5d-3ba9-40cb-a12a-3a20ca35ef61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:22:49:9f:0d:6a:42:f4:2b:a1:31:d2:dc:44: 83:6d:a7:7e:d6:84:0a:8a:32:d8:74:5d:ff:1a:bb: 2e:60:49:c6:94:af:04:78:20:1c:ec:0b:0c:ce:41: ee:bd:bf:ce:9f:6f:c5:1e:b7:f2:e8:1c:0b:db:16: d5:39:36:89:70:c6:0e:a8:08:72:ff:29:b5:cf:81: b1:22:6b:57:23:06:8e:87:13:57:75:c8:e5:e7:2d: 99:d6:57:20:32:37:50:7e:3e:64:32:e9:33:3a:27: aa:98:fc:67:06:77:ec:f9:01:4b:f2:2e:a5:c1:4d: ca:1c:1e:35:79:e9:6c:de:e0:25:a8:95:e5:8a:12: a1:94:f0:84:e1:d4:bd:89:e0:bd:a9:ef:9a:b5:a7: 7d:0f:d9:53:27:8e:f0:f2:3b:c1:8e:31:4d:22:2b: 40:e6:a5:a0:51:c4:99:0b:6d:22:ef:ee:1b:86:d8: 37:33:5e:e1:4d:7f:90:20:e5:ae:60:5a:7f:dd:63: 4c:86:77:62:dc:72:9c:7d:9c:61:c1:0b:61:75:52: 40:94:a1:ee:e7:3a:88:7a:b2:57:8f:ff:c7:df:37: 17:27:b1:54:52:8f:96:e7:b2:7c:f2:ff:97:f3:4d: 70:5b:42:66:37:b1:08:cb:1d:e0:a5:19:40:2b:c3: 70:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:6F:E3:FE:2C:42:62:A2:3C:DD:EC:11:21:2C:DB:AD:C1:9F:06:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/36fff40a-5371-3197-864c-6f7ec60a819a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 216.240.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:e7:19:55:ab:08:ea:ac:da:19:72:99:2a:82:c8:d9:ea:f9: a3:74:1d:b2:5f:0f:e6:8d:9a:4d:f5:6a:e7:f3:d5:aa:98:ff: ca:5c:a3:81:02:8a:4d:7c:79:4b:1e:a7:52:aa:ca:a2:95:e4: e5:fe:81:fa:7f:0b:9a:7d:75:ab:3c:38:03:61:59:5b:16:73: 19:4b:a7:86:f0:9f:bb:8b:1f:90:7e:bb:f3:7b:32:bc:0b:29: 09:10:5d:9b:26:af:0f:f5:d7:ab:1a:4f:f4:70:57:fe:e4:28: 71:d4:e9:ad:2b:e7:f5:3e:ac:47:ef:2e:f9:49:25:46:d6:0b: f0:3c:89:69:50:29:a6:07:de:f2:30:11:ed:94:3e:b8:79:88: 87:9c:95:a9:27:8f:c6:09:81:7e:87:99:8b:4e:3a:fd:4c:82: c1:d5:c9:b9:8d:bd:69:ba:9e:68:f0:22:50:83:66:a3:ff:5b: 67:1a:4a:48:2d:5d:06:62:d4:96:84:39:f7:bc:8d:f1:fe:9c: a6:d5:15:a5:06:02:66:23:1e:e3:57:ba:d6:55:d8:09:e2:be: a5:a6:10:b9:12:73:c2:36:e1:4b:5c:ba:34:63:c6:45:56:65: 5e:54:ac:44:e0:2d:94:65:0c:fc:87:fd:4c:d5:19:9b:d0:6a: d5:13:6f:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JduV1yQCH4QYhw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk M2RjMWRlNWQtM2JhOS00MGNiLWExMmEtM2EyMGNhMzVlZjYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSJJnw1qQvQroTHS3ESDbad+1oQKijLYdF3/ GrsuYEnGlK8EeCAc7AsMzkHuvb/On2/FHrfy6BwL2xbVOTaJcMYOqAhy/ym1z4Gx ImtXIwaOhxNXdcjl5y2Z1lcgMjdQfj5kMukzOieqmPxnBnfs+QFL8i6lwU3KHB41 eels3uAlqJXlihKhlPCE4dS9ieC9qe+atad9D9lTJ47w8jvBjjFNIitA5qWgUcSZ C20i7+4bhtg3M17hTX+QIOWuYFp/3WNMhndi3HKcfZxhwQthdVJAlKHu5zqIerJX j//H3zcXJ7FUUo+W57J88v+X801wW0JmN7EIyx3gpRlAK8NwSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFClv4/4sQmKiPN3sESEs263BnwZeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMzZmZmY0MGEtNTM3MS0z MTk3LTg2NGMtNmY3ZWM2MGE4MTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PDNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEXnGVWrCOqs2hlymSqCyNnq+aN0HbJfD+aNmk31aufz1aqY/8pco4EC ik18eUsep1KqyqKV5OX+gfp/C5p9das8OANhWVsWcxlLp4bwn7uLH5B+u/N7MrwL KQkQXZsmrw/116saT/RwV/7kKHHU6a0r5/U+rEfvLvlJJUbWC/A8iWlQKaYH3vIw Ee2UPrh5iIeclaknj8YJgX6HmYtOOv1MgsHVybmNvWm6nmjwIlCDZqP/W2caSkgt XQZi1JaEOfe8jfH+nKbVFaUGAmYjHuNXutZV2AnivqWmELkSc8I24UtcujRjxkVW ZV5UrETgLZRlDPyH/UzVGZvQatUTb7Y= -----END CERTIFICATE-----Generated at Thu Oct 8 20:47:41 2026 by rpki-client