$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/38af7f86-7c7b-3de3-a063-278249ef1fed.roa File: 38af7f86-7c7b-3de3-a063-278249ef1fed.roa (raw, json) Hash identifier: hvZsL2bilcgvvPmM1pjJzwS84ulCb9R3I7NOvo4K/lw= Subject key identifier: 94:19:57:E6:72:B4:8D:B3:CA:97:B3:38:C9:3F:43:52:49:95:71:0F Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584DC4005053A05D159C2CFB9880 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/38af7f86-7c7b-3de3-a063-278249ef1fed.roa Signing time: Fri 08 May 2026 13:00:30 +0000 ROA not before: Fri 08 May 2026 13:00:30 +0000 ROA not after: Thu 06 Aug 2026 13:00:30 +0000 asID: 3356 IP address blocks: 170.30.214.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c4:00:50:53:a0:5d:15:9c:2c:fb:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: May 8 13:00:30 2026 GMT Not After : Aug 6 13:00:30 2026 GMT Subject: CN=e309baa9-9882-493c-8759-a84843782d76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:ce:ae:c2:59:0d:bc:da:89:be:4b:d3:e8:8d: 60:9b:b6:9a:e7:b2:8e:d8:e8:c0:4a:0d:15:78:28: cb:60:41:ec:1e:02:55:8c:5b:23:ea:c7:bf:d9:16: 17:55:61:d4:7f:ff:1f:ac:62:64:21:2a:7d:67:88: e3:7b:2d:19:2c:d1:de:2c:2f:bc:a0:3f:d2:b0:67: 3c:d6:f8:9a:3c:17:25:61:19:9f:5f:e2:93:3e:bb: 28:ec:28:d0:13:b1:28:57:fd:17:f7:e9:82:83:f1: 24:f9:b9:14:28:70:ed:f6:44:5b:95:9c:22:f9:b6: 06:86:75:d3:98:df:5e:96:da:8d:8e:5d:cd:14:76: 62:ce:09:32:86:8d:04:b5:02:0d:58:e8:fc:cd:6f: b2:0e:d1:b1:2a:f9:37:eb:8f:6b:79:8e:38:6a:8a: cd:1a:f4:a7:35:d1:16:51:70:03:d7:ab:81:c7:a4: e7:c5:bb:11:71:94:1c:12:b0:dd:43:a8:f2:e4:b6: a5:e8:6f:96:ad:7d:0b:61:10:02:ec:e2:ad:42:e3: 8e:b0:39:06:f3:87:98:12:64:a4:b0:2c:14:5b:85: da:84:a3:a5:97:7e:72:e5:54:87:92:25:52:29:07: 97:af:5f:43:d8:1d:99:e3:34:fb:63:64:c4:3c:c6: 2f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:19:57:E6:72:B4:8D:B3:CA:97:B3:38:C9:3F:43:52:49:95:71:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/38af7f86-7c7b-3de3-a063-278249ef1fed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 170.30.214.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:5d:cf:8e:93:80:8a:a3:66:7b:5e:e1:98:ab:3e:f9:27:27: 83:4d:6f:ac:82:25:97:cb:c9:5f:27:b9:ff:c1:3e:98:a2:67: 28:2a:d6:73:d0:b3:3f:e3:a8:09:3c:99:61:8b:60:0f:56:90: ae:7b:8a:8a:bd:b3:87:c5:2f:d1:73:8d:ec:f3:4b:2e:32:81: 79:34:e3:8a:ee:01:fb:0c:c1:de:5d:1f:ec:93:94:3b:ce:33: d0:d8:dd:13:71:42:55:b5:39:0b:ee:ee:92:2e:4a:11:13:ba: e6:d6:20:25:ca:64:d6:ec:2d:b6:6d:25:dc:2c:ab:5e:9c:69: 5a:4c:77:da:32:e3:cb:cf:41:11:aa:57:0a:5e:82:db:21:04: d8:e7:d6:46:f6:19:49:79:88:4e:2d:e6:67:8c:41:88:99:de: 19:bf:25:c0:a5:43:82:8d:62:e2:b9:9e:b9:f1:8e:63:a8:82: 16:ac:f6:6d:66:2a:f8:9c:82:6b:96:a9:94:f6:cc:4c:d3:c5: 5a:55:57:6e:75:11:fc:03:98:6a:dc:7f:da:4c:23:ff:95:9e: b4:98:4b:a4:7c:d6:62:de:c2:42:27:e0:de:f9:f8:92:c1:e0: 6b:6b:4c:1a:9c:34:82:02:e9:38:41:c5:b0:db:b5:e8:90:43: 22:29:85:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3EAFBToF0VnCz7mIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDUwODEzMDAzMFoXDTI2MDgwNjEzMDAzMFowLzEtMCsGA1UEAxMk ZTMwOWJhYTktOTg4Mi00OTNjLTg3NTktYTg0ODQzNzgyZDc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgM6uwlkNvNqJvkvT6I1gm7aa57KO2OjASg0V eCjLYEHsHgJVjFsj6se/2RYXVWHUf/8frGJkISp9Z4jjey0ZLNHeLC+8oD/SsGc8 1viaPBclYRmfX+KTPrso7CjQE7EoV/0X9+mCg/Ek+bkUKHDt9kRblZwi+bYGhnXT mN9eltqNjl3NFHZizgkyho0EtQINWOj8zW+yDtGxKvk3649reY44aorNGvSnNdEW UXAD16uBx6TnxbsRcZQcErDdQ6jy5Lal6G+WrX0LYRAC7OKtQuOOsDkG84eYEmSk sCwUW4XahKOll35y5VSHkiVSKQeXr19D2B2Z4zT7Y2TEPMYvxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJQZV+ZytI2zypezOMk/Q1JJlXEPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMzhhZjdmODYtN2M3Yi0z ZGUzLWEwNjMtMjc4MjQ5ZWYxZmVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqh7WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG9dz46TgIqjZnte4ZirPvknJ4NNb6yCJZfLyV8nuf/BPpiiZygq1nPQ sz/jqAk8mWGLYA9WkK57ioq9s4fFL9FzjezzSy4ygXk044ruAfsMwd5dH+yTlDvO M9DY3RNxQlW1OQvu7pIuShETuubWICXKZNbsLbZtJdwsq16caVpMd9oy48vPQRGq VwpegtshBNjn1kb2GUl5iE4t5meMQYiZ3hm/JcClQ4KNYuK5nrnxjmOoghas9m1m KvicgmuWqZT2zEzTxVpVV251EfwDmGrcf9pMI/+VnrSYS6R81mLewkIn4N75+JLB 4GtrTBqcNIIC6ThBxbDbteiQQyIpheQ= -----END CERTIFICATE-----Generated at Wed May 13 14:04:47 2026 by rpki-client