$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4200f42a-72f5-310d-bd4e-143e66d1251c.roa File: 4200f42a-72f5-310d-bd4e-143e66d1251c.roa (raw, json) Hash identifier: RAqowDctVsKjPFzeMytVbEnuL00vtb0QPFyLb+vBHHk= Subject key identifier: F4:7F:6A:4C:A4:E1:85:52:F4:E5:41:13:98:53:7E:B8:9C:F2:44:71 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584F4975F91988D9539E37ADBBC0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4200f42a-72f5-310d-bd4e-143e66d1251c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 3356 IP address blocks: 66.54.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:f9:19:88:d9:53:9e:37:ad:bb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=97637205-b2b2-4edd-ad53-af6a7455f135 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:b0:6c:6b:dc:be:63:8b:63:09:8a:61:00:a3: a6:03:6b:e4:32:94:2f:b8:32:bf:23:9c:f4:d2:39: 8b:a6:55:12:c8:53:cb:3c:71:1b:db:d8:d1:a0:62: e7:35:ae:c7:d3:75:0b:97:20:e2:f4:78:12:be:0f: 82:de:85:d5:8a:d0:5f:83:ab:58:07:e5:fb:98:bd: 96:68:80:e9:99:72:5c:5c:4a:07:ce:4e:78:7c:e4: 35:01:2b:b1:74:81:66:ca:f8:c5:40:46:12:5a:f0: d7:0d:42:d8:dc:37:98:55:a0:2b:97:eb:87:bd:ad: 78:f8:25:3e:c0:24:20:14:ce:22:e4:a9:50:2a:d1: 24:66:d4:0f:85:0d:6d:ef:76:f4:72:c7:01:e5:fd: 94:2c:dc:0d:2c:af:e9:d6:74:01:e2:2f:3a:81:11: 27:99:7c:6a:05:63:7e:13:10:e7:c0:8e:70:e6:13: be:e7:1a:4a:c9:1f:54:91:dc:f4:82:ed:b9:62:b6: 40:22:11:9f:bf:cc:62:e2:14:45:15:32:e6:57:a2: bf:4b:0e:79:a4:ee:d0:30:b1:f8:43:80:43:44:2d: 99:22:ad:f4:81:1d:eb:73:d0:b8:0d:36:a0:98:82: 0e:cc:f7:9a:4e:54:ff:8c:2b:df:8c:c1:8d:6c:1d: 6f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:7F:6A:4C:A4:E1:85:52:F4:E5:41:13:98:53:7E:B8:9C:F2:44:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4200f42a-72f5-310d-bd4e-143e66d1251c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 66.54.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:ed:6a:20:d5:2b:ff:96:54:f2:a5:0e:45:98:2d:6f:41:6e: af:59:9c:1d:04:7f:c7:27:a8:4a:35:56:a8:63:54:18:1f:35: 9e:e8:30:2f:22:69:54:df:c8:8a:f3:53:66:90:6a:90:c9:ba: 00:de:7b:6b:fc:91:7d:c1:f2:76:a5:0d:f6:f3:47:c2:87:c5: 3c:f6:c2:75:a6:26:a8:08:73:d1:a4:c8:de:20:8f:d1:7b:39: 33:be:f0:61:64:9d:06:be:84:d4:b1:18:05:fc:05:f4:18:86: f0:b3:17:d9:b6:ea:f0:32:d6:79:19:7e:8c:b5:e3:28:53:90: 43:a7:21:b5:5f:7c:9c:1e:75:64:d5:dd:f1:3c:2a:de:d1:89: 1b:c7:fa:18:9c:70:c3:97:6b:93:b2:25:1f:ba:b3:1a:c1:98: 6d:8d:59:7a:c1:75:49:76:96:9b:4b:09:1c:de:3f:99:46:27: 01:3b:07:e9:c1:0c:a7:c8:8b:e6:1a:ca:74:61:f6:ea:10:b5: c6:0f:62:a0:e6:58:9e:92:dc:fb:07:ae:82:cd:1d:7c:b3:b9: 23:0e:d5:4a:1b:ba:75:b1:cc:05:6a:9c:9e:8d:ec:bd:a3:3d: 63:58:e8:53:15:81:37:03:dc:d0:dc:26:9b:7c:9e:4a:ff:20: e0:26:dd:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdfkZiNlTnjetu8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OTc2MzcyMDUtYjJiMi00ZWRkLWFkNTMtYWY2YTc0NTVmMTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbBsa9y+Y4tjCYphAKOmA2vkMpQvuDK/I5z0 0jmLplUSyFPLPHEb29jRoGLnNa7H03ULlyDi9HgSvg+C3oXVitBfg6tYB+X7mL2W aIDpmXJcXEoHzk54fOQ1ASuxdIFmyvjFQEYSWvDXDULY3DeYVaArl+uHva14+CU+ wCQgFM4i5KlQKtEkZtQPhQ1t73b0cscB5f2ULNwNLK/p1nQB4i86gREnmXxqBWN+ ExDnwI5w5hO+5xpKyR9Ukdz0gu25YrZAIhGfv8xi4hRFFTLmV6K/Sw55pO7QMLH4 Q4BDRC2ZIq30gR3rc9C4DTagmIIOzPeaTlT/jCvfjMGNbB1viwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPR/akyk4YVS9OVBE5hTfric8kRxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNDIwMGY0MmEtNzJmNS0z MTBkLWJkNGUtMTQzZTY2ZDEyNTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQjYcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJLtaiDVK/+WVPKlDkWYLW9Bbq9ZnB0Ef8cnqEo1VqhjVBgfNZ7oMC8i aVTfyIrzU2aQapDJugDee2v8kX3B8nalDfbzR8KHxTz2wnWmJqgIc9GkyN4gj9F7 OTO+8GFknQa+hNSxGAX8BfQYhvCzF9m26vAy1nkZfoy14yhTkEOnIbVffJwedWTV 3fE8Kt7RiRvH+hiccMOXa5OyJR+6sxrBmG2NWXrBdUl2lptLCRzeP5lGJwE7B+nB DKfIi+YaynRh9uoQtcYPYqDmWJ6S3PsHroLNHXyzuSMO1UobunWxzAVqnJ6N7L2j PWNY6FMVgTcD3NDcJpt8nkr/IOAm3as= -----END CERTIFICATE-----Generated at Thu Oct 8 13:21:08 2026 by rpki-client