$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4789ee14-a00f-369b-bfbc-e0173c0e378a.roa File: 4789ee14-a00f-369b-bfbc-e0173c0e378a.roa (raw, json) Hash identifier: iQhhuES91BZ9044Ltd+TA8YBzLDNUlA5O6n071FYtNs= Subject key identifier: 71:CE:C0:80:96:6E:22:B8:CA:3E:A0:AC:85:5A:95:62:01:DB:81:E4 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584D8EF57A0D6F34BAF10BB2DE80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4789ee14-a00f-369b-bfbc-e0173c0e378a.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 3360 IP address blocks: 15.176.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:7a:0d:6f:34:ba:f1:0b:b2:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=645f652b-9e03-48fc-8bba-4125fe439728 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:47:30:4b:9b:e3:44:d9:8d:aa:88:ab:21:2e: a5:a7:ad:82:e0:50:1f:18:42:2f:99:e8:2f:7c:fb: f9:5a:b0:ba:b9:18:2c:51:b6:d7:15:c6:91:c1:1a: e1:40:5a:15:6e:ae:ed:49:99:49:3f:71:bb:7a:b3: e3:5d:a3:3a:88:b7:96:d0:2c:cc:13:27:99:81:92: 2d:a1:b6:eb:ee:60:45:c1:0f:2d:23:8c:42:3c:8a: 0b:c7:d3:09:5e:5c:25:a1:7c:c2:e1:42:9d:bf:af: b1:dd:ef:9a:64:9a:bc:36:93:4a:75:44:cf:8a:4c: 76:58:21:15:88:2d:dc:af:35:72:73:73:3b:ea:35: ed:48:8b:6d:42:8d:c1:aa:58:a5:cc:4c:2e:75:7b: 7e:e5:d8:2d:55:4e:cd:e8:4b:ac:91:36:0b:21:f2: 87:21:db:f1:da:90:65:d3:8e:97:a0:54:d9:f4:ae: 21:e7:32:dc:5b:bf:57:e8:7c:da:b7:b0:e4:3b:8f: e3:1a:a0:84:9b:26:b9:ae:07:fd:5a:c9:5e:81:ca: e3:5d:5b:0d:89:a9:59:ad:6c:85:dc:b8:d7:e5:e8: 12:70:37:7c:09:10:86:35:01:88:d7:34:c6:31:ec: 13:4a:66:64:2b:12:41:bd:1d:03:88:94:97:76:3e: 77:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:CE:C0:80:96:6E:22:B8:CA:3E:A0:AC:85:5A:95:62:01:DB:81:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4789ee14-a00f-369b-bfbc-e0173c0e378a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 15.176.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:74:ab:16:dc:ac:fa:0c:a9:1c:0a:db:6d:97:53:c4:8d:1b: 1c:0f:d7:20:94:0f:77:fe:55:91:fa:29:49:fe:41:86:da:be: 8f:0a:d0:c2:39:1c:f0:17:d2:55:e8:5a:22:ef:77:ee:90:40: 88:67:b7:3f:34:e5:d7:03:22:2e:bb:2d:8d:bb:67:93:6c:00: cd:dc:2d:8c:06:c9:66:d6:56:37:69:83:b8:09:26:e7:b8:bf: d9:2a:69:f0:a5:56:36:06:5d:2a:97:71:40:a0:ef:cc:01:1a: 7f:20:82:ea:71:cd:63:7e:2a:dd:56:75:90:bc:24:b7:4b:70: 70:b5:69:62:af:77:df:6e:2b:eb:7e:23:52:55:20:0a:52:94: ad:29:1b:8f:33:df:48:20:32:de:2b:bb:59:f2:a9:f2:02:7e: 6c:a2:70:a8:f3:85:58:73:53:10:e7:b6:d7:6c:9a:de:df:90: 42:76:a4:4b:72:2a:7c:26:73:d2:ea:a0:46:aa:74:57:b6:3d: 7d:5b:a6:15:0a:a4:46:30:eb:f6:25:c0:c4:3b:9f:52:1c:1f: 2e:7c:ff:7b:a4:61:bd:05:06:3a:77:c5:d5:1b:10:7d:37:f4: 52:61:48:8f:56:4f:71:89:ab:08:9c:fc:3d:fc:b2:c6:36:09: ef:ad:93:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9XoNbzS68Quy3oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk NjQ1ZjY1MmItOWUwMy00OGZjLThiYmEtNDEyNWZlNDM5NzI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEcwS5vjRNmNqoirIS6lp62C4FAfGEIvmegv fPv5WrC6uRgsUbbXFcaRwRrhQFoVbq7tSZlJP3G7erPjXaM6iLeW0CzMEyeZgZIt obbr7mBFwQ8tI4xCPIoLx9MJXlwloXzC4UKdv6+x3e+aZJq8NpNKdUTPikx2WCEV iC3crzVyc3M76jXtSIttQo3BqlilzEwudXt+5dgtVU7N6EuskTYLIfKHIdvx2pBl 046XoFTZ9K4h5zLcW79X6Hzat7DkO4/jGqCEmya5rgf9WslegcrjXVsNialZrWyF 3LjX5egScDd8CRCGNQGI1zTGMewTSmZkKxJBvR0DiJSXdj53fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHHOwICWbiK4yj6grIValWIB24HkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNDc4OWVlMTQtYTAwZi0z NjliLWJmYmMtZTAxNzNjMGUzNzhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQED7AgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACR0qxbcrPoMqRwK222XU8SNGxwP1yCUD3f+VZH6KUn+QYbavo8K0MI5 HPAX0lXoWiLvd+6QQIhntz805dcDIi67LY27Z5NsAM3cLYwGyWbWVjdpg7gJJue4 v9kqafClVjYGXSqXcUCg78wBGn8ggupxzWN+Kt1WdZC8JLdLcHC1aWKvd99uK+t+ I1JVIApSlK0pG48z30ggMt4ru1nyqfICfmyicKjzhVhzUxDnttdsmt7fkEJ2pEty Knwmc9LqoEaqdFe2PX1bphUKpEYw6/YlwMQ7n1IcHy58/3ukYb0FBjp3xdUbEH03 9FJhSI9WT3GJqwic/D38ssY2Ce+tkxY= -----END CERTIFICATE-----Generated at Wed May 13 16:09:54 2026 by rpki-client