$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4e28bed8-a4dc-3ce0-a256-7a50b77655c3.roa File: 4e28bed8-a4dc-3ce0-a256-7a50b77655c3.roa (raw, json) Hash identifier: WV41QuMktvhvKjPvKAd4dTd7nni1uq8QQSRiATIYsWg= Subject key identifier: C4:4D:8A:10:81:E8:44:79:9D:77:D1:7D:DA:84:91:14:74:75:F9:C3 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584F497720EBF6025EFAD497AB00 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4e28bed8-a4dc-3ce0-a256-7a50b77655c3.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 3356 IP address blocks: 204.104.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:77:20:eb:f6:02:5e:fa:d4:97:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=7cbb89ba-43e0-4ce8-99bc-3298a936fc7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:8c:60:d7:01:b2:96:57:1d:fd:d6:41:df:12: 08:55:ee:2f:31:da:a8:eb:8e:63:9e:57:70:6f:f2: c0:ce:4f:ae:17:1c:da:3f:63:b2:aa:97:13:2a:59: 64:22:d9:18:d5:17:5b:46:1e:47:af:9b:fe:be:c0: 7c:64:f9:36:2c:96:11:90:14:5d:9d:d1:f6:43:de: 05:a0:be:05:38:85:05:4a:53:f6:98:ac:49:73:0d: 69:e1:41:d4:65:55:13:4e:71:90:88:ce:99:bd:b2: c9:af:40:55:14:7f:67:91:7a:76:11:8c:9a:ee:da: 46:39:c3:d9:cc:ab:6a:8a:9d:01:da:7b:80:3e:64: 26:3d:27:13:ef:9a:e9:01:42:59:32:4f:78:4b:e1: 51:f8:dd:98:e3:f9:e5:ab:94:38:8c:28:da:62:45: e2:02:af:3b:1b:d7:77:f6:28:93:3a:41:64:93:82: 6b:53:68:01:ba:9e:6d:f5:32:11:54:6c:63:1a:85: bb:1c:47:c4:0e:e1:45:0d:9d:d5:77:d4:f2:7f:dc: da:75:e4:7e:90:67:70:d6:c7:3e:8c:d9:fd:c7:85: d5:97:18:59:9c:2a:c8:e3:06:91:77:93:32:f3:38: 8a:d8:6f:d8:ac:a9:91:60:e4:af:70:1e:0a:c1:22: c5:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:4D:8A:10:81:E8:44:79:9D:77:D1:7D:DA:84:91:14:74:75:F9:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4e28bed8-a4dc-3ce0-a256-7a50b77655c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 204.104.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:84:60:d6:90:4f:43:3f:66:49:14:a5:2f:46:75:ef:bc:4c: 96:5c:b4:9a:a8:3d:f0:bc:41:5e:7c:55:a7:c7:9d:af:53:d8: 8d:7d:84:92:3b:25:cf:eb:73:bf:5a:e3:70:59:91:27:97:25: 2b:32:0b:95:a6:8e:29:bc:b4:7e:ff:cf:e5:46:6d:9c:59:f2: bc:36:03:4a:87:2d:31:f7:6a:a4:53:bb:e8:4b:02:27:7d:2d: 0e:41:36:70:96:39:6e:0a:3d:bf:d2:08:3d:07:2a:91:97:a6: a8:09:31:50:d1:91:e7:42:ab:da:45:cb:c7:ab:56:a4:9c:31: d6:a5:7e:ca:64:3e:c8:f6:e8:82:18:0c:41:1c:b0:45:f0:1e: db:89:e4:d8:cb:cb:7c:9d:27:50:23:7a:c2:72:27:0f:ec:80: bc:ab:8d:c0:10:e0:e7:96:95:89:38:d1:26:6b:06:fe:13:91: 80:9d:1c:b6:45:61:08:d8:e8:46:3a:af:c6:50:69:f6:6e:79: 93:75:5d:f8:82:0b:82:b3:87:dd:3e:90:09:a5:6d:39:cd:c6: e4:45:15:1e:2d:bb:ad:99:5b:f7:6f:09:54:d8:d6:0f:b4:79: b2:0f:99:8a:a7:b5:fd:1f:46:79:e1:7a:e0:64:7b:9e:b0:84: f1:c6:4d:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdyDr9gJe+tSXqwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk N2NiYjg5YmEtNDNlMC00Y2U4LTk5YmMtMzI5OGE5MzZmYzdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIxg1wGyllcd/dZB3xIIVe4vMdqo645jnldw b/LAzk+uFxzaP2OyqpcTKllkItkY1RdbRh5Hr5v+vsB8ZPk2LJYRkBRdndH2Q94F oL4FOIUFSlP2mKxJcw1p4UHUZVUTTnGQiM6ZvbLJr0BVFH9nkXp2EYya7tpGOcPZ zKtqip0B2nuAPmQmPScT75rpAUJZMk94S+FR+N2Y4/nlq5Q4jCjaYkXiAq87G9d3 9iiTOkFkk4JrU2gBup5t9TIRVGxjGoW7HEfEDuFFDZ3Vd9Tyf9zadeR+kGdw1sc+ jNn9x4XVlxhZnCrI4waRd5My8ziK2G/YrKmRYOSvcB4KwSLFRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMRNihCB6ER5nXfRfdqEkRR0dfnDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNGUyOGJlZDgtYTRkYy0z Y2UwLWEyNTYtN2E1MGI3NzY1NWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGgOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI6EYNaQT0M/ZkkUpS9Gde+8TJZctJqoPfC8QV58VafHna9T2I19hJI7 Jc/rc79a43BZkSeXJSsyC5Wmjim8tH7/z+VGbZxZ8rw2A0qHLTH3aqRTu+hLAid9 LQ5BNnCWOW4KPb/SCD0HKpGXpqgJMVDRkedCq9pFy8erVqScMdalfspkPsj26IIY DEEcsEXwHtuJ5NjLy3ydJ1AjesJyJw/sgLyrjcAQ4OeWlYk40SZrBv4TkYCdHLZF YQjY6EY6r8ZQafZueZN1XfiCC4Kzh90+kAmlbTnNxuRFFR4tu62ZW/dvCVTY1g+0 ebIPmYqntf0fRnnheuBke56whPHGTQs= -----END CERTIFICATE-----Generated at Mon Sep 28 16:43:51 2026 by rpki-client