$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/509ef354-e4e1-396a-91d8-c29280fad097.roa File: 509ef354-e4e1-396a-91d8-c29280fad097.roa (raw, json) Hash identifier: 5zPdiqfi99M/la+KtsPyjtxC3YPrEV2MOKSaD8rzY9g= Subject key identifier: 2C:80:89:7D:F0:11:F9:03:17:34:DD:60:24:C8:7F:DB:51:59:B3:30 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584F46A7E83A040C15EB81B36F00 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/509ef354-e4e1-396a-91d8-c29280fad097.roa Signing time: Thu 24 Sep 2026 01:00:12 +0000 ROA not before: Thu 24 Sep 2026 01:00:12 +0000 ROA not after: Wed 23 Dec 2026 02:00:12 +0000 asID: 3356 IP address blocks: 170.30.224.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 03 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:46:a7:e8:3a:04:0c:15:eb:81:b3:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 24 01:00:12 2026 GMT Not After : Dec 23 02:00:12 2026 GMT Subject: CN=6436210e-57cf-474b-9d35-3ed4eecec31d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ba:5a:fa:0c:e2:1b:dc:26:10:1a:fc:e4:9d: 08:49:93:82:5a:c2:6b:de:63:54:17:a0:09:26:de: 0c:55:2b:6d:e6:40:38:7e:c8:37:ea:7a:34:ec:3a: d9:93:e1:8a:17:17:05:93:68:59:75:49:90:23:ca: 69:b1:70:e1:6f:b1:0b:ef:9d:27:b1:56:43:e8:24: 2e:1c:0d:8e:4e:ef:bf:7b:f9:63:65:51:a6:69:5f: e8:84:be:78:20:42:99:12:1e:7d:2f:eb:13:04:dc: 54:96:0a:9a:00:cb:3e:0f:58:fd:45:84:f3:b6:f1: 71:37:b1:88:88:0f:a2:3c:c2:85:fe:1d:a9:bd:9d: ec:5b:69:79:46:dc:77:e9:94:6a:1a:89:59:37:7e: 07:d2:e0:7d:10:fe:ad:3e:be:4e:3b:15:76:42:eb: 52:cf:83:b7:32:e4:c0:50:87:ce:bd:e9:43:02:86: c4:e3:7f:33:d1:ed:17:82:ae:77:d8:b2:1b:d1:52: 1e:92:02:ba:72:fc:78:92:f1:31:d8:d7:29:60:37: e9:b4:f3:28:25:b1:6c:9b:ee:5a:97:7d:93:d0:35: e3:fd:e2:b8:4f:fd:4e:90:01:05:7c:f2:49:2a:01: 3e:5a:4c:27:24:97:35:da:5c:a9:45:e7:8f:17:02: fe:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:80:89:7D:F0:11:F9:03:17:34:DD:60:24:C8:7F:DB:51:59:B3:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/509ef354-e4e1-396a-91d8-c29280fad097.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 170.30.224.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:ec:48:90:43:92:59:b3:a8:b4:0f:7b:1c:aa:c4:bc:74:16: 36:bf:d5:31:5d:35:fd:ed:08:65:52:05:01:ab:4d:83:04:ea: bb:13:19:c1:fc:fb:de:f4:55:67:83:5d:ab:99:2f:9c:67:99: 33:f8:76:ef:83:37:5b:77:96:f0:a7:e2:1b:79:1d:ad:2f:40: 7b:ab:2d:d0:bf:bf:a3:7e:9c:3f:ec:f9:e8:e0:47:c0:82:21: 6e:29:ca:2e:25:d0:cb:d0:7a:00:dc:5c:6e:51:ed:02:ea:95: 3c:d8:79:76:88:82:03:26:b4:17:5e:4d:1a:ed:b6:66:05:c3: f4:cd:b4:11:f3:ba:b8:a2:f3:59:c9:99:c1:02:e1:4a:61:df: d6:fb:ba:3f:cf:b9:2c:de:5a:53:94:c8:fe:4e:2d:2b:17:98: b5:c9:74:e6:0e:65:8a:81:69:ab:67:4f:bf:5a:5a:0e:43:19: 09:ca:df:f2:c6:89:6a:a2:e5:d2:87:fd:68:73:44:0c:c0:ea: 9b:b6:4d:a0:23:ae:f1:e0:db:a8:9e:f4:60:a3:de:c9:3a:16: 69:d8:22:eb:0f:7a:3f:5e:ee:ef:df:e5:96:2a:44:9f:5e:a2: 9c:ca:dc:17:1f:8c:51:35:06:12:1c:01:10:87:84:06:68:b0: 95:05:bf:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Gp+g6BAwV64GzbwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDkyNDAxMDAxMloXDTI2MTIyMzAyMDAxMlowLzEtMCsGA1UEAxMk NjQzNjIxMGUtNTdjZi00NzRiLTlkMzUtM2VkNGVlY2VjMzFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLpa+gziG9wmEBr85J0ISZOCWsJr3mNUF6AJ Jt4MVStt5kA4fsg36no07DrZk+GKFxcFk2hZdUmQI8ppsXDhb7EL750nsVZD6CQu HA2OTu+/e/ljZVGmaV/ohL54IEKZEh59L+sTBNxUlgqaAMs+D1j9RYTztvFxN7GI iA+iPMKF/h2pvZ3sW2l5Rtx36ZRqGolZN34H0uB9EP6tPr5OOxV2QutSz4O3MuTA UIfOvelDAobE438z0e0Xgq532LIb0VIekgK6cvx4kvEx2NcpYDfptPMoJbFsm+5a l32T0DXj/eK4T/1OkAEFfPJJKgE+WkwnJJc12lypReePFwL+OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCyAiX3wEfkDFzTdYCTIf9tRWbMwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNTA5ZWYzNTQtZTRlMS0z OTZhLTkxZDgtYzI5MjgwZmFkMDk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqh7gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJfsSJBDklmzqLQPexyqxLx0Fja/1TFdNf3tCGVSBQGrTYME6rsTGcH8 +970VWeDXauZL5xnmTP4du+DN1t3lvCn4ht5Ha0vQHurLdC/v6N+nD/s+ejgR8CC IW4pyi4l0MvQegDcXG5R7QLqlTzYeXaIggMmtBdeTRrttmYFw/TNtBHzurii81nJ mcEC4Uph39b7uj/PuSzeWlOUyP5OLSsXmLXJdOYOZYqBaatnT79aWg5DGQnK3/LG iWqi5dKH/WhzRAzA6pu2TaAjrvHg26ie9GCj3sk6FmnYIusPej9e7u/f5ZYqRJ9e opzK3BcfjFE1BhIcARCHhAZosJUFv/U= -----END CERTIFICATE-----Generated at Fri Oct 2 21:00:15 2026 by rpki-client