$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/643b9ccb-ad14-3b04-8e99-7af9f6b7d00c.roa File: 643b9ccb-ad14-3b04-8e99-7af9f6b7d00c.roa (raw, json) Hash identifier: H2V8cPyk+BStRNZWDvM22U4byJ+BXXCRT15RQs7LCr0= Subject key identifier: DB:71:7E:A5:34:3A:84:C7:F9:41:2A:7D:CD:A5:DB:02:0B:12:F9:E6 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584F2957BDE3C906D90AC46FBD80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/643b9ccb-ad14-3b04-8e99-7af9f6b7d00c.roa Signing time: Sun 13 Sep 2026 13:00:11 +0000 ROA not before: Sun 13 Sep 2026 13:00:11 +0000 ROA not after: Sat 12 Dec 2026 14:00:11 +0000 asID: 3360 IP address blocks: 15.176.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:29:57:bd:e3:c9:06:d9:0a:c4:6f:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 13 13:00:11 2026 GMT Not After : Dec 12 14:00:11 2026 GMT Subject: CN=13e3fde2-15b8-4a7e-8e85-cc1e6d6ea276 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3a:ea:e9:4c:81:16:f0:73:94:7b:d2:6e:a7: 2d:ed:75:73:1a:e6:31:d5:74:9b:56:57:6f:51:be: 54:c9:c3:44:04:53:2b:f7:4e:47:29:67:9c:df:bb: a4:d9:1e:c2:ab:af:fb:db:42:ab:d3:ab:6e:5c:05: 92:9b:5a:25:ea:b8:64:a1:d3:88:e3:8d:91:a1:bb: 26:de:3c:60:6f:fd:00:bc:a7:e2:20:33:04:e4:f7: 0a:42:1b:a9:64:c0:b2:29:f0:fc:ab:05:16:cc:45: 3d:7b:03:9a:98:d3:27:48:34:32:db:22:62:84:fc: c0:93:f0:81:2a:73:08:24:1b:43:80:69:0c:2a:26: 6c:5a:91:f9:66:d8:09:8a:82:53:bd:3b:28:0f:43: 3e:ec:e4:00:ad:36:2e:19:8e:24:8a:e5:d3:52:df: 0a:e1:46:f4:51:4f:29:79:f7:f9:70:ab:7c:c5:a6: 94:2e:9e:8c:18:b9:75:10:ae:d8:13:96:fb:2c:60: 77:ff:60:65:5d:8c:16:e9:33:0a:a2:79:35:87:c0: 07:8a:ef:b1:78:68:dc:f6:d8:ab:70:1f:d6:2c:82: ad:f5:b1:50:38:7a:27:c4:d5:c0:cf:5a:e3:70:6f: fd:9a:b3:06:85:5a:1f:9e:d1:ed:5d:6f:de:9c:24: 1c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:71:7E:A5:34:3A:84:C7:F9:41:2A:7D:CD:A5:DB:02:0B:12:F9:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/643b9ccb-ad14-3b04-8e99-7af9f6b7d00c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 15.176.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:e4:88:6e:b9:3c:4a:50:fc:8e:0a:fc:e8:45:53:08:0c:48: 8e:32:6a:90:1c:3b:7d:10:79:d0:17:a3:bc:fe:63:ec:46:af: e9:54:4c:d7:39:47:eb:2b:3a:f4:47:f0:35:8f:6b:68:d1:fc: 4a:95:8b:e2:52:d6:31:15:1a:77:03:02:a6:11:96:88:27:26: 5a:5d:76:74:25:fc:8e:50:de:9a:66:58:60:c9:b3:75:79:93: 18:40:b7:8a:ed:d3:9f:d9:e1:5f:5e:49:83:46:86:e8:92:e9: 27:49:f9:b9:96:2f:97:15:0c:90:4d:f0:3d:12:ed:03:2e:54: 4c:c7:13:16:22:04:39:48:98:5b:43:55:71:03:09:cd:db:59: 9b:14:3a:b2:c8:a2:54:92:d0:45:d8:51:67:38:b5:8c:3a:87: 17:13:60:fb:74:38:a0:a5:ca:f3:37:d3:cb:6e:d4:92:9f:b7: 14:10:c5:0f:6e:d5:02:ac:df:9e:31:a6:e5:ad:c9:ee:9c:9e: 72:04:76:fd:5f:10:03:98:1c:42:65:e8:b4:36:c2:d9:38:02: aa:b9:4c:89:30:4f:3a:49:1a:8e:49:f0:fd:a9:48:3f:c6:cd: b0:11:eb:6f:26:94:e7:a3:5c:09:33:cb:e5:2c:24:5a:e5:ae: a9:ad:6c:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8pV73jyQbZCsRvvYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk MTNlM2ZkZTItMTViOC00YTdlLThlODUtY2MxZTZkNmVhMjc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDrq6UyBFvBzlHvSbqct7XVzGuYx1XSbVldv Ub5UycNEBFMr905HKWec37uk2R7Cq6/720Kr06tuXAWSm1ol6rhkodOI442Robsm 3jxgb/0AvKfiIDME5PcKQhupZMCyKfD8qwUWzEU9ewOamNMnSDQy2yJihPzAk/CB KnMIJBtDgGkMKiZsWpH5ZtgJioJTvTsoD0M+7OQArTYuGY4kiuXTUt8K4Ub0UU8p eff5cKt8xaaULp6MGLl1EK7YE5b7LGB3/2BlXYwW6TMKonk1h8AHiu+xeGjc9tir cB/WLIKt9bFQOHonxNXAz1rjcG/9mrMGhVofntHtXW/enCQcVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNtxfqU0OoTH+UEqfc2l2wILEvnmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNjQzYjljY2ItYWQxNC0z YjA0LThlOTktN2FmOWY2YjdkMDBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQED7BwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAjkiG65PEpQ/I4K/OhFUwgMSI4yapAcO30QedAXo7z+Y+xGr+lUTNc5 R+srOvRH8DWPa2jR/EqVi+JS1jEVGncDAqYRlognJlpddnQl/I5Q3ppmWGDJs3V5 kxhAt4rt05/Z4V9eSYNGhuiS6SdJ+bmWL5cVDJBN8D0S7QMuVEzHExYiBDlImFtD VXEDCc3bWZsUOrLIolSS0EXYUWc4tYw6hxcTYPt0OKClyvM308tu1JKftxQQxQ9u 1QKs354xpuWtye6cnnIEdv1fEAOYHEJl6LQ2wtk4Aqq5TIkwTzpJGo5J8P2pSD/G zbAR628mlOejXAkzy+UsJFrlrqmtbOg= -----END CERTIFICATE-----Generated at Tue Sep 29 13:07:57 2026 by rpki-client