$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/7489fe09-85e9-3ad0-b155-12603c853b13.roa File: 7489fe09-85e9-3ad0-b155-12603c853b13.roa (raw, json) Hash identifier: kyypGOXjOk9x2BQebvqvIz2qy5/rLdAih8JbboeqRUw= Subject key identifier: 79:54:D4:CA:2A:57:60:31:41:3F:2F:E0:97:47:DC:B2:B3:A5:8A:F7 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584F49771A4997D5C6569F176700 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/7489fe09-85e9-3ad0-b155-12603c853b13.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 3360 IP address blocks: 192.238.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:77:1a:49:97:d5:c6:56:9f:17:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=dc5f0f1b-2fd9-4653-9eea-2e41a118fdf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d9:f9:80:64:94:60:69:35:ef:9b:c3:50:b5: 6c:f9:2d:8d:5e:e7:02:b7:e1:ab:ed:66:3b:70:f9: ef:1b:e1:fa:3d:7d:46:5c:37:4c:c9:f4:e9:ab:04: b2:05:27:ab:9f:ca:e2:91:3a:85:d5:4c:58:1a:cb: d4:7b:db:b1:4a:3a:51:bd:1a:e2:f5:bd:d9:f5:a4: be:b5:7f:d8:63:27:11:16:9f:94:db:a2:05:15:82: 35:93:04:ff:c6:a1:4a:49:dc:a5:7c:c1:d6:e5:fa: 9b:65:f6:13:a8:a9:48:8c:fb:7b:c1:0e:15:e2:e7: 78:83:a3:58:22:73:52:72:e1:77:cd:fd:87:6c:c9: d4:e0:95:e0:51:8d:c6:47:d9:3e:86:cc:4b:53:ce: d7:fd:be:e0:24:13:64:58:e7:e2:50:89:bb:a9:40: 3a:9c:1b:e0:a6:e7:e1:e2:c6:69:6f:a9:eb:03:a9: 50:d0:b4:c8:bb:79:c7:aa:53:db:b8:ef:54:64:87: a3:fe:38:0e:48:90:83:c0:10:ca:c1:f1:d6:75:be: 4a:d2:6c:0c:97:70:3b:f2:0e:7b:38:59:85:3b:f1: 0a:f8:bb:ad:9f:01:f5:30:a1:c4:12:49:de:b7:32: 9a:28:eb:b6:73:a0:2d:56:9e:80:f3:0f:ee:77:e7: 67:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:54:D4:CA:2A:57:60:31:41:3F:2F:E0:97:47:DC:B2:B3:A5:8A:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/7489fe09-85e9-3ad0-b155-12603c853b13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.238.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:1b:71:ea:11:10:63:1a:f8:58:36:39:48:f4:05:ca:d4:f3: 64:ef:84:0e:76:fc:f2:12:39:dc:be:5f:cb:9e:62:30:f9:fb: 15:5e:1f:ea:a7:e7:d1:bb:c8:14:d4:13:89:e6:2f:e4:7e:ad: 28:23:f4:8c:49:92:d7:eb:6f:4d:30:c9:9c:ad:15:6d:69:97: c9:48:35:e4:8d:4c:a8:75:7e:ab:5c:fa:bb:17:e4:8c:5f:4c: 33:ae:2f:3b:09:66:21:e6:61:ca:6e:d5:c5:65:b5:f0:07:38: 28:08:04:24:3a:15:ec:75:ef:90:85:3b:97:23:dc:08:a0:49: 31:f5:f0:46:7d:1d:d6:63:95:45:18:4c:cb:c9:4e:6a:e8:52: f7:ae:2a:c6:a4:d6:1c:ad:b4:f0:7d:32:79:39:c4:19:4e:ce: 64:46:a2:15:63:b3:52:56:d5:43:d7:f1:53:55:ee:c2:0d:a8: a8:d0:e3:2b:46:71:96:8a:58:2b:3a:a6:3b:0f:37:d1:ac:12: 5c:89:a3:0c:f2:a5:f7:9e:93:35:f9:15:2c:af:09:42:43:30: ec:1f:59:58:03:9b:b4:0a:f9:d2:61:57:ee:f6:51:3d:4a:80: 7f:fb:4c:9c:85:78:4a:03:52:d6:37:b0:38:80:d7:1a:85:27: 47:38:e6:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdxpJl9XGVp8XZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZGM1ZjBmMWItMmZkOS00NjUzLTllZWEtMmU0MWExMThmZGY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdn5gGSUYGk175vDULVs+S2NXucCt+Gr7WY7 cPnvG+H6PX1GXDdMyfTpqwSyBSern8rikTqF1UxYGsvUe9uxSjpRvRri9b3Z9aS+ tX/YYycRFp+U26IFFYI1kwT/xqFKSdylfMHW5fqbZfYTqKlIjPt7wQ4V4ud4g6NY InNScuF3zf2HbMnU4JXgUY3GR9k+hsxLU87X/b7gJBNkWOfiUIm7qUA6nBvgpufh 4sZpb6nrA6lQ0LTIu3nHqlPbuO9UZIej/jgOSJCDwBDKwfHWdb5K0mwMl3A78g57 OFmFO/EK+LutnwH1MKHEEknetzKaKOu2c6AtVp6A8w/ud+dnkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHlU1MoqV2AxQT8v4JdH3LKzpYr3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNzQ4OWZlMDktODVlOS0z YWQwLWIxNTUtMTI2MDNjODUzYjEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwO45MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH8bceoREGMa+Fg2OUj0BcrU82TvhA52/PISOdy+X8ueYjD5+xVeH+qn 59G7yBTUE4nmL+R+rSgj9IxJktfrb00wyZytFW1pl8lINeSNTKh1fqtc+rsX5Ixf TDOuLzsJZiHmYcpu1cVltfAHOCgIBCQ6Fex175CFO5cj3AigSTH18EZ9HdZjlUUY TMvJTmroUveuKsak1hyttPB9Mnk5xBlOzmRGohVjs1JW1UPX8VNV7sINqKjQ4ytG cZaKWCs6pjsPN9GsElyJowzypfeekzX5FSyvCUJDMOwfWVgDm7QK+dJhV+72UT1K gH/7TJyFeEoDUtY3sDiA1xqFJ0c45g0= -----END CERTIFICATE-----Generated at Mon Sep 28 21:16:48 2026 by rpki-client