$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/7af485d2-1411-389c-a251-d3d163a361e3.roa File: 7af485d2-1411-389c-a251-d3d163a361e3.roa (raw, json) Hash identifier: OBZkKNY+akWXbrs2Il+qrpipaS9QXEQC5+I+HE89Fo0= Subject key identifier: 4D:3C:45:EB:FE:EF:FD:2A:34:85:53:2F:DE:69:FD:AC:81:80:91:96 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584F49761F5C3675ED6F047CC340 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/7af485d2-1411-389c-a251-d3d163a361e3.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 203 IP address blocks: 192.57.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:1f:5c:36:75:ed:6f:04:7c:c3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3c69700b-d529-4070-92f2-1f91d67f48ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2b:8e:55:4f:0c:e5:5d:cb:4f:1c:b8:f0:e9: 77:4b:ca:46:a4:22:5e:6b:85:c1:ec:98:37:fd:b6: 98:bd:df:0c:ab:0a:64:22:5d:3c:cc:7c:4d:60:87: 9f:07:e0:89:07:ba:d0:50:49:7f:8d:57:df:a6:56: 95:67:28:fb:11:74:ac:90:39:74:77:36:5c:11:e9: 58:d1:b8:00:64:a7:3c:c7:44:28:c5:1d:ac:6a:6c: 34:1f:a4:ac:63:4c:17:c2:f9:b9:e7:d5:d8:75:a6: de:4e:87:2e:8a:45:4c:d3:33:5f:81:95:6b:ee:0f: e5:c8:f8:33:91:27:75:5e:da:a4:3e:08:09:e5:08: e0:d1:19:66:d5:e1:e7:89:be:67:43:37:e2:46:cf: 96:fd:fb:f8:7a:67:c8:1c:01:22:95:d6:b0:3f:ba: 7e:e8:e8:be:a7:b9:0d:01:2d:6a:13:1f:0d:51:0c: 2e:d7:c2:69:13:95:d0:39:e0:3d:86:0b:09:e1:b0: 5c:45:16:77:ae:be:6e:e1:c8:cb:f2:4e:cd:d6:20: 02:5d:00:a2:01:42:ab:48:5d:08:d1:14:3e:d6:e9: fa:39:55:ee:46:b6:e9:9f:b1:05:93:46:19:3e:70: 71:37:a6:cf:f4:80:58:77:ce:30:67:5d:44:11:23: a4:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:3C:45:EB:FE:EF:FD:2A:34:85:53:2F:DE:69:FD:AC:81:80:91:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/7af485d2-1411-389c-a251-d3d163a361e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.57.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:9c:c5:15:73:23:78:b7:4e:8a:51:0d:13:cc:86:19:b8:30: 1c:e6:72:ce:64:05:9f:8f:f1:2f:dc:64:b2:67:60:93:38:19: 6f:eb:e0:8e:c5:6c:db:d1:c1:4a:95:ab:a3:38:2b:27:92:78: 93:26:00:e1:53:92:3f:94:c2:dd:c6:c1:91:ee:46:c9:57:46: d4:1b:6e:c1:b1:5d:66:ae:dd:6d:b8:bd:ee:31:91:b4:ff:7c: d4:11:c6:26:84:ed:d6:09:4b:38:a7:7d:c6:b6:b5:c7:2f:cb: c1:47:d7:be:9e:30:90:ee:50:44:4b:fe:4b:d0:32:71:56:69: 2c:e0:e0:d8:04:b3:da:df:ae:2a:e7:cc:5e:56:48:82:8f:44: 4d:dc:34:d8:d1:f4:01:ea:12:0e:11:b0:bb:6c:ef:71:84:53: dc:70:07:48:c5:f1:53:4f:8c:9a:33:b9:9c:9c:d4:66:97:7a: 6c:f1:1e:53:4f:1c:36:2d:70:1f:8e:5d:21:99:92:ca:7f:4e: 61:3e:d4:a9:3b:0b:ec:45:1f:69:53:49:d9:f9:7c:01:f6:74: 1b:6f:76:f4:dc:fb:25:c7:0b:1a:74:c6:03:c2:64:a7:28:3a: b4:d3:cc:5f:c6:af:90:8c:0a:d8:d1:cd:8a:98:7d:6f:38:d8: 9c:77:5b:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jdh9cNnXtbwR8w0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk M2M2OTcwMGItZDUyOS00MDcwLTkyZjItMWY5MWQ2N2Y0OGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSuOVU8M5V3LTxy48Ol3S8pGpCJea4XB7Jg3 /baYvd8MqwpkIl08zHxNYIefB+CJB7rQUEl/jVffplaVZyj7EXSskDl0dzZcEelY 0bgAZKc8x0QoxR2samw0H6SsY0wXwvm559XYdabeTocuikVM0zNfgZVr7g/lyPgz kSd1XtqkPggJ5Qjg0Rlm1eHnib5nQzfiRs+W/fv4emfIHAEildawP7p+6Oi+p7kN AS1qEx8NUQwu18JpE5XQOeA9hgsJ4bBcRRZ3rr5u4cjL8k7N1iACXQCiAUKrSF0I 0RQ+1un6OVXuRrbpn7EFk0YZPnBxN6bP9IBYd84wZ11EESOkCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE08Rev+7/0qNIVTL95p/ayBgJGWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvN2FmNDg1ZDItMTQxMS0z ODljLWEyNTEtZDNkMTYzYTM2MWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwDmYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGecxRVzI3i3TopRDRPMhhm4MBzmcs5kBZ+P8S/cZLJnYJM4GW/r4I7F bNvRwUqVq6M4KyeSeJMmAOFTkj+Uwt3GwZHuRslXRtQbbsGxXWau3W24ve4xkbT/ fNQRxiaE7dYJSzinfca2tccvy8FH176eMJDuUERL/kvQMnFWaSzg4NgEs9rfrirn zF5WSIKPRE3cNNjR9AHqEg4RsLts73GEU9xwB0jF8VNPjJozuZyc1GaXemzxHlNP HDYtcB+OXSGZksp/TmE+1Kk7C+xFH2lTSdn5fAH2dBtvdvTc+yXHCxp0xgPCZKco OrTTzF/Gr5CMCtjRzYqYfW842Jx3W5o= -----END CERTIFICATE-----Generated at Mon Oct 12 04:54:44 2026 by rpki-client