$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8d17fbe1-0d1e-3079-9a7f-649932bf9c3f.roa File: 8d17fbe1-0d1e-3079-9a7f-649932bf9c3f.roa (raw, json) Hash identifier: 3bT7R5CZL8TocSPqJCXH9GTb1vfObXc3yNYy4zYc7yE= Subject key identifier: A0:68:FB:9E:BE:F2:FC:AD:2F:A2:83:DC:59:7B:56:7B:5B:B0:CB:06 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584F46A7E85ED976A01E647E6040 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8d17fbe1-0d1e-3079-9a7f-649932bf9c3f.roa Signing time: Thu 24 Sep 2026 01:00:12 +0000 ROA not before: Thu 24 Sep 2026 01:00:12 +0000 ROA not after: Wed 23 Dec 2026 02:00:12 +0000 asID: 203 IP address blocks: 170.30.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:46:a7:e8:5e:d9:76:a0:1e:64:7e:60:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 24 01:00:12 2026 GMT Not After : Dec 23 02:00:12 2026 GMT Subject: CN=2c8ab147-50ac-4f51-8366-0b9cd6f4e520 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ee:42:84:fb:d2:99:28:82:de:94:dd:5d:76: 86:fe:d3:c2:4d:45:40:18:6c:11:e6:cf:53:c4:b7: eb:ae:4d:3d:4b:b3:93:91:90:7e:fd:22:06:b1:d4: 61:18:11:84:28:6c:0f:14:67:41:d4:ac:ef:96:ce: 2f:6b:49:47:5b:3d:89:56:9c:b1:96:e8:f8:a8:7d: 52:36:97:25:99:6e:af:ed:73:5e:26:8b:a6:4e:90: ef:e6:6c:d7:de:77:f2:f6:9b:eb:b4:49:81:fa:32: 3a:86:7e:4f:42:63:f4:b0:ff:7b:f4:19:c7:3d:bb: a9:58:9b:4d:14:9a:3e:e9:57:6f:24:a7:b0:dd:9c: d5:d6:b7:43:51:7b:ed:2e:74:c6:c2:84:5c:14:72: 30:d2:ac:2b:43:91:6b:93:50:d0:c6:96:d2:14:5c: ba:b2:85:cd:df:4c:16:db:03:9f:8a:c4:51:91:88: b4:05:ce:b2:1e:58:bf:ae:c4:ad:2a:3b:af:45:29: b5:16:8e:d9:f5:2f:29:aa:6d:2f:5e:fe:47:12:12: 8b:eb:0e:e6:7d:83:6c:aa:0f:7c:41:cd:24:04:8d: 10:bc:4f:3a:79:b5:9c:98:cb:ba:4b:a3:f5:d2:39: e4:40:89:fd:a7:60:3d:57:14:01:12:64:e4:1f:0c: 06:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:68:FB:9E:BE:F2:FC:AD:2F:A2:83:DC:59:7B:56:7B:5B:B0:CB:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8d17fbe1-0d1e-3079-9a7f-649932bf9c3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 170.30.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:4c:66:94:6d:ae:bb:52:40:c7:0a:46:40:da:da:3c:0d:b8: 13:cb:06:cc:3e:4a:04:6f:c3:ae:18:a6:b4:7a:eb:7a:90:2d: 7e:40:47:c0:05:a7:ef:73:b8:05:a3:10:be:90:40:27:75:f6: 2d:a0:4c:43:f2:4e:cb:a1:3a:05:a8:03:d9:39:a5:8d:2c:f2: cd:71:a9:42:57:ef:4a:7a:ea:5c:ae:86:23:04:62:ca:8d:26: 58:43:49:34:f9:8a:c9:66:4c:ae:8f:ab:94:ab:a4:ce:b1:42: 18:ec:d9:31:43:f3:15:74:a6:51:30:d3:cb:ee:d9:d3:b8:b7: 0c:2f:6e:e9:dd:12:1c:ca:d4:a1:fe:be:28:a8:72:44:2a:51: 5a:5b:75:e3:9c:42:aa:7f:1b:f1:9c:e3:4d:18:2d:3f:b6:f9: f2:83:25:ba:e5:fb:03:09:58:19:e0:aa:04:11:af:45:92:72: bb:ac:82:f4:75:8f:a0:ef:f1:7e:22:22:5f:a6:52:e0:a6:ad: 2a:ea:a6:ba:b7:ab:03:7e:c2:e9:0d:87:6b:00:54:80:1d:67: ce:07:75:b9:34:b8:37:c5:f1:e4:79:59:5b:bd:af:01:1d:97: 5d:70:7f:78:2d:f8:e8:9a:22:95:f5:85:8a:ce:a6:07:15:ae: ad:2e:cd:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Gp+he2XagHmR+YEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDkyNDAxMDAxMloXDTI2MTIyMzAyMDAxMlowLzEtMCsGA1UEAxMk MmM4YWIxNDctNTBhYy00ZjUxLTgzNjYtMGI5Y2Q2ZjRlNTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlO5ChPvSmSiC3pTdXXaG/tPCTUVAGGwR5s9T xLfrrk09S7OTkZB+/SIGsdRhGBGEKGwPFGdB1Kzvls4va0lHWz2JVpyxluj4qH1S NpclmW6v7XNeJoumTpDv5mzX3nfy9pvrtEmB+jI6hn5PQmP0sP979BnHPbupWJtN FJo+6VdvJKew3ZzV1rdDUXvtLnTGwoRcFHIw0qwrQ5Frk1DQxpbSFFy6soXN30wW 2wOfisRRkYi0Bc6yHli/rsStKjuvRSm1Fo7Z9S8pqm0vXv5HEhKL6w7mfYNsqg98 Qc0kBI0QvE86ebWcmMu6S6P10jnkQIn9p2A9VxQBEmTkHwwG+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKBo+56+8vytL6KD3Fl7VntbsMsGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvOGQxN2ZiZTEtMGQxZS0z MDc5LTlhN2YtNjQ5OTMyYmY5YzNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqh7wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGFMZpRtrrtSQMcKRkDa2jwNuBPLBsw+SgRvw64YprR663qQLX5AR8AF p+9zuAWjEL6QQCd19i2gTEPyTsuhOgWoA9k5pY0s8s1xqUJX70p66lyuhiMEYsqN JlhDSTT5islmTK6Pq5SrpM6xQhjs2TFD8xV0plEw08vu2dO4twwvbundEhzK1KH+ viiockQqUVpbdeOcQqp/G/Gc400YLT+2+fKDJbrl+wMJWBngqgQRr0WScrusgvR1 j6Dv8X4iIl+mUuCmrSrqprq3qwN+wukNh2sAVIAdZ84Hdbk0uDfF8eR5WVu9rwEd l11wf3gt+OiaIpX1hYrOpgcVrq0uzaM= -----END CERTIFICATE-----Generated at Wed Sep 30 19:46:59 2026 by rpki-client