$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/90025db8-de5b-3866-832c-c258e6aedb26.roa File: 90025db8-de5b-3866-832c-c258e6aedb26.roa (raw, json) Hash identifier: ZuFKOY3kS1A6bAZhP8tBLlp/CJM+xzKxcMJpYE7HYKo= Subject key identifier: 10:68:BE:29:72:63:19:E1:9A:1F:33:3B:FB:34:B1:BC:29:F6:D0:53 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584F2ABD1C3F6A7AD3D1CEC59280 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/90025db8-de5b-3866-832c-c258e6aedb26.roa Signing time: Mon 14 Sep 2026 01:00:12 +0000 ROA not before: Mon 14 Sep 2026 01:00:12 +0000 ROA not after: Sun 13 Dec 2026 02:00:12 +0000 asID: 3360 IP address blocks: 206.164.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2a:bd:1c:3f:6a:7a:d3:d1:ce:c5:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 14 01:00:12 2026 GMT Not After : Dec 13 02:00:12 2026 GMT Subject: CN=70e7c455-0958-4dec-8c88-65954e93b8e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:a3:96:d3:90:9d:62:0c:de:30:f2:a5:a8:f0: 4c:9f:8a:dd:86:c1:91:e6:f4:88:54:05:a0:04:f9: 11:c9:64:6e:1f:d8:23:e7:be:81:ca:99:3f:8b:de: b0:be:e9:18:a4:38:34:bb:d6:22:63:2e:a0:05:22: 0f:41:84:b3:6d:f0:f9:45:8b:a8:ad:3e:bb:b7:5f: a5:49:11:4e:ad:6f:0c:df:58:a1:d0:ec:6c:e3:13: 30:3f:ad:cd:0b:86:78:a9:0d:51:10:42:1b:8b:71: b6:74:5b:1d:d1:37:a0:7c:24:ae:d7:82:bf:9a:8d: 6a:ef:6a:84:2a:e0:b7:0f:3a:83:3e:34:12:b3:20: 45:87:a3:ef:15:0d:3a:d5:bf:75:ad:e4:bf:d1:3b: fe:28:6a:6a:8d:a4:30:37:de:86:20:6a:35:55:fa: e5:e0:1a:09:55:45:3c:d1:4d:a2:ab:fe:29:aa:4e: a9:5c:96:ee:38:88:fc:36:c7:34:23:ad:5e:38:58: 5a:62:2c:69:7e:08:68:9b:9a:f5:af:32:a3:8b:fc: 45:78:c4:58:97:25:df:10:a0:63:43:79:bc:54:71: 02:f2:38:f1:c1:8e:6a:7a:22:cb:53:d0:56:37:1d: e1:ca:de:ce:15:41:f2:86:59:7c:d3:0f:15:eb:9b: e2:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:68:BE:29:72:63:19:E1:9A:1F:33:3B:FB:34:B1:BC:29:F6:D0:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/90025db8-de5b-3866-832c-c258e6aedb26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 206.164.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:e4:98:04:91:b5:db:35:43:8a:0f:ae:b8:c2:c4:0b:16:ec: 8d:1c:7a:dc:97:5c:2f:0e:d2:57:a5:82:db:9a:30:79:48:8e: a4:3e:6a:69:3a:7f:36:bc:51:b1:77:44:cd:86:f1:e2:8a:55: 83:2e:28:d9:e7:7a:78:5f:a7:96:84:71:ce:fe:f6:11:e0:fa: 10:39:fe:7c:6a:de:cb:4d:2d:c0:37:3e:f9:4a:78:ab:ff:d3: 38:9b:61:b6:fd:e6:95:29:c0:fe:ce:64:62:72:89:12:36:f3: 28:d0:58:1a:30:c0:42:43:f7:b4:86:f2:8f:db:29:23:f5:a1: f0:cf:4b:10:71:dd:f7:c4:2b:a0:76:94:33:f7:bb:a9:a6:d5: 01:55:1f:4a:86:df:09:37:ef:a5:9e:3f:55:09:d7:68:67:15: 09:ee:8c:24:87:4d:f2:ec:7e:3a:a9:de:1a:7f:29:e0:c6:8e: 16:c4:37:a6:67:55:39:27:2f:c8:95:9c:3b:d0:8b:17:fd:e8: 15:d5:3a:82:bc:89:6d:d5:e5:e3:af:1b:38:a8:92:4d:b8:76: 72:f3:53:c4:e3:a3:90:52:87:0e:c5:59:b0:f1:e8:07:1a:56: bf:a6:eb:3a:f9:ca:34:65:b3:28:a1:c7:dc:81:bc:b3:a1:2d: ec:af:2b:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8qvRw/anrT0c7FkoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDkxNDAxMDAxMloXDTI2MTIxMzAyMDAxMlowLzEtMCsGA1UEAxMk NzBlN2M0NTUtMDk1OC00ZGVjLThjODgtNjU5NTRlOTNiOGUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6OW05CdYgzeMPKlqPBMn4rdhsGR5vSIVAWg BPkRyWRuH9gj576Bypk/i96wvukYpDg0u9YiYy6gBSIPQYSzbfD5RYuorT67t1+l SRFOrW8M31ih0Oxs4xMwP63NC4Z4qQ1REEIbi3G2dFsd0TegfCSu14K/mo1q72qE KuC3DzqDPjQSsyBFh6PvFQ061b91reS/0Tv+KGpqjaQwN96GIGo1Vfrl4BoJVUU8 0U2iq/4pqk6pXJbuOIj8Nsc0I61eOFhaYixpfghom5r1rzKji/xFeMRYlyXfEKBj Q3m8VHEC8jjxwY5qeiLLU9BWNx3hyt7OFUHyhll80w8V65viEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBBovilyYxnhmh8zO/s0sbwp9tBTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvOTAwMjVkYjgtZGU1Yi0z ODY2LTgzMmMtYzI1OGU2YWVkYjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzqT4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjkmASRtds1Q4oPrrjCxAsW7I0cetyXXC8O0lelgtuaMHlIjqQ+amk6 fza8UbF3RM2G8eKKVYMuKNnnenhfp5aEcc7+9hHg+hA5/nxq3stNLcA3PvlKeKv/ 0zibYbb95pUpwP7OZGJyiRI28yjQWBowwEJD97SG8o/bKSP1ofDPSxBx3ffEK6B2 lDP3u6mm1QFVH0qG3wk376WeP1UJ12hnFQnujCSHTfLsfjqp3hp/KeDGjhbEN6Zn VTknL8iVnDvQixf96BXVOoK8iW3V5eOvGziokk24dnLzU8Tjo5BShw7FWbDx6Aca Vr+m6zr5yjRlsyihx9yBvLOhLeyvK7U= -----END CERTIFICATE-----Generated at Mon Sep 28 11:08:07 2026 by rpki-client