$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/941c338c-213e-3e51-9330-4013ab937b53.roa File: 941c338c-213e-3e51-9330-4013ab937b53.roa (raw, json) Hash identifier: QEXM6XgYFr+dDWgOX+DHRR+dzby90WvZyJbT6o1qeN0= Subject key identifier: B5:A2:99:73:D4:95:AD:76:E1:6A:33:65:BD:4D:1D:34:8D:38:9A:84 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584F4976165658EB4C5B9CE6F080 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/941c338c-213e-3e51-9330-4013ab937b53.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 202 IP address blocks: 192.57.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:16:56:58:eb:4c:5b:9c:e6:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ca247905-5251-4006-94cb-0ca3da79f9e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c7:84:e4:44:14:89:c9:45:bb:03:d5:53:29: 1e:ca:5d:e8:b0:34:2a:55:49:c6:10:e2:ba:bb:78: 4c:a1:b7:37:cd:96:ab:69:29:69:f7:19:3d:da:f1: 03:ec:08:2d:e3:2e:ee:55:30:84:36:9a:49:da:45: 6e:f4:dd:fa:14:f2:80:6f:c8:fd:a4:1b:ec:a1:ad: e2:61:37:53:e1:74:bc:2a:c0:c8:62:c7:51:51:a0: 3b:7e:0f:68:46:8d:b2:7b:fb:e9:5b:65:a8:09:ab: 8b:e9:20:87:c9:57:96:7c:62:eb:46:25:1e:d1:ef: d0:29:88:ef:99:5e:26:6d:e5:65:6b:30:58:cd:7a: 38:d7:98:5f:5d:56:6f:5f:37:c9:bc:04:3d:7b:ea: 40:bf:de:0f:91:0e:f2:d0:a3:5a:ae:50:8f:ff:31: 1a:75:70:93:e3:a0:b3:3d:32:bf:d6:2b:5b:1a:9c: 4c:e0:fc:3f:e8:f9:af:39:bb:b5:30:c2:59:e2:6b: d1:71:7b:2d:11:10:3d:7a:bb:cc:6b:1a:fc:b7:96: 9e:0f:be:6c:37:5f:46:08:c9:ae:a7:44:70:79:aa: eb:69:84:b8:b0:c0:59:b6:db:de:8e:75:86:a9:50: 0d:f6:00:dd:13:bf:8f:f8:a3:dc:90:5e:b4:d5:e7: c3:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:A2:99:73:D4:95:AD:76:E1:6A:33:65:BD:4D:1D:34:8D:38:9A:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/941c338c-213e-3e51-9330-4013ab937b53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.57.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:c5:16:69:47:a9:3d:4e:42:52:8d:69:73:f6:3b:4c:72:ec: 24:a5:6a:e4:f6:29:12:e6:3c:6f:1c:17:89:16:88:36:28:dd: 6d:04:34:37:d5:a8:05:ad:5e:a7:2e:5e:e9:c4:5f:8e:e2:d3: c4:29:3a:05:37:2c:e7:99:d3:9d:e5:fb:1c:0c:95:a9:1b:93: 37:c1:96:f9:d0:78:bb:9e:ff:88:d2:25:9d:82:f9:81:b1:a2: bb:1e:14:1b:15:c4:8f:b8:5c:77:1a:cd:76:d3:e5:99:ac:2c: e8:8b:0f:ab:91:e4:4d:34:4c:5c:cb:ba:ae:a3:5d:c5:82:3b: de:91:51:1c:b8:05:d2:c8:a3:68:c6:c9:d1:ae:3a:78:09:16: 82:5e:32:89:70:eb:cd:3c:4c:ca:19:00:ad:c0:01:1b:da:82: c0:78:92:d5:ff:57:d9:c9:56:92:f8:ab:b2:ea:9c:e1:f0:38: 52:44:1e:06:53:8e:1c:d6:c8:16:18:2c:24:51:cf:76:62:46: 5f:1d:56:20:d8:bd:be:8e:89:8c:55:73:97:61:b1:f9:19:99: 1f:f0:89:4b:9a:40:07:bc:0f:cc:5e:5d:70:5b:cd:71:9f:ba: 68:1b:c4:e4:fa:ec:9d:05:41:1d:b4:fc:86:89:e0:29:0f:38: 06:06:a2:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdhZWWOtMW5zm8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Y2EyNDc5MDUtNTI1MS00MDA2LTk0Y2ItMGNhM2RhNzlmOWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8eE5EQUiclFuwPVUykeyl3osDQqVUnGEOK6 u3hMobc3zZaraSlp9xk92vED7Agt4y7uVTCENppJ2kVu9N36FPKAb8j9pBvsoa3i YTdT4XS8KsDIYsdRUaA7fg9oRo2ye/vpW2WoCauL6SCHyVeWfGLrRiUe0e/QKYjv mV4mbeVlazBYzXo415hfXVZvXzfJvAQ9e+pAv94PkQ7y0KNarlCP/zEadXCT46Cz PTK/1itbGpxM4Pw/6PmvObu1MMJZ4mvRcXstERA9ervMaxr8t5aeD75sN19GCMmu p0RwearraYS4sMBZttvejnWGqVAN9gDdE7+P+KPckF601efD/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLWimXPUla124WozZb1NHTSNOJqEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvOTQxYzMzOGMtMjEzZS0z ZTUxLTkzMzAtNDAxM2FiOTM3YjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDl1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABLFFmlHqT1OQlKNaXP2O0xy7CSlauT2KRLmPG8cF4kWiDYo3W0ENDfV qAWtXqcuXunEX47i08QpOgU3LOeZ053l+xwMlakbkzfBlvnQeLue/4jSJZ2C+YGx orseFBsVxI+4XHcazXbT5ZmsLOiLD6uR5E00TFzLuq6jXcWCO96RURy4BdLIo2jG ydGuOngJFoJeMolw6808TMoZAK3AARvagsB4ktX/V9nJVpL4q7LqnOHwOFJEHgZT jhzWyBYYLCRRz3ZiRl8dViDYvb6OiYxVc5dhsfkZmR/wiUuaQAe8D8xeXXBbzXGf umgbxOT67J0FQR20/IaJ4CkPOAYGokY= -----END CERTIFICATE-----Generated at Tue Oct 13 08:16:34 2026 by rpki-client