$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/98d85f83-4e00-3430-9a7c-520b0e5fac89.roa File: 98d85f83-4e00-3430-9a7c-520b0e5fac89.roa (raw, json) Hash identifier: QhvYVX5p2CyhXD8X36Vh3JGrg1Va/YpNcuLyIDElEIE= Subject key identifier: 4E:56:2E:D2:08:62:5C:CB:60:F9:58:52:F6:76:B2:BD:EC:65:58:00 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584F4976164AF85A35A25BD6CE00 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/98d85f83-4e00-3430-9a7c-520b0e5fac89.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 3356 IP address blocks: 192.57.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:16:4a:f8:5a:35:a2:5b:d6:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=96edd5dc-50a4-4527-93ce-a5065bac524a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:00:ce:ff:d2:38:c9:c7:b4:17:cb:21:cf:6e: 70:b0:ce:4e:b1:2e:5a:dc:88:d3:ed:0f:f4:7c:04: 9f:7b:10:11:4f:74:e8:8c:ae:8c:43:e9:f1:07:b1: a6:10:a3:5e:42:2d:0e:44:f1:bc:fd:bb:22:ac:7d: 15:bc:88:d8:8d:ab:3c:f0:0e:7c:a6:c7:00:7f:b1: d5:82:f5:bc:97:da:7a:38:0b:d5:40:ea:68:a7:67: 7f:3b:8a:ef:fb:35:43:1c:b1:b5:94:29:ba:cc:a1: c2:26:85:42:6e:8b:6e:37:80:4b:e6:f3:01:c6:f9: 5e:0e:cd:6a:7c:44:39:74:6e:8a:7b:f5:ad:ba:5b: c9:52:22:b9:c0:ea:6d:d5:1a:5e:82:ad:89:99:2b: 64:b6:68:a4:f4:ce:81:b0:cb:85:4e:4f:71:2e:d2: 57:4b:7a:fa:f4:b6:bf:3d:91:0b:57:c0:38:c9:e3: 32:a1:bd:e9:9b:c5:c0:53:f4:88:5c:3e:8d:af:7f: eb:e5:84:f2:c9:6b:ae:6d:90:88:07:e1:2e:a6:9b: bc:76:4b:09:f7:b5:25:a6:df:83:24:50:59:6c:98: 58:dd:3f:d6:c6:8a:6c:98:7a:e5:02:fe:bc:4e:53: 4c:45:0c:e2:df:53:0a:8c:a2:a9:c6:82:41:be:55: a9:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:56:2E:D2:08:62:5C:CB:60:F9:58:52:F6:76:B2:BD:EC:65:58:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/98d85f83-4e00-3430-9a7c-520b0e5fac89.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.57.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:76:25:f4:28:83:12:25:06:bb:41:2b:2e:ec:67:41:ee:a6: ff:87:77:6e:91:ec:60:81:19:3f:10:c6:ce:b0:3b:2b:39:50: aa:e8:46:9a:75:21:16:ae:9b:eb:1a:ff:85:c8:ef:85:ee:65: 5f:47:c9:d3:b7:5c:fa:d6:ff:35:98:92:e1:27:68:81:c8:2e: 6c:ea:ce:a6:0b:3c:9c:d2:46:2f:4c:40:66:6e:84:67:05:a4: 61:c2:10:7b:29:6f:47:8a:c9:81:23:42:27:08:0e:33:5b:76: 0b:c7:62:b2:4a:28:0e:7d:ef:f6:7b:e7:7f:1e:a1:3b:11:a2: 49:17:c2:cc:44:f2:69:9d:6d:24:34:4b:88:2e:72:e2:0a:62: c0:ce:4a:59:c9:5b:4b:7b:da:e0:2d:b2:49:9f:74:97:d9:39: 12:a3:3f:12:3e:94:20:5d:62:0f:84:87:94:f6:b4:56:34:cd: 84:a2:f3:1b:37:f8:b0:d9:d2:0e:a0:8c:6b:d9:53:61:03:2a: b0:a9:34:0f:f6:fe:ad:9a:1a:52:67:83:48:04:2f:42:e2:96: 28:ef:72:69:69:d0:61:be:84:91:34:6c:11:2b:a8:5f:2c:dd: 18:7c:b0:58:2c:51:67:ac:00:0d:fa:1c:0e:99:a5:b9:2f:e5: 77:e7:cb:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdhZK+Fo1olvWzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OTZlZGQ1ZGMtNTBhNC00NTI3LTkzY2UtYTUwNjViYWM1MjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgDO/9I4yce0F8shz25wsM5OsS5a3IjT7Q/0 fASfexART3TojK6MQ+nxB7GmEKNeQi0ORPG8/bsirH0VvIjYjas88A58pscAf7HV gvW8l9p6OAvVQOpop2d/O4rv+zVDHLG1lCm6zKHCJoVCbotuN4BL5vMBxvleDs1q fEQ5dG6Ke/WtulvJUiK5wOpt1Rpegq2JmStktmik9M6BsMuFTk9xLtJXS3r69La/ PZELV8A4yeMyob3pm8XAU/SIXD6Nr3/r5YTyyWuubZCIB+Euppu8dksJ97Ulpt+D JFBZbJhY3T/WxopsmHrlAv68TlNMRQzi31MKjKKpxoJBvlWpvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE5WLtIIYlzLYPlYUvZ2sr3sZVgAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvOThkODVmODMtNGUwMC0z NDMwLTlhN2MtNTIwYjBlNWZhYzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDl1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEB2JfQogxIlBrtBKy7sZ0Hupv+Hd26R7GCBGT8Qxs6wOys5UKroRpp1 IRaum+sa/4XI74XuZV9HydO3XPrW/zWYkuEnaIHILmzqzqYLPJzSRi9MQGZuhGcF pGHCEHspb0eKyYEjQicIDjNbdgvHYrJKKA597/Z7538eoTsRokkXwsxE8mmdbSQ0 S4gucuIKYsDOSlnJW0t72uAtskmfdJfZORKjPxI+lCBdYg+Eh5T2tFY0zYSi8xs3 +LDZ0g6gjGvZU2EDKrCpNA/2/q2aGlJng0gEL0Lilijvcmlp0GG+hJE0bBErqF8s 3Rh8sFgsUWesAA36HA6Zpbkv5Xfny3Q= -----END CERTIFICATE-----Generated at Wed Sep 30 14:59:02 2026 by rpki-client