$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9d7aee43-2f7a-3166-82d2-5ddd39af9118.roa File: 9d7aee43-2f7a-3166-82d2-5ddd39af9118.roa (raw, json) Hash identifier: s4YUbjtKvS8zddP0r+pcPzG2hEh0HkkTbBrxsbPAlss= Subject key identifier: 3F:4C:C0:10:4C:3A:28:AD:4E:80:A2:1B:7B:77:B9:94:61:EF:05:FC Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584F4976111D7C3E1EA6AB130870 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9d7aee43-2f7a-3166-82d2-5ddd39af9118.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 203 IP address blocks: 170.30.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:11:1d:7c:3e:1e:a6:ab:13:08:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=5cae36ae-9777-441c-a309-8e2cb1f3daab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:d9:80:96:69:74:23:94:51:50:39:8a:66:cd: cc:d8:9a:a4:89:ff:8d:21:66:16:e6:fd:9b:10:61: 4c:aa:54:3f:96:52:0e:9a:86:63:12:4a:95:94:65: 30:de:74:6f:17:31:d8:b2:37:ef:5c:70:b6:b0:6b: 37:8f:d8:7b:79:de:8a:71:4c:24:0b:8a:72:e0:ab: 0c:1c:e6:67:9d:e3:71:ed:c6:9e:41:ce:ae:d5:bc: f7:bd:93:c3:80:cf:30:e1:92:64:43:4d:a1:a6:0a: 7f:84:cd:ca:3e:2d:b7:42:4c:20:58:74:04:a4:9c: a3:ad:15:66:4e:de:98:7e:fd:9f:14:24:d8:8f:e0: 0e:54:38:72:56:7c:24:f1:8c:24:d2:25:d5:0e:5f: 9b:8f:34:8a:90:dc:77:ce:26:81:f2:c4:0b:fa:93: ec:85:af:54:01:6c:70:a2:e2:f2:99:02:62:4f:33: 41:b9:12:cf:e5:ad:be:72:a6:5d:75:63:18:1a:12: 51:30:c4:c3:71:4b:5f:fc:13:a7:5e:1e:41:e5:ee: c0:cf:08:eb:0e:f6:1b:43:2b:b2:2a:61:03:22:06: 56:4c:ac:95:e5:58:19:07:39:b2:fd:cc:71:4d:f0: 12:bc:d0:19:4d:cc:98:3e:86:c6:c4:6a:9f:89:fd: ad:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:4C:C0:10:4C:3A:28:AD:4E:80:A2:1B:7B:77:B9:94:61:EF:05:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9d7aee43-2f7a-3166-82d2-5ddd39af9118.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 170.30.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:94:3e:c8:25:eb:38:75:16:e7:6e:24:28:d2:6e:69:14:e7: b7:57:c8:d3:b7:6e:63:75:ef:10:69:4e:a3:88:37:6c:a4:11: 44:dc:77:6c:38:00:5d:cb:76:c9:39:99:16:e0:a6:e4:1e:c3: 11:4f:00:63:7a:24:42:a4:2e:e7:a1:c8:b3:46:8f:c0:ba:31: d0:94:15:78:da:ab:6b:51:48:74:e0:84:94:d1:cf:9e:10:c1: e6:ff:25:af:5b:85:3e:ea:1f:29:23:1a:55:0a:2a:d8:9c:6f: f2:25:76:10:29:4a:9f:8b:81:14:56:f9:77:de:94:f4:0e:36: f8:3a:cc:d8:a4:3f:a8:bc:fa:3b:38:71:2f:11:f6:9d:e8:18: f3:23:22:30:3c:c9:9a:00:74:11:4a:89:45:a2:31:77:9c:e3: f7:2a:a8:d4:5a:15:b3:f1:62:db:b7:ec:44:93:59:b0:72:48: 42:33:59:39:30:4a:3e:27:38:1d:8e:f8:fe:40:90:e1:85:6d: d4:ad:00:cf:47:da:a4:8d:98:c0:dc:b8:d1:3b:aa:ea:14:53: 64:81:22:08:a5:2e:cd:47:13:c0:4b:9b:42:2a:16:b5:ee:dd: 5a:28:c8:7d:a3:eb:34:9d:75:37:8e:bb:91:d5:d1:8b:de:6b: 82:89:fd:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdhEdfD4epqsTCHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NWNhZTM2YWUtOTc3Ny00NDFjLWEzMDktOGUyY2IxZjNkYWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNmAlml0I5RRUDmKZs3M2Jqkif+NIWYW5v2b EGFMqlQ/llIOmoZjEkqVlGUw3nRvFzHYsjfvXHC2sGs3j9h7ed6KcUwkC4py4KsM HOZnneNx7caeQc6u1bz3vZPDgM8w4ZJkQ02hpgp/hM3KPi23QkwgWHQEpJyjrRVm Tt6Yfv2fFCTYj+AOVDhyVnwk8Ywk0iXVDl+bjzSKkNx3ziaB8sQL+pPsha9UAWxw ouLymQJiTzNBuRLP5a2+cqZddWMYGhJRMMTDcUtf/BOnXh5B5e7AzwjrDvYbQyuy KmEDIgZWTKyV5VgZBzmy/cxxTfASvNAZTcyYPobGxGqfif2twwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD9MwBBMOiitToCiG3t3uZRh7wX8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvOWQ3YWVlNDMtMmY3YS0z MTY2LTgyZDItNWRkZDM5YWY5MTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqh7HMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAImUPsgl6zh1FuduJCjSbmkU57dXyNO3bmN17xBpTqOIN2ykEUTcd2w4 AF3Ldsk5mRbgpuQewxFPAGN6JEKkLuehyLNGj8C6MdCUFXjaq2tRSHTghJTRz54Q web/Ja9bhT7qHykjGlUKKticb/IldhApSp+LgRRW+XfelPQONvg6zNikP6i8+js4 cS8R9p3oGPMjIjA8yZoAdBFKiUWiMXec4/cqqNRaFbPxYtu37ESTWbBySEIzWTkw Sj4nOB2O+P5AkOGFbdStAM9H2qSNmMDcuNE7quoUU2SBIgilLs1HE8BLm0IqFrXu 3VooyH2j6zSddTeOu5HV0Yvea4KJ/V0= -----END CERTIFICATE-----Generated at Mon Sep 28 07:46:43 2026 by rpki-client