$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b3af1e8f-bfaf-30a3-9710-6bbaf13ec2b9.roa File: b3af1e8f-bfaf-30a3-9710-6bbaf13ec2b9.roa (raw, json) Hash identifier: m+ZwSutdwa6wEXXC8O1TGZGlylX4pNJlg7g7mtLnC3o= Subject key identifier: 33:1C:30:E1:65:83:65:4E:D0:11:EE:60:57:6C:70:07:0F:14:BD:C7 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584D19B4E086A5B996A2033AAA00 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b3af1e8f-bfaf-30a3-9710-6bbaf13ec2b9.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 203 IP address blocks: 192.57.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:e0:86:a5:b9:96:a2:03:3a:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=f46729bf-58e9-451c-b485-6db236785f6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:bc:b8:0d:f2:3d:07:f3:ef:e7:28:3c:72:6a: 83:5d:85:e2:34:71:10:f1:16:e0:7b:41:97:82:04: c2:16:32:27:70:a0:46:95:7e:57:8e:c1:ef:38:10: e1:cf:2c:4a:71:5c:ec:c1:ab:f6:40:d7:97:9b:a2: a6:cf:f2:af:bf:e8:21:e0:90:71:7b:94:91:31:c1: 6b:d7:75:c2:2d:b2:1b:bc:0d:c7:62:a5:f6:f1:62: 88:96:4e:ee:7b:96:87:77:f0:60:0a:83:e4:6e:5f: 44:b1:18:a9:a7:2f:e9:45:44:2b:48:0b:8a:fa:f5: 99:6a:b4:ec:ff:ba:97:1e:57:9b:23:c5:d0:70:e4: 1a:56:ac:62:6e:d4:51:77:49:02:a3:31:3c:98:90: e5:ee:c6:bf:c6:d7:df:e6:a8:ab:86:91:07:57:6a: df:73:b8:f0:4f:8a:c4:09:d1:c5:9a:5f:3e:be:b3: 65:9d:d7:82:f7:8f:1f:3f:7f:e0:c5:02:46:bf:b2: 85:66:8a:29:75:01:e8:8c:1e:73:14:ec:41:df:06: b1:6e:81:00:e1:14:80:2c:99:3a:d4:a3:7c:6f:c6: 78:ce:d8:54:1f:f8:7b:da:6a:48:14:7b:0d:72:d0: e2:58:88:cf:6f:81:a6:75:f0:75:5d:06:2c:95:b5: 51:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:1C:30:E1:65:83:65:4E:D0:11:EE:60:57:6C:70:07:0F:14:BD:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b3af1e8f-bfaf-30a3-9710-6bbaf13ec2b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.57.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:a3:d1:df:5f:e0:9b:7d:b6:2e:4f:69:13:04:c2:04:e3:37: 7f:08:6d:76:0d:03:8f:e9:57:c0:69:6a:3a:82:19:6a:ad:ac: 7f:39:0f:cd:d5:a8:8e:9f:d8:e5:be:ad:7a:9d:08:cb:b8:2c: 7c:e3:ab:9d:4c:15:b4:00:31:ae:0e:ff:e4:da:68:18:d2:30: 7e:ae:0e:9b:88:83:d5:66:40:84:2a:3a:d5:76:85:66:10:7a: c0:ce:bb:b9:c2:11:cb:50:1c:7d:9a:f8:a6:5c:c6:36:6b:4a: e0:19:cc:ae:79:9e:0e:e7:38:af:d2:73:1d:74:e7:74:d6:a3: fd:f5:49:c2:21:57:13:e7:16:0b:d0:8d:84:bf:59:b3:01:94: fd:32:92:70:57:59:3f:bc:6e:34:c4:60:e5:39:b2:c5:85:81: 21:5c:bf:2f:5f:98:9a:06:e3:9f:b1:1f:50:22:4e:ed:46:47: d3:6b:d4:c8:e6:51:ce:b9:11:8d:64:c3:4e:99:81:ff:59:5f: f2:36:f1:cf:fe:28:11:af:11:74:16:93:18:f5:4c:cd:e7:e6: 8a:4c:36:0b:ef:3b:f1:0b:a5:f6:81:bb:4a:b7:92:b3:2c:09: 93:d5:08:75:ce:b4:f4:18:71:ca:0c:88:97:d4:79:4b:6b:c6: 7f:4a:92:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtOCGpbmWogM6qgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk ZjQ2NzI5YmYtNThlOS00NTFjLWI0ODUtNmRiMjM2Nzg1ZjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7y4DfI9B/Pv5yg8cmqDXYXiNHEQ8Rbge0GX ggTCFjIncKBGlX5XjsHvOBDhzyxKcVzswav2QNeXm6Kmz/Kvv+gh4JBxe5SRMcFr 13XCLbIbvA3HYqX28WKIlk7ue5aHd/BgCoPkbl9EsRippy/pRUQrSAuK+vWZarTs /7qXHlebI8XQcOQaVqxibtRRd0kCozE8mJDl7sa/xtff5qirhpEHV2rfc7jwT4rE CdHFml8+vrNlndeC948fP3/gxQJGv7KFZoopdQHojB5zFOxB3waxboEA4RSALJk6 1KN8b8Z4zthUH/h72mpIFHsNctDiWIjPb4GmdfB1XQYslbVR3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDMcMOFlg2VO0BHuYFdscAcPFL3HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYjNhZjFlOGYtYmZhZi0z MGEzLTk3MTAtNmJiYWYxM2VjMmI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDlwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADej0d9f4Jt9ti5PaRMEwgTjN38IbXYNA4/pV8BpajqCGWqtrH85D83V qI6f2OW+rXqdCMu4LHzjq51MFbQAMa4O/+TaaBjSMH6uDpuIg9VmQIQqOtV2hWYQ esDOu7nCEctQHH2a+KZcxjZrSuAZzK55ng7nOK/Scx1053TWo/31ScIhVxPnFgvQ jYS/WbMBlP0yknBXWT+8bjTEYOU5ssWFgSFcvy9fmJoG45+xH1AiTu1GR9Nr1Mjm Uc65EY1kw06Zgf9ZX/I28c/+KBGvEXQWkxj1TM3n5opMNgvvO/ELpfaBu0q3krMs CZPVCHXOtPQYccoMiJfUeUtrxn9Kkp0= -----END CERTIFICATE-----Generated at Thu Mar 26 15:47:26 2026 by rpki-client