$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b4e902ef-3861-3de8-9e6b-51aa1b246987.roa File: b4e902ef-3861-3de8-9e6b-51aa1b246987.roa (raw, json) Hash identifier: u54gOLwuIqHuU0uBVB+mpBGEYamEc3WCHlnODRJiKbE= Subject key identifier: D9:5C:A2:37:21:32:7B:91:A1:53:DE:44:9D:35:04:4F:98:3B:D4:37 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584F4975FCD65293A50001341500 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b4e902ef-3861-3de8-9e6b-51aa1b246987.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 3360 IP address blocks: 192.57.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:fc:d6:52:93:a5:00:01:34:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a3b8a375-39f5-40cd-afa7-bd5e7b181b9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1b:c7:ac:0b:4d:17:1f:d7:fd:10:0f:68:f3: 1c:6c:2f:c0:f3:cb:6c:db:30:ed:15:0d:62:a2:30: 26:c5:c8:df:32:cd:a5:a2:bc:81:b8:0d:4d:80:ec: e2:55:cb:ac:0c:0e:4b:ed:0e:96:cb:4b:20:3f:73: b7:e1:f4:dc:25:76:7f:ee:68:25:f5:b5:8b:c6:48: 02:94:2d:97:8e:7c:24:a2:54:f4:1c:37:97:bc:c4: aa:b1:8a:cb:ea:d3:b8:6e:56:e3:92:b8:af:dc:a8: 32:3d:c9:c4:a9:4b:b1:96:17:bc:49:e3:4b:fb:96: 2a:fc:34:6c:4b:56:4c:c7:15:41:34:75:53:84:c0: c7:34:5f:d2:cc:bc:86:77:9c:a6:36:3f:76:dc:dc: 89:cb:6b:cc:93:f9:1b:f8:df:38:dc:92:24:1f:0b: c1:3e:86:28:66:47:4c:a9:68:d1:5a:7f:6b:af:2b: 10:00:15:fd:9f:56:a0:e6:6c:4a:b3:5b:34:d0:79: 82:c0:3a:84:89:6b:1b:8d:eb:d3:af:1f:e0:69:98: 89:14:e9:e8:78:67:a6:a2:57:11:cf:57:1b:f8:4f: c4:da:6a:7c:64:53:7f:bc:17:f2:1e:4d:e0:67:2b: 19:4f:56:4d:14:4b:b4:63:41:f9:53:fc:14:85:49: 56:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:5C:A2:37:21:32:7B:91:A1:53:DE:44:9D:35:04:4F:98:3B:D4:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b4e902ef-3861-3de8-9e6b-51aa1b246987.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.57.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:43:9a:44:a0:55:e6:22:c3:c5:b0:1e:21:54:dc:28:0b:c8: 7d:c6:e7:19:a7:9d:00:ae:27:ae:27:81:5b:be:ae:b0:9f:57: 51:50:c2:53:91:a7:b5:f0:bf:6c:b6:98:ff:0c:91:a2:a0:67: 92:5c:02:3b:bc:64:73:23:54:ee:20:8e:31:16:3b:a0:2c:9a: 4e:d7:f2:9a:25:20:49:17:21:e5:5c:9a:4f:2c:58:5f:98:38: 5f:98:a0:37:33:87:83:bc:3e:aa:6e:47:40:6f:0c:41:cb:f5: 54:0c:13:96:db:40:68:19:58:dc:fe:70:40:eb:11:b4:49:21: 52:17:ad:88:04:f0:66:e6:b9:94:d8:99:ad:9f:74:f3:64:33: f2:ec:d1:78:94:ff:34:45:20:ee:19:70:ad:3a:63:05:d4:39: c3:ad:24:a9:b5:3f:3e:99:36:8c:16:9d:92:19:1d:b6:e3:2f: ef:4f:bc:5d:c1:ff:ec:9e:03:28:9c:52:d9:2e:57:dd:88:29: dd:3a:17:4a:8d:c3:c9:0f:37:66:39:98:0b:09:61:aa:78:37: fa:2c:ef:0f:f7:24:89:fe:ab:64:7c:4f:df:fa:37:8f:a6:60: a9:cd:75:68:6d:06:78:51:08:c2:9e:c1:8d:0a:08:16:d7:46: 7e:1e:43:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdfzWUpOlAAE0FQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTNiOGEzNzUtMzlmNS00MGNkLWFmYTctYmQ1ZTdiMTgxYjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxvHrAtNFx/X/RAPaPMcbC/A88ts2zDtFQ1i ojAmxcjfMs2loryBuA1NgOziVcusDA5L7Q6Wy0sgP3O34fTcJXZ/7mgl9bWLxkgC lC2XjnwkolT0HDeXvMSqsYrL6tO4blbjkriv3KgyPcnEqUuxlhe8SeNL+5Yq/DRs S1ZMxxVBNHVThMDHNF/SzLyGd5ymNj923NyJy2vMk/kb+N843JIkHwvBPoYoZkdM qWjRWn9rrysQABX9n1ag5mxKs1s00HmCwDqEiWsbjevTrx/gaZiJFOnoeGemolcR z1cb+E/E2mp8ZFN/vBfyHk3gZysZT1ZNFEu0Y0H5U/wUhUlWpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNlcojchMnuRoVPeRJ01BE+YO9Q3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYjRlOTAyZWYtMzg2MS0z ZGU4LTllNmItNTFhYTFiMjQ2OTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwDmQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACdDmkSgVeYiw8WwHiFU3CgLyH3G5xmnnQCuJ64ngVu+rrCfV1FQwlOR p7Xwv2y2mP8MkaKgZ5JcAju8ZHMjVO4gjjEWO6Asmk7X8polIEkXIeVcmk8sWF+Y OF+YoDczh4O8PqpuR0BvDEHL9VQME5bbQGgZWNz+cEDrEbRJIVIXrYgE8GbmuZTY ma2fdPNkM/Ls0XiU/zRFIO4ZcK06YwXUOcOtJKm1Pz6ZNowWnZIZHbbjL+9PvF3B /+yeAyicUtkuV92IKd06F0qNw8kPN2Y5mAsJYap4N/os7w/3JIn+q2R8T9/6N4+m YKnNdWhtBnhRCMKewY0KCBbXRn4eQzM= -----END CERTIFICATE-----Generated at Tue Sep 29 00:50:46 2026 by rpki-client