$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b8d99d11-8345-3529-81a3-cd29715a837d.roa File: b8d99d11-8345-3529-81a3-cd29715a837d.roa (raw, json) Hash identifier: 7dcPxaFfhvIUaJZgWEFcHbANPUchB8LZPJhkugmvA1E= Subject key identifier: 60:C6:A4:48:FF:C1:76:ED:BB:48:5E:CB:09:74:01:81:AA:A0:06:FB Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584D0A77AC8E822372B36D9BEA00 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b8d99d11-8345-3529-81a3-cd29715a837d.roa Signing time: Tue 03 Mar 2026 02:00:32 +0000 ROA not before: Tue 03 Mar 2026 02:00:32 +0000 ROA not after: Mon 01 Jun 2026 01:00:32 +0000 asID: 3356 IP address blocks: 199.228.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0a:77:ac:8e:82:23:72:b3:6d:9b:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 3 02:00:32 2026 GMT Not After : Jun 1 01:00:32 2026 GMT Subject: CN=d67f5059-02a9-428a-a437-622e69c80c71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c6:11:f7:19:ef:e6:ef:7b:ad:ec:7e:2c:12: 92:59:29:11:fa:04:bc:fb:3c:48:38:a6:9d:ee:5d: 94:ad:ce:d8:52:49:3c:0f:98:79:e9:7b:f1:32:ab: 6a:cc:81:01:09:a0:fc:a3:39:bf:83:45:5f:13:13: 36:ab:01:d2:f5:d1:f7:93:0d:b4:61:68:cd:a7:a9: 6c:0a:6c:1f:02:19:fb:3f:6f:fc:7f:f2:66:c7:b3: 4d:75:9c:8c:3f:f2:c2:f3:98:99:5c:3d:44:ff:95: fb:6b:e4:92:2a:47:99:5f:3f:d8:17:b6:60:83:87: 1f:26:db:0e:9d:72:8b:6d:7a:3d:78:89:bb:0c:e4: 51:05:ac:ec:e4:f0:fa:89:a1:96:a5:59:94:1b:ac: 6a:b1:06:3b:31:56:56:69:08:68:a4:59:32:3b:b7: 24:4b:52:59:85:b5:1f:c1:73:f6:ce:cd:5e:2b:a0: b1:dc:4f:37:e4:02:6a:4d:9e:ee:19:a8:a2:a1:44: 0e:38:a0:8c:72:b6:07:cc:7a:cc:dc:71:3c:5c:24: 9b:79:d0:d8:16:4e:a4:22:3f:50:1d:ea:de:5d:04: 7f:9e:e4:25:04:af:da:1c:ab:2b:21:17:4d:02:c6: 94:bc:10:dd:e4:e0:18:87:33:97:c3:67:df:67:32: 5c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:C6:A4:48:FF:C1:76:ED:BB:48:5E:CB:09:74:01:81:AA:A0:06:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b8d99d11-8345-3529-81a3-cd29715a837d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 199.228.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:29:b9:27:5d:d2:b7:9b:34:c3:44:cb:6f:00:30:12:81:a5: 75:15:72:46:30:3a:72:4e:13:1c:d7:68:22:44:a0:3c:87:1d: cb:c2:39:c9:19:01:67:64:b5:e5:0b:ba:02:27:ba:af:ea:b5: 7e:f3:29:3f:ae:4f:79:c4:e0:1e:fe:e7:c2:1a:81:4b:04:72: 09:be:d2:2c:ff:b4:b7:d1:cd:a3:f7:3c:94:30:5e:8f:a3:6f: bc:d9:c7:f9:d2:28:58:20:87:f0:11:29:88:7e:6b:42:e1:35: 6d:a4:2d:55:82:b8:e9:27:dc:0b:52:75:30:98:fd:c8:09:77: 36:a3:5d:22:4d:70:25:c5:10:78:e1:69:71:63:f8:33:4d:78: 05:e1:4f:35:1a:14:26:76:e5:72:53:89:d6:34:d3:fc:98:e1: 63:3e:e8:68:14:a9:9f:74:2b:31:bf:2e:4e:6d:2a:dc:d5:4e: 3b:65:91:90:3a:47:4e:83:8d:bf:b6:47:4d:55:69:47:45:ca: 0b:68:80:76:9c:17:f1:e9:29:ea:26:8e:32:9f:95:42:36:8c: 79:19:c6:88:f7:3b:17:bb:01:37:07:ce:1e:32:40:8d:e1:d9: 60:a8:1a:9c:ac:b4:0f:04:b3:f3:45:1a:07:1d:1d:e1:bf:79: e9:58:d0:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Kd6yOgiNys22b6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDMwMzAyMDAzMloXDTI2MDYwMTAxMDAzMlowLzEtMCsGA1UEAxMk ZDY3ZjUwNTktMDJhOS00MjhhLWE0MzctNjIyZTY5YzgwYzcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8YR9xnv5u97rex+LBKSWSkR+gS8+zxIOKad 7l2Urc7YUkk8D5h56XvxMqtqzIEBCaD8ozm/g0VfExM2qwHS9dH3kw20YWjNp6ls CmwfAhn7P2/8f/Jmx7NNdZyMP/LC85iZXD1E/5X7a+SSKkeZXz/YF7Zgg4cfJtsO nXKLbXo9eIm7DORRBazs5PD6iaGWpVmUG6xqsQY7MVZWaQhopFkyO7ckS1JZhbUf wXP2zs1eK6Cx3E835AJqTZ7uGaiioUQOOKCMcrYHzHrM3HE8XCSbedDYFk6kIj9Q HereXQR/nuQlBK/aHKsrIRdNAsaUvBDd5OAYhzOXw2ffZzJc0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGDGpEj/wXbtu0heywl0AYGqoAb7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYjhkOTlkMTEtODM0NS0z NTI5LTgxYTMtY2QyOTcxNWE4MzdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx+Q9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF0puSdd0rebNMNEy28AMBKBpXUVckYwOnJOExzXaCJEoDyHHcvCOckZ AWdkteULugInuq/qtX7zKT+uT3nE4B7+58IagUsEcgm+0iz/tLfRzaP3PJQwXo+j b7zZx/nSKFggh/ARKYh+a0LhNW2kLVWCuOkn3AtSdTCY/cgJdzajXSJNcCXFEHjh aXFj+DNNeAXhTzUaFCZ25XJTidY00/yY4WM+6GgUqZ90KzG/Lk5tKtzVTjtlkZA6 R06Djb+2R01VaUdFygtogHacF/HpKeomjjKflUI2jHkZxoj3Oxe7ATcHzh4yQI3h 2WCoGpystA8Es/NFGgcdHeG/eelY0Ag= -----END CERTIFICATE-----Generated at Thu Mar 26 20:41:56 2026 by rpki-client