$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bcf6f989-824a-304b-bf25-619305571b9a.roa File: bcf6f989-824a-304b-bf25-619305571b9a.roa (raw, json) Hash identifier: TsfvHndx4vtq1aK2W8a5AXIayyFrbqLm97AkR2S1on4= Subject key identifier: 2A:E0:FA:15:C6:5B:2F:64:3B:F5:AF:48:C6:5C:97:39:34:83:9E:63 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584F497621B33C3B55FD9690F9C0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bcf6f989-824a-304b-bf25-619305571b9a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 3356 IP address blocks: 207.37.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:21:b3:3c:3b:55:fd:96:90:f9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=52e28134-a6cc-49e4-9fe5-d6c9bd8688d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:bc:fa:cf:3f:47:2f:4c:ea:4e:23:f0:e6:c1: d5:5f:4f:d2:f9:c9:00:87:0e:2c:5d:c5:2f:6c:a9: 36:f0:d4:c8:a9:a7:c8:75:ae:95:6c:6a:5b:2c:2d: 1b:49:36:b2:8e:b4:7d:f5:35:28:23:2d:73:b1:9c: e5:4a:7e:95:7e:bf:7a:af:da:10:48:ec:37:f4:7a: 04:1d:a3:11:7f:20:f6:7e:ff:12:fa:12:85:4d:13: dd:6b:cd:fa:c6:e8:30:e3:25:f0:4e:46:8f:5b:d1: 8b:63:0c:36:1d:7e:16:6d:c1:d1:bb:21:c6:6c:4d: 0d:83:bc:cf:53:9a:1c:75:f8:03:bb:0b:2f:80:ad: b2:c5:bb:ae:c4:53:cd:22:8f:a3:1d:eb:d8:ab:ae: 00:47:c7:1d:d9:23:91:66:01:ff:d1:ad:2d:63:56: f5:25:07:41:98:60:b9:08:b1:1d:b4:d7:cf:4c:e6: f9:19:07:39:8c:01:bd:ae:b9:c2:5d:53:cd:bc:23: dd:75:2b:7a:91:23:0b:15:be:e8:a4:16:f0:3b:6f: 8b:01:bd:16:f8:fa:47:4b:ba:69:9b:4f:12:af:aa: 23:49:01:fd:d4:b5:36:ba:51:fb:1d:40:f8:52:d3: 13:f7:69:5f:18:ec:e8:db:a8:38:5f:95:69:78:21: 5d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:E0:FA:15:C6:5B:2F:64:3B:F5:AF:48:C6:5C:97:39:34:83:9E:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bcf6f989-824a-304b-bf25-619305571b9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 207.37.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:9b:8c:f0:a5:1a:c1:96:06:b2:20:25:b5:ab:06:93:c7:a7: f7:c4:5d:c4:e4:64:2a:da:7e:38:f7:13:d8:32:cc:20:4b:dd: 95:f7:6b:5f:0c:16:98:fe:67:be:58:dc:12:fe:fe:44:4e:b8: c6:27:76:79:74:48:a9:e0:eb:76:d0:a2:1e:0e:c4:3b:40:21: 19:c2:8b:ee:39:45:e4:75:eb:79:8f:0f:1c:0d:53:49:bb:8a: 8d:c4:08:e3:f5:58:56:39:43:92:93:27:3a:79:19:75:ba:81: 94:d4:6d:7b:f4:c7:9c:4b:38:16:bc:98:5a:57:5c:0d:a2:ae: c4:f2:5f:31:1a:7c:c4:38:82:90:45:2d:c5:5c:22:35:5e:4c: b3:df:65:e7:42:0a:06:3c:30:9a:67:f5:5d:58:cc:e9:6a:3c: 24:89:22:6d:c6:53:6f:cb:52:df:19:23:05:bb:b8:d4:14:e3: 0a:42:65:f6:c6:e8:00:ab:58:bb:45:5a:9d:5c:80:33:8a:0c: aa:e7:bf:d2:cf:ea:ca:d7:46:e4:03:43:34:79:be:5b:ad:8c: 8e:f7:c2:f3:23:37:08:b8:38:83:4b:2a:bc:e3:87:0b:83:aa: c7:8f:d1:a8:f3:ad:65:74:91:0e:37:89:80:ba:68:52:8d:1c: 07:2f:03:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdiGzPDtV/ZaQ+cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTJlMjgxMzQtYTZjYy00OWU0LTlmZTUtZDZjOWJkODY4OGQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrz6zz9HL0zqTiPw5sHVX0/S+ckAhw4sXcUv bKk28NTIqafIda6VbGpbLC0bSTayjrR99TUoIy1zsZzlSn6Vfr96r9oQSOw39HoE HaMRfyD2fv8S+hKFTRPda836xugw4yXwTkaPW9GLYww2HX4WbcHRuyHGbE0Ng7zP U5ocdfgDuwsvgK2yxbuuxFPNIo+jHevYq64AR8cd2SORZgH/0a0tY1b1JQdBmGC5 CLEdtNfPTOb5GQc5jAG9rrnCXVPNvCPddSt6kSMLFb7opBbwO2+LAb0W+PpHS7pp m08Sr6ojSQH91LU2ulH7HUD4UtMT92lfGOzo26g4X5VpeCFdhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCrg+hXGWy9kO/WvSMZclzk0g55jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYmNmNmY5ODktODI0YS0z MDRiLWJmMjUtNjE5MzA1NTcxYjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzyXIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJqbjPClGsGWBrIgJbWrBpPHp/fEXcTkZCrafjj3E9gyzCBL3ZX3a18M Fpj+Z75Y3BL+/kROuMYndnl0SKng63bQoh4OxDtAIRnCi+45ReR163mPDxwNU0m7 io3ECOP1WFY5Q5KTJzp5GXW6gZTUbXv0x5xLOBa8mFpXXA2irsTyXzEafMQ4gpBF LcVcIjVeTLPfZedCCgY8MJpn9V1YzOlqPCSJIm3GU2/LUt8ZIwW7uNQU4wpCZfbG 6ACrWLtFWp1cgDOKDKrnv9LP6srXRuQDQzR5vlutjI73wvMjNwi4OINLKrzjhwuD qseP0ajzrWV0kQ43iYC6aFKNHAcvA1w= -----END CERTIFICATE-----Generated at Tue Sep 29 05:18:58 2026 by rpki-client