$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c878950d-c225-3a0d-ba25-6b682a17c8e8.roa File: c878950d-c225-3a0d-ba25-6b682a17c8e8.roa (raw, json) Hash identifier: xX+Aw7+41/SkIAgEOcoY0gdxdFwWugrHsTS6OQ0yc38= Subject key identifier: 56:6F:A8:E7:07:10:01:51:64:A6:D1:DD:6A:21:DE:CA:25:53:33:25 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584D0A77A6647B2306BF03DF6180 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c878950d-c225-3a0d-ba25-6b682a17c8e8.roa Signing time: Tue 03 Mar 2026 02:00:32 +0000 ROA not before: Tue 03 Mar 2026 02:00:32 +0000 ROA not after: Mon 01 Jun 2026 01:00:32 +0000 asID: 3356 IP address blocks: 192.57.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0a:77:a6:64:7b:23:06:bf:03:df:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 3 02:00:32 2026 GMT Not After : Jun 1 01:00:32 2026 GMT Subject: CN=f3c5fb06-e05b-4974-8828-c27ef56c74e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:4b:14:8a:68:62:67:e5:75:41:68:89:8c:80: 69:bf:08:d8:d5:23:f1:12:15:a7:e4:79:94:c5:99: e1:3a:5e:c7:6d:c0:d6:48:0d:8b:6d:54:00:a8:d8: c6:3b:8a:2f:a3:dd:64:c4:23:7d:53:74:5a:ca:7d: 28:d5:ba:96:42:e2:b9:8e:98:c7:d3:ab:7f:df:42: 25:95:3e:d4:30:29:61:93:fa:74:ac:0b:ad:b3:4b: e3:81:23:93:2f:0c:da:89:59:87:5f:09:e1:bf:da: a2:93:cf:fa:ab:23:9c:76:03:cd:e2:7d:80:f6:48: 85:70:75:a1:9e:68:87:78:99:b5:b8:82:22:6f:db: 7a:bb:49:39:79:64:b6:ee:2d:b9:df:44:5f:bf:30: 8c:7a:13:e7:fb:49:19:14:7b:01:d8:53:0c:b3:51: 65:3e:fb:bd:2e:ec:4e:f8:7f:4b:a5:e0:7a:4d:13: 72:f8:ab:97:db:fc:cd:f7:4e:9a:53:ad:b4:a8:73: 84:89:8d:9f:eb:08:28:54:b3:45:15:90:6b:7d:7c: 47:97:4b:ab:ba:d7:73:45:3c:2c:79:f8:21:b8:80: eb:25:ca:ae:1b:f9:a4:57:a1:2c:f3:6e:df:35:91: 58:bc:9d:f6:22:6d:3d:05:ae:c9:0a:df:a1:5b:c4: ec:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:6F:A8:E7:07:10:01:51:64:A6:D1:DD:6A:21:DE:CA:25:53:33:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c878950d-c225-3a0d-ba25-6b682a17c8e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.57.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:ac:14:e3:e6:cb:1b:48:d9:bb:d8:80:d5:8d:8b:85:37:d1: a5:99:6a:4f:aa:02:e7:9a:48:a8:bd:47:1c:6b:4d:1d:be:5b: 17:dc:cc:61:77:09:46:96:fb:ca:d9:eb:2b:96:89:4a:e6:5f: 39:97:78:67:12:ec:51:43:89:92:2a:83:f3:18:ae:c6:55:da: df:c1:a4:ea:91:c3:28:bd:1d:ad:fd:2b:c8:ea:02:a1:9d:a7: ff:96:54:de:54:57:89:5b:02:48:e9:41:8e:8a:32:81:66:42: 1e:c1:80:05:71:50:6c:74:9c:67:10:af:46:3f:f8:ab:2d:7e: fa:89:5a:06:f4:60:42:39:19:88:84:39:36:2f:dd:5b:d0:1c: 75:2b:51:56:7f:29:7e:4f:9f:05:cf:db:5a:b4:94:b4:1e:83: 29:71:0b:b0:9f:e0:57:29:aa:c4:56:37:18:19:23:3f:7d:0e: 70:b9:22:ff:b1:0d:55:bc:f5:7c:ea:0b:72:ee:a1:81:bd:6d: 5d:16:99:e3:16:1b:94:18:25:34:01:df:6b:1b:45:90:6b:ef: af:5f:8a:da:c1:a1:df:32:73:d7:09:5a:9b:45:59:35:34:5e: bd:d5:7d:e1:61:c8:a7:71:90:f2:3f:60:f3:21:3c:44:8a:09: 30:90:91:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Kd6ZkeyMGvwPfYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDMwMzAyMDAzMloXDTI2MDYwMTAxMDAzMlowLzEtMCsGA1UEAxMk ZjNjNWZiMDYtZTA1Yi00OTc0LTg4MjgtYzI3ZWY1NmM3NGUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEsUimhiZ+V1QWiJjIBpvwjY1SPxEhWn5HmU xZnhOl7HbcDWSA2LbVQAqNjGO4ovo91kxCN9U3Rayn0o1bqWQuK5jpjH06t/30Il lT7UMClhk/p0rAuts0vjgSOTLwzaiVmHXwnhv9qik8/6qyOcdgPN4n2A9kiFcHWh nmiHeJm1uIIib9t6u0k5eWS27i2530RfvzCMehPn+0kZFHsB2FMMs1FlPvu9LuxO +H9LpeB6TRNy+KuX2/zN906aU620qHOEiY2f6wgoVLNFFZBrfXxHl0urutdzRTws efghuIDrJcquG/mkV6Es827fNZFYvJ32Im09Ba7JCt+hW8Ts9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFZvqOcHEAFRZKbR3Woh3solUzMlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYzg3ODk1MGQtYzIyNS0z YTBkLWJhMjUtNmI2ODJhMTdjOGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDlgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGisFOPmyxtI2bvYgNWNi4U30aWZak+qAueaSKi9RxxrTR2+WxfczGF3 CUaW+8rZ6yuWiUrmXzmXeGcS7FFDiZIqg/MYrsZV2t/BpOqRwyi9Ha39K8jqAqGd p/+WVN5UV4lbAkjpQY6KMoFmQh7BgAVxUGx0nGcQr0Y/+KstfvqJWgb0YEI5GYiE OTYv3VvQHHUrUVZ/KX5PnwXP21q0lLQegylxC7Cf4FcpqsRWNxgZIz99DnC5Iv+x DVW89XzqC3LuoYG9bV0WmeMWG5QYJTQB32sbRZBr769fitrBod8yc9cJWptFWTU0 Xr3VfeFhyKdxkPI/YPMhPESKCTCQkX0= -----END CERTIFICATE-----Generated at Thu Mar 26 15:26:41 2026 by rpki-client