$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c9ac6880-13f8-3402-b332-67ac04e2b2f3.roa File: c9ac6880-13f8-3402-b332-67ac04e2b2f3.roa (raw, json) Hash identifier: HU3qN1xljHIrcf4WdyiS98N+7hJZA33m12WAO6PmSXE= Subject key identifier: B8:B8:72:CF:94:42:C7:ED:1B:12:EB:41:D6:53:66:13:EB:E6:39:ED Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584F49771C53A01C99B3EE005E80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c9ac6880-13f8-3402-b332-67ac04e2b2f3.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 203 IP address blocks: 199.228.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:77:1c:53:a0:1c:99:b3:ee:00:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e3d688fc-6c35-49a7-85b0-717f2576e4a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b2:a2:4d:f8:6f:35:63:de:b6:49:81:ea:23: a8:63:02:62:8f:bb:ad:e6:3c:8e:67:e7:6a:1d:73: eb:50:97:82:fb:ff:1d:6d:1a:87:f3:55:62:fa:8a: 2f:48:d5:31:c4:4e:9f:b6:49:7d:ba:4a:25:ca:de: 47:8d:24:50:b3:78:5b:2a:45:5d:75:8f:54:77:13: e2:37:2e:40:4f:da:9a:7b:2d:68:2e:c1:6b:e4:9a: a0:b4:af:12:83:a5:a2:f7:62:1b:44:cd:9f:43:80: 4b:16:fe:c1:68:fb:5a:19:e4:e0:c2:0d:9e:55:6b: e1:8b:b5:aa:75:9c:91:57:33:3b:a2:65:4c:12:0f: 24:a3:1f:7b:a8:f3:b2:b8:f4:08:6f:5b:7b:61:13: fc:b2:2f:03:88:d6:86:4c:e4:46:d8:b3:fc:0d:eb: e7:60:bd:9e:e0:a7:80:0a:cc:d9:1d:ba:f0:92:a7: 51:06:b9:bc:7b:cb:e4:f3:42:32:f4:90:13:fb:ea: 01:c8:95:42:4b:c3:67:3f:cd:d5:0f:d4:83:f9:3d: 75:ec:0b:13:56:25:7f:56:af:bc:36:66:fe:58:b3: eb:81:37:c0:6d:6e:71:23:4d:75:6a:3b:aa:56:c0: 81:b2:22:30:27:96:63:60:b0:0d:5c:1b:7b:e2:36: 7c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:B8:72:CF:94:42:C7:ED:1B:12:EB:41:D6:53:66:13:EB:E6:39:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c9ac6880-13f8-3402-b332-67ac04e2b2f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 199.228.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:79:a8:35:3a:27:c1:d6:fd:58:fc:84:7c:5f:d3:26:b7:4e: 5f:07:51:6c:4b:a9:74:b1:9b:7c:a7:87:7b:02:1f:d0:cb:e5: be:9d:2e:03:9e:54:cf:aa:d2:bd:4e:66:a9:a3:04:64:79:1d: 2f:4a:83:2d:8b:6f:20:83:d7:5d:d1:51:8e:0d:9f:24:07:6f: e7:87:6d:8d:cc:24:0c:4a:6d:e2:4c:30:6b:55:fc:22:86:33: c6:d1:eb:1b:19:1d:9a:9a:1d:12:5b:18:ae:33:c3:76:7f:9e: 28:46:42:49:34:0b:4d:30:b4:cd:6b:1d:4b:9b:04:69:37:28: f6:47:5e:d7:41:83:79:df:3d:f8:b0:b2:43:9d:f1:1c:ab:63: 9c:8a:89:55:7c:67:66:e9:38:8d:0f:7c:58:99:74:11:91:b4: 08:ef:b6:70:b1:7d:e4:d4:ff:02:e7:ff:2a:b5:de:38:0e:ca: e0:c4:4d:86:3d:21:87:90:54:23:34:7e:88:96:eb:c4:df:00: f4:b7:51:68:ea:b4:88:e5:b9:66:b7:68:45:d3:b6:12:24:a5: 2a:e2:aa:45:df:a8:dc:e2:b1:78:70:64:4e:b7:d3:d8:4c:95: 90:30:e3:aa:05:dd:2c:b4:b0:94:b2:84:ab:dc:fb:26:51:fa: 49:44:4f:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdxxToByZs+4AXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTNkNjg4ZmMtNmMzNS00OWE3LTg1YjAtNzE3ZjI1NzZlNGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbKiTfhvNWPetkmB6iOoYwJij7ut5jyOZ+dq HXPrUJeC+/8dbRqH81Vi+oovSNUxxE6ftkl9ukolyt5HjSRQs3hbKkVddY9UdxPi Ny5AT9qaey1oLsFr5JqgtK8Sg6Wi92IbRM2fQ4BLFv7BaPtaGeTgwg2eVWvhi7Wq dZyRVzM7omVMEg8kox97qPOyuPQIb1t7YRP8si8DiNaGTORG2LP8DevnYL2e4KeA CszZHbrwkqdRBrm8e8vk80Iy9JAT++oByJVCS8NnP83VD9SD+T117AsTViV/Vq+8 Nmb+WLPrgTfAbW5xI011ajuqVsCBsiIwJ5ZjYLANXBt74jZ8ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLi4cs+UQsftGxLrQdZTZhPr5jntMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYzlhYzY4ODAtMTNmOC0z NDAyLWIzMzItNjdhYzA0ZTJiMmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx+SOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH95qDU6J8HW/Vj8hHxf0ya3Tl8HUWxLqXSxm3ynh3sCH9DL5b6dLgOe VM+q0r1OZqmjBGR5HS9Kgy2LbyCD113RUY4NnyQHb+eHbY3MJAxKbeJMMGtV/CKG M8bR6xsZHZqaHRJbGK4zw3Z/nihGQkk0C00wtM1rHUubBGk3KPZHXtdBg3nfPfiw skOd8RyrY5yKiVV8Z2bpOI0PfFiZdBGRtAjvtnCxfeTU/wLn/yq13jgOyuDETYY9 IYeQVCM0foiW68TfAPS3UWjqtIjluWa3aEXTthIkpSriqkXfqNzisXhwZE6309hM lZAw46oF3Sy0sJSyhKvc+yZR+klET08= -----END CERTIFICATE-----Generated at Mon Sep 28 23:57:22 2026 by rpki-client