$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/da2d6dc1-52db-3973-b9ca-db6951a8cf02.roa File: da2d6dc1-52db-3973-b9ca-db6951a8cf02.roa (raw, json) Hash identifier: 6liecyeVzQh0KH41pHG5lE8zjqKv14aDk3IonGEgGmk= Subject key identifier: 3C:95:54:74:39:FC:C9:DD:43:E3:56:0B:99:B1:30:2F:A3:FF:CD:74 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584D4A8FB4623763071DA7641880 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/da2d6dc1-52db-3973-b9ca-db6951a8cf02.roa Signing time: Thu 26 Mar 2026 01:00:32 +0000 ROA not before: Thu 26 Mar 2026 01:00:32 +0000 ROA not after: Wed 24 Jun 2026 01:00:32 +0000 asID: 203 IP address blocks: 206.164.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:8f:b4:62:37:63:07:1d:a7:64:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 26 01:00:32 2026 GMT Not After : Jun 24 01:00:32 2026 GMT Subject: CN=02a696c7-72f0-4bef-9903-5704b01096d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:d9:40:61:46:f4:34:e8:ac:34:e0:b7:b6:4f: a9:87:90:de:81:f7:f9:65:a9:15:f8:b6:14:7c:2d: e9:e6:39:4a:cc:b4:0a:83:68:18:b9:dc:73:4b:9d: cd:30:3a:68:07:f7:d1:6a:89:93:11:c5:de:f7:d1: 79:eb:6f:5c:ce:0a:72:65:65:0f:d4:72:be:48:e4: 27:b4:b4:ff:7b:8b:7b:10:e0:32:3b:b4:5a:e5:78: c4:16:4a:a6:df:60:a0:50:83:47:44:92:15:61:b8: e8:7c:1b:ac:23:a8:bf:67:d2:ed:47:73:69:c3:df: b5:07:8a:0d:c5:24:f7:79:c9:69:30:58:3c:5c:ff: 8d:2d:49:c8:35:e8:dc:7b:46:9e:97:fa:87:0f:30: f8:9b:c2:d0:74:17:f4:27:b6:81:22:95:9b:cb:cf: ff:3b:10:02:8e:a3:a5:6e:eb:80:b1:dd:39:85:5e: d5:6e:f7:42:76:4b:cd:9e:f1:74:fd:aa:6f:28:ff: 4d:b0:eb:1d:94:9d:e5:71:88:91:a7:4e:c7:a8:81: bd:3a:ed:57:18:2a:de:51:74:bb:87:63:74:db:8a: c9:dd:f1:ea:32:18:7f:7c:42:b6:82:fc:4b:03:e9: a5:59:9c:96:16:b6:b8:d6:72:df:89:15:e2:3a:a1: b5:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:95:54:74:39:FC:C9:DD:43:E3:56:0B:99:B1:30:2F:A3:FF:CD:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/da2d6dc1-52db-3973-b9ca-db6951a8cf02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 206.164.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:c2:21:24:2f:e0:04:63:cc:21:3e:77:b0:86:e3:85:57:de: 16:89:de:4f:91:41:94:90:98:c0:4b:30:07:3f:13:da:6a:6e: 7e:c6:62:11:d8:c2:1b:d7:51:67:3e:8c:2b:92:b5:28:dd:02: cb:24:b7:7d:da:2d:ab:d7:57:f7:4a:d4:40:95:69:70:9a:7b: 67:06:28:04:5e:b9:fa:b2:a0:8a:6f:d9:08:d5:5b:1b:6c:72: f3:76:7f:2c:ee:47:94:6e:04:13:8a:44:53:92:d1:01:a1:d4: 01:10:7c:89:f5:ba:fa:67:71:ed:84:76:47:a7:57:46:a5:0f: 5d:fb:68:b2:c0:48:c9:88:f1:a6:78:0d:e2:00:4b:55:ff:b1: 10:22:51:cc:5c:d2:1c:dc:0e:07:2e:72:74:50:bf:a9:4a:53: ab:0d:af:96:51:1c:cb:57:9e:4f:90:c7:42:5c:fc:16:45:87: df:7b:0f:b7:04:93:37:b1:65:86:e8:36:79:f1:69:7d:44:e9: ee:3a:e3:87:c0:e2:91:2d:79:51:87:e8:73:7f:8e:b2:b8:90: 70:23:64:40:59:dd:63:fb:02:cc:0d:10:c5:0e:41:f9:8b:5d: aa:55:8d:55:37:64:1c:da:ff:70:73:ea:06:f8:da:14:62:09: ed:9a:d9:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Kj7RiN2MHHadkGIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk MDJhNjk2YzctNzJmMC00YmVmLTk5MDMtNTcwNGIwMTA5NmQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9lAYUb0NOisNOC3tk+ph5Degff5ZakV+LYU fC3p5jlKzLQKg2gYudxzS53NMDpoB/fRaomTEcXe99F5629czgpyZWUP1HK+SOQn tLT/e4t7EOAyO7Ra5XjEFkqm32CgUINHRJIVYbjofBusI6i/Z9LtR3Npw9+1B4oN xST3eclpMFg8XP+NLUnINejce0ael/qHDzD4m8LQdBf0J7aBIpWby8//OxACjqOl buuAsd05hV7VbvdCdkvNnvF0/apvKP9NsOsdlJ3lcYiRp07HqIG9Ou1XGCreUXS7 h2N024rJ3fHqMhh/fEK2gvxLA+mlWZyWFra41nLfiRXiOqG1DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDyVVHQ5/MndQ+NWC5mxMC+j/810MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZGEyZDZkYzEtNTJkYi0z OTczLWI5Y2EtZGI2OTUxYThjZjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzqTQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADCISQv4ARjzCE+d7CG44VX3haJ3k+RQZSQmMBLMAc/E9pqbn7GYhHY whvXUWc+jCuStSjdAsskt33aLavXV/dK1ECVaXCae2cGKAReufqyoIpv2QjVWxts cvN2fyzuR5RuBBOKRFOS0QGh1AEQfIn1uvpnce2EdkenV0alD137aLLASMmI8aZ4 DeIAS1X/sRAiUcxc0hzcDgcucnRQv6lKU6sNr5ZRHMtXnk+Qx0Jc/BZFh997D7cE kzexZYboNnnxaX1E6e4644fA4pEteVGH6HN/jrK4kHAjZEBZ3WP7AswNEMUOQfmL XapVjVU3ZBza/3Bz6gb42hRiCe2a2b0= -----END CERTIFICATE-----Generated at Thu Mar 26 13:11:31 2026 by rpki-client