$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/dc7aa3e6-78ec-3e6a-8a50-a808fb5cd232.roa File: dc7aa3e6-78ec-3e6a-8a50-a808fb5cd232.roa (raw, json) Hash identifier: RJYjy+Mzwebm2VXvvNZsl3hW5wfvZC//u2SvjTdq3Ss= Subject key identifier: 4A:E4:13:6A:0F:97:19:47:FB:CD:A6:A2:A4:76:80:15:7C:02:F6:0B Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584F49772348F3A891727292D0C0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/dc7aa3e6-78ec-3e6a-8a50-a808fb5cd232.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 3356 IP address blocks: 204.104.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:77:23:48:f3:a8:91:72:72:92:d0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=6d6dc144-7b94-4789-ae0d-00fcb6608b2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9c:67:70:45:c0:db:6e:2a:dc:a1:ca:b7:9e: 62:c5:6c:15:11:90:1f:6d:64:b0:39:5d:7a:75:fe: 67:12:da:5d:8d:2b:5b:02:9b:de:db:ec:14:46:f7: ce:91:fe:8c:77:4f:ed:88:17:74:d5:5a:eb:61:36: 32:6e:e1:f3:06:00:db:d0:0e:bc:27:2d:56:5e:20: bd:10:63:54:d5:08:eb:31:3d:e2:85:05:f2:2b:f9: 59:e9:74:48:4e:17:fd:98:fb:bd:fb:06:7c:fd:7d: 24:ca:c0:6d:7c:65:ef:be:af:f0:5f:57:06:9a:63: f7:e9:a3:2b:64:36:db:4d:6c:55:ed:41:5d:c1:7c: bf:83:59:da:2e:ff:70:05:0c:1d:85:89:7c:f0:0a: 3e:24:04:80:00:cb:56:f1:b1:bf:b4:69:07:47:fa: 5a:ad:b6:b6:bd:5c:2f:4f:b8:a7:94:25:15:3a:78: ce:ab:87:b7:17:15:29:67:c6:30:b6:72:86:fd:e5: 55:7e:34:d5:9a:24:7e:c7:48:81:2e:09:3e:b3:87: 01:1e:85:e7:2c:7e:85:0c:08:8b:4a:05:ce:ec:a2: cd:db:4d:f6:18:f2:95:d0:82:60:64:d2:dd:ee:7c: af:12:24:74:73:b1:80:11:3e:3d:d5:50:ff:12:fa: cc:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:E4:13:6A:0F:97:19:47:FB:CD:A6:A2:A4:76:80:15:7C:02:F6:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/dc7aa3e6-78ec-3e6a-8a50-a808fb5cd232.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 204.104.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:52:74:7c:68:f3:a4:ed:35:3d:25:89:08:4d:b5:78:c7:80: 06:09:12:63:4e:13:bb:06:d1:d7:84:e0:71:80:e6:61:78:36: 41:9b:61:f4:2c:ca:85:43:47:de:08:52:06:82:bf:bb:4a:a4: fb:74:b2:a1:eb:18:65:48:d4:ed:95:c8:e4:b7:c9:ab:4b:4a: 5e:2e:ec:15:c1:fa:40:c1:8a:ec:7f:52:e4:f8:25:df:fd:74: c1:3c:bd:44:3f:95:6c:3b:63:d7:1f:3e:f4:7c:f1:a1:07:60: 1f:e4:ba:40:d1:a8:05:a1:14:c1:da:58:af:b8:d8:e5:c6:73: cc:2d:f0:9b:92:a5:a3:fb:73:5c:59:0a:76:fa:87:4d:a7:b7: 67:7c:a3:ce:d8:50:27:c4:4c:0e:f1:d0:3b:3e:79:f7:fa:dd: ae:ea:98:56:a3:d5:3d:98:fa:3b:76:a1:a8:5e:94:9e:74:a2: 57:77:97:5c:63:34:7e:b6:7a:0b:34:ca:f6:ce:d8:ee:ba:84: 98:6b:10:e5:2b:e0:93:28:7c:2d:f0:45:bc:f4:7b:f3:16:30: 56:a1:bd:0e:2f:08:b9:67:1c:40:eb:28:47:2e:27:6d:67:d0: 55:58:b9:70:fe:76:d2:b9:ab:e0:19:d1:88:37:c3:44:d2:a7: 06:a4:d4:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdyNI86iRcnKS0MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NmQ2ZGMxNDQtN2I5NC00Nzg5LWFlMGQtMDBmY2I2NjA4YjJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZxncEXA224q3KHKt55ixWwVEZAfbWSwOV16 df5nEtpdjStbApve2+wURvfOkf6Md0/tiBd01VrrYTYybuHzBgDb0A68Jy1WXiC9 EGNU1QjrMT3ihQXyK/lZ6XRIThf9mPu9+wZ8/X0kysBtfGXvvq/wX1cGmmP36aMr ZDbbTWxV7UFdwXy/g1naLv9wBQwdhYl88Ao+JASAAMtW8bG/tGkHR/parba2vVwv T7inlCUVOnjOq4e3FxUpZ8YwtnKG/eVVfjTVmiR+x0iBLgk+s4cBHoXnLH6FDAiL SgXO7KLN2032GPKV0IJgZNLd7nyvEiR0c7GAET491VD/EvrMyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFErkE2oPlxlH+82moqR2gBV8AvYLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZGM3YWEzZTYtNzhlYy0z ZTZhLThhNTAtYTgwOGZiNWNkMjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGgqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJSdHxo86TtNT0liQhNtXjHgAYJEmNOE7sG0deE4HGA5mF4NkGbYfQs yoVDR94IUgaCv7tKpPt0sqHrGGVI1O2VyOS3yatLSl4u7BXB+kDBiux/UuT4Jd/9 dME8vUQ/lWw7Y9cfPvR88aEHYB/kukDRqAWhFMHaWK+42OXGc8wt8JuSpaP7c1xZ Cnb6h02nt2d8o87YUCfETA7x0Ds+eff63a7qmFaj1T2Y+jt2oahelJ50old3l1xj NH62egs0yvbO2O66hJhrEOUr4JMofC3wRbz0e/MWMFahvQ4vCLlnHEDrKEcuJ21n 0FVYuXD+dtK5q+AZ0Yg3w0TSpwak1Nk= -----END CERTIFICATE-----Generated at Sat Sep 26 08:08:36 2026 by rpki-client