$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/fa4aa3b3-4806-38db-bde1-9b98a29f3e9e.roa File: fa4aa3b3-4806-38db-bde1-9b98a29f3e9e.roa (raw, json) Hash identifier: JMveDa0RQDI6EoxVqYwfpyhfx4KbgbvsNbd88ghEO+M= Subject key identifier: EF:AF:32:19:42:B1:89:14:A6:FF:49:6C:F5:27:2A:D7:AE:87:F1:38 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584D1B1A0ED79B3E02DA6F145900 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/fa4aa3b3-4806-38db-bde1-9b98a29f3e9e.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 3360 IP address blocks: 192.57.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:1a:0e:d7:9b:3e:02:da:6f:14:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=ec8e7716-2448-4811-980e-b31e2d1985d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:3d:4b:5b:df:25:8c:04:03:79:2b:51:94:2b: 4e:d2:93:13:6d:20:de:be:cb:21:cf:3f:ee:a5:59: 1a:d4:b1:71:bd:c2:5d:e7:4a:38:13:3c:e0:62:f7: 2f:63:27:76:c2:af:7a:b2:72:50:e7:72:bf:78:e2: b9:3d:a0:e9:2f:cc:b8:f1:ea:62:a7:e3:e9:71:84: 09:86:39:7a:b7:08:51:ce:3a:c1:cc:a3:2d:0c:c9: cd:d3:e8:c6:e8:a3:7a:a1:a6:05:05:5a:ea:5a:4e: 12:6b:e0:bd:9f:d6:48:68:89:6f:1d:5c:14:6a:16: 2f:45:d9:47:5b:2b:7d:90:e5:b0:af:af:81:c1:30: bd:c1:39:99:47:38:59:fc:9a:6c:45:d3:50:30:2d: a9:10:6c:ab:66:13:76:f1:a8:da:1c:c4:5e:c0:bd: fc:de:9a:55:46:25:a8:1f:3c:e1:29:46:62:bc:38: 5d:26:6e:b0:38:86:e4:61:51:6b:e8:fc:82:32:bd: e2:ba:0a:e6:ec:c4:1d:dd:72:8e:aa:cd:6a:c3:ff: 84:ac:1f:3d:5d:1d:b5:93:4b:d4:9c:b8:f3:1f:80: 28:e4:1b:9f:e1:3b:de:5c:4b:5a:17:0c:d5:af:36: 36:66:a0:ce:aa:82:df:0e:74:51:be:4b:a7:ea:02: 3c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:AF:32:19:42:B1:89:14:A6:FF:49:6C:F5:27:2A:D7:AE:87:F1:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/fa4aa3b3-4806-38db-bde1-9b98a29f3e9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.57.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:51:96:bf:bf:97:21:c7:a8:33:22:02:37:7f:41:e3:c7:a6: e2:ab:2e:89:f0:fc:de:dc:2d:f9:52:e4:7c:6f:01:87:81:cf: 23:1a:14:2b:c6:cb:43:4b:28:6b:d4:6b:db:76:d5:29:e9:0c: 13:25:c2:ed:83:36:d1:98:bb:18:24:05:0c:31:e2:d8:2f:35: dd:d0:c1:30:a5:85:32:2e:d1:c1:91:2d:d2:71:b1:ad:d3:50: bc:0a:88:2b:6b:33:11:24:04:2f:7a:d4:04:64:88:56:16:6a: ad:8a:4a:d8:53:56:58:3d:bf:83:be:d3:a7:d7:3b:ac:c4:0d: 08:ed:9d:fe:7c:7c:28:5e:e4:03:41:a1:06:10:3b:8d:e0:12: 02:17:55:26:8e:ae:a9:bb:5a:0b:1d:bb:93:3c:5e:a9:86:1b: 3c:fe:1a:8b:12:83:39:12:b3:51:65:4b:a1:02:22:f4:21:3a: 4f:af:68:20:88:66:d2:c7:35:21:51:9c:34:ec:e6:d2:a0:cc: b6:93:1d:fc:90:f6:5f:f3:42:51:93:52:74:43:b3:69:c3:42: 34:d3:38:df:4b:a0:af:b2:81:4b:4c:2c:64:06:cf:1e:f8:96: 68:0c:3d:65:a0:b9:eb:b9:58:94:f8:80:df:34:f5:eb:60:6b: 90:99:ba:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGg7Xmz4C2m8UWQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk ZWM4ZTc3MTYtMjQ0OC00ODExLTk4MGUtYjMxZTJkMTk4NWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjz1LW98ljAQDeStRlCtO0pMTbSDevsshzz/u pVka1LFxvcJd50o4EzzgYvcvYyd2wq96snJQ53K/eOK5PaDpL8y48epip+PpcYQJ hjl6twhRzjrBzKMtDMnN0+jG6KN6oaYFBVrqWk4Sa+C9n9ZIaIlvHVwUahYvRdlH Wyt9kOWwr6+BwTC9wTmZRzhZ/JpsRdNQMC2pEGyrZhN28ajaHMRewL383ppVRiWo HzzhKUZivDhdJm6wOIbkYVFr6PyCMr3iugrm7MQd3XKOqs1qw/+ErB89XR21k0vU nLjzH4Ao5Buf4TveXEtaFwzVrzY2ZqDOqoLfDnRRvkun6gI8gQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO+vMhlCsYkUpv9JbPUnKteuh/E4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZmE0YWEzYjMtNDgwNi0z OGRiLWJkZTEtOWI5OGEyOWYzZTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDlyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAChRlr+/lyHHqDMiAjd/QePHpuKrLonw/N7cLflS5HxvAYeBzyMaFCvG y0NLKGvUa9t21SnpDBMlwu2DNtGYuxgkBQwx4tgvNd3QwTClhTIu0cGRLdJxsa3T ULwKiCtrMxEkBC961ARkiFYWaq2KSthTVlg9v4O+06fXO6zEDQjtnf58fChe5ANB oQYQO43gEgIXVSaOrqm7Wgsdu5M8XqmGGzz+GosSgzkSs1FlS6ECIvQhOk+vaCCI ZtLHNSFRnDTs5tKgzLaTHfyQ9l/zQlGTUnRDs2nDQjTTON9LoK+ygUtMLGQGzx74 lmgMPWWgueu5WJT4gN809etga5CZuoM= -----END CERTIFICATE-----Generated at Thu Mar 26 19:05:25 2026 by rpki-client