$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/09e138b7-dd57-3812-b335-d17c646b1c7a.roa File: 09e138b7-dd57-3812-b335-d17c646b1c7a.roa (raw, json) Hash identifier: X3A/OgbQReXnrYmWdsHusWext4UAOLeH/1eIb1nWG3Q= Subject key identifier: C2:9D:89:41:2A:45:89:52:DA:84:51:89:3A:DD:B9:52:F5:BB:0C:9E Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584EA7935CFB7E7F386AA8898280 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/09e138b7-dd57-3812-b335-d17c646b1c7a.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 3356 IP address blocks: 199.228.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:93:5c:fb:7e:7f:38:6a:a8:89:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=e7edf348-680a-45fa-b630-7221eeba353f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:df:bd:20:64:09:d7:85:98:74:a7:04:1f:bf: c3:b2:93:0a:93:44:fb:48:31:27:49:fc:6e:fb:e5: bf:95:ee:d6:3c:97:79:37:2f:ee:b6:d7:9a:6d:62: 68:eb:8d:4d:54:20:a3:5c:4a:97:74:df:ab:e2:99: 33:1b:fd:d5:c0:33:b8:65:02:a6:d9:53:d5:d4:39: 5a:46:b0:f0:94:15:13:83:5e:e6:17:92:9a:f5:cf: ca:c3:b0:b8:0c:c6:b2:f3:09:7f:98:42:08:34:fc: f1:f5:6d:16:0a:a3:af:98:83:26:17:14:8c:21:15: 53:13:73:43:c7:33:64:67:70:f5:dc:bf:3f:94:c5: e3:ca:2c:e0:51:ef:5d:c4:68:10:dd:3f:d2:fc:dd: 39:5f:b9:cc:0d:da:fe:ee:ca:cf:ab:c4:66:2a:32: a7:e6:63:6e:52:74:ac:01:f9:7d:28:3e:e5:16:5f: f9:8e:05:8e:86:27:99:b2:ad:08:d4:20:a9:56:fe: b2:4f:10:6c:de:41:4c:58:41:4d:a3:24:1e:3f:89: 17:02:23:dc:79:65:c9:c5:0a:64:15:4f:ed:ed:fe: a7:d7:e2:91:57:a5:0e:37:82:6c:0c:4b:f9:a9:c7: 44:9a:bd:4e:3d:36:b4:0c:78:c1:6e:b1:d0:93:b3: 49:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:9D:89:41:2A:45:89:52:DA:84:51:89:3A:DD:B9:52:F5:BB:0C:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/09e138b7-dd57-3812-b335-d17c646b1c7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 199.228.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:72:da:51:04:c0:e3:47:9b:10:53:97:0d:d7:df:e3:4d:1c: b5:56:31:fb:ce:fc:ec:0b:52:ea:3b:65:ef:ab:db:4e:a2:45: 64:ec:a1:e3:b0:70:f0:ee:ac:88:32:33:99:ea:84:28:b3:8a: 7b:c1:a1:48:9e:26:1f:19:e4:79:03:4a:6b:77:a8:f4:fd:04: 8c:2c:01:7b:8f:32:6a:fd:b9:cc:e1:31:1d:ae:cf:8c:10:fe: 12:b2:1a:9c:aa:de:df:00:b8:f4:97:35:4f:4d:08:de:b9:43: 3e:3f:b7:19:86:57:7d:d8:f6:c5:a6:48:be:0f:64:3a:6e:63: 49:f5:26:23:62:f0:b9:12:b1:20:7b:6e:c6:e6:ce:80:de:17: e4:d3:60:03:a3:18:92:36:f4:52:87:cb:45:e2:72:ec:48:11: d1:2a:d3:44:02:57:aa:4a:d9:0a:75:c6:ff:47:8e:97:e1:b8: 94:2d:b3:c3:47:a7:09:38:17:bf:6c:b4:f3:13:55:90:59:be: 55:52:34:24:c5:d3:76:8d:4e:9e:a6:05:af:38:26:5e:84:dd: 41:14:b3:1c:47:3b:ca:f3:37:fb:93:8b:e6:b8:68:da:20:ad: 8c:b4:b2:5b:e6:66:d8:52:03:5b:1c:ad:8b:34:5d:a3:e9:ec: fa:05:9c:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nk1z7fn84aqiJgoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZTdlZGYzNDgtNjgwYS00NWZhLWI2MzAtNzIyMWVlYmEzNTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnt+9IGQJ14WYdKcEH7/DspMKk0T7SDEnSfxu ++W/le7WPJd5Ny/utteabWJo641NVCCjXEqXdN+r4pkzG/3VwDO4ZQKm2VPV1Dla RrDwlBUTg17mF5Ka9c/Kw7C4DMay8wl/mEIINPzx9W0WCqOvmIMmFxSMIRVTE3ND xzNkZ3D13L8/lMXjyizgUe9dxGgQ3T/S/N05X7nMDdr+7srPq8RmKjKn5mNuUnSs Afl9KD7lFl/5jgWOhieZsq0I1CCpVv6yTxBs3kFMWEFNoyQeP4kXAiPceWXJxQpk FU/t7f6n1+KRV6UON4JsDEv5qcdEmr1OPTa0DHjBbrHQk7NJ/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMKdiUEqRYlS2oRRiTrduVL1uwyeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMDllMTM4YjctZGQ1Ny0z ODEyLWIzMzUtZDE3YzY0NmIxYzdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx+SOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFNy2lEEwONHmxBTlw3X3+NNHLVWMfvO/OwLUuo7Ze+r206iRWTsoeOw cPDurIgyM5nqhCizinvBoUieJh8Z5HkDSmt3qPT9BIwsAXuPMmr9uczhMR2uz4wQ /hKyGpyq3t8AuPSXNU9NCN65Qz4/txmGV33Y9sWmSL4PZDpuY0n1JiNi8LkSsSB7 bsbmzoDeF+TTYAOjGJI29FKHy0XicuxIEdEq00QCV6pK2Qp1xv9HjpfhuJQts8NH pwk4F79stPMTVZBZvlVSNCTF03aNTp6mBa84Jl6E3UEUsxxHO8rzN/uTi+a4aNog rYy0slvmZthSA1scrYs0XaPp7PoFnN8= -----END CERTIFICATE-----Generated at Sun Aug 2 21:58:14 2026 by rpki-client