$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1838690d-f3a0-35fa-9624-1e158147f08c.roa File: 1838690d-f3a0-35fa-9624-1e158147f08c.roa (raw, json) Hash identifier: hwL32K+8FJLixDkHopAfx4LBZdNpUjbgCHLf72yt2Ko= Subject key identifier: 85:F6:F2:05:21:04:13:C2:DD:0F:2C:95:BE:C3:D6:88:58:76:2C:AE Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584EF7177ADDF730AEFCE9C62280 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1838690d-f3a0-35fa-9624-1e158147f08c.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 203 IP address blocks: 204.105.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:7a:dd:f7:30:ae:fc:e9:c6:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=ce2e23e8-f765-4976-9000-9f4136f7583f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:1e:b2:3f:e9:27:05:c7:1a:2b:15:76:7d:fd: 6b:c4:da:96:96:65:3b:32:28:e2:9c:31:96:21:16: 21:dc:b4:e0:e2:5d:c3:9a:7b:3f:e0:44:b4:48:df: 30:20:ea:d3:08:51:c1:b6:1d:29:bc:71:92:5f:30: c6:fe:63:ec:29:f9:2e:c3:f3:8e:45:e2:26:18:a5: ce:36:be:69:4a:56:00:99:a2:af:36:64:63:63:14: 78:f5:c3:aa:da:55:88:e9:f0:50:7a:62:b6:b2:77: 6f:2d:84:e3:4f:91:82:8e:ad:b1:6c:63:5d:e8:1a: 60:93:3c:38:52:de:9f:37:f5:3f:b0:9b:df:d3:e4: 05:8a:1f:57:9e:5f:8e:8c:d9:f1:0f:78:67:bc:8f: 58:7a:a9:bf:d7:d6:2f:38:f8:58:c6:34:46:d6:54: 7d:09:4c:cf:75:a3:13:64:bc:b6:86:55:db:eb:97: 32:f9:db:e6:ed:50:b3:b9:9a:6e:73:77:7a:b3:44: 7e:22:ec:00:7e:ef:d6:da:b9:32:f8:85:8e:ac:2c: f8:bd:20:a9:41:c8:af:0f:92:c4:7e:31:50:11:f3: 67:73:79:b6:cf:b3:14:cf:f9:28:11:7d:55:df:9a: 8d:21:de:97:1a:18:ec:13:ef:75:08:3f:50:d8:e6: a6:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:F6:F2:05:21:04:13:C2:DD:0F:2C:95:BE:C3:D6:88:58:76:2C:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1838690d-f3a0-35fa-9624-1e158147f08c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 204.105.118.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:16:4d:0b:d6:51:2a:b2:a7:93:aa:ff:3d:86:e8:a4:a6:67: ce:c8:76:54:c1:d7:88:87:1a:30:40:01:26:de:d8:ae:e9:4e: 55:91:4c:fa:3e:6d:f5:95:aa:c7:b6:08:82:33:35:ea:6e:cf: f0:70:0d:23:89:f5:52:d1:83:1f:5f:62:a1:b8:fa:41:ae:0b: 0d:ab:e4:00:0a:58:8a:7c:e3:71:a9:df:43:b4:20:f4:e4:9f: 3b:1f:dd:aa:36:52:2d:1d:7d:29:4b:68:65:e9:ca:10:f9:b9: 41:9d:24:00:65:dd:ed:df:b4:6b:44:c9:c5:7f:8a:86:36:11: 1a:af:35:e6:06:37:47:57:6a:75:d0:02:6b:18:48:9a:31:c7: 8b:4a:4d:e2:59:84:59:78:4d:dd:42:ac:44:6a:e5:72:93:70: b1:7a:81:59:8a:00:9b:3e:2d:ef:49:82:d9:3e:fa:46:7f:2a: c6:78:ac:71:a0:33:f1:ac:81:b1:3c:f1:91:26:20:3e:82:c9: 6a:06:9c:45:56:01:b5:66:9e:f7:d0:14:f1:40:79:52:77:13: 6b:d1:04:ab:46:02:2c:2b:16:30:21:f7:88:f8:5b:9d:cc:93: 05:f2:03:55:72:96:15:1d:62:87:f7:55:e7:21:fa:53:cf:e5: ba:1f:d8:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F3rd9zCu/OnGIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk Y2UyZTIzZTgtZjc2NS00OTc2LTkwMDAtOWY0MTM2Zjc1ODNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgh6yP+knBccaKxV2ff1rxNqWlmU7MijinDGW IRYh3LTg4l3Dmns/4ES0SN8wIOrTCFHBth0pvHGSXzDG/mPsKfkuw/OOReImGKXO Nr5pSlYAmaKvNmRjYxR49cOq2lWI6fBQemK2sndvLYTjT5GCjq2xbGNd6Bpgkzw4 Ut6fN/U/sJvf0+QFih9Xnl+OjNnxD3hnvI9Yeqm/19YvOPhYxjRG1lR9CUzPdaMT ZLy2hlXb65cy+dvm7VCzuZpuc3d6s0R+IuwAfu/W2rky+IWOrCz4vSCpQcivD5LE fjFQEfNnc3m2z7MUz/koEX1V35qNId6XGhjsE+91CD9Q2OamJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIX28gUhBBPC3Q8slb7D1ohYdiyuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMTgzODY5MGQtZjNhMC0z NWZhLTk2MjQtMWUxNTgxNDdmMDhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGl2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIkWTQvWUSqyp5Oq/z2G6KSmZ87IdlTB14iHGjBAASbe2K7pTlWRTPo+ bfWVqse2CIIzNepuz/BwDSOJ9VLRgx9fYqG4+kGuCw2r5AAKWIp843Gp30O0IPTk nzsf3ao2Ui0dfSlLaGXpyhD5uUGdJABl3e3ftGtEycV/ioY2ERqvNeYGN0dXanXQ AmsYSJoxx4tKTeJZhFl4Td1CrERq5XKTcLF6gVmKAJs+Le9Jgtk++kZ/KsZ4rHGg M/GsgbE88ZEmID6CyWoGnEVWAbVmnvfQFPFAeVJ3E2vRBKtGAiwrFjAh94j4W53M kwXyA1VylhUdYof3Vech+lPP5bof2HQ= -----END CERTIFICATE-----Generated at Wed Sep 9 00:52:46 2026 by rpki-client