$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/35a0c62c-d62b-3066-a4c5-473f10fd1af7.roa File: 35a0c62c-d62b-3066-a4c5-473f10fd1af7.roa (raw, json) Hash identifier: mNLtLESEgTddg//4ucj56jdv+ANSTPKfnNcs4TYG38U= Subject key identifier: 27:5A:EE:D9:5A:B2:51:6B:38:1F:6E:9A:BC:26:A5:FC:C6:E0:E1:C6 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584F49761F422EC9AA52019E15A0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/35a0c62c-d62b-3066-a4c5-473f10fd1af7.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 3356 IP address blocks: 192.57.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:1f:42:2e:c9:aa:52:01:9e:15:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=88d756a6-7d65-439e-b818-f499b3d36279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:51:3d:66:d0:81:f7:75:d4:71:69:bd:06:2a: 72:6f:fb:11:5b:8e:d7:03:91:74:a4:a4:34:75:26: 7e:9b:d9:d3:7f:e1:94:e3:d0:09:be:c6:74:f4:7c: da:36:1e:2d:f3:56:86:63:49:25:c5:90:27:33:2d: 31:13:a6:89:77:18:f3:47:59:ce:92:5b:2e:ea:18: 66:7f:5e:8f:23:5a:4a:e2:52:9b:ec:40:6d:bb:96: ee:57:a3:03:5e:8b:d8:7f:27:e4:f3:6c:41:a5:d9: 22:c3:d6:0a:65:2c:4d:fb:bc:77:61:5b:a5:34:b5: 17:67:ef:28:20:3d:a8:0a:6d:40:10:e9:f3:f9:8f: 15:28:c1:63:98:31:2f:2c:f8:cd:9b:56:85:1e:c8: 5e:7b:fb:c7:ff:e3:53:51:b7:56:75:7b:1b:11:3a: f4:7b:39:12:83:1d:7d:4e:36:76:02:e1:b2:b0:b6: 5f:d4:02:d4:47:68:72:20:37:a5:7d:96:18:83:b1: 5c:ce:85:3d:4e:fc:c6:f0:c1:63:eb:47:43:c1:4b: 02:92:f7:0d:75:ce:cb:87:02:43:a2:4d:fd:3d:ef: b4:74:44:99:cb:77:52:c4:17:22:e1:66:29:1b:38: 06:90:d7:63:c4:a0:d0:80:74:88:98:5d:33:17:72: 8b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:5A:EE:D9:5A:B2:51:6B:38:1F:6E:9A:BC:26:A5:FC:C6:E0:E1:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/35a0c62c-d62b-3066-a4c5-473f10fd1af7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.57.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:1c:f0:72:8e:2b:cc:db:c4:53:d7:52:84:a1:7c:9f:15:0f: 4a:94:e9:2a:dc:06:8a:05:99:79:32:53:96:4a:a0:48:b3:40: ad:48:89:c3:6c:13:7a:46:0a:c0:a9:47:bb:c3:50:41:8d:41: d6:bf:19:73:ad:63:5a:f5:ac:f0:a9:ae:01:d6:7d:2f:a8:c6: 4f:19:69:05:05:1a:5f:56:07:25:9f:d4:b4:74:c1:f9:75:f3: f4:c0:d9:56:64:a5:35:af:8d:73:0d:c8:c5:9f:56:43:18:1e: 32:6a:de:3b:34:01:25:e1:96:10:30:e7:e8:e6:4a:cc:45:25: be:3d:06:7e:84:f9:fc:21:59:ee:83:fa:67:3b:f3:99:37:be: d4:e9:6d:7a:b1:af:a3:f6:09:1c:99:7d:2d:4f:e4:d2:75:42: ff:5e:50:b6:e9:4a:1b:bc:73:6e:84:10:4e:77:e4:e4:72:d5: 7a:95:ea:c9:98:d9:22:87:cd:56:27:43:57:58:e0:63:7b:4a: 25:9c:91:46:73:95:29:9c:0d:e7:53:64:69:e6:77:ee:b1:35: b7:70:74:da:78:3c:04:5e:40:9d:27:40:47:0d:e3:93:76:37: 7c:f6:f6:1d:7f:f8:07:61:0c:82:8a:0a:f4:f6:7e:fc:7e:5c: 9e:be:11:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jdh9CLsmqUgGeFaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ODhkNzU2YTYtN2Q2NS00MzllLWI4MTgtZjQ5OWIzZDM2Mjc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFE9ZtCB93XUcWm9Bipyb/sRW47XA5F0pKQ0 dSZ+m9nTf+GU49AJvsZ09HzaNh4t81aGY0klxZAnMy0xE6aJdxjzR1nOklsu6hhm f16PI1pK4lKb7EBtu5buV6MDXovYfyfk82xBpdkiw9YKZSxN+7x3YVulNLUXZ+8o ID2oCm1AEOnz+Y8VKMFjmDEvLPjNm1aFHshee/vH/+NTUbdWdXsbETr0ezkSgx19 TjZ2AuGysLZf1ALUR2hyIDelfZYYg7FczoU9TvzG8MFj60dDwUsCkvcNdc7LhwJD ok39Pe+0dESZy3dSxBci4WYpGzgGkNdjxKDQgHSImF0zF3KLEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCda7tlaslFrOB9umrwmpfzG4OHGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMzVhMGM2MmMtZDYyYi0z MDY2LWE0YzUtNDczZjEwZmQxYWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwDmYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH0c8HKOK8zbxFPXUoShfJ8VD0qU6SrcBooFmXkyU5ZKoEizQK1IicNs E3pGCsCpR7vDUEGNQda/GXOtY1r1rPCprgHWfS+oxk8ZaQUFGl9WByWf1LR0wfl1 8/TA2VZkpTWvjXMNyMWfVkMYHjJq3js0ASXhlhAw5+jmSsxFJb49Bn6E+fwhWe6D +mc785k3vtTpbXqxr6P2CRyZfS1P5NJ1Qv9eULbpShu8c26EEE535ORy1XqV6smY 2SKHzVYnQ1dY4GN7SiWckUZzlSmcDedTZGnmd+6xNbdwdNp4PAReQJ0nQEcN45N2 N3z29h1/+AdhDIKKCvT2fvx+XJ6+Ecc= -----END CERTIFICATE-----Generated at Sat Sep 26 15:38:26 2026 by rpki-client