$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5436d452-212f-3c99-87de-33e74da49ce3.roa File: 5436d452-212f-3c99-87de-33e74da49ce3.roa (raw, json) Hash identifier: KBNSgueOzA6dkKvLCfp4a8a6KhBVe8Ac17n2pYHhGL8= Subject key identifier: 25:C1:47:D2:D4:63:BF:8D:66:63:F4:D9:3D:C6:E6:8F:CA:02:89:75 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584F4976E417060C29CB18E80860 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5436d452-212f-3c99-87de-33e74da49ce3.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 3360 IP address blocks: 216.240.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:e4:17:06:0c:29:cb:18:e8:08:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=409b3ad0-4516-4480-9fbc-73c396f7b755 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4a:f1:d1:f6:cc:cc:8d:81:35:db:05:d2:c6: 63:da:c1:5e:47:f8:d5:93:5c:4e:ff:53:4c:36:ca: 4d:61:2b:88:10:74:5a:08:f8:df:26:c8:9c:d4:1b: 46:cc:40:bc:f2:34:cd:b0:e9:6e:5b:07:83:6d:5f: bb:8c:a5:5b:1f:22:8f:0d:88:c3:c7:84:b9:fc:9b: 9f:3c:99:90:2f:4c:90:87:70:51:19:b4:b3:52:cd: 87:56:6c:62:9a:eb:d5:92:6c:7a:d7:34:6c:7c:71: 20:f0:6f:ad:1f:10:d1:26:6b:3b:82:43:ef:d4:46: 6d:18:a7:c3:4d:76:6e:ea:5d:cf:4c:02:f0:5b:e5: 7b:02:8a:d7:b5:ab:2e:e0:05:57:48:0a:37:bb:b2: ca:a9:85:18:67:41:a7:aa:36:bf:c1:20:12:a2:c0: f7:0e:8f:37:cc:ba:0c:37:7d:99:9c:db:f3:73:3f: ab:d4:f7:37:d7:93:e5:05:23:2b:1b:24:c9:54:5f: 86:aa:a1:1d:e5:93:fd:c5:28:59:30:57:47:80:35: 11:5f:5d:d7:bc:7a:cf:80:45:27:27:cc:61:0b:7f: cd:41:cd:2c:29:64:b1:dc:33:9f:a8:09:03:45:82: 2c:e4:3e:cb:aa:50:35:a9:c9:af:27:a5:92:29:be: 15:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:C1:47:D2:D4:63:BF:8D:66:63:F4:D9:3D:C6:E6:8F:CA:02:89:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5436d452-212f-3c99-87de-33e74da49ce3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 216.240.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:cf:36:9c:22:6d:95:1c:fc:57:4d:96:6d:ec:d8:ec:bb:3b: 6d:f8:cb:0f:3c:95:e1:a6:0e:d6:63:77:27:60:df:b6:98:9d: 71:5d:6e:56:27:5a:6e:cc:2b:26:55:61:56:e0:51:ca:e2:46: 51:bd:c9:83:68:a2:07:54:42:ea:37:4f:7f:2f:5c:2d:df:95: e4:dd:f0:74:40:a5:c2:0a:c0:a6:51:0b:4b:d8:dd:95:04:17: 1d:0b:c0:89:47:52:a5:d8:e1:2a:fd:5f:32:37:bc:7d:2c:4c: 97:6e:f2:c9:bd:4f:e3:e4:2b:c2:a9:84:19:b8:68:b6:8b:7d: 31:fd:e8:48:63:38:e4:91:bc:44:f9:b0:11:84:af:50:e9:01: 42:a4:89:a4:b5:77:66:a4:3d:25:38:f8:56:d0:d4:ca:7e:c3: 10:1d:1c:fb:ca:c3:9e:7f:af:c0:b8:7b:be:56:20:94:5c:9f: 93:0b:b5:fa:66:9e:3a:e7:5d:f7:40:71:6b:ac:d2:39:83:0f: 6e:22:e8:2d:3d:e6:5d:fd:a7:0c:ad:52:e8:6b:ec:9a:ca:12: 42:66:35:d0:37:30:8a:56:49:03:d7:36:bc:9d:ef:1e:bc:d2: 58:bb:c4:7f:b3:c5:62:f3:41:85:df:91:f9:e6:c7:d2:f6:07: 65:39:43:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JduQXBgwpyxjoCGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NDA5YjNhZDAtNDUxNi00NDgwLTlmYmMtNzNjMzk2ZjdiNzU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0rx0fbMzI2BNdsF0sZj2sFeR/jVk1xO/1NM NspNYSuIEHRaCPjfJsic1BtGzEC88jTNsOluWweDbV+7jKVbHyKPDYjDx4S5/Juf PJmQL0yQh3BRGbSzUs2HVmximuvVkmx61zRsfHEg8G+tHxDRJms7gkPv1EZtGKfD TXZu6l3PTALwW+V7AorXtasu4AVXSAo3u7LKqYUYZ0Gnqja/wSASosD3Do83zLoM N32ZnNvzcz+r1Pc315PlBSMrGyTJVF+GqqEd5ZP9xShZMFdHgDURX13XvHrPgEUn J8xhC3/NQc0sKWSx3DOfqAkDRYIs5D7LqlA1qcmvJ6WSKb4VxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCXBR9LUY7+NZmP02T3G5o/KAol1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNTQzNmQ0NTItMjEyZi0z Yzk5LTg3ZGUtMzNlNzRkYTQ5Y2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PDEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHbPNpwibZUc/FdNlm3s2Oy7O234yw88leGmDtZjdydg37aYnXFdblYn Wm7MKyZVYVbgUcriRlG9yYNoogdUQuo3T38vXC3fleTd8HRApcIKwKZRC0vY3ZUE Fx0LwIlHUqXY4Sr9XzI3vH0sTJdu8sm9T+PkK8KphBm4aLaLfTH96EhjOOSRvET5 sBGEr1DpAUKkiaS1d2akPSU4+FbQ1Mp+wxAdHPvKw55/r8C4e75WIJRcn5MLtfpm njrnXfdAcWus0jmDD24i6C095l39pwytUuhr7JrKEkJmNdA3MIpWSQPXNryd7x68 0li7xH+zxWLzQYXfkfnmx9L2B2U5Q8E= -----END CERTIFICATE-----Generated at Mon Oct 5 13:12:42 2026 by rpki-client