$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/615949a0-bfe1-3d2a-8b22-1a1a07e67d81.roa File: 615949a0-bfe1-3d2a-8b22-1a1a07e67d81.roa (raw, json) Hash identifier: CJi5UWLfn9QCrWj7TCd9kPyFA8NNH+4Ti6S3v5+kmJg= Subject key identifier: D5:8C:37:B6:59:74:4B:E0:29:01:4B:92:09:E8:60:4B:50:47:4A:38 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584D0A77AC1C23EF3E20ECBD7F00 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/615949a0-bfe1-3d2a-8b22-1a1a07e67d81.roa Signing time: Tue 03 Mar 2026 02:00:32 +0000 ROA not before: Tue 03 Mar 2026 02:00:32 +0000 ROA not after: Mon 01 Jun 2026 01:00:32 +0000 asID: 203 IP address blocks: 192.238.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0a:77:ac:1c:23:ef:3e:20:ec:bd:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 3 02:00:32 2026 GMT Not After : Jun 1 01:00:32 2026 GMT Subject: CN=f2d0f912-e8ac-4c1f-b5a9-06fa4c7728a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:1e:dd:11:db:fd:0d:02:6e:a9:0c:1f:0f:db: a8:5b:12:98:04:ea:a7:2e:5e:c9:5c:fb:ed:20:b2: 29:53:a9:b5:c8:aa:12:10:26:78:55:6f:80:14:60: da:10:12:a6:f8:6d:b7:33:5c:d6:39:0b:28:9f:8d: 03:d2:93:25:2c:9c:1a:b9:45:85:94:f2:ae:d7:91: 54:15:a0:f3:c9:65:6a:25:5a:99:06:00:3b:d9:19: 1a:9a:35:08:c6:32:f2:e6:ce:df:83:55:a9:4e:5b: fe:a0:66:66:fc:ec:db:76:c0:de:02:be:9f:5d:89: 46:ba:ae:cf:64:57:3a:11:16:11:ee:4a:1d:5a:88: e6:b4:bd:96:ee:b3:82:1d:1c:b9:43:9c:02:bc:90: fc:49:af:9e:2f:ae:0a:45:48:03:f0:37:9f:4c:8d: a6:2c:1f:f9:a1:c2:a3:c1:5f:6e:06:d3:5a:da:18: e0:42:b2:27:11:49:28:41:bd:d9:e1:5c:2e:ea:85: 68:c2:78:31:f0:81:1b:2b:79:d4:40:38:ab:c2:15: 0b:53:f4:d5:27:a7:59:a0:08:6e:b2:f7:14:4a:b8: 05:c5:2c:cf:6b:61:a1:d4:d9:b9:f3:59:5a:9c:50: 33:06:b4:6e:3a:25:5f:71:6d:4c:82:58:c5:06:73: ca:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:8C:37:B6:59:74:4B:E0:29:01:4B:92:09:E8:60:4B:50:47:4A:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/615949a0-bfe1-3d2a-8b22-1a1a07e67d81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.238.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:4d:72:10:76:ca:95:a1:f0:b6:e0:54:d3:fc:dc:82:a1:83: 7f:9f:01:06:49:8b:5f:9a:b1:df:38:fd:fb:05:0b:91:1c:a6: 92:eb:8a:bc:26:10:58:cd:77:22:5f:6d:df:98:6e:a4:90:ce: b7:ab:87:c4:d3:93:8e:40:b6:9b:a1:b9:23:a1:a7:ff:7a:78: a8:6c:b9:c9:0c:ae:cb:04:7b:42:a1:91:6c:bd:a5:50:96:27: 89:08:5a:17:be:38:b9:4d:ad:46:2f:21:da:6f:d6:f1:11:42: 75:c1:98:e2:f2:67:e3:ca:e0:31:ec:22:5c:93:d4:0c:94:6e: cf:67:3c:3b:5e:8b:35:90:cf:44:08:b6:84:08:ad:0b:94:9e: 5e:a9:fb:1c:d5:23:1c:51:38:89:bb:bb:fe:2b:26:1c:1b:bb: 24:b8:69:39:36:08:fe:39:55:a2:57:24:06:cf:59:9c:cd:9b: 36:2f:b0:69:13:82:dd:07:49:06:db:74:68:ce:86:db:48:a0: c6:2c:75:c2:c5:a2:b3:97:74:75:3b:2c:38:26:69:3c:28:0a: 82:7d:87:c6:15:71:3c:67:50:d8:c4:d8:ac:7f:ce:f2:ee:26: aa:b1:56:6f:48:34:b2:df:9a:b1:90:f8:dd:0a:71:c7:6d:cb: 66:6a:98:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Kd6wcI+8+IOy9fwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDMwMzAyMDAzMloXDTI2MDYwMTAxMDAzMlowLzEtMCsGA1UEAxMk ZjJkMGY5MTItZThhYy00YzFmLWI1YTktMDZmYTRjNzcyOGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoB7dEdv9DQJuqQwfD9uoWxKYBOqnLl7JXPvt ILIpU6m1yKoSECZ4VW+AFGDaEBKm+G23M1zWOQson40D0pMlLJwauUWFlPKu15FU FaDzyWVqJVqZBgA72RkamjUIxjLy5s7fg1WpTlv+oGZm/OzbdsDeAr6fXYlGuq7P ZFc6ERYR7kodWojmtL2W7rOCHRy5Q5wCvJD8Sa+eL64KRUgD8DefTI2mLB/5ocKj wV9uBtNa2hjgQrInEUkoQb3Z4Vwu6oVowngx8IEbK3nUQDirwhULU/TVJ6dZoAhu svcUSrgFxSzPa2Gh1Nm581lanFAzBrRuOiVfcW1MgljFBnPKQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNWMN7ZZdEvgKQFLkgnoYEtQR0o4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNjE1OTQ5YTAtYmZlMS0z ZDJhLThiMjItMWExYTA3ZTY3ZDgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwO45MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEVNchB2ypWh8LbgVNP83IKhg3+fAQZJi1+asd84/fsFC5EcppLrirwm EFjNdyJfbd+YbqSQzrerh8TTk45AtpuhuSOhp/96eKhsuckMrssEe0KhkWy9pVCW J4kIWhe+OLlNrUYvIdpv1vERQnXBmOLyZ+PK4DHsIlyT1AyUbs9nPDteizWQz0QI toQIrQuUnl6p+xzVIxxROIm7u/4rJhwbuyS4aTk2CP45VaJXJAbPWZzNmzYvsGkT gt0HSQbbdGjOhttIoMYsdcLForOXdHU7LDgmaTwoCoJ9h8YVcTxnUNjE2Kx/zvLu JqqxVm9INLLfmrGQ+N0Kccdty2ZqmIk= -----END CERTIFICATE-----Generated at Tue Mar 10 05:37:57 2026 by rpki-client