$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6afa0bde-43f6-3473-8d53-f2d3ac9bc38e.roa File: 6afa0bde-43f6-3473-8d53-f2d3ac9bc38e.roa (raw, json) Hash identifier: lZlO+40PQGeBLQof1VEbgippFjlTii3q8NvcTWNygEo= Subject key identifier: 41:31:79:91:70:46:D9:75:C0:60:41:1A:41:CA:F3:6D:72:FB:48:38 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584F497727B223035F8EFE3892D0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6afa0bde-43f6-3473-8d53-f2d3ac9bc38e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 3356 IP address blocks: 204.104.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:77:27:b2:23:03:5f:8e:fe:38:92:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=578a2d3b-70dc-49a5-b774-4fe2038a83cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:80:24:b3:5c:71:26:91:9d:7a:d1:f7:4e:68: c0:c5:e5:47:d8:c7:f8:f2:e7:43:b7:e9:03:83:30: b5:42:26:ac:5e:18:05:90:d4:1c:50:90:4e:68:14: 2d:12:ea:3f:9e:d4:d6:e5:3c:f0:9d:2b:61:de:61: 3b:b6:72:aa:c9:33:87:69:c5:e0:6d:50:81:7d:e5: 9c:be:68:71:13:ca:83:52:ea:40:93:e8:f7:91:fa: 58:10:35:ec:31:74:b5:67:93:a6:e0:be:1f:41:c0: a3:da:3d:92:0b:42:d4:ec:7c:06:ba:8b:8a:ab:fc: c3:00:f3:8e:93:a3:08:2d:a9:2a:0a:fe:f6:b6:8a: b0:a5:eb:73:f0:c6:44:48:be:0a:50:34:8a:2d:69: 84:9e:8a:b5:6b:0d:a2:93:62:b6:99:3a:4e:20:42: a1:55:85:6b:cc:fa:fc:d4:e8:0a:85:f9:63:3a:38: 3f:3f:d9:a5:93:fc:a0:bc:cc:9d:b4:77:ee:74:23: 3c:84:7e:a2:20:7b:d9:78:7d:d6:f9:bb:95:53:1a: 19:8a:02:3a:b8:e0:1a:cd:6c:e0:9d:c6:8c:c7:ba: 33:a0:87:83:39:8d:56:33:a0:a1:2c:39:f4:6d:4c: eb:c6:b4:7b:87:a3:ab:3e:9d:1a:f3:02:38:9e:80: a9:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:31:79:91:70:46:D9:75:C0:60:41:1A:41:CA:F3:6D:72:FB:48:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6afa0bde-43f6-3473-8d53-f2d3ac9bc38e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 204.104.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:68:9f:96:15:15:a4:3c:3f:bb:d1:67:79:74:49:1c:3a:29: 17:c3:cb:9a:c2:dc:10:4e:7e:7d:b2:bc:85:b4:eb:15:37:eb: f0:6c:e0:ce:97:8d:1c:43:ac:89:40:55:be:68:38:51:a8:07: e8:62:63:e9:b7:e2:1f:6c:d4:e1:7b:dd:47:46:4b:cb:4a:7f: 5f:97:8c:db:6e:47:64:e2:ce:11:96:6f:00:39:a9:67:56:7c: 2c:1c:c7:31:14:fe:1d:0b:84:4d:be:f5:45:18:4f:7f:34:42: ed:c8:a1:0e:ee:ab:15:ea:a1:ea:2e:f9:5f:73:a4:00:8e:97: 5b:d8:04:b6:86:83:76:3e:d1:3e:2e:64:49:87:1b:3f:a5:69: fc:9e:3d:0e:33:3b:16:f6:9c:da:b7:84:7c:f2:00:06:51:16: 10:9b:67:19:53:c8:4b:16:ff:b6:5b:68:f2:5e:38:70:d7:b3: 7a:20:e6:bc:c1:9a:51:5a:b7:4f:ac:85:78:23:39:35:00:cb: 3f:bd:82:f3:ce:80:04:88:db:9f:d9:9e:08:46:5b:c0:72:80: 29:58:59:dd:07:a4:57:ec:40:09:65:94:b6:a4:cb:60:b1:f2: 50:4f:37:8e:cb:e5:fd:e9:b9:5d:35:f5:13:66:52:b7:a4:09: 73:9d:3f:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdyeyIwNfjv44ktAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTc4YTJkM2ItNzBkYy00OWE1LWI3NzQtNGZlMjAzOGE4M2NmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0oAks1xxJpGdetH3TmjAxeVH2Mf48udDt+kD gzC1QiasXhgFkNQcUJBOaBQtEuo/ntTW5TzwnSth3mE7tnKqyTOHacXgbVCBfeWc vmhxE8qDUupAk+j3kfpYEDXsMXS1Z5Om4L4fQcCj2j2SC0LU7HwGuouKq/zDAPOO k6MILakqCv72toqwpetz8MZESL4KUDSKLWmEnoq1aw2ik2K2mTpOIEKhVYVrzPr8 1OgKhfljOjg/P9mlk/ygvMydtHfudCM8hH6iIHvZeH3W+buVUxoZigI6uOAazWzg ncaMx7ozoIeDOY1WM6ChLDn0bUzrxrR7h6OrPp0a8wI4noCpIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEExeZFwRtl1wGBBGkHK821y+0g4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNmFmYTBiZGUtNDNmNi0z NDczLThkNTMtZjJkM2FjOWJjMzhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGjQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC5on5YVFaQ8P7vRZ3l0SRw6KRfDy5rC3BBOfn2yvIW06xU36/Bs4M6X jRxDrIlAVb5oOFGoB+hiY+m34h9s1OF73UdGS8tKf1+XjNtuR2TizhGWbwA5qWdW fCwcxzEU/h0LhE2+9UUYT380Qu3IoQ7uqxXqoeou+V9zpACOl1vYBLaGg3Y+0T4u ZEmHGz+lafyePQ4zOxb2nNq3hHzyAAZRFhCbZxlTyEsW/7ZbaPJeOHDXs3og5rzB mlFat0+shXgjOTUAyz+9gvPOgASI25/ZnghGW8BygClYWd0HpFfsQAlllLaky2Cx 8lBPN47L5f3puV019RNmUrekCXOdP/c= -----END CERTIFICATE-----Generated at Sun Nov 15 15:37:47 2026 by rpki-client