$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/7af485d2-1411-389c-a251-d3d163a361e3.roa File: 7af485d2-1411-389c-a251-d3d163a361e3.roa (raw, json) Hash identifier: O92Nh6gg5trVUbNcLfMuOP25DwC0kDd7AxE42Bvpj20= Subject key identifier: 09:AC:0E:0A:A0:A8:BC:14:4E:9D:1F:EC:8A:97:09:4C:FE:F2:38:47 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584E0005E2BB7CEEE0CDB3296240 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/7af485d2-1411-389c-a251-d3d163a361e3.roa Signing time: Sat 30 May 2026 01:00:10 +0000 ROA not before: Sat 30 May 2026 01:00:10 +0000 ROA not after: Fri 28 Aug 2026 01:00:10 +0000 asID: 203 IP address blocks: 192.57.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:00:05:e2:bb:7c:ee:e0:cd:b3:29:62:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: May 30 01:00:10 2026 GMT Not After : Aug 28 01:00:10 2026 GMT Subject: CN=78a549d0-4bbb-4b99-a3e6-20406fd590b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:bc:f1:d9:0a:1b:bf:3d:3f:c4:7d:52:13:fb: 4d:9b:33:56:08:9b:97:0d:3d:cd:a4:5d:0f:50:42: 99:ab:af:00:46:14:e9:93:10:3e:9b:25:e1:90:ec: 1f:1c:d5:4b:75:da:f9:99:08:fb:48:ed:83:e1:c4: 4d:f1:17:96:f9:28:73:28:87:af:dc:06:ec:69:ce: 63:3b:48:0d:d6:1d:29:a8:2a:1c:f9:ca:69:f1:21: 5b:6f:23:6a:bd:78:ec:ae:f3:de:d7:6a:7b:ad:78: 25:18:29:61:62:69:10:f8:04:ef:08:88:4e:6a:88: fa:b4:80:4e:a3:28:27:a0:0e:11:2a:86:37:53:60: a1:f2:c1:ec:b6:a2:54:d7:97:4c:0f:db:67:94:99: 80:e5:ae:b0:52:3c:bb:57:f4:27:30:50:5e:2b:80: f2:ad:bd:34:42:fb:93:42:46:d3:f6:6b:dc:02:cf: dd:d8:f6:90:5a:55:5e:9e:da:74:80:35:09:c7:8d: ba:79:14:14:97:c9:36:9a:06:ba:4e:a9:a4:39:14: 9f:34:39:91:0f:5f:3e:58:71:e2:62:f9:5b:bb:51: 5a:37:a3:45:61:c1:aa:48:3c:91:df:c0:52:e5:88: dd:f3:fa:e0:d7:07:e5:04:23:1c:64:6c:55:27:64: 7a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:AC:0E:0A:A0:A8:BC:14:4E:9D:1F:EC:8A:97:09:4C:FE:F2:38:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/7af485d2-1411-389c-a251-d3d163a361e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.57.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:56:94:34:c1:47:f3:b8:31:cf:35:1a:af:d4:94:86:9d:fa: fe:66:a8:cb:56:e7:8e:86:7e:5d:e7:eb:0e:37:76:0b:23:be: 52:11:6e:ff:5d:64:cb:1f:67:81:ba:a2:7e:48:5f:73:f1:38: 5b:67:c8:ab:9b:cf:43:3d:21:c7:61:9a:94:e0:a5:c6:92:26: d4:bb:3c:31:8d:ef:5d:33:a2:9c:bf:1f:93:6a:43:34:63:cd: 06:d0:59:6f:db:7d:16:30:85:f4:30:31:59:ef:c0:6f:5d:68: 15:ef:f0:46:09:e3:58:9f:3b:4c:f5:b1:3c:9c:6b:19:41:87: f8:15:3b:71:70:aa:21:df:3a:db:d0:cc:14:c7:4f:3e:b5:01: fc:83:54:cd:d1:87:2e:cb:1a:d3:7e:5d:a7:58:ee:5c:3d:83: 93:b0:f9:a2:8b:9d:1e:07:c5:f7:21:7e:01:83:e8:bb:35:cd: 0f:fd:30:75:53:aa:3d:db:f9:c2:f4:f8:d8:40:2a:15:72:52: 9a:19:24:20:98:ac:a4:da:e7:a5:a9:51:f2:2f:5b:12:52:e7: fb:51:d4:b0:27:26:32:aa:10:b3:70:12:5a:5d:40:5c:61:89: cc:3c:34:f9:a9:50:fe:eb:9b:08:21:ef:1a:c8:39:79:93:b0: cc:f2:fd:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ABeK7fO7gzbMpYkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDUzMDAxMDAxMFoXDTI2MDgyODAxMDAxMFowLzEtMCsGA1UEAxMk NzhhNTQ5ZDAtNGJiYi00Yjk5LWEzZTYtMjA0MDZmZDU5MGIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrzx2Qobvz0/xH1SE/tNmzNWCJuXDT3NpF0P UEKZq68ARhTpkxA+myXhkOwfHNVLddr5mQj7SO2D4cRN8ReW+ShzKIev3Absac5j O0gN1h0pqCoc+cpp8SFbbyNqvXjsrvPe12p7rXglGClhYmkQ+ATvCIhOaoj6tIBO oygnoA4RKoY3U2Ch8sHstqJU15dMD9tnlJmA5a6wUjy7V/QnMFBeK4Dyrb00QvuT QkbT9mvcAs/d2PaQWlVentp0gDUJx426eRQUl8k2mga6TqmkORSfNDmRD18+WHHi Yvlbu1FaN6NFYcGqSDyR38BS5Yjd8/rg1wflBCMcZGxVJ2R6vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAmsDgqgqLwUTp0f7IqXCUz+8jhHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvN2FmNDg1ZDItMTQxMS0z ODljLWEyNTEtZDNkMTYzYTM2MWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwDmYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJlWlDTBR/O4Mc81Gq/UlIad+v5mqMtW546Gfl3n6w43dgsjvlIRbv9d ZMsfZ4G6on5IX3PxOFtnyKubz0M9IcdhmpTgpcaSJtS7PDGN710zopy/H5NqQzRj zQbQWW/bfRYwhfQwMVnvwG9daBXv8EYJ41ifO0z1sTycaxlBh/gVO3FwqiHfOtvQ zBTHTz61AfyDVM3Rhy7LGtN+XadY7lw9g5Ow+aKLnR4HxfchfgGD6Ls1zQ/9MHVT qj3b+cL0+NhAKhVyUpoZJCCYrKTa56WpUfIvWxJS5/tR1LAnJjKqELNwElpdQFxh icw8NPmpUP7rmwgh7xrIOXmTsMzy/SI= -----END CERTIFICATE-----Generated at Mon Jun 8 17:55:44 2026 by rpki-client