$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/891e530d-44f1-3c62-bce7-54770e9c3e8c.roa File: 891e530d-44f1-3c62-bce7-54770e9c3e8c.roa (raw, json) Hash identifier: cvannRRK+cQ6HANvNDV4mv/w4vw+Zm1l0lZf1AePNJM= Subject key identifier: CA:77:F6:18:65:62:9E:86:6F:22:52:39:D7:29:90:0E:EF:DD:26:10 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584F11A161E2D784BF98860F4820 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/891e530d-44f1-3c62-bce7-54770e9c3e8c.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 3360 IP address blocks: 206.164.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:a1:61:e2:d7:84:bf:98:86:0f:48:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=f1bb406a-316e-47dd-ab52-7110a6e71596 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:cc:11:ed:e2:40:6e:8d:99:6c:b5:0b:c9:0a: 3e:1b:6a:9b:25:fc:32:ba:60:bc:50:0f:52:52:e1: 25:1b:cc:41:ea:34:fb:9e:4e:14:37:bb:cc:1e:e7: 01:c1:4a:a3:6a:7c:36:40:2f:c6:8e:38:48:99:f9: 23:87:08:4a:49:b1:1e:f5:66:d7:7d:68:97:2f:28: 98:95:d7:27:32:fa:6c:16:51:ae:a0:27:f0:73:43: 16:2b:67:5a:60:aa:66:00:2e:d7:62:2f:d6:7c:5b: e3:03:c9:87:a9:3c:14:49:ae:bd:b1:10:00:9d:8b: 68:28:9f:2f:4f:44:1b:d1:ba:5f:3b:5f:63:51:29: 20:6f:fa:25:f8:f3:20:bf:99:b5:26:b5:c7:fc:b5: df:8f:f9:38:7f:95:21:0c:66:e9:b0:bc:99:3d:64: 59:54:d9:9a:62:e0:6a:46:8d:5e:2b:c2:1e:9e:8d: bc:04:b4:ff:6e:d1:a3:06:53:37:74:c9:6c:28:8f: 41:22:50:7f:f4:dd:93:58:cf:43:5c:51:db:0a:ae: e2:95:f9:88:65:a1:14:26:5d:01:07:d6:0a:6c:5f: b9:14:36:bc:6d:e8:5d:4f:94:d1:67:43:24:af:e2: 0f:28:f2:96:13:16:47:7d:2f:8d:63:a6:33:29:79: ad:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:77:F6:18:65:62:9E:86:6F:22:52:39:D7:29:90:0E:EF:DD:26:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/891e530d-44f1-3c62-bce7-54770e9c3e8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 206.164.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:78:86:45:c3:d0:7e:b5:61:47:54:46:26:c4:84:00:4a:6c: 8d:f3:de:ca:6d:d6:ea:52:4d:bb:5a:72:86:7b:44:47:e7:4e: 97:5c:3f:aa:4a:ee:4c:10:98:29:b2:ef:63:62:18:bd:c1:cd: 83:3c:25:b7:65:45:7d:41:8e:70:9c:b1:cd:5e:dd:9d:d9:b5: 4a:66:ac:7f:96:25:e1:24:c3:b4:fd:97:29:13:d2:2c:fc:c3: 06:43:f2:05:2d:78:7f:b9:94:c8:e7:69:b0:4b:19:f1:1a:33: 38:91:e9:d4:13:7e:b8:ee:49:e2:a9:e3:fb:27:64:97:b2:42: e5:ca:1f:bb:5c:2d:4e:df:a0:fe:6a:7d:3d:aa:ab:36:f6:aa: cc:36:bb:6f:99:3f:79:fc:d5:03:5a:d6:b7:ff:1f:4d:a5:29: 5d:ba:71:3d:e4:ae:e8:87:20:ed:8a:45:7f:8a:29:b6:92:12: bc:8d:48:64:ba:5e:65:03:7d:2b:3f:5d:78:a9:ad:d7:1c:48: 3e:64:97:29:21:2e:15:ea:db:83:f9:84:24:b7:d3:be:c8:27: 68:30:3c:53:df:2e:45:76:d7:7d:92:88:a8:5a:76:ee:4b:f1: df:e6:c7:84:bb:cf:75:36:ca:c6:4d:bf:ea:14:53:aa:e4:ad: c8:71:eb:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RoWHi14S/mIYPSCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjFiYjQwNmEtMzE2ZS00N2RkLWFiNTItNzExMGE2ZTcxNTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8wR7eJAbo2ZbLULyQo+G2qbJfwyumC8UA9S UuElG8xB6jT7nk4UN7vMHucBwUqjanw2QC/GjjhImfkjhwhKSbEe9WbXfWiXLyiY ldcnMvpsFlGuoCfwc0MWK2daYKpmAC7XYi/WfFvjA8mHqTwUSa69sRAAnYtoKJ8v T0Qb0bpfO19jUSkgb/ol+PMgv5m1JrXH/LXfj/k4f5UhDGbpsLyZPWRZVNmaYuBq Ro1eK8Ieno28BLT/btGjBlM3dMlsKI9BIlB/9N2TWM9DXFHbCq7ilfmIZaEUJl0B B9YKbF+5FDa8behdT5TRZ0Mkr+IPKPKWExZHfS+NY6YzKXmt9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMp39hhlYp6GbyJSOdcpkA7v3SYQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvODkxZTUzMGQtNDRmMS0z YzYyLWJjZTctNTQ3NzBlOWMzZThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqSJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABR4hkXD0H61YUdURibEhABKbI3z3spt1upSTbtacoZ7REfnTpdcP6pK 7kwQmCmy72NiGL3BzYM8JbdlRX1BjnCcsc1e3Z3ZtUpmrH+WJeEkw7T9lykT0iz8 wwZD8gUteH+5lMjnabBLGfEaMziR6dQTfrjuSeKp4/snZJeyQuXKH7tcLU7foP5q fT2qqzb2qsw2u2+ZP3n81QNa1rf/H02lKV26cT3kruiHIO2KRX+KKbaSEryNSGS6 XmUDfSs/XXiprdccSD5klykhLhXq24P5hCS3077IJ2gwPFPfLkV2132SiKhadu5L 8d/mx4S7z3U2ysZNv+oUU6rkrchx60g= -----END CERTIFICATE-----Generated at Tue Oct 6 20:25:29 2026 by rpki-client