$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9a515169-086f-3c00-9825-cd467941e123.roa File: 9a515169-086f-3c00-9825-cd467941e123.roa (raw, json) Hash identifier: g0HxNnv18/SHMGVxYVde/Dy+SQL3JGAn77S+AiUhHUY= Subject key identifier: D6:93:41:E3:A5:5B:5B:49:24:35:CD:07:58:62:AA:07:CE:44:E5:B1 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584D0A77ABAD8AA825CB0C75E0C0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9a515169-086f-3c00-9825-cd467941e123.roa Signing time: Tue 03 Mar 2026 02:00:32 +0000 ROA not before: Tue 03 Mar 2026 02:00:32 +0000 ROA not after: Mon 01 Jun 2026 01:00:32 +0000 asID: 202 IP address blocks: 192.238.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 13 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0a:77:ab:ad:8a:a8:25:cb:0c:75:e0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 3 02:00:32 2026 GMT Not After : Jun 1 01:00:32 2026 GMT Subject: CN=45e2e289-0468-4555-a826-36f7be1ef06e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:32:a8:de:12:c8:dd:d5:1e:45:2e:eb:70:f3: 0d:a9:38:9a:b3:21:d1:95:77:9c:0d:8e:52:78:15: 3d:d0:48:98:16:cb:64:0b:32:68:67:c4:af:af:1e: f5:9f:bb:e3:d2:e7:26:9b:de:c7:9e:5d:99:af:a3: 39:a0:c2:8b:5a:60:ef:4c:7a:36:94:53:50:79:97: ee:f4:fb:41:28:5d:1f:83:47:17:bb:4d:cf:33:34: 64:2d:d9:bd:23:82:03:24:df:3f:56:69:e5:1a:65: 3a:45:47:68:d2:bd:47:9c:8a:50:86:56:50:e7:e1: 23:27:81:e0:b2:50:ea:14:ab:7c:48:f0:0e:a6:c4: 1b:57:ff:6b:04:23:72:2f:3d:64:ac:e1:11:7d:28: 9f:80:37:00:2e:e6:4c:25:9f:30:c5:5e:a1:34:1d: 60:7f:2f:0f:23:da:51:70:95:2c:4c:28:b9:b9:0e: 05:36:92:c0:b4:0f:c0:18:6e:cd:44:65:58:3e:6c: a8:6f:9c:4d:c9:c1:1e:6f:6a:92:90:a7:a7:d9:ea: 35:2d:93:c3:bb:d4:57:86:8d:ee:a3:6b:18:d6:68: ba:76:5b:29:af:28:71:16:03:b8:38:c0:c1:54:60: a7:43:49:02:04:51:e1:bd:2e:cd:60:39:43:5e:f3: 2a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:93:41:E3:A5:5B:5B:49:24:35:CD:07:58:62:AA:07:CE:44:E5:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9a515169-086f-3c00-9825-cd467941e123.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.238.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:90:81:83:23:4b:2d:f2:5a:0d:e0:45:58:1e:c8:b8:32:a1: 3b:36:f1:cc:eb:36:51:a9:c4:90:fa:78:f2:f9:d5:33:50:ab: 58:96:0a:43:1a:70:ec:75:68:ec:4e:1c:71:a1:c9:4f:6c:f9: 3a:ec:b0:40:ef:30:65:48:9e:15:b5:57:3b:e6:dc:b7:f5:fc: 07:6d:04:8a:d2:30:f1:87:cf:ab:a7:09:90:4b:6c:e6:80:fa: d8:7a:f4:99:89:71:3c:e5:1f:54:97:bc:2d:56:79:02:0b:62: 50:99:34:51:90:cc:7b:79:63:4c:1e:b1:a2:e7:ab:37:d0:1f: 7b:ab:ae:29:f5:a8:4e:2b:39:78:03:71:dc:a6:59:11:5a:e1: 42:e2:c6:a1:f6:89:30:3f:7f:44:dc:53:4c:0c:e5:ab:44:fb: 08:48:26:f9:e4:2f:da:58:9e:2b:15:3e:9c:41:a4:bd:da:ca: cd:f2:75:e8:67:7e:33:f3:21:20:a4:b9:6e:21:d0:d0:d7:e5: 42:62:9f:02:4e:94:ff:98:07:07:2e:78:ae:49:6c:4e:bd:e0: c3:fc:78:35:e3:1a:a6:b0:f5:24:f2:78:1f:de:6b:f0:af:46: 8e:19:61:d0:ee:d6:b4:5e:57:cf:71:39:50:ba:b2:24:5e:4e: 76:b0:60:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Kd6utiqglywx14MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDMwMzAyMDAzMloXDTI2MDYwMTAxMDAzMlowLzEtMCsGA1UEAxMk NDVlMmUyODktMDQ2OC00NTU1LWE4MjYtMzZmN2JlMWVmMDZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDKo3hLI3dUeRS7rcPMNqTiasyHRlXecDY5S eBU90EiYFstkCzJoZ8Svrx71n7vj0ucmm97Hnl2Zr6M5oMKLWmDvTHo2lFNQeZfu 9PtBKF0fg0cXu03PMzRkLdm9I4IDJN8/VmnlGmU6RUdo0r1HnIpQhlZQ5+EjJ4Hg slDqFKt8SPAOpsQbV/9rBCNyLz1krOERfSifgDcALuZMJZ8wxV6hNB1gfy8PI9pR cJUsTCi5uQ4FNpLAtA/AGG7NRGVYPmyob5xNycEeb2qSkKen2eo1LZPDu9RXho3u o2sY1mi6dlspryhxFgO4OMDBVGCnQ0kCBFHhvS7NYDlDXvMqmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNaTQeOlW1tJJDXNB1hiqgfOROWxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvOWE1MTUxNjktMDg2Zi0z YzAwLTk4MjUtY2Q0Njc5NDFlMTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwO44MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJSQgYMjSy3yWg3gRVgeyLgyoTs28czrNlGpxJD6ePL51TNQq1iWCkMa cOx1aOxOHHGhyU9s+TrssEDvMGVInhW1Vzvm3Lf1/AdtBIrSMPGHz6unCZBLbOaA +th69JmJcTzlH1SXvC1WeQILYlCZNFGQzHt5Y0wesaLnqzfQH3urrin1qE4rOXgD cdymWRFa4ULixqH2iTA/f0TcU0wM5atE+whIJvnkL9pYnisVPpxBpL3ays3ydehn fjPzISCkuW4h0NDX5UJinwJOlP+YBwcueK5JbE694MP8eDXjGqaw9STyeB/ea/Cv Ro4ZYdDu1rReV89xOVC6siReTnawYBE= -----END CERTIFICATE-----Generated at Wed Mar 11 20:54:18 2026 by rpki-client