$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9a515169-086f-3c00-9825-cd467941e123.roa File: 9a515169-086f-3c00-9825-cd467941e123.roa (raw, json) Hash identifier: lg8TzcadnGAirtDbnpI3wUytT9ZmN4ZD7+HQF7tS8Kk= Subject key identifier: 50:DD:60:30:9A:78:AE:4D:D2:11:3A:10:7B:31:8A:80:4B:A6:80:13 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584F49771A2656AEA89283888D00 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9a515169-086f-3c00-9825-cd467941e123.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 202 IP address blocks: 192.238.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:77:1a:26:56:ae:a8:92:83:88:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=41d7b8db-7573-4902-911b-7251bf654380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ca:a6:59:b6:5c:95:4d:06:40:ac:83:43:41: cd:a4:6f:6d:3c:6f:29:8e:a9:3c:b0:cb:45:c2:08: 76:a6:99:6a:c0:28:e7:f7:12:54:52:3f:ac:25:77: c5:d6:26:02:8c:5a:b5:2d:19:9a:e9:14:ff:18:1f: 5c:a2:e2:8e:aa:0f:94:e7:21:96:a3:40:75:c6:32: 1b:40:72:b8:8e:a0:e7:91:d9:3c:36:33:a4:9c:fa: 23:72:2b:10:f9:22:db:7e:0e:e5:c9:6d:d1:81:7e: bc:6b:71:cb:9e:7a:4f:7a:4f:db:55:3e:e7:86:4d: 46:a6:e2:91:34:3e:a1:2e:5f:af:b2:3b:df:0b:aa: 6d:4b:cf:e7:84:7a:0d:9d:3e:ef:ac:b6:3a:d2:ab: 6b:9e:ff:5a:e8:f7:06:22:17:c2:99:8e:a9:f4:6c: 1c:a4:78:86:b7:ad:1d:84:9e:bd:bc:70:1d:2c:4c: 87:e9:a2:2b:33:76:b6:97:9d:76:92:8b:b4:0f:f0: 3a:f0:08:77:be:1b:f3:96:ef:8e:8a:43:ed:50:2a: 60:e1:be:cf:e6:f4:06:cc:61:4e:6d:84:0c:9d:39: ed:8f:13:e3:e3:d4:9c:31:50:b6:09:38:e7:24:db: 7e:08:4c:e5:b0:00:12:5e:97:44:b3:f1:ae:75:d0: 29:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:DD:60:30:9A:78:AE:4D:D2:11:3A:10:7B:31:8A:80:4B:A6:80:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9a515169-086f-3c00-9825-cd467941e123.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.238.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:a2:ad:60:b5:31:79:26:9a:20:1e:d7:20:cf:ca:5d:cc:d5: a2:b8:3d:0d:53:70:47:95:f2:7a:cd:51:ef:09:3d:ad:d1:9f: e1:db:9d:45:21:9b:34:51:ce:1f:10:dd:ec:aa:9c:43:2d:ed: 4b:13:68:36:7f:51:87:4f:57:32:51:c4:e2:fc:09:61:30:17: f1:6a:d3:5a:04:38:a4:12:40:62:6e:77:8e:ff:df:cd:87:d4: 97:f4:fb:d0:b5:49:f8:2b:a0:5d:a3:72:38:74:f7:b9:62:f8: cc:16:d4:27:29:e8:26:7e:35:96:d7:d0:4f:f9:ab:51:73:29: 86:31:96:62:60:86:64:14:cd:ff:f4:8a:7b:62:de:b3:50:21: 05:c0:2d:2a:e0:22:b3:14:9f:f9:80:7b:4c:be:e9:d8:7c:4c: a3:0d:bf:24:53:48:d8:a3:44:26:17:4b:97:a2:24:37:73:f0: 6f:11:28:ca:d8:80:c7:fa:f6:88:a7:26:78:f0:b8:05:e9:3f: e2:4d:2d:e5:78:80:8b:78:03:4f:bf:48:f8:03:70:9b:33:87: 43:a4:ac:79:01:9b:2d:a4:71:6a:8b:76:1f:86:02:9d:4d:48: f9:b5:0a:76:d6:03:05:a7:fa:e5:f6:14:ab:69:e1:83:b1:c7: 7e:48:3d:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdxomVq6okoOIjQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NDFkN2I4ZGItNzU3My00OTAyLTkxMWItNzI1MWJmNjU0MzgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8qmWbZclU0GQKyDQ0HNpG9tPG8pjqk8sMtF wgh2pplqwCjn9xJUUj+sJXfF1iYCjFq1LRma6RT/GB9couKOqg+U5yGWo0B1xjIb QHK4jqDnkdk8NjOknPojcisQ+SLbfg7lyW3RgX68a3HLnnpPek/bVT7nhk1GpuKR ND6hLl+vsjvfC6ptS8/nhHoNnT7vrLY60qtrnv9a6PcGIhfCmY6p9GwcpHiGt60d hJ69vHAdLEyH6aIrM3a2l512kou0D/A68Ah3vhvzlu+OikPtUCpg4b7P5vQGzGFO bYQMnTntjxPj49ScMVC2CTjnJNt+CEzlsAASXpdEs/GuddApSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFDdYDCaeK5N0hE6EHsxioBLpoATMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvOWE1MTUxNjktMDg2Zi0z YzAwLTk4MjUtY2Q0Njc5NDFlMTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwO44MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIairWC1MXkmmiAe1yDPyl3M1aK4PQ1TcEeV8nrNUe8JPa3Rn+HbnUUh mzRRzh8Q3eyqnEMt7UsTaDZ/UYdPVzJRxOL8CWEwF/Fq01oEOKQSQGJud47/382H 1Jf0+9C1SfgroF2jcjh097li+MwW1Ccp6CZ+NZbX0E/5q1FzKYYxlmJghmQUzf/0 inti3rNQIQXALSrgIrMUn/mAe0y+6dh8TKMNvyRTSNijRCYXS5eiJDdz8G8RKMrY gMf69oinJnjwuAXpP+JNLeV4gIt4A0+/SPgDcJszh0OkrHkBmy2kcWqLdh+GAp1N SPm1CnbWAwWn+uX2FKtp4YOxx35IPQA= -----END CERTIFICATE-----Generated at Tue Oct 6 15:46:50 2026 by rpki-client