$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a138f2ed-6160-3698-8b3c-5f44e59b68ad.roa File: a138f2ed-6160-3698-8b3c-5f44e59b68ad.roa (raw, json) Hash identifier: /ApGlSE/OkHnkrRfqI2EQkjlC0ok2i5IZUxbRJmqQKc= Subject key identifier: 57:13:F2:33:B0:F3:92:16:4B:59:20:08:14:15:04:5A:D3:F5:6D:1B Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584F497611706EBEFF72C3041FA0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a138f2ed-6160-3698-8b3c-5f44e59b68ad.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 3360 IP address blocks: 192.57.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:11:70:6e:be:ff:72:c3:04:1f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0b605e29-823c-4372-9d7a-115f271d6a4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e1:3b:a4:30:1c:84:e3:91:1a:33:5a:7f:6c: fe:32:3f:74:ca:01:a7:06:5e:50:ba:51:95:9c:2d: 16:3e:65:27:5d:45:09:16:75:d4:c0:bc:56:05:a3: 26:0f:9b:a8:b3:c0:07:ae:31:bf:28:46:db:0a:45: f0:c1:d1:83:99:24:0d:8f:5f:e0:80:b8:ab:50:66: 2a:1b:3c:c3:a7:f5:88:73:75:53:03:54:69:65:0e: ef:12:5e:c6:7e:cd:44:44:c5:1f:e6:11:13:d6:c2: 05:1d:70:46:25:87:15:d1:82:8d:19:64:ca:44:88: 08:1a:54:23:b6:fa:4a:80:76:48:12:e2:e6:ad:22: b9:a2:89:4b:34:d9:11:0d:fd:5e:f5:11:52:78:74: e9:ac:8b:a1:18:1d:b5:45:c5:c1:64:01:95:0c:3e: db:87:73:82:ba:71:0d:88:13:2e:66:12:10:bb:cb: 9c:6d:71:94:03:fd:e0:9c:b4:ab:d5:9b:8d:c6:66: dd:4d:37:ce:60:fd:a4:16:09:1a:27:8b:96:ae:4b: 4d:21:85:bb:59:5e:68:dc:af:50:d6:75:05:07:26: a3:29:08:8f:db:74:53:e6:d6:71:35:3b:88:c1:59: 3a:5f:23:47:f3:01:59:a2:e3:0e:e2:0e:41:25:8f: 3b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:13:F2:33:B0:F3:92:16:4B:59:20:08:14:15:04:5A:D3:F5:6D:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a138f2ed-6160-3698-8b3c-5f44e59b68ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.57.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:45:49:69:6e:2c:fb:de:e4:67:ab:1c:d1:55:9a:b6:97:7f: 35:28:60:24:ad:6c:a2:25:5c:ae:c4:95:36:2d:85:3d:1a:5f: aa:61:a6:43:91:5a:e3:8d:62:38:f1:7f:b4:68:99:c8:ea:78: 53:54:81:04:f8:23:f9:0a:81:5c:b1:f9:5a:f2:01:46:0b:fa: a1:04:ae:9b:ad:f4:03:b5:ed:37:4e:64:3a:e9:57:4a:ff:1d: e3:d8:89:b3:6d:a4:ca:37:76:88:82:55:fd:db:ef:d8:68:21: aa:8d:b8:a5:4b:71:0d:96:22:c2:a3:67:d7:e3:2b:30:e2:30: a5:f0:d6:72:c2:f1:f4:c4:82:36:12:59:54:8c:a3:7c:63:eb: aa:5d:bd:e5:83:a1:b3:f4:9b:48:0b:d1:cc:27:91:0b:26:86: 89:56:bd:39:f9:c4:10:b7:04:02:35:1a:de:b7:38:f2:9d:53: 6c:64:58:e2:2b:90:66:ed:ae:94:94:2b:5f:91:66:95:eb:e4: 4d:26:8c:8a:7a:94:2f:37:4f:fa:cd:aa:69:e4:dc:8a:38:75: 2e:60:87:8b:80:da:d0:b6:f4:56:b2:e0:57:9f:32:de:c9:a1: 5b:b2:43:e5:ff:6c:5e:0c:44:7c:52:a6:a7:a9:ec:68:38:a7: c7:83:4f:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdhFwbr7/csMEH6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MGI2MDVlMjktODIzYy00MzcyLTlkN2EtMTE1ZjI3MWQ2YTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeE7pDAchOORGjNaf2z+Mj90ygGnBl5QulGV nC0WPmUnXUUJFnXUwLxWBaMmD5uos8AHrjG/KEbbCkXwwdGDmSQNj1/ggLirUGYq GzzDp/WIc3VTA1RpZQ7vEl7Gfs1ERMUf5hET1sIFHXBGJYcV0YKNGWTKRIgIGlQj tvpKgHZIEuLmrSK5oolLNNkRDf1e9RFSeHTprIuhGB21RcXBZAGVDD7bh3OCunEN iBMuZhIQu8ucbXGUA/3gnLSr1ZuNxmbdTTfOYP2kFgkaJ4uWrktNIYW7WV5o3K9Q 1nUFByajKQiP23RT5tZxNTuIwVk6XyNH8wFZouMO4g5BJY87YQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFcT8jOw85IWS1kgCBQVBFrT9W0bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYTEzOGYyZWQtNjE2MC0z Njk4LThiM2MtNWY0NGU1OWI2OGFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDlwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABdFSWluLPve5GerHNFVmraXfzUoYCStbKIlXK7ElTYthT0aX6phpkOR WuONYjjxf7RomcjqeFNUgQT4I/kKgVyx+VryAUYL+qEErput9AO17TdOZDrpV0r/ HePYibNtpMo3doiCVf3b79hoIaqNuKVLcQ2WIsKjZ9fjKzDiMKXw1nLC8fTEgjYS WVSMo3xj66pdveWDobP0m0gL0cwnkQsmholWvTn5xBC3BAI1Gt63OPKdU2xkWOIr kGbtrpSUK1+RZpXr5E0mjIp6lC83T/rNqmnk3Io4dS5gh4uA2tC29Fay4FefMt7J oVuyQ+X/bF4MRHxSpqep7Gg4p8eDT3M= -----END CERTIFICATE-----Generated at Mon Oct 5 13:34:04 2026 by rpki-client