$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ce286e78-8869-3b72-bd69-c4cc06be8f8c.roa File: ce286e78-8869-3b72-bd69-c4cc06be8f8c.roa (raw, json) Hash identifier: kmCmxFzbE/hvNtsPDZ5uMV8ROyovn7oktBamBw+2KJg= Subject key identifier: 9B:A8:40:F7:66:FD:1C:D5:8B:8C:C1:38:C6:3F:0B:57:5C:6F:19:17 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584D0D426BB52CD0F415571D1200 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ce286e78-8869-3b72-bd69-c4cc06be8f8c.roa Signing time: Wed 04 Mar 2026 02:00:32 +0000 ROA not before: Wed 04 Mar 2026 02:00:32 +0000 ROA not after: Tue 02 Jun 2026 01:00:32 +0000 asID: 202 IP address blocks: 216.240.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 13 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0d:42:6b:b5:2c:d0:f4:15:57:1d:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 4 02:00:32 2026 GMT Not After : Jun 2 01:00:32 2026 GMT Subject: CN=ba18e46f-f138-474c-87aa-817639023877 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:47:97:a7:c6:63:a0:71:8f:98:1e:81:90:b0: 3f:d4:9f:70:2a:59:18:d4:96:2d:6a:48:82:5a:eb: fd:91:00:23:76:c4:86:74:8d:6a:bd:c4:96:2e:4d: 92:75:83:6b:cf:1c:9d:0c:a9:b3:74:15:59:40:4b: bd:f5:79:12:40:c0:dd:35:db:e6:db:29:f5:7e:08: 35:e8:b5:16:88:41:7c:35:8c:d2:25:37:7e:2b:39: 63:88:1e:53:bf:07:38:2f:b0:ec:96:c3:4f:dd:a9: b2:cb:dd:4c:e4:9f:b0:17:69:8d:84:7d:d9:d9:6c: 07:ac:0d:31:1a:86:23:b1:a5:6a:ac:43:36:e1:83: 7d:c4:c8:69:bc:50:59:a6:ad:c6:a8:50:d6:4d:02: 5d:bc:fe:f6:9e:d8:ff:43:ac:b9:0e:b3:86:71:76: e4:10:f7:13:ff:dd:c1:4c:3f:1d:42:2a:36:58:a9: c9:dd:80:e1:0a:0d:f8:ff:3b:26:e2:a0:b5:23:94: 73:54:ea:9b:34:d2:83:38:a3:24:fb:c9:81:30:37: b9:8e:3e:75:74:9b:10:a0:7b:c2:1c:5b:32:08:52: 7d:9c:e8:3f:1d:1b:95:19:33:21:02:ac:eb:d1:8f: 99:4e:f5:99:14:ad:3d:7f:16:22:df:ec:4e:0b:38: 88:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:A8:40:F7:66:FD:1C:D5:8B:8C:C1:38:C6:3F:0B:57:5C:6F:19:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ce286e78-8869-3b72-bd69-c4cc06be8f8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 216.240.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:a0:e7:92:2c:45:ca:d3:0d:b7:b3:09:43:06:af:a2:e0:7d: c5:49:16:fa:20:37:71:b6:12:ff:af:5d:cf:a6:10:33:d4:6e: 51:77:91:96:5c:4a:c5:27:1f:89:36:7e:c6:cf:18:65:ee:5b: 23:5f:4f:84:61:f8:fe:52:96:a3:76:cc:a6:71:fd:6c:8b:ec: 9e:14:f3:d3:fa:62:cd:4a:dc:73:8c:7f:6a:1c:ce:e6:6e:f8: 64:f4:34:37:00:38:7d:28:c5:56:a0:48:6b:69:be:de:ed:f7: 6a:42:c7:1c:b8:51:08:c3:23:c1:33:80:8b:bd:30:8e:5b:29: a9:72:ac:41:53:b9:72:47:ad:d0:52:25:0f:42:51:e8:36:3a: 48:8a:30:b7:b0:25:36:c4:38:f0:a2:df:3c:a6:ba:41:ee:2c: d1:59:63:79:38:f6:95:9d:3e:2c:04:38:1a:bd:78:b8:ee:53: be:8d:5c:67:e2:f2:bc:f6:b5:dc:5a:4b:13:d0:e8:3d:e5:30: d5:62:34:41:27:b7:fd:89:02:ea:21:2b:3e:eb:ba:58:66:24: 7b:7c:59:67:1f:46:8a:37:e1:c1:4b:99:16:40:0c:39:35:6f: 4d:5b:29:3c:70:31:c3:cb:0a:20:c9:d7:6e:9d:a5:d8:a6:bd: 13:fd:6a:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0NQmu1LND0FVcdEgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDMwNDAyMDAzMloXDTI2MDYwMjAxMDAzMlowLzEtMCsGA1UEAxMk YmExOGU0NmYtZjEzOC00NzRjLTg3YWEtODE3NjM5MDIzODc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkeXp8ZjoHGPmB6BkLA/1J9wKlkY1JYtakiC Wuv9kQAjdsSGdI1qvcSWLk2SdYNrzxydDKmzdBVZQEu99XkSQMDdNdvm2yn1fgg1 6LUWiEF8NYzSJTd+KzljiB5Tvwc4L7DslsNP3amyy91M5J+wF2mNhH3Z2WwHrA0x GoYjsaVqrEM24YN9xMhpvFBZpq3GqFDWTQJdvP72ntj/Q6y5DrOGcXbkEPcT/93B TD8dQio2WKnJ3YDhCg34/zsm4qC1I5RzVOqbNNKDOKMk+8mBMDe5jj51dJsQoHvC HFsyCFJ9nOg/HRuVGTMhAqzr0Y+ZTvWZFK09fxYi3+xOCziIFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJuoQPdm/RzVi4zBOMY/C1dcbxkXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvY2UyODZlNzgtODg2OS0z YjcyLWJkNjktYzRjYzA2YmU4ZjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PDMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIag55IsRcrTDbezCUMGr6LgfcVJFvogN3G2Ev+vXc+mEDPUblF3kZZc SsUnH4k2fsbPGGXuWyNfT4Rh+P5SlqN2zKZx/WyL7J4U89P6Ys1K3HOMf2oczuZu +GT0NDcAOH0oxVagSGtpvt7t92pCxxy4UQjDI8EzgIu9MI5bKalyrEFTuXJHrdBS JQ9CUeg2OkiKMLewJTbEOPCi3zymukHuLNFZY3k49pWdPiwEOBq9eLjuU76NXGfi 8rz2tdxaSxPQ6D3lMNViNEEnt/2JAuohKz7rulhmJHt8WWcfRoo34cFLmRZADDk1 b01bKTxwMcPLCiDJ126dpdimvRP9apk= -----END CERTIFICATE-----Generated at Wed Mar 11 20:53:18 2026 by rpki-client