$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ded9227e-15fe-356c-88b9-2572ef63dc31.roa File: ded9227e-15fe-356c-88b9-2572ef63dc31.roa (raw, json) Hash identifier: 3mcpy9XGD9B+WPcbV7M0lLjxAt4BmnkbQDG5GVjEQzc= Subject key identifier: 91:1C:FE:C2:C1:CC:3A:B0:4D:56:E0:C0:4A:65:AB:B9:16:61:A9:B0 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584F497616F3028C382BF7905C80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ded9227e-15fe-356c-88b9-2572ef63dc31.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 3360 IP address blocks: 192.57.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:16:f3:02:8c:38:2b:f7:90:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=bd3383c4-0a26-48a3-90d2-c982e896d616 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:1c:99:9e:6a:6c:75:33:70:20:37:23:4a:7f: 11:85:d4:3e:a9:e4:7f:ff:71:d1:5f:1a:c7:f4:e1: fa:6b:39:44:6d:63:b6:6f:29:21:91:8c:03:a8:e3: be:24:8f:8a:94:38:00:77:f7:ba:52:21:a3:5b:3b: 04:58:10:83:dc:9e:49:b7:e0:c1:e5:a1:2d:a0:f0: 6f:4a:18:47:02:d5:40:96:5b:83:56:bd:6f:54:e2: 77:f1:0d:c8:2f:fb:f1:42:64:bd:41:35:0f:6a:76: e1:60:c9:bf:c0:0f:71:44:d4:14:38:e5:35:28:4d: 59:79:f9:2d:9f:c9:ca:19:8b:bb:27:e1:26:bd:d4: 06:3e:e1:0f:24:01:32:a8:0e:c2:87:84:2c:49:93: 32:b7:4e:32:09:6f:3d:f0:b9:fc:b9:18:63:a5:ed: 62:30:8b:46:f9:0e:06:b5:2f:03:c4:a0:42:9e:59: 74:1c:43:80:45:4d:ed:64:4f:02:c7:a2:d1:67:55: 4b:16:89:5c:7d:e8:52:81:c1:d4:aa:cb:73:01:2d: ad:50:5f:05:0e:22:cc:4e:6a:aa:ed:98:96:17:6f: 7f:ca:36:19:04:34:92:62:13:8f:77:d6:b3:33:3b: 8a:e9:1d:de:e1:bd:63:8c:6d:b6:a0:40:5b:38:fe: 87:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:1C:FE:C2:C1:CC:3A:B0:4D:56:E0:C0:4A:65:AB:B9:16:61:A9:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ded9227e-15fe-356c-88b9-2572ef63dc31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.57.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:03:84:6b:b1:48:70:21:c8:c9:16:5b:b1:fb:aa:16:65:37: be:ee:99:58:58:59:1c:84:68:27:9d:1d:32:82:77:0a:dd:c9: 1c:2f:60:6d:8b:87:e9:3e:00:30:db:56:c1:50:1a:57:b3:46: 55:0d:05:23:ff:ff:4f:05:7b:ef:03:f1:c7:a7:6f:c6:a0:10: 43:39:61:2a:8a:50:83:bb:92:aa:05:b5:63:7a:ac:76:61:3b: ae:5a:b7:cf:a8:a8:91:a7:d2:db:4d:d1:ab:25:d9:94:38:b6: 77:a5:aa:70:9f:3f:aa:59:7f:f7:bc:10:98:8a:98:27:95:56: 83:6e:34:30:36:8a:b0:f1:9d:2b:1c:16:a1:14:dc:3f:8e:76: 93:fa:38:fd:c7:7e:57:8b:0f:c9:b6:d5:7a:a3:b8:8d:80:a5: 47:96:d3:07:cb:29:48:ef:12:a0:fe:e5:b2:8c:2a:8a:4d:46: 1e:49:d9:d2:10:5d:40:22:32:b3:36:55:8d:30:c7:d4:da:f0: f5:e8:76:c8:e2:ca:07:83:7b:4f:0b:a0:ab:47:dc:4e:b8:fa: cb:2f:d0:19:2f:0c:76:09:7b:f1:1c:3f:36:66:68:06:b4:c2: d5:50:7f:41:1d:e4:fb:39:99:64:9d:fb:5e:bb:6c:bc:05:ef: cf:a8:af:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdhbzAow4K/eQXIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YmQzMzgzYzQtMGEyNi00OGEzLTkwZDItYzk4MmU4OTZkNjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRyZnmpsdTNwIDcjSn8RhdQ+qeR//3HRXxrH 9OH6azlEbWO2bykhkYwDqOO+JI+KlDgAd/e6UiGjWzsEWBCD3J5Jt+DB5aEtoPBv ShhHAtVAlluDVr1vVOJ38Q3IL/vxQmS9QTUPanbhYMm/wA9xRNQUOOU1KE1Zefkt n8nKGYu7J+EmvdQGPuEPJAEyqA7Ch4QsSZMyt04yCW898Ln8uRhjpe1iMItG+Q4G tS8DxKBCnll0HEOARU3tZE8Cx6LRZ1VLFolcfehSgcHUqstzAS2tUF8FDiLMTmqq 7ZiWF29/yjYZBDSSYhOPd9azMzuK6R3e4b1jjG22oEBbOP6HTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJEc/sLBzDqwTVbgwEplq7kWYamwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZGVkOTIyN2UtMTVmZS0z NTZjLTg4YjktMjU3MmVmNjNkYzMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDlxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGUDhGuxSHAhyMkWW7H7qhZlN77umVhYWRyEaCedHTKCdwrdyRwvYG2L h+k+ADDbVsFQGlezRlUNBSP//08Fe+8D8cenb8agEEM5YSqKUIO7kqoFtWN6rHZh O65at8+oqJGn0ttN0asl2ZQ4tnelqnCfP6pZf/e8EJiKmCeVVoNuNDA2irDxnSsc FqEU3D+OdpP6OP3HfleLD8m21XqjuI2ApUeW0wfLKUjvEqD+5bKMKopNRh5J2dIQ XUAiMrM2VY0wx9Ta8PXodsjiygeDe08LoKtH3E64+ssv0BkvDHYJe/EcPzZmaAa0 wtVQf0Ed5Ps5mWSd+167bLwF78+orx4= -----END CERTIFICATE-----Generated at Mon Oct 5 18:47:06 2026 by rpki-client