$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f608c3b2-d069-3afb-a351-01fd63c7841e.roa File: f608c3b2-d069-3afb-a351-01fd63c7841e.roa (raw, json) Hash identifier: j4yn8v1mO8RI7+VpuMIh6hJpOkSvfYtlzb9peQDEa8w= Subject key identifier: 52:74:06:26:E4:B6:81:59:93:2A:8B:AF:A1:8E:F5:B1:B4:12:21:8D Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584EF7177D6393C523B4D9DA1700 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f608c3b2-d069-3afb-a351-01fd63c7841e.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 203 IP address blocks: 206.164.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:7d:63:93:c5:23:b4:d9:da:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=4331cc73-ce56-4647-a345-bd85839b2ff2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ea:f6:02:e7:84:03:ac:90:60:cc:b6:b8:5a: a0:72:9d:ad:9f:a5:32:69:40:a2:d3:3e:5e:a5:4d: 69:bf:7c:8d:2a:0e:f3:f5:ab:26:4f:50:61:96:7e: 7a:86:b8:5c:8e:b8:46:a6:7e:64:12:08:1f:a6:ed: 33:19:75:76:a5:d1:f7:02:d4:69:d5:69:8b:28:29: d1:17:a0:59:35:ec:d3:e9:d5:5a:95:78:a6:1a:f5: cc:96:5c:d3:c1:2a:d7:63:63:bb:3c:f7:5d:0d:99: 21:a1:29:26:d0:7f:8d:47:91:e5:b5:21:bf:19:a2: 78:07:d7:d3:72:a9:cf:57:31:9d:5d:d8:f8:c5:59: 53:c2:a9:e0:8e:9e:89:53:da:53:3e:c0:fa:8c:92: b7:28:c0:82:9b:21:de:7e:a1:00:ef:0f:3e:8d:56: c4:f1:07:9b:81:10:fb:eb:36:1c:4d:2c:5d:75:99: c1:f3:79:1b:62:64:b1:5d:83:71:2b:e1:ef:71:d5: 70:31:f7:41:e9:c4:e8:33:94:49:28:0f:20:f6:3f: bf:16:74:6c:89:05:ee:15:61:68:20:8d:99:79:28: 5b:96:f5:ab:30:32:b3:dc:21:fe:1f:bf:0e:32:f9: a5:54:6f:15:f2:8f:9d:cb:ba:ad:6c:1d:d1:86:aa: 70:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:74:06:26:E4:B6:81:59:93:2A:8B:AF:A1:8E:F5:B1:B4:12:21:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f608c3b2-d069-3afb-a351-01fd63c7841e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 206.164.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:fa:1f:0b:73:4e:c7:b9:7e:2c:f2:a5:78:47:d9:86:42:af: 5a:9c:a3:21:09:66:8e:0d:72:54:d7:39:b6:a3:60:f0:e7:f7: b5:ac:47:65:48:e1:72:46:fb:49:7c:14:fc:0a:c6:40:b2:bd: 03:8b:c2:1d:76:51:5c:16:eb:37:31:04:4d:54:e7:bf:66:a6: b4:5c:dc:d3:9c:f2:5f:20:0d:cc:3b:d2:19:22:66:a3:24:fb: 17:72:73:b8:2e:25:30:04:04:e1:f8:16:8b:6f:e2:1e:b3:97: 73:f9:32:e0:44:2a:39:85:16:3e:df:5f:09:66:93:19:96:46: 4b:b9:92:db:78:e0:f4:22:7f:dd:4b:ed:87:58:55:53:8e:38: 73:fa:7d:f8:12:bc:46:07:d4:0e:7a:27:9c:33:5b:d9:8a:d7: a3:d7:59:39:fe:fb:87:01:32:87:53:75:15:80:be:ee:5c:b9: 0c:fe:70:1d:40:37:c2:0b:32:95:cf:1d:08:3a:58:ae:26:d7: 0d:bf:2b:ab:2c:02:20:07:b4:b1:d6:39:35:b5:79:24:f9:e6: b8:09:d5:52:22:e7:e6:2c:48:c7:70:96:29:07:8c:ef:8c:d5: 1c:25:d5:f1:9b:95:a3:42:a5:12:d1:a0:26:20:90:7e:4f:07: 07:4c:25:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F31jk8UjtNnaFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk NDMzMWNjNzMtY2U1Ni00NjQ3LWEzNDUtYmQ4NTgzOWIyZmYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAner2AueEA6yQYMy2uFqgcp2tn6UyaUCi0z5e pU1pv3yNKg7z9asmT1Bhln56hrhcjrhGpn5kEggfpu0zGXV2pdH3AtRp1WmLKCnR F6BZNezT6dValXimGvXMllzTwSrXY2O7PPddDZkhoSkm0H+NR5HltSG/GaJ4B9fT cqnPVzGdXdj4xVlTwqngjp6JU9pTPsD6jJK3KMCCmyHefqEA7w8+jVbE8QebgRD7 6zYcTSxddZnB83kbYmSxXYNxK+HvcdVwMfdB6cToM5RJKA8g9j+/FnRsiQXuFWFo II2ZeShblvWrMDKz3CH+H78OMvmlVG8V8o+dy7qtbB3RhqpwuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFJ0BibktoFZkyqLr6GO9bG0EiGNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZjYwOGMzYjItZDA2OS0z YWZiLWEzNTEtMDFmZDYzYzc4NDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqTvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABv6HwtzTse5fizypXhH2YZCr1qcoyEJZo4NclTXObajYPDn97WsR2VI 4XJG+0l8FPwKxkCyvQOLwh12UVwW6zcxBE1U579mprRc3NOc8l8gDcw70hkiZqMk +xdyc7guJTAEBOH4Fotv4h6zl3P5MuBEKjmFFj7fXwlmkxmWRku5ktt44PQif91L 7YdYVVOOOHP6ffgSvEYH1A56J5wzW9mK16PXWTn++4cBModTdRWAvu5cuQz+cB1A N8ILMpXPHQg6WK4m1w2/K6ssAiAHtLHWOTW1eST55rgJ1VIi5+YsSMdwlikHjO+M 1Rwl1fGblaNCpRLRoCYgkH5PBwdMJes= -----END CERTIFICATE-----Generated at Wed Sep 9 00:51:05 2026 by rpki-client