$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f9e8e46e-d99e-35f3-b34a-daf0f06387c4.roa File: f9e8e46e-d99e-35f3-b34a-daf0f06387c4.roa (raw, json) Hash identifier: bKrRiscQiGvciDrc38kUcx/VpkUy9a3qWceJQipRk6g= Subject key identifier: 71:8B:AC:2A:41:7D:73:36:06:12:C0:18:EA:8D:98:66:64:E1:20:96 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584DC40053CE4D9DBBEE89731F80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f9e8e46e-d99e-35f3-b34a-daf0f06387c4.roa Signing time: Fri 08 May 2026 13:00:30 +0000 ROA not before: Fri 08 May 2026 13:00:30 +0000 ROA not after: Thu 06 Aug 2026 13:00:30 +0000 asID: 202 IP address blocks: 170.30.208.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c4:00:53:ce:4d:9d:bb:ee:89:73:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: May 8 13:00:30 2026 GMT Not After : Aug 6 13:00:30 2026 GMT Subject: CN=8c9505d3-9528-4445-bccf-f5a0b7e33a74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:4e:5e:3c:06:58:1f:e0:07:20:1f:7b:6d:3c: 56:ee:90:fe:b5:32:52:21:bb:3b:ee:38:db:05:b9: 35:09:ee:be:a7:68:86:27:19:c2:df:7c:31:8a:b1: 63:4d:97:a2:dc:2a:dd:ac:70:d4:9f:77:41:de:03: f7:7c:0c:9a:9b:b2:4e:1e:32:ff:20:16:99:11:ad: 27:9c:b3:62:1e:33:d8:76:64:7e:5a:d6:5a:59:71: 5a:63:6c:93:69:ed:42:02:21:17:18:3b:e6:2e:15: bb:e1:77:12:71:0f:9a:0d:f1:bd:b8:74:34:39:be: 95:d7:0e:89:95:53:65:46:d0:c8:d6:7f:e5:57:78: 11:3f:87:74:a7:50:bd:18:6a:bf:2d:f0:d0:87:36: 5a:f7:f7:cf:5c:38:14:b1:7f:0f:f7:34:e5:55:73: 4e:e9:bc:42:00:08:93:b2:be:4f:bb:03:61:50:b1: fe:f5:7a:e2:69:b1:fb:9c:d7:45:68:e5:95:fe:6a: 88:f1:26:2e:36:7d:c6:ab:61:65:14:d0:b0:66:73: e8:10:a9:85:92:ae:78:9b:d2:6e:bd:ef:00:74:8b: 33:eb:43:ca:0f:d8:0f:07:0b:a4:04:2f:e7:3b:b5: 22:74:ee:09:1a:77:ab:3f:60:8b:03:e6:bb:aa:1d: bc:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:8B:AC:2A:41:7D:73:36:06:12:C0:18:EA:8D:98:66:64:E1:20:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f9e8e46e-d99e-35f3-b34a-daf0f06387c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 170.30.208.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:d6:1a:e3:15:58:79:7b:cd:cc:61:0c:cf:c2:c8:0e:1b:1d: 6e:a5:59:c1:44:ca:be:a8:7f:81:20:8a:3d:5a:30:0c:23:3a: a8:85:e4:0c:3e:7e:4c:55:27:dd:a9:9b:ee:92:82:63:d4:4c: a4:7a:77:00:18:a7:6e:c8:49:84:2f:c1:1e:e7:2f:a3:94:a0: f0:b1:d7:2e:80:90:9c:ef:d4:13:62:71:28:69:e1:de:66:14: 4e:f0:6b:50:2b:fa:62:7a:21:b7:d4:d6:f6:68:f4:69:5a:3b: 0f:47:ac:8a:93:70:25:8f:aa:19:3d:96:9b:f0:6c:9b:61:8f: 70:cf:37:c8:be:dc:e9:84:25:e4:22:af:ef:b6:0d:ff:0d:df: 29:6e:03:b4:2d:e1:dd:0b:5f:3f:0c:d9:8e:a0:a8:6d:90:a4: c2:b0:42:c7:83:cc:cf:3b:e8:14:2f:f0:c9:b4:71:f1:94:c1: e9:3a:af:59:03:72:89:07:f8:29:17:f8:95:85:e8:d1:53:83: 72:d0:53:75:da:69:ff:57:98:88:7c:9f:79:78:31:7c:bc:51: 05:58:fb:3c:aa:4e:5d:8f:2a:4f:5e:18:e0:eb:43:1f:cd:cd: 0a:c1:17:32:d1:3d:5b:75:db:6b:ca:64:4f:59:b6:e2:d6:ba: 3c:93:1e:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3EAFPOTZ277olzH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDUwODEzMDAzMFoXDTI2MDgwNjEzMDAzMFowLzEtMCsGA1UEAxMk OGM5NTA1ZDMtOTUyOC00NDQ1LWJjY2YtZjVhMGI3ZTMzYTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmU5ePAZYH+AHIB97bTxW7pD+tTJSIbs77jjb Bbk1Ce6+p2iGJxnC33wxirFjTZei3CrdrHDUn3dB3gP3fAyam7JOHjL/IBaZEa0n nLNiHjPYdmR+WtZaWXFaY2yTae1CAiEXGDvmLhW74XcScQ+aDfG9uHQ0Ob6V1w6J lVNlRtDI1n/lV3gRP4d0p1C9GGq/LfDQhzZa9/fPXDgUsX8P9zTlVXNO6bxCAAiT sr5PuwNhULH+9XriabH7nNdFaOWV/mqI8SYuNn3Gq2FlFNCwZnPoEKmFkq54m9Ju ve8AdIsz60PKD9gPBwukBC/nO7UidO4JGnerP2CLA+a7qh28pwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHGLrCpBfXM2BhLAGOqNmGZk4SCWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZjllOGU0NmUtZDk5ZS0z NWYzLWIzNGEtZGFmMGYwNjM4N2M0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqh7QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAbWGuMVWHl7zcxhDM/CyA4bHW6lWcFEyr6of4Egij1aMAwjOqiF5Aw+ fkxVJ92pm+6SgmPUTKR6dwAYp27ISYQvwR7nL6OUoPCx1y6AkJzv1BNicShp4d5m FE7wa1Ar+mJ6IbfU1vZo9GlaOw9HrIqTcCWPqhk9lpvwbJthj3DPN8i+3OmEJeQi r++2Df8N3yluA7Qt4d0LXz8M2Y6gqG2QpMKwQseDzM876BQv8Mm0cfGUwek6r1kD cokH+CkX+JWF6NFTg3LQU3Xaaf9XmIh8n3l4MXy8UQVY+zyqTl2PKk9eGODrQx/N zQrBFzLRPVt122vKZE9ZtuLWujyTHng= -----END CERTIFICATE-----Generated at Sat May 9 17:31:07 2026 by rpki-client