$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2f588f6e-9714-38a1-b533-e769f33ac2d4.roa File: 2f588f6e-9714-38a1-b533-e769f33ac2d4.roa (raw, json) Hash identifier: xVENY+x3UJNlaqr86zAVLScKjQ6VbPk2BhARl6NMTGU= Subject key identifier: 2B:5D:B6:CF:80:7F:CC:29:57:E9:F9:2A:7B:6E:92:37:5A:53:71:51 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584EF7177C79616DC5E7C0BA3D60 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2f588f6e-9714-38a1-b533-e769f33ac2d4.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 202 IP address blocks: 192.57.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:7c:79:61:6d:c5:e7:c0:ba:3d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=4bc239db-70e8-4159-b79d-5e2dbbeafc09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c1:40:ad:4e:7b:58:07:11:e1:ef:bc:09:2f: 4d:d0:9b:63:29:9f:04:5c:09:3d:bb:29:a4:f1:40: 96:41:a4:ba:55:aa:cd:10:a1:e6:91:5f:f5:fe:fa: 75:6f:ee:ba:80:01:69:31:b5:aa:8a:ad:ef:f4:fc: e5:6d:00:62:bc:ef:9a:da:73:8a:04:46:a1:c8:04: 90:db:8b:aa:e4:93:9a:47:2c:20:9c:0e:f2:9f:7b: a6:f9:16:45:89:ce:5c:2b:49:b9:98:7d:af:23:d7: 23:1c:62:3c:05:41:83:dc:0a:cb:3a:d8:32:8d:e7: 87:b4:27:e7:ba:3c:8d:78:23:43:c0:84:3f:a1:1d: 43:de:5f:4b:b6:d9:e9:73:71:1b:41:3c:88:83:fe: 0c:b2:c6:d8:bb:92:12:24:4c:4c:d0:4e:84:26:81: d4:55:80:3a:98:87:82:a7:8b:7a:48:9a:e7:18:fe: e5:ac:2e:b2:b3:35:bf:42:80:7b:24:fa:20:92:39: c7:89:5f:c1:d7:f6:8e:07:a9:43:fc:63:98:03:b9: 47:94:da:fa:ca:f3:02:4f:30:b4:8b:23:b1:19:cd: b4:5a:b5:52:f3:1a:72:aa:3a:17:70:1b:43:9a:16: b0:8b:fa:24:84:54:93:f0:2c:94:95:d4:fe:35:c8: 39:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:5D:B6:CF:80:7F:CC:29:57:E9:F9:2A:7B:6E:92:37:5A:53:71:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2f588f6e-9714-38a1-b533-e769f33ac2d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.57.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:f3:db:8d:39:b9:2d:33:c7:44:ea:ec:a3:36:c6:02:5e:53: 46:b8:75:2d:fb:02:90:cb:c1:6e:e9:18:37:c0:3e:51:b8:d2: 61:e1:c6:5a:73:8c:7f:69:96:a7:f0:d8:46:ea:58:fd:4a:b2: f9:e8:e1:ad:74:78:d0:fc:96:5e:b6:65:18:8e:79:a0:05:39: fe:27:9a:79:a5:13:ca:23:3e:7f:db:b9:76:bb:2e:8d:72:90: 1c:48:bd:b0:b5:4d:c9:7e:5e:20:92:7b:54:24:9b:30:ec:b7: e1:66:4a:21:3f:e2:b8:38:8b:2b:2e:34:38:cf:8b:f3:94:9b: 84:d0:31:8f:ec:1c:4a:7d:a1:22:08:d6:21:bc:ee:a2:a4:48: 4b:1a:5d:ce:db:12:b8:e1:41:5d:bf:20:1f:96:6e:8d:bc:a7: 8d:6a:31:4c:eb:d6:8e:57:99:38:38:9a:fb:e2:a1:3e:35:4c: 2d:6e:b1:44:11:65:40:20:58:97:16:c8:8f:57:fa:2f:8b:82: 34:44:96:9c:52:ba:31:73:35:31:11:ca:f9:df:df:6a:0a:36: 87:1d:04:21:1d:76:f4:ae:f2:d3:fe:2d:19:ff:18:07:68:27: 63:e7:5c:0b:f9:28:ae:89:12:1c:02:14:f5:78:e9:85:32:d8: 4f:cb:8e:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F3x5YW3F58C6PWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk NGJjMjM5ZGItNzBlOC00MTU5LWI3OWQtNWUyZGJiZWFmYzA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcFArU57WAcR4e+8CS9N0JtjKZ8EXAk9uymk 8UCWQaS6VarNEKHmkV/1/vp1b+66gAFpMbWqiq3v9PzlbQBivO+a2nOKBEahyASQ 24uq5JOaRywgnA7yn3um+RZFic5cK0m5mH2vI9cjHGI8BUGD3ArLOtgyjeeHtCfn ujyNeCNDwIQ/oR1D3l9Lttnpc3EbQTyIg/4MssbYu5ISJExM0E6EJoHUVYA6mIeC p4t6SJrnGP7lrC6yszW/QoB7JPogkjnHiV/B1/aOB6lD/GOYA7lHlNr6yvMCTzC0 iyOxGc20WrVS8xpyqjoXcBtDmhawi/okhFST8CyUldT+Ncg5VwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCtdts+Af8wpV+n5KntukjdaU3FRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMmY1ODhmNmUtOTcxNC0z OGExLWI1MzMtZTc2OWYzM2FjMmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDntMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA/z2405uS0zx0Tq7KM2xgJeU0a4dS37ApDLwW7pGDfAPlG40mHhxlpz jH9plqfw2EbqWP1Ksvno4a10eND8ll62ZRiOeaAFOf4nmnmlE8ojPn/buXa7Lo1y kBxIvbC1Tcl+XiCSe1QkmzDst+FmSiE/4rg4iysuNDjPi/OUm4TQMY/sHEp9oSII 1iG87qKkSEsaXc7bErjhQV2/IB+Wbo28p41qMUzr1o5XmTg4mvvioT41TC1usUQR ZUAgWJcWyI9X+i+LgjRElpxSujFzNTERyvnf32oKNocdBCEddvSu8tP+LRn/GAdo J2PnXAv5KK6JEhwCFPV46YUy2E/Ljlg= -----END CERTIFICATE-----Generated at Sun Sep 20 20:37:17 2026 by rpki-client