$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/40e54394-2360-36f3-a862-6f59c980ca4f.roa File: 40e54394-2360-36f3-a862-6f59c980ca4f.roa (raw, json) Hash identifier: QqHYHn+2xIHBny7JLOFwDkRmL7lHSwwVGwLxb5gm/60= Subject key identifier: 62:85:D0:89:85:1F:AB:39:83:E8:1B:2E:FF:8F:DA:E0:55:8A:77:BD Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584EA79426DFF0634E83D7EAF500 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/40e54394-2360-36f3-a862-6f59c980ca4f.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 202 IP address blocks: 204.104.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:94:26:df:f0:63:4e:83:d7:ea:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=206029ea-3ff9-41bf-bb72-f4e08729e7cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:6f:84:90:6d:f4:c9:c9:33:db:aa:66:2c:0b: 64:9b:c3:08:f9:51:71:ab:4e:47:5f:c2:7f:f0:09: 0f:d1:8c:ca:f3:53:74:3f:fe:f5:06:cb:92:e3:ed: 0f:74:59:96:84:a8:6a:95:23:4a:b1:5e:0a:9c:2a: 7a:53:bf:af:cb:16:d1:50:b5:66:2d:7b:1f:7d:55: 1b:31:7b:0c:27:1d:c9:2f:65:ae:80:8f:ec:47:ed: 85:49:ad:52:32:23:3f:c9:aa:1e:6b:92:08:dd:41: c1:8e:60:60:bc:c1:12:9f:42:71:c2:ba:e6:69:49: 84:a4:97:11:e9:3c:54:7d:b5:a8:fb:86:91:7a:eb: 02:5e:e7:03:26:6b:66:d3:7c:42:58:cc:a2:71:ec: 50:00:de:9b:c8:a7:88:6b:a7:36:f3:ad:51:c3:1b: 43:0a:27:e5:69:00:ae:81:ef:af:c2:36:59:08:6a: 40:3d:11:8a:63:5d:d0:cc:43:d1:25:fb:64:d4:fe: 20:c4:55:f6:40:50:92:9f:74:d9:ac:f4:fe:1d:a1: 34:d6:b3:2d:9d:e1:20:30:ac:0d:47:03:78:85:88: f5:34:4d:9c:55:b3:84:8d:64:d0:46:e0:70:45:b6: 26:a3:08:22:47:89:d8:ec:88:59:08:54:7a:15:11: db:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:85:D0:89:85:1F:AB:39:83:E8:1B:2E:FF:8F:DA:E0:55:8A:77:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/40e54394-2360-36f3-a862-6f59c980ca4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 204.104.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:f5:ec:11:53:a5:02:e0:c0:2c:a7:72:fd:6f:f5:19:7c:62: 59:62:59:34:b2:58:40:65:01:ab:31:e3:c3:fc:c2:d5:20:c0: 94:03:90:5c:8c:72:0b:be:e2:99:05:94:35:4e:5a:89:46:99: 1c:2c:b6:67:fa:58:af:64:34:59:5b:2b:28:e2:96:9a:73:fd: 04:d8:1a:6b:fd:2d:87:3c:e7:7e:e2:ee:1a:fc:6e:79:a3:6d: 86:69:ec:fd:b0:fd:02:19:75:5c:39:94:86:2c:fe:24:04:5e: 70:ba:44:d2:21:f0:3f:58:f3:66:16:ab:91:c9:b5:33:3c:24: 3e:26:28:bf:10:4d:49:77:f3:07:4f:ed:f9:27:7d:74:72:d0: 8b:b9:59:90:28:62:bf:3b:2a:93:26:a5:c0:e4:60:d6:7a:bb: f9:f6:0e:17:35:b1:20:42:27:69:f9:da:ba:43:7f:e4:f8:4f: 25:37:da:94:d0:93:6c:dc:26:72:cd:15:95:b8:e1:07:fc:78: 2b:d0:87:e5:23:e3:15:92:a9:38:48:c1:87:bb:a3:c2:7d:43: ef:cb:64:65:0d:18:11:d2:a0:76:36:28:37:2c:8f:d4:03:4b: be:77:df:57:b2:58:aa:a2:13:37:1d:cd:0f:21:9a:b2:cd:a4: 2c:4b:71:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlCbf8GNOg9fq9QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MjA2MDI5ZWEtM2ZmOS00MWJmLWJiNzItZjRlMDg3MjllN2NiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5G+EkG30yckz26pmLAtkm8MI+VFxq05HX8J/ 8AkP0YzK81N0P/71BsuS4+0PdFmWhKhqlSNKsV4KnCp6U7+vyxbRULVmLXsffVUb MXsMJx3JL2WugI/sR+2FSa1SMiM/yaoea5II3UHBjmBgvMESn0JxwrrmaUmEpJcR 6TxUfbWo+4aReusCXucDJmtm03xCWMyicexQAN6byKeIa6c2861RwxtDCiflaQCu ge+vwjZZCGpAPRGKY13QzEPRJftk1P4gxFX2QFCSn3TZrPT+HaE01rMtneEgMKwN RwN4hYj1NE2cVbOEjWTQRuBwRbYmowgiR4nY7IhZCFR6FRHbXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGKF0ImFH6s5g+gbLv+P2uBVine9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNDBlNTQzOTQtMjM2MC0z NmYzLWE4NjItNmY1OWM5ODBjYTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGiMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADH17BFTpQLgwCyncv1v9Rl8YlliWTSyWEBlAasx48P8wtUgwJQDkFyM cgu+4pkFlDVOWolGmRwstmf6WK9kNFlbKyjilppz/QTYGmv9LYc8537i7hr8bnmj bYZp7P2w/QIZdVw5lIYs/iQEXnC6RNIh8D9Y82YWq5HJtTM8JD4mKL8QTUl38wdP 7fknfXRy0Iu5WZAoYr87KpMmpcDkYNZ6u/n2Dhc1sSBCJ2n52rpDf+T4TyU32pTQ k2zcJnLNFZW44Qf8eCvQh+Uj4xWSqThIwYe7o8J9Q+/LZGUNGBHSoHY2KDcsj9QD S75331eyWKqiEzcdzQ8hmrLNpCxLcfE= -----END CERTIFICATE-----Generated at Wed Jul 29 05:17:49 2026 by rpki-client