$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4331cee6-586b-3678-9efb-30032ba47a0c.roa File: 4331cee6-586b-3678-9efb-30032ba47a0c.roa (raw, json) Hash identifier: QyYMImJtrrpSBZNWofXUShCB5WjkyJxHT/wcBJRNCZc= Subject key identifier: 8C:C1:2B:DA:3B:1C:01:29:22:30:32:51:7E:B1:6E:D9:63:07:3E:F3 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584DFBD5E5F593325A9FA98FEE80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4331cee6-586b-3678-9efb-30032ba47a0c.roa Signing time: Thu 28 May 2026 13:00:12 +0000 ROA not before: Thu 28 May 2026 13:00:12 +0000 ROA not after: Wed 26 Aug 2026 13:00:12 +0000 asID: 3356 IP address blocks: 192.57.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fb:d5:e5:f5:93:32:5a:9f:a9:8f:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: May 28 13:00:12 2026 GMT Not After : Aug 26 13:00:12 2026 GMT Subject: CN=ebe54ce7-8c19-4637-b107-7432367220e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5d:ca:a8:c8:be:bc:e9:04:c7:12:82:b5:69: 4e:ef:48:f3:ed:6c:89:a8:7c:6b:68:5e:66:47:9e: b4:3e:4b:ce:42:d2:a2:a9:00:74:b4:b1:4e:0f:72: c0:e8:5c:30:d8:49:d2:bd:a4:4a:79:3c:f7:4b:7b: 0d:03:d3:c8:e0:22:48:b1:96:ad:b0:0a:ec:17:5a: a1:52:f1:97:cf:24:96:a0:43:51:f2:df:b4:32:7e: cd:20:42:74:30:c0:76:37:63:6c:37:ad:8d:8b:f4: 0b:b7:9b:c2:43:ec:dd:d3:22:93:e5:2d:ee:85:58: 37:f9:82:c4:05:69:73:8f:22:9e:83:61:85:a6:16: 69:73:f5:9c:ba:aa:2a:cf:23:34:0a:50:32:db:75: fc:3a:6d:13:90:31:9c:62:e6:63:4d:09:0c:b2:e8: 9d:2e:28:5e:3f:e2:2d:14:3a:42:2f:dc:fe:9a:c5: c4:f8:24:c3:e3:39:62:b6:18:99:77:87:a6:fc:72: 9a:cf:25:52:3d:22:c9:96:c5:23:17:6e:9a:fd:44: 30:d9:43:cf:ed:48:3b:8b:50:63:07:da:2b:63:29: 8b:5e:f2:b8:cd:b3:de:91:89:eb:82:6c:2f:b4:ca: 82:2d:d7:c9:4d:c5:cd:39:88:79:5c:42:40:74:8e: ca:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:C1:2B:DA:3B:1C:01:29:22:30:32:51:7E:B1:6E:D9:63:07:3E:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4331cee6-586b-3678-9efb-30032ba47a0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.57.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:39:1b:6e:53:a8:f4:93:39:54:be:f5:4b:ea:36:b2:e0:ea: 3b:e7:64:b6:0c:d7:33:52:aa:eb:14:89:0b:d8:da:83:28:1c: f4:43:93:bc:67:06:63:e3:e7:06:4d:29:59:a9:fe:be:f6:fc: ee:3d:a0:e2:4f:2c:53:4f:58:94:dc:f8:20:2a:84:e4:07:b8: 45:3d:81:0d:92:2d:74:37:33:04:0c:d7:a4:ef:35:b9:af:75: 66:93:73:20:8c:f0:7a:fb:5a:55:fc:d1:f5:8c:87:35:de:81: 64:42:73:cc:6c:ec:75:9e:c1:c7:13:72:be:85:cf:3b:be:a5: 5a:4d:b4:4f:c5:1c:b4:f1:9b:c3:78:25:21:e1:27:fd:88:c5: 4d:72:c6:f9:e9:85:96:e4:75:f8:10:64:0d:ef:b0:63:53:de: ea:42:9e:52:a1:6c:e6:c4:96:c9:ef:47:32:45:ff:7b:ae:4f: e4:49:60:7f:0e:ca:a8:2b:81:23:18:b5:41:e3:4d:6b:c8:e5: a6:14:20:fa:a4:2c:cd:c5:81:91:5f:e2:2f:c0:1d:31:57:f8: 7e:ef:b1:03:04:56:47:65:da:47:e8:03:05:2c:9d:92:0e:81: 9d:4c:68:6b:9d:8f:b5:9a:00:d5:67:b0:25:8f:70:d6:1d:6d: 15:c3:77:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE371eX1kzJan6mP7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDUyODEzMDAxMloXDTI2MDgyNjEzMDAxMlowLzEtMCsGA1UEAxMk ZWJlNTRjZTctOGMxOS00NjM3LWIxMDctNzQzMjM2NzIyMGUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApV3KqMi+vOkExxKCtWlO70jz7WyJqHxraF5m R560PkvOQtKiqQB0tLFOD3LA6Fww2EnSvaRKeTz3S3sNA9PI4CJIsZatsArsF1qh UvGXzySWoENR8t+0Mn7NIEJ0MMB2N2NsN62Ni/QLt5vCQ+zd0yKT5S3uhVg3+YLE BWlzjyKeg2GFphZpc/WcuqoqzyM0ClAy23X8Om0TkDGcYuZjTQkMsuidLiheP+It FDpCL9z+msXE+CTD4zlithiZd4em/HKazyVSPSLJlsUjF26a/UQw2UPP7Ug7i1Bj B9orYymLXvK4zbPekYnrgmwvtMqCLdfJTcXNOYh5XEJAdI7KawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIzBK9o7HAEpIjAyUX6xbtljBz7zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNDMzMWNlZTYtNTg2Yi0z Njc4LTllZmItMzAwMzJiYTQ3YTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDlyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEE5G25TqPSTOVS+9UvqNrLg6jvnZLYM1zNSqusUiQvY2oMoHPRDk7xn BmPj5wZNKVmp/r72/O49oOJPLFNPWJTc+CAqhOQHuEU9gQ2SLXQ3MwQM16TvNbmv dWaTcyCM8Hr7WlX80fWMhzXegWRCc8xs7HWewccTcr6Fzzu+pVpNtE/FHLTxm8N4 JSHhJ/2IxU1yxvnphZbkdfgQZA3vsGNT3upCnlKhbObElsnvRzJF/3uuT+RJYH8O yqgrgSMYtUHjTWvI5aYUIPqkLM3FgZFf4i/AHTFX+H7vsQMEVkdl2kfoAwUsnZIO gZ1MaGudj7WaANVnsCWPcNYdbRXDd70= -----END CERTIFICATE-----Generated at Sat Jun 13 23:09:48 2026 by rpki-client