$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/89a29d46-d778-3d51-9eb5-25e8a39ce4e7.roa File: 89a29d46-d778-3d51-9eb5-25e8a39ce4e7.roa (raw, json) Hash identifier: 0+9CXsP1beRyR5moLprxlk6Xd3UvqaWdfE8VwRUHxhw= Subject key identifier: 39:12:9C:AB:62:53:42:F6:F9:CB:31:2A:F5:C3:E3:D6:F8:7A:0B:42 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584EF7177D24AE9F8C508123DCE0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/89a29d46-d778-3d51-9eb5-25e8a39ce4e7.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 202 IP address blocks: 206.164.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:7d:24:ae:9f:8c:50:81:23:dc:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=8cf4ca4d-cded-43d7-9414-17fc6e5a1604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:56:fe:5a:1d:25:5e:9a:47:fa:43:6e:dd:f6: 60:9e:9a:e4:cf:22:69:9c:70:06:72:f6:06:53:80: d8:4c:e3:ea:74:f7:98:79:31:5b:57:5d:e5:f7:1c: 5e:8b:c4:38:46:85:6c:e1:3f:b7:c9:50:af:fa:96: 68:cf:2f:37:0f:e2:18:6f:80:37:2d:21:44:40:a3: 1d:79:b6:19:c2:d1:f7:53:52:8c:7b:75:4e:c6:bc: 71:4e:aa:4a:e4:54:3c:72:e5:f9:8a:5a:4c:91:3a: 82:16:7f:92:84:9b:b8:de:b5:97:04:3c:74:c1:b9: 98:57:f1:cf:25:5f:b3:60:f3:f0:4f:8a:46:1b:2a: 7b:ac:31:50:62:a8:35:95:5a:e0:a9:96:f9:49:69: d7:56:84:cf:30:fc:bd:ce:dc:ed:b0:f3:a9:c4:b2: a2:59:eb:96:ba:fb:c3:72:e3:31:a9:47:fe:9a:d2: 89:57:a3:d3:07:65:56:ef:c0:6f:d3:b7:6c:b2:72: f5:14:fb:55:1d:f1:b6:74:5b:eb:53:7b:28:89:83: dd:12:4e:2f:81:9d:53:af:b8:fe:d9:81:b7:f9:26: 79:65:f6:1a:12:74:8f:b7:77:3f:e8:ed:b0:23:90: 55:7f:d9:f8:f8:db:13:bf:7a:a4:88:6c:5b:2d:e7: 33:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:12:9C:AB:62:53:42:F6:F9:CB:31:2A:F5:C3:E3:D6:F8:7A:0B:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/89a29d46-d778-3d51-9eb5-25e8a39ce4e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 206.164.178.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:9e:39:9b:5b:2c:76:16:dc:c1:7d:be:27:65:00:f2:c3:e4: 52:56:ca:51:9c:84:32:7b:76:e9:28:a1:c6:02:40:7c:25:01: 27:29:68:21:20:a7:97:f8:32:21:12:ca:e0:57:94:7e:e9:03: ca:56:09:e9:e3:fd:14:3c:ba:81:8b:fb:7e:1f:c0:d9:8b:1c: 04:3e:43:c1:7d:fd:85:62:40:33:eb:02:1f:dd:3e:e4:fa:96: 46:0c:cb:82:27:9a:4e:0a:03:00:9e:34:07:db:f2:0b:f4:68: e9:e2:e3:36:48:95:86:53:1d:6e:cb:6c:b6:80:e3:d1:a6:cf: 0e:fb:dd:54:ee:40:82:29:59:8f:6b:65:66:62:1e:6d:b0:af: 36:5a:12:21:ed:77:42:f4:9a:58:e7:da:94:7a:e3:86:e9:c3: cc:a5:d3:3a:0e:f5:34:d5:0f:c4:51:05:71:6a:c5:3d:5f:4b: 61:1f:6a:aa:62:4f:db:b3:b6:09:06:44:d6:29:76:43:8c:19: d1:20:8f:aa:87:0d:cc:ce:b0:95:b4:61:95:f6:a1:ca:3b:7c: e3:da:49:77:ce:04:ee:6c:b0:d6:2c:df:a5:fc:65:05:85:7d: 58:a1:9e:c5:43:67:f6:1f:ca:9a:2f:7f:23:17:b6:d2:51:50: 80:d0:d4:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F30krp+MUIEj3OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk OGNmNGNhNGQtY2RlZC00M2Q3LTk0MTQtMTdmYzZlNWExNjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVb+Wh0lXppH+kNu3fZgnprkzyJpnHAGcvYG U4DYTOPqdPeYeTFbV13l9xxei8Q4RoVs4T+3yVCv+pZozy83D+IYb4A3LSFEQKMd ebYZwtH3U1KMe3VOxrxxTqpK5FQ8cuX5ilpMkTqCFn+ShJu43rWXBDx0wbmYV/HP JV+zYPPwT4pGGyp7rDFQYqg1lVrgqZb5SWnXVoTPMPy9ztztsPOpxLKiWeuWuvvD cuMxqUf+mtKJV6PTB2VW78Bv07dssnL1FPtVHfG2dFvrU3soiYPdEk4vgZ1Tr7j+ 2YG3+SZ5ZfYaEnSPt3c/6O2wI5BVf9n4+NsTv3qkiGxbLeczjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDkSnKtiU0L2+csxKvXD49b4egtCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvODlhMjlkNDYtZDc3OC0z ZDUxLTllYjUtMjVlOGEzOWNlNGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqSyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGqeOZtbLHYW3MF9vidlAPLD5FJWylGchDJ7dukoocYCQHwlAScpaCEg p5f4MiESyuBXlH7pA8pWCenj/RQ8uoGL+34fwNmLHAQ+Q8F9/YViQDPrAh/dPuT6 lkYMy4Inmk4KAwCeNAfb8gv0aOni4zZIlYZTHW7LbLaA49Gmzw773VTuQIIpWY9r ZWZiHm2wrzZaEiHtd0L0mljn2pR644bpw8yl0zoO9TTVD8RRBXFqxT1fS2Efaqpi T9uztgkGRNYpdkOMGdEgj6qHDczOsJW0YZX2oco7fOPaSXfOBO5ssNYs36X8ZQWF fVihnsVDZ/YfypovfyMXttJRUIDQ1Jc= -----END CERTIFICATE-----Generated at Mon Sep 21 14:51:56 2026 by rpki-client