$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8a962e69-e99e-3dcc-986c-baf471ff1500.roa File: 8a962e69-e99e-3dcc-986c-baf471ff1500.roa (raw, json) Hash identifier: yL3h4MrtKusfVKZa84lO2tEqpJy0qVOm0FOYJiKu10s= Subject key identifier: B7:07:44:F6:46:ED:4A:6D:11:DC:16:5B:F0:E8:49:7D:42:C4:D4:93 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584D746FDDF4F0B43888CF508680 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8a962e69-e99e-3dcc-986c-baf471ff1500.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 3360 IP address blocks: 204.105.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:6f:dd:f4:f0:b4:38:88:cf:50:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=d2fad61a-8975-41f6-a061-f8614b93843e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:c8:6c:18:c0:b7:4b:6f:e6:bc:d9:79:ca:69: 47:2e:26:fe:ec:df:0a:6a:1b:f2:a8:9f:f7:90:20: 28:c2:68:dc:83:57:0e:5e:c8:3f:19:b5:5b:31:e5: 75:db:e6:02:9f:b6:0e:b7:3d:1f:06:64:c9:53:72: f7:64:89:4e:74:21:63:3b:9b:25:ce:82:b1:6d:72: 15:48:5c:67:a1:96:8b:04:0d:94:e7:e6:15:d9:aa: 56:bd:a7:fb:e9:f4:e3:ed:37:38:76:50:7c:56:db: 7a:ec:40:26:6f:47:65:e0:e9:2e:26:a7:a0:d7:21: f9:67:00:60:79:b2:db:34:fe:59:d9:1b:9d:0d:ff: 68:34:67:2e:e9:8c:db:94:b6:98:54:f0:8a:50:5a: 64:4b:33:a3:96:c6:4e:f0:72:0c:1f:c1:87:55:fe: 98:f0:08:c1:ff:ee:09:b6:38:a8:e8:0b:a0:96:2d: b9:12:67:59:b7:e9:69:ec:8b:25:1d:93:6b:a9:2e: da:4e:21:ee:11:f9:1b:dc:ce:7f:ab:cc:d5:d0:38: d6:98:9d:07:e4:f4:56:65:dd:4b:be:fb:4a:40:34: 40:52:33:89:b6:99:33:82:13:5b:32:47:6e:3d:ba: 2c:36:ba:7a:c7:8c:e1:91:81:a4:5a:2b:45:1c:03: 95:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:07:44:F6:46:ED:4A:6D:11:DC:16:5B:F0:E8:49:7D:42:C4:D4:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8a962e69-e99e-3dcc-986c-baf471ff1500.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 204.105.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:eb:65:b4:c3:ae:72:31:1f:1b:24:59:58:b6:85:b4:76:a4: 69:46:2a:8b:a8:6b:1e:b5:16:ae:78:ef:ec:35:c1:17:ab:6c: 93:a1:0b:e5:da:be:34:8a:e6:06:6c:05:46:d5:e9:74:3e:01: 58:c1:03:24:ab:e8:9e:a4:dc:e3:9c:23:9d:cf:e5:17:59:a5: 7a:98:f8:cb:7b:66:73:13:dc:83:fc:a3:07:64:cc:12:4a:57: 6f:4d:5f:67:0c:de:3c:af:84:84:95:55:3b:53:5b:ed:ed:f8: f8:b9:d0:66:d4:24:2e:0f:8b:a5:48:80:43:16:cc:ba:cf:69: 74:09:26:ab:03:88:8e:1a:77:b8:9d:17:2b:7c:a6:2f:e7:de: fa:17:7e:f8:8b:90:bc:b8:94:92:15:91:51:23:75:af:76:6b: 11:71:ae:72:50:9b:3a:cf:81:33:38:33:38:08:6f:48:fe:e1: 26:a0:9f:a3:f1:00:5e:3a:91:eb:e2:44:ce:f0:dc:41:bc:21: 6d:ff:f0:53:25:40:a6:ac:3e:ac:ad:1a:2b:07:14:a6:bf:f1: ed:3e:d5:22:d7:ee:50:aa:db:3d:5b:7c:0b:06:f9:62:cd:d0: ba:38:43:31:4f:33:6e:30:34:e9:31:0f:d7:5e:77:35:af:04: 1d:4a:ed:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE10b9308LQ4iM9QhoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk ZDJmYWQ2MWEtODk3NS00MWY2LWEwNjEtZjg2MTRiOTM4NDNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgshsGMC3S2/mvNl5ymlHLib+7N8KahvyqJ/3 kCAowmjcg1cOXsg/GbVbMeV12+YCn7YOtz0fBmTJU3L3ZIlOdCFjO5slzoKxbXIV SFxnoZaLBA2U5+YV2apWvaf76fTj7Tc4dlB8Vtt67EAmb0dl4OkuJqeg1yH5ZwBg ebLbNP5Z2RudDf9oNGcu6YzblLaYVPCKUFpkSzOjlsZO8HIMH8GHVf6Y8AjB/+4J tjio6Augli25EmdZt+lp7IslHZNrqS7aTiHuEfkb3M5/q8zV0DjWmJ0H5PRWZd1L vvtKQDRAUjOJtpkzghNbMkduPbosNrp6x4zhkYGkWitFHAOVzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLcHRPZG7UptEdwWW/DoSX1CxNSTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvOGE5NjJlNjktZTk5ZS0z ZGNjLTk4NmMtYmFmNDcxZmYxNTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzGmQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJnrZbTDrnIxHxskWVi2hbR2pGlGKouoax61Fq547+w1wRerbJOhC+Xa vjSK5gZsBUbV6XQ+AVjBAySr6J6k3OOcI53P5RdZpXqY+Mt7ZnMT3IP8owdkzBJK V29NX2cM3jyvhISVVTtTW+3t+Pi50GbUJC4Pi6VIgEMWzLrPaXQJJqsDiI4ad7id Fyt8pi/n3voXfviLkLy4lJIVkVEjda92axFxrnJQmzrPgTM4MzgIb0j+4Sagn6Px AF46keviRM7w3EG8IW3/8FMlQKasPqytGisHFKa/8e0+1SLX7lCq2z1bfAsG+WLN 0Lo4QzFPM24wNOkxD9dedzWvBB1K7Vw= -----END CERTIFICATE-----Generated at Fri Apr 17 18:58:53 2026 by rpki-client