$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8a9aa588-1cd8-3e4a-a1bc-7a742ae21a63.roa File: 8a9aa588-1cd8-3e4a-a1bc-7a742ae21a63.roa (raw, json) Hash identifier: 0HWJcMzGVOb67a1jXWya58kyVehrurNnRZWTsQOIkuQ= Subject key identifier: 68:4D:C0:4C:96:47:3C:FA:C1:17:73:33:02:45:E1:D2:D1:FE:CA:1E Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584EA44517BC66B0E7E3B85025C0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8a9aa588-1cd8-3e4a-a1bc-7a742ae21a63.roa Signing time: Mon 27 Jul 2026 21:00:11 +0000 ROA not before: Mon 27 Jul 2026 21:00:11 +0000 ROA not after: Sun 25 Oct 2026 21:00:11 +0000 asID: 202 IP address blocks: 170.30.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a4:45:17:bc:66:b0:e7:e3:b8:50:25:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jul 27 21:00:11 2026 GMT Not After : Oct 25 21:00:11 2026 GMT Subject: CN=e3ec3ab1-678b-470c-95e6-34e9ca851f44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:96:7d:8a:9b:2d:cd:0d:58:3f:f0:7b:29:28: ee:cc:27:97:7f:de:c6:da:85:bb:80:0d:c9:91:9f: 98:f2:b9:10:2b:92:eb:a0:64:73:55:e4:db:74:3f: 0e:07:7b:fa:65:08:0c:3e:fa:7b:76:cf:67:37:e3: 1d:a6:56:54:91:26:19:03:b1:62:13:61:92:61:77: 0f:0e:61:45:bd:7e:bc:22:5a:99:6f:78:89:b9:be: 3c:a7:be:00:82:39:34:60:4d:88:d1:7b:ac:54:98: ad:e6:45:bc:05:48:c2:28:4a:84:95:38:70:56:53: b8:38:c9:55:98:98:95:00:25:47:72:dd:6c:2d:9f: c1:3a:bc:0d:1b:b5:d3:f6:55:6c:97:16:c0:1a:d5: c8:ee:3e:e4:70:9c:f1:55:5b:c6:77:37:b6:9b:4a: 8b:e0:39:0b:8c:dd:fa:3f:aa:43:f3:8d:b8:0e:c2: 7f:67:79:e7:11:5e:2e:a9:c6:c0:ed:38:a2:79:19: ad:55:ab:77:57:b6:64:3c:5b:5b:ca:9b:01:ce:7f: 9d:06:83:4d:3a:e8:86:80:d3:12:55:b9:5e:0a:04: 96:98:f0:b0:3b:f5:4c:41:73:06:7e:46:d0:7f:ca: a2:47:89:d1:19:f5:e7:a6:bb:7c:2b:81:41:5f:9b: ef:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:4D:C0:4C:96:47:3C:FA:C1:17:73:33:02:45:E1:D2:D1:FE:CA:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8a9aa588-1cd8-3e4a-a1bc-7a742ae21a63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 170.30.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:1e:96:66:ef:7c:c2:85:54:b9:8f:68:8a:da:d3:af:4e:2c: de:81:e1:c0:01:c6:62:0b:84:6f:dd:de:12:db:2a:4c:c5:1e: 5c:19:c5:75:72:20:1d:5f:5b:11:cd:63:13:7a:78:f9:e4:75: fd:3a:1f:56:9f:0d:f3:40:85:4f:f7:43:94:01:30:2f:e2:66: 02:c5:d8:dc:f0:79:9d:14:46:00:ae:16:b3:f2:28:31:b5:32: 63:71:d0:19:df:be:2e:31:f7:6c:3f:de:b0:83:c2:d8:18:56: 67:ea:43:47:11:99:e4:10:f1:98:75:5b:f6:9a:ef:62:5f:5c: 45:d6:d6:d8:2c:00:e6:e9:7c:d2:b4:cd:e4:00:d9:27:fc:d4: d4:22:9d:09:0b:c8:41:4d:82:8c:12:7e:e5:65:ed:c6:6c:eb: bb:69:73:4e:cf:20:fd:cc:9e:3b:d9:2c:a0:68:91:00:fd:0b: 9f:3b:bf:74:16:a3:57:5c:7f:c3:79:6a:30:18:e3:aa:f5:03: 13:45:d8:83:27:d2:2e:d6:79:c2:2d:3c:f7:0b:09:4c:4a:18: 2c:92:4a:c8:f5:d5:1b:6b:3e:ce:4c:3c:18:a5:a7:cb:fa:3a: bb:5d:c5:5a:b9:0e:b2:c7:b1:cc:be:5b:bb:7c:c3:9b:dc:a5: d6:0a:ff:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6kRRe8ZrDn47hQJcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDcyNzIxMDAxMVoXDTI2MTAyNTIxMDAxMVowLzEtMCsGA1UEAxMk ZTNlYzNhYjEtNjc4Yi00NzBjLTk1ZTYtMzRlOWNhODUxZjQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZZ9ipstzQ1YP/B7KSjuzCeXf97G2oW7gA3J kZ+Y8rkQK5LroGRzVeTbdD8OB3v6ZQgMPvp7ds9nN+MdplZUkSYZA7FiE2GSYXcP DmFFvX68IlqZb3iJub48p74Agjk0YE2I0XusVJit5kW8BUjCKEqElThwVlO4OMlV mJiVACVHct1sLZ/BOrwNG7XT9lVslxbAGtXI7j7kcJzxVVvGdze2m0qL4DkLjN36 P6pD8424DsJ/Z3nnEV4uqcbA7TiieRmtVat3V7ZkPFtbypsBzn+dBoNNOuiGgNMS VbleCgSWmPCwO/VMQXMGfkbQf8qiR4nRGfXnprt8K4FBX5vvpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGhNwEyWRzz6wRdzMwJF4dLR/soeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvOGE5YWE1ODgtMWNkOC0z ZTRhLWExYmMtN2E3NDJhZTIxYTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqh7wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJYelmbvfMKFVLmPaIra069OLN6B4cABxmILhG/d3hLbKkzFHlwZxXVy IB1fWxHNYxN6ePnkdf06H1afDfNAhU/3Q5QBMC/iZgLF2NzweZ0URgCuFrPyKDG1 MmNx0Bnfvi4x92w/3rCDwtgYVmfqQ0cRmeQQ8Zh1W/aa72JfXEXW1tgsAObpfNK0 zeQA2Sf81NQinQkLyEFNgowSfuVl7cZs67tpc07PIP3MnjvZLKBokQD9C587v3QW o1dcf8N5ajAY46r1AxNF2IMn0i7WecItPPcLCUxKGCySSsj11RtrPs5MPBilp8v6 OrtdxVq5DrLHscy+W7t8w5vcpdYK/2M= -----END CERTIFICATE-----Generated at Wed Jul 29 11:01:40 2026 by rpki-client