$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a060f5d3-e452-37db-976f-7bd49ad40973.roa File: a060f5d3-e452-37db-976f-7bd49ad40973.roa (raw, json) Hash identifier: nfPnhWJV3+a3gdFLZUOAj09bkJqmG5GVVw/LZL77h6k= Subject key identifier: 79:38:5D:BE:B8:B4:4C:FA:5D:3D:CC:16:78:C8:E9:A5:4F:B9:C8:C0 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584F4975CC54F834C3BC95B834C0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a060f5d3-e452-37db-976f-7bd49ad40973.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 3356 IP address blocks: 199.228.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:cc:54:f8:34:c3:bc:95:b8:34:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c714c67a-28e0-43b9-ae9b-a0eacadd5b86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:19:62:c0:03:00:90:ef:3b:93:d1:49:20:68: c1:73:a1:dd:bc:4d:35:a0:89:11:e7:ea:f2:b4:05: 84:d5:31:29:13:bd:4e:e1:e6:e2:97:f6:c2:d0:a8: 41:9d:dc:f0:c8:03:19:7a:fd:31:25:30:d2:1c:fb: 5d:34:32:3e:bd:ad:a8:37:58:1b:5a:0c:75:e8:de: 84:fd:4b:9e:4a:a5:52:d1:ea:b7:3c:b6:6d:a6:6f: 5a:63:dc:62:59:5b:4d:c8:b2:b2:01:cf:1b:a8:f1: 33:f1:a1:cd:ed:85:b8:00:f1:76:e9:d3:2c:46:d3: ff:b6:33:1e:41:b6:2a:30:14:7c:65:03:09:53:23: f0:77:cf:b3:a3:3b:5a:35:8c:71:90:2c:07:6f:53: 9f:f9:a1:d2:db:7a:ab:9e:77:ee:e7:f0:0f:fb:09: 48:5d:a5:ea:49:da:70:c5:f2:b9:4a:d4:0a:a0:2e: 85:63:4d:c7:3c:15:78:42:30:e2:ec:2b:a1:40:13: 0e:77:66:63:27:97:64:9a:d0:51:2f:49:66:5c:6a: 3e:bc:ec:62:77:44:d9:bd:e6:21:db:41:8c:64:d4: 12:2e:2a:c4:b6:91:86:7f:bf:c0:2c:87:9f:63:d6: 18:ec:6a:93:14:25:96:4e:d0:51:b8:1b:a3:6f:be: 93:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:38:5D:BE:B8:B4:4C:FA:5D:3D:CC:16:78:C8:E9:A5:4F:B9:C8:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a060f5d3-e452-37db-976f-7bd49ad40973.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 199.228.190.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:65:a8:ac:67:b6:d3:f4:29:f9:50:0c:0b:5f:ef:2a:07:65: 3f:f3:cf:f8:ef:17:c9:81:26:55:03:32:1e:0e:0a:b1:00:d5: 5b:f4:40:c0:84:e8:4a:ed:93:6e:03:bb:1f:2c:e9:0a:48:65: b0:8e:5d:e5:81:2c:09:b2:69:0e:67:fe:1e:d3:9b:7c:8a:1b: 07:e0:d7:bb:1b:b8:cd:db:94:28:f7:00:df:15:29:65:a3:de: cc:78:ed:9f:65:d2:15:82:bd:48:34:4f:48:ec:16:22:d1:ac: 02:fc:91:9a:1e:d4:39:01:1a:fd:f2:d1:4d:bd:a2:e9:1c:83: f5:71:27:0f:ca:b2:7d:b9:d2:3a:2f:14:af:78:ca:7b:95:0e: 35:08:54:31:17:27:d0:96:d8:5a:7a:4a:2a:84:85:73:5d:64: 6e:ea:c7:3f:1a:0a:aa:81:fb:1f:be:37:70:61:5f:20:d2:4d: db:fd:e2:3f:5c:5d:ee:f0:8b:ce:28:6f:5e:39:fd:25:3e:9b: 19:7d:9e:2f:cc:b3:cf:11:08:37:5a:32:58:af:30:32:c4:d5: a9:9c:55:63:c0:31:e7:80:77:75:5e:19:7a:54:6a:10:01:8d: 95:35:75:24:a9:77:5c:a5:91:82:7c:3d:ce:34:aa:48:0c:b4: 39:b5:a2:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdcxU+DTDvJW4NMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YzcxNGM2N2EtMjhlMC00M2I5LWFlOWItYTBlYWNhZGQ1Yjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRliwAMAkO87k9FJIGjBc6HdvE01oIkR5+ry tAWE1TEpE71O4ebil/bC0KhBndzwyAMZev0xJTDSHPtdNDI+va2oN1gbWgx16N6E /UueSqVS0eq3PLZtpm9aY9xiWVtNyLKyAc8bqPEz8aHN7YW4APF26dMsRtP/tjMe QbYqMBR8ZQMJUyPwd8+zoztaNYxxkCwHb1Of+aHS23qrnnfu5/AP+wlIXaXqSdpw xfK5StQKoC6FY03HPBV4QjDi7CuhQBMOd2ZjJ5dkmtBRL0lmXGo+vOxid0TZveYh 20GMZNQSLirEtpGGf7/ALIefY9YY7GqTFCWWTtBRuBujb76T0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHk4Xb64tEz6XT3MFnjI6aVPucjAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYTA2MGY1ZDMtZTQ1Mi0z N2RiLTk3NmYtN2JkNDlhZDQwOTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx+S+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGNlqKxnttP0KflQDAtf7yoHZT/zz/jvF8mBJlUDMh4OCrEA1Vv0QMCE 6Ertk24Dux8s6QpIZbCOXeWBLAmyaQ5n/h7Tm3yKGwfg17sbuM3blCj3AN8VKWWj 3sx47Z9l0hWCvUg0T0jsFiLRrAL8kZoe1DkBGv3y0U29oukcg/VxJw/Ksn250jov FK94ynuVDjUIVDEXJ9CW2Fp6SiqEhXNdZG7qxz8aCqqB+x++N3BhXyDSTdv94j9c Xe7wi84ob145/SU+mxl9ni/Ms88RCDdaMlivMDLE1amcVWPAMeeAd3VeGXpUahAB jZU1dSSpd1ylkYJ8Pc40qkgMtDm1op0= -----END CERTIFICATE-----Generated at Mon Sep 28 22:53:24 2026 by rpki-client