$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/296978a2-0497-36c1-b3eb-fd6da0b5f567.roa File: 296978a2-0497-36c1-b3eb-fd6da0b5f567.roa (raw, json) Hash identifier: DHiOBioVu9j9BmVpOgafDzyXdr7KS77Yidoo1bz++TI= Subject key identifier: D5:A4:8F:54:E3:7C:66:E3:E2:AF:7F:7A:D2:CD:AD:25:2F:89:52:08 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584F4975A0FBA02FCFF864064380 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/296978a2-0497-36c1-b3eb-fd6da0b5f567.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 203 IP address blocks: 168.87.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:a0:fb:a0:2f:cf:f8:64:06:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=98eb62f4-254a-4cab-a8f8-034c0ead55b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:01:3f:27:30:21:5b:63:a9:e1:41:ef:b6:30: 5a:2e:04:d7:fa:be:cc:11:e4:d7:c2:7f:e5:d3:e5: f8:cf:be:72:f1:18:2c:89:f7:df:7d:50:90:79:74: 1f:58:0a:8a:36:87:37:36:37:b9:dd:06:6a:59:64: 13:59:69:c3:cb:0c:17:31:9c:af:55:14:3a:f0:53: 91:74:11:00:40:7a:bd:b4:4d:5c:c4:11:73:80:ff: 2a:4f:9e:eb:cb:54:a8:06:d6:43:f0:23:3e:1d:69: b7:2d:52:47:2b:76:88:99:6e:3f:39:db:3e:d1:07: bd:98:03:e5:ad:de:94:eb:8e:8a:81:aa:11:a2:88: 7d:88:9a:52:78:61:1c:dd:01:d8:5c:70:d8:48:ec: dd:cc:ac:17:b9:55:b5:25:b7:de:5d:ab:e3:ba:59: 19:78:47:49:c4:35:44:d2:17:23:5d:62:92:23:c6: f2:df:76:2d:41:f6:8b:a9:20:fd:4e:d1:fe:d1:fd: 17:57:ea:85:1f:1d:6a:26:6c:71:96:19:36:cf:7a: a2:f3:45:db:05:43:5f:ba:a0:8a:04:bd:4c:b9:69: b4:19:0f:8f:1d:10:ff:95:0f:91:c7:99:1a:5c:b2: a8:cd:61:83:6b:db:b1:32:ab:09:63:a5:0f:da:c8: 33:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:A4:8F:54:E3:7C:66:E3:E2:AF:7F:7A:D2:CD:AD:25:2F:89:52:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/296978a2-0497-36c1-b3eb-fd6da0b5f567.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:b1:10:d2:31:52:93:64:a8:a5:4c:d1:f5:87:35:1d:6b:89: 0b:a8:d4:85:7b:de:cc:84:2b:62:6f:88:a0:57:ed:9f:4e:4e: 7a:1e:15:13:33:9e:62:93:44:2b:eb:bc:12:97:57:f9:6a:0f: 32:6f:38:72:e0:06:f8:40:7b:2f:fc:89:1f:04:92:a5:a8:63: d9:3d:2b:02:51:af:14:87:14:62:1e:98:df:86:31:54:6b:e3: ac:78:65:55:ca:9a:db:90:91:00:0f:a5:0d:77:86:db:de:f3: 5f:0a:a2:ae:b3:b4:62:b0:a3:4a:3d:a2:b5:93:d8:b0:1c:b8: d6:30:5c:43:6f:31:49:8d:3e:f7:eb:74:68:b2:49:f2:77:85: 7e:be:e5:fa:54:e9:99:f1:d7:2d:f6:f7:e4:cb:26:0a:42:e2: 50:c0:fc:cb:b1:dc:07:6e:a5:17:43:8c:59:0e:01:2f:4a:3b: 0d:22:c7:f9:9d:98:fe:26:85:08:a3:87:21:bc:65:05:69:9f: e5:ca:76:24:4e:c7:b6:62:25:08:81:9e:59:4c:e2:3f:ee:c2: 1c:1b:f5:a4:62:7f:b5:ff:83:7a:e9:c3:68:81:42:8c:e5:9d: d2:82:6b:18:54:1f:2a:79:26:6f:ec:47:f9:4f:c3:40:6b:bf: 81:16:ce:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdaD7oC/P+GQGQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OThlYjYyZjQtMjU0YS00Y2FiLWE4ZjgtMDM0YzBlYWQ1NWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswE/JzAhW2Op4UHvtjBaLgTX+r7MEeTXwn/l 0+X4z75y8RgsiffffVCQeXQfWAqKNoc3Nje53QZqWWQTWWnDywwXMZyvVRQ68FOR dBEAQHq9tE1cxBFzgP8qT57ry1SoBtZD8CM+HWm3LVJHK3aImW4/Ods+0Qe9mAPl rd6U646KgaoRooh9iJpSeGEc3QHYXHDYSOzdzKwXuVW1JbfeXavjulkZeEdJxDVE 0hcjXWKSI8by33YtQfaLqSD9TtH+0f0XV+qFHx1qJmxxlhk2z3qi80XbBUNfuqCK BL1MuWm0GQ+PHRD/lQ+Rx5kaXLKozWGDa9uxMqsJY6UP2sgznQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNWkj1TjfGbj4q9/etLNrSUviVIIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMjk2OTc4YTItMDQ5Ny0z NmMxLWIzZWItZmQ2ZGEwYjVmNTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqFdIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAuxENIxUpNkqKVM0fWHNR1riQuo1IV73syEK2JviKBX7Z9OTnoeFRMz nmKTRCvrvBKXV/lqDzJvOHLgBvhAey/8iR8EkqWoY9k9KwJRrxSHFGIemN+GMVRr 46x4ZVXKmtuQkQAPpQ13htve818Koq6ztGKwo0o9orWT2LAcuNYwXENvMUmNPvfr dGiySfJ3hX6+5fpU6Znx1y329+TLJgpC4lDA/Mux3AdupRdDjFkOAS9KOw0ix/md mP4mhQijhyG8ZQVpn+XKdiROx7ZiJQiBnllM4j/uwhwb9aRif7X/g3rpw2iBQozl ndKCaxhUHyp5Jm/sR/lPw0Brv4EWzls= -----END CERTIFICATE-----Generated at Sun Sep 27 02:36:58 2026 by rpki-client