$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2c0628e4-c490-354d-accf-4bfe429e59c1.roa File: 2c0628e4-c490-354d-accf-4bfe429e59c1.roa (raw, json) Hash identifier: 4s1TVojhA8JeA4SHy1piN32bJ/gtnyYbC/dQ8I8oa1w= Subject key identifier: 72:9E:DE:53:D4:CC:ED:38:AA:4B:77:AE:BD:CF:21:66:0D:51:6B:88 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584E86F4FB4C95C82E0DC1B3AE80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2c0628e4-c490-354d-accf-4bfe429e59c1.roa Signing time: Fri 17 Jul 2026 09:00:14 +0000 ROA not before: Fri 17 Jul 2026 09:00:14 +0000 ROA not after: Thu 15 Oct 2026 09:00:14 +0000 asID: 202 IP address blocks: 168.87.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:86:f4:fb:4c:95:c8:2e:0d:c1:b3:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jul 17 09:00:14 2026 GMT Not After : Oct 15 09:00:14 2026 GMT Subject: CN=5fe16c39-8988-4aec-9def-c413c1ff7910 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:d4:59:ef:67:ce:1e:5e:1a:ed:9c:1f:04:a4: c0:d0:88:8b:48:57:01:e3:0e:17:ad:65:f8:5c:60: eb:7c:0c:0e:37:df:ae:6f:08:88:fd:bd:0e:9f:63: a8:6a:2b:fc:52:3c:e9:85:ed:37:da:85:cb:be:75: 75:9a:d4:41:d4:35:6c:ce:cf:6e:95:5a:7e:95:0d: fd:6e:18:1f:2f:00:e8:52:39:a0:31:3d:a1:aa:d9: f1:08:c4:5c:df:8a:a6:ca:74:a4:0d:3e:63:59:76: c6:f0:2e:42:3d:5d:e3:6e:ba:77:7a:9f:85:5a:48: b9:9a:be:e3:46:ca:fe:6f:b2:fd:56:de:75:47:29: c3:6b:16:00:88:82:73:c5:16:12:08:50:78:6b:a1: 35:37:bd:62:3f:4e:d6:93:c7:7f:63:50:27:c7:be: ea:8a:44:23:e0:ff:0d:bf:d5:5a:15:ec:11:c1:42: dd:ab:98:27:33:99:50:24:f6:11:51:35:ee:87:ad: 8a:74:fa:65:05:8a:3f:19:3f:0f:e9:78:af:30:db: 1d:6a:7a:16:f7:23:08:cd:41:ab:15:b5:e3:6e:6e: 54:56:0b:94:67:d4:d7:8b:03:4e:de:4e:70:4a:d8: eb:ba:9a:a6:ad:5c:23:bb:b8:c2:70:33:fb:82:21: e5:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:9E:DE:53:D4:CC:ED:38:AA:4B:77:AE:BD:CF:21:66:0D:51:6B:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2c0628e4-c490-354d-accf-4bfe429e59c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:15:71:6c:c2:59:92:67:1f:8f:02:72:02:ff:17:bf:34:af: 21:e6:97:0a:cc:c4:68:99:ad:9e:8b:47:34:79:5e:89:2c:f4: 2f:26:5c:b6:82:a3:21:e4:64:58:b8:d2:9a:1a:c9:5d:e4:8a: 89:71:0c:8e:bf:1e:58:41:41:b8:5d:c8:a1:37:09:70:2e:75: 18:26:0d:2e:60:84:99:81:41:cf:1a:fc:0c:0b:37:7b:16:90: d9:95:4c:42:17:bd:85:77:1c:39:d5:96:88:78:52:f9:0c:e0: 7f:f6:e7:f4:25:49:82:6c:9b:56:82:30:46:51:a9:f7:5a:cd: cd:39:ef:d6:2d:a2:66:4c:89:db:68:50:4e:53:1f:f9:c5:d2: 4d:28:61:ae:a3:83:d4:f5:d3:79:b9:8c:5d:c0:5f:e1:15:6d: 39:e3:56:d1:00:4a:3d:a7:6f:b0:9b:73:2c:97:99:fa:83:7d: b1:aa:87:fc:f9:ef:8b:86:31:c9:4b:03:04:42:61:30:47:55: e3:5f:1b:56:02:93:3d:c3:65:c9:e7:91:59:45:b2:e9:79:fc: 26:52:a4:94:78:17:b8:ca:4b:ea:5c:6b:43:a3:71:74:0a:c1: db:da:e6:93:59:6c:b0:ec:7f:99:30:1d:1a:8e:5c:82:27:36: 37:87:fb:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6G9PtMlcguDcGzroAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDcxNzA5MDAxNFoXDTI2MTAxNTA5MDAxNFowLzEtMCsGA1UEAxMk NWZlMTZjMzktODk4OC00YWVjLTlkZWYtYzQxM2MxZmY3OTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdRZ72fOHl4a7ZwfBKTA0IiLSFcB4w4XrWX4 XGDrfAwON9+ubwiI/b0On2Ooaiv8Ujzphe032oXLvnV1mtRB1DVszs9ulVp+lQ39 bhgfLwDoUjmgMT2hqtnxCMRc34qmynSkDT5jWXbG8C5CPV3jbrp3ep+FWki5mr7j Rsr+b7L9Vt51RynDaxYAiIJzxRYSCFB4a6E1N71iP07Wk8d/Y1Anx77qikQj4P8N v9VaFewRwULdq5gnM5lQJPYRUTXuh62KdPplBYo/GT8P6XivMNsdanoW9yMIzUGr FbXjbm5UVguUZ9TXiwNO3k5wStjrupqmrVwju7jCcDP7giHl7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHKe3lPUzO04qkt3rr3PIWYNUWuIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMmMwNjI4ZTQtYzQ5MC0z NTRkLWFjY2YtNGJmZTQyOWU1OWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqFdEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADUVcWzCWZJnH48CcgL/F780ryHmlwrMxGiZrZ6LRzR5Xoks9C8mXLaC oyHkZFi40poayV3kiolxDI6/HlhBQbhdyKE3CXAudRgmDS5ghJmBQc8a/AwLN3sW kNmVTEIXvYV3HDnVloh4UvkM4H/25/QlSYJsm1aCMEZRqfdazc0579YtomZMidto UE5TH/nF0k0oYa6jg9T103m5jF3AX+EVbTnjVtEASj2nb7CbcyyXmfqDfbGqh/z5 74uGMclLAwRCYTBHVeNfG1YCkz3DZcnnkVlFsul5/CZSpJR4F7jKS+pca0OjcXQK wdva5pNZbLDsf5kwHRqOXIInNjeH+6A= -----END CERTIFICATE-----Generated at Fri Jul 24 13:10:30 2026 by rpki-client