$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/34510429-d958-3a78-990a-f80264d9221e.roa File: 34510429-d958-3a78-990a-f80264d9221e.roa (raw, json) Hash identifier: 0I+YQcQ/plF/q/vter2hPFmhBHTSwQE+pfIVgnOTut4= Subject key identifier: 42:B1:00:0C:21:BB:C5:F4:BF:8C:EA:17:FF:24:8B:6F:85:95:C6:91 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584D09126962677E2F3453B96A00 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/34510429-d958-3a78-990a-f80264d9221e.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 3360 IP address blocks: 168.87.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:69:62:67:7e:2f:34:53:b9:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=a5c91cc0-a291-4943-9c5a-5a1156346dd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:73:ea:49:3e:7b:0a:f9:a1:63:a8:20:34:11: 21:54:e4:32:e7:64:0e:e2:cd:b9:46:27:e6:f7:a8: af:91:19:e1:f0:46:42:a5:bc:7b:7b:56:bd:8e:49: 68:5e:08:30:17:2e:fe:c1:5b:eb:27:14:06:bb:d2: 77:66:70:f0:1c:59:bc:c5:63:81:ec:24:c8:bb:12: 7c:0c:85:54:a7:a9:3a:9c:96:64:33:eb:fa:61:73: 76:53:dd:11:85:8c:88:9b:e4:62:ca:28:4e:1b:66: d1:11:5d:79:f5:8d:44:17:bd:1d:8c:6e:d1:25:c9: 3e:2a:d9:39:00:b5:95:2a:0f:68:38:1c:8c:2b:a3: ae:22:de:18:8d:66:a1:6f:0f:1a:ef:71:9a:90:90: d7:b0:db:13:d0:8e:95:96:2b:e6:98:89:cf:ee:dd: 85:8a:0b:1e:bf:5b:e7:74:c4:9a:39:e0:a4:bf:c8: f4:b3:b8:e7:f9:45:28:c3:24:72:82:71:a6:54:c7: 1b:54:29:0c:f2:b4:fe:f3:49:62:0c:30:d9:46:20: 5a:17:6b:37:ba:bd:5c:4a:78:53:b1:b2:cc:31:a4: 03:fb:11:ff:b5:cf:2d:07:28:85:f1:17:c9:53:e8: a8:96:0c:ab:56:89:e2:57:69:00:5c:0d:e9:ae:63: 42:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:B1:00:0C:21:BB:C5:F4:BF:8C:EA:17:FF:24:8B:6F:85:95:C6:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/34510429-d958-3a78-990a-f80264d9221e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:9f:58:bc:7e:be:78:31:58:cc:fc:6a:69:38:0b:37:1e:ba: 7d:cc:28:94:a2:d3:41:57:64:89:bd:1b:0a:8b:ae:83:4d:53: a7:64:ae:fa:9a:76:aa:75:e7:a8:0c:bf:29:0d:34:4e:57:8b: 5c:25:ed:cf:a8:99:18:b6:af:8c:6a:8b:b7:46:76:46:55:9e: fb:08:51:f5:b8:b8:14:c0:b8:a2:28:0d:d4:45:ad:a5:ac:05: b8:46:8d:5f:21:12:54:57:d0:2d:87:4a:13:39:1e:f7:47:40: 5c:02:ba:0b:72:d5:80:f4:d2:3b:86:14:33:45:d0:0f:2f:4b: 55:74:85:08:74:52:e6:3e:18:b5:54:08:f1:96:c0:30:ad:eb: 57:74:b0:90:ff:c4:2f:be:da:75:77:ec:3c:d2:39:f3:70:91: a4:2b:22:3e:43:a9:b5:c5:20:c3:ab:0c:86:de:04:19:66:09: 28:72:d1:a9:67:18:40:c2:cc:e1:d6:8f:3c:bb:74:b0:27:3e: 48:e4:f5:34:da:b0:45:01:2b:b2:e1:e6:46:a3:11:1c:2d:d8: 54:39:0a:bf:74:05:c5:a3:98:0a:5f:09:65:6c:0b:16:99:86: 42:c7:78:90:2a:42:db:3b:6f:d9:a0:c2:36:6a:c1:b6:5e:70: 8c:44:2b:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0JEmliZ34vNFO5agAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk YTVjOTFjYzAtYTI5MS00OTQzLTljNWEtNWExMTU2MzQ2ZGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3PqST57CvmhY6ggNBEhVOQy52QO4s25Rifm 96ivkRnh8EZCpbx7e1a9jkloXggwFy7+wVvrJxQGu9J3ZnDwHFm8xWOB7CTIuxJ8 DIVUp6k6nJZkM+v6YXN2U90RhYyIm+RiyihOG2bREV159Y1EF70djG7RJck+Ktk5 ALWVKg9oOByMK6OuIt4YjWahbw8a73GakJDXsNsT0I6VlivmmInP7t2Figsev1vn dMSaOeCkv8j0s7jn+UUowyRygnGmVMcbVCkM8rT+80liDDDZRiBaF2s3ur1cSnhT sbLMMaQD+xH/tc8tByiF8RfJU+iolgyrVoniV2kAXA3prmNC3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEKxAAwhu8X0v4zqF/8ki2+FlcaRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMzQ1MTA0MjktZDk1OC0z YTc4LTk5MGEtZjgwMjY0ZDkyMjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqFdIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHKfWLx+vngxWMz8amk4Czceun3MKJSi00FXZIm9GwqLroNNU6dkrvqa dqp156gMvykNNE5Xi1wl7c+omRi2r4xqi7dGdkZVnvsIUfW4uBTAuKIoDdRFraWs BbhGjV8hElRX0C2HShM5HvdHQFwCugty1YD00juGFDNF0A8vS1V0hQh0UuY+GLVU CPGWwDCt61d0sJD/xC++2nV37DzSOfNwkaQrIj5DqbXFIMOrDIbeBBlmCShy0aln GEDCzOHWjzy7dLAnPkjk9TTasEUBK7Lh5kajERwt2FQ5Cr90BcWjmApfCWVsCxaZ hkLHeJAqQts7b9mgwjZqwbZecIxEK3E= -----END CERTIFICATE-----Generated at Thu Mar 26 19:53:44 2026 by rpki-client