$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5847517f-210b-3788-9466-d5cb48274a43.roa File: 5847517f-210b-3788-9466-d5cb48274a43.roa (raw, json) Hash identifier: gDmTw3mQV/Cj4/OGUEjwXAgB/DV0/PNWPoWbqfQWSeI= Subject key identifier: A2:D6:B0:43:FA:E7:29:61:0F:FB:C8:B9:44:66:CE:BB:0D:2D:B9:D9 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584D4A8FACEBD6A0BB7EC7562460 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5847517f-210b-3788-9466-d5cb48274a43.roa Signing time: Thu 26 Mar 2026 01:00:32 +0000 ROA not before: Thu 26 Mar 2026 01:00:32 +0000 ROA not after: Wed 24 Jun 2026 01:00:32 +0000 asID: 3356 IP address blocks: 168.87.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:8f:ac:eb:d6:a0:bb:7e:c7:56:24:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 26 01:00:32 2026 GMT Not After : Jun 24 01:00:32 2026 GMT Subject: CN=41c53351-b0ad-4d2a-bc75-262561c6c1e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:cc:69:8c:dc:73:d4:45:34:3c:e5:3c:d5:26: 86:dd:52:c0:8f:bf:bc:f4:2a:29:12:73:b8:71:52: 7f:90:b2:97:9c:2f:da:74:48:7b:71:6f:b2:07:67: 86:08:42:d7:93:51:28:a5:d2:78:ee:39:0c:df:23: 74:b7:12:c8:1c:a4:cc:4e:1b:07:1a:82:ee:5d:c7: df:bc:7b:5a:c8:95:8f:8b:1e:4f:65:e0:31:b7:aa: 7f:f1:94:8d:95:1e:6a:81:19:87:d1:0e:9d:dd:c6: 07:9e:ad:6d:ce:a4:2c:5a:1a:48:04:06:36:6e:d9: fd:a8:c0:62:15:2c:50:57:36:50:74:9b:8e:fd:d8: 8f:c9:d9:d8:ff:81:02:c5:1e:07:5c:54:80:fe:d4: 9a:69:25:c4:70:b2:91:d7:56:65:ab:c8:b5:ec:12: 86:2a:1f:3e:5f:60:e5:bc:90:18:8b:5d:5b:4e:fc: 80:de:9f:af:b8:78:00:2e:df:f4:e6:4e:ce:11:a1: 29:49:ef:dc:5c:6e:5e:3e:f1:e6:9e:4b:07:b4:a9: d0:eb:f7:c8:33:0a:ac:30:70:3b:f3:66:db:44:63: 0e:0a:b9:ee:3a:30:a9:46:58:63:0a:01:45:a9:49: c4:3d:c2:90:c6:ed:13:b1:cc:40:1a:64:44:4d:6c: f9:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:D6:B0:43:FA:E7:29:61:0F:FB:C8:B9:44:66:CE:BB:0D:2D:B9:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5847517f-210b-3788-9466-d5cb48274a43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:c3:7f:25:d2:ee:52:1d:6d:5e:85:4e:f5:8f:d6:9f:1a:0d: b0:16:0e:50:72:ca:50:9e:46:d1:41:d4:9f:be:7d:9c:fd:d2: e2:e5:29:d8:e5:56:45:63:9e:75:42:c1:aa:dc:7e:11:b3:de: 52:3d:41:6b:dc:09:08:87:f4:61:77:f3:b9:96:c0:07:a0:49: b1:76:04:75:0c:27:f3:66:1a:af:13:26:ad:6d:d6:cd:ea:02: d9:7b:eb:67:cd:e7:4f:b2:b0:1f:cb:c5:8c:73:b1:9c:ce:17: 0f:11:85:83:eb:16:65:2c:6c:b4:72:ff:06:ba:be:bf:72:c9: a4:ed:c3:94:47:0c:06:dd:f0:74:e8:03:c3:7d:24:4a:f7:15: 1b:c8:3a:b8:dc:0e:33:10:c1:1a:97:a9:2b:2c:f8:61:82:17: a0:f3:3f:19:2e:25:b1:00:60:dd:92:10:e5:ee:97:28:76:64: e8:59:18:de:0d:22:b0:bf:7b:d1:80:34:a5:a7:2f:d9:45:22: 06:82:92:ca:ec:f6:71:34:b5:f6:64:f9:55:6a:f9:7e:37:b2: fb:e2:ea:08:2a:53:be:dd:12:c4:93:40:4e:3e:dd:e0:45:e7: a9:b3:41:6f:7b:12:23:15:3b:5b:ef:00:f7:87:b4:24:d8:ca: 9d:7e:ec:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Kj6zr1qC7fsdWJGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk NDFjNTMzNTEtYjBhZC00ZDJhLWJjNzUtMjYyNTYxYzZjMWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8xpjNxz1EU0POU81SaG3VLAj7+89CopEnO4 cVJ/kLKXnC/adEh7cW+yB2eGCELXk1EopdJ47jkM3yN0txLIHKTMThsHGoLuXcff vHtayJWPix5PZeAxt6p/8ZSNlR5qgRmH0Q6d3cYHnq1tzqQsWhpIBAY2btn9qMBi FSxQVzZQdJuO/diPydnY/4ECxR4HXFSA/tSaaSXEcLKR11Zlq8i17BKGKh8+X2Dl vJAYi11bTvyA3p+vuHgALt/05k7OEaEpSe/cXG5ePvHmnksHtKnQ6/fIMwqsMHA7 82bbRGMOCrnuOjCpRlhjCgFFqUnEPcKQxu0TscxAGmRETWz5RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKLWsEP65ylhD/vIuURmzrsNLbnZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNTg0NzUxN2YtMjEwYi0z Nzg4LTk0NjYtZDVjYjQ4Mjc0YTQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqFcIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/DfyXS7lIdbV6FTvWP1p8aDbAWDlByylCeRtFB1J++fZz90uLlKdjl VkVjnnVCwarcfhGz3lI9QWvcCQiH9GF387mWwAegSbF2BHUMJ/NmGq8TJq1t1s3q Atl762fN50+ysB/LxYxzsZzOFw8RhYPrFmUsbLRy/wa6vr9yyaTtw5RHDAbd8HTo A8N9JEr3FRvIOrjcDjMQwRqXqSss+GGCF6DzPxkuJbEAYN2SEOXulyh2ZOhZGN4N IrC/e9GANKWnL9lFIgaCksrs9nE0tfZk+VVq+X43svvi6ggqU77dEsSTQE4+3eBF 56mzQW97EiMVO1vvAPeHtCTYyp1+7AI= -----END CERTIFICATE-----Generated at Thu Mar 26 21:56:12 2026 by rpki-client