$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/58de68ed-9aaa-327b-9ecb-9c1b8f5de1a1.roa File: 58de68ed-9aaa-327b-9ecb-9c1b8f5de1a1.roa (raw, json) Hash identifier: QawLS13gpb4NRAC34hVT8tQyxnsrFh33QiIxNzxeUt8= Subject key identifier: 76:68:87:01:17:AF:5D:87:C3:00:57:8E:62:3D:63:28:1D:CA:FD:12 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584F4977486772A5958C7D132280 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/58de68ed-9aaa-327b-9ecb-9c1b8f5de1a1.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 3360 IP address blocks: 168.87.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 03 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:77:48:67:72:a5:95:8c:7d:13:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=7a8d1fed-2cbe-4f5a-b6d3-5803a3a38381 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:cb:ed:ee:4f:ef:29:fc:d7:a9:1d:47:bf:6d: a3:56:3a:1c:9c:58:e0:65:a3:83:3e:18:30:68:b9: 29:57:4b:44:21:49:ea:f8:94:8b:e2:9f:f7:f7:02: 35:ab:52:af:b6:9d:90:45:0d:83:bb:e3:c1:88:7e: c7:46:18:8b:4b:35:bc:96:86:35:8f:93:5c:67:f1: c8:a3:03:fa:3d:e3:e1:4c:f6:d4:16:57:1a:49:e4: 42:59:8a:66:e0:79:24:fd:63:47:ca:fe:f3:64:db: 2c:b4:ec:1b:c8:2d:27:ad:26:c6:cc:e9:95:3c:b3: a7:ff:0c:8a:f1:27:6e:5e:52:66:83:08:59:56:ab: c1:15:ad:6a:85:93:ce:83:bd:3d:dc:fd:20:71:18: 40:fe:d4:e6:d8:5e:f8:b9:99:8a:9d:52:ec:3d:b0: 46:df:08:e8:aa:c7:3d:76:11:10:d5:2d:3a:0b:28: 22:88:57:bd:d6:ca:e7:e1:ed:57:a9:d4:40:40:27: ce:ef:83:c6:4e:73:14:48:c9:1c:8d:4c:1e:56:91: e7:4e:6b:a1:a1:b4:18:78:97:56:8f:de:ab:3c:31: fc:84:ff:67:f6:f3:2f:40:cf:7d:c8:92:e5:43:28: 85:43:9c:bd:d0:6a:95:bf:5a:25:ad:8b:ad:09:3d: 66:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:68:87:01:17:AF:5D:87:C3:00:57:8E:62:3D:63:28:1D:CA:FD:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/58de68ed-9aaa-327b-9ecb-9c1b8f5de1a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:86:cf:10:ce:4e:ba:cc:1b:b5:d6:d3:9c:d1:b5:ae:ea:95: 7c:d0:ee:b0:ec:c2:35:26:2e:51:3f:9c:38:64:e2:3b:7b:87: c3:2a:ba:6c:31:66:90:6f:5d:b5:46:d7:70:16:b3:1f:62:de: 29:09:05:30:a8:e9:26:b6:b9:29:f2:b7:1e:c0:fd:8b:82:6d: 13:14:13:47:18:89:e2:99:f6:e8:18:6d:f8:3d:2c:25:81:a7: dd:70:92:2a:06:9c:3d:28:02:75:d5:ea:cd:56:82:29:a5:96: 7d:e0:f3:1c:08:13:c6:34:00:18:17:03:6d:dd:4c:c7:a5:22: d0:89:68:3f:23:08:6e:0e:06:59:7c:7e:33:33:9a:8d:68:b7: a6:0e:72:b9:87:fe:cd:11:b3:d4:3c:cb:e2:ed:02:93:50:66: f9:f1:22:28:cb:c5:75:77:51:c0:44:d6:a4:48:50:70:f4:be: 02:c8:cf:9a:98:35:6d:58:21:80:59:62:59:07:e9:a4:e9:a1: 23:1d:51:72:2d:ec:ce:c7:ff:63:5a:94:d3:08:f0:9b:78:96: 11:47:1f:51:df:c4:b4:69:7d:65:6d:c4:64:78:2f:a5:e2:f0: 94:fb:67:12:88:a9:bd:01:3a:7c:30:74:c7:8d:bd:6b:6d:8a: 77:8d:93:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jd0hncqWVjH0TIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk N2E4ZDFmZWQtMmNiZS00ZjVhLWI2ZDMtNTgwM2EzYTM4MzgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMvt7k/vKfzXqR1Hv22jVjocnFjgZaODPhgw aLkpV0tEIUnq+JSL4p/39wI1q1Kvtp2QRQ2Du+PBiH7HRhiLSzW8loY1j5NcZ/HI owP6PePhTPbUFlcaSeRCWYpm4Hkk/WNHyv7zZNsstOwbyC0nrSbGzOmVPLOn/wyK 8SduXlJmgwhZVqvBFa1qhZPOg7093P0gcRhA/tTm2F74uZmKnVLsPbBG3wjoqsc9 dhEQ1S06CygiiFe91srn4e1XqdRAQCfO74PGTnMUSMkcjUweVpHnTmuhobQYeJdW j96rPDH8hP9n9vMvQM99yJLlQyiFQ5y90GqVv1olrYutCT1mrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHZohwEXr12HwwBXjmI9Yygdyv0SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNThkZTY4ZWQtOWFhYS0z MjdiLTllY2ItOWMxYjhmNWRlMWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFcZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADiGzxDOTrrMG7XW05zRta7qlXzQ7rDswjUmLlE/nDhk4jt7h8Mqumwx ZpBvXbVG13AWsx9i3ikJBTCo6Sa2uSnytx7A/YuCbRMUE0cYieKZ9ugYbfg9LCWB p91wkioGnD0oAnXV6s1Wgimlln3g8xwIE8Y0ABgXA23dTMelItCJaD8jCG4OBll8 fjMzmo1ot6YOcrmH/s0Rs9Q8y+LtApNQZvnxIijLxXV3UcBE1qRIUHD0vgLIz5qY NW1YIYBZYlkH6aTpoSMdUXIt7M7H/2NalNMI8Jt4lhFHH1HfxLRpfWVtxGR4L6Xi 8JT7ZxKIqb0BOnwwdMeNvWttineNk8c= -----END CERTIFICATE-----Generated at Sat Oct 3 06:24:12 2026 by rpki-client