$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5db721f0-41f0-3884-abef-c8d193e99ca5.roa File: 5db721f0-41f0-3884-abef-c8d193e99ca5.roa (raw, json) Hash identifier: A3CPCswfyihCW9AesnCApvLohrqgTYnQ5B9ayXOaiVs= Subject key identifier: 66:A0:18:5F:EE:84:86:09:2C:21:A4:0A:3D:A0:7C:68:30:09:42:20 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584E885A4C9A24DF3C75BF032080 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5db721f0-41f0-3884-abef-c8d193e99ca5.roa Signing time: Fri 17 Jul 2026 21:00:12 +0000 ROA not before: Fri 17 Jul 2026 21:00:12 +0000 ROA not after: Thu 15 Oct 2026 21:00:12 +0000 asID: 202 IP address blocks: 168.87.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:88:5a:4c:9a:24:df:3c:75:bf:03:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jul 17 21:00:12 2026 GMT Not After : Oct 15 21:00:12 2026 GMT Subject: CN=870c66fa-da75-4851-b0b2-496b35c8d3bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:bb:d2:dc:cf:df:f5:b6:58:a5:85:64:5e:d9: 37:c9:19:1d:dd:aa:c8:1b:6b:4e:1f:3e:6e:ca:e4: be:5d:16:4f:07:10:8c:7f:8e:9f:25:c9:26:95:24: 33:7a:53:3d:af:42:8b:92:b6:4b:00:a2:68:63:c1: 03:d0:21:7e:a9:d9:c6:a8:66:2c:7d:a9:b5:05:06: f2:a6:6d:32:9c:e8:de:cc:82:2d:39:fd:ce:4f:c4: d2:1c:a0:f9:b1:ed:d7:4d:ec:85:7e:97:73:02:70: e4:d3:0b:a1:9f:9d:c0:65:e2:0f:5c:21:96:15:cf: 7c:a2:93:13:1e:43:a1:4b:6f:f7:51:fb:7b:e8:d5: d4:91:52:6e:40:f2:20:df:fa:cf:b5:82:1a:12:ba: 34:a3:40:66:ac:93:32:cd:b3:4d:ae:d2:cd:07:89: 0b:3f:82:31:2b:ba:b0:61:fa:95:5f:f2:2b:ec:92: 79:ce:1e:d6:47:34:f0:18:20:f7:52:8a:4d:d9:2b: 82:cc:d5:d1:32:38:95:74:1d:47:e4:7b:58:43:b5: 46:d2:3e:d1:4c:7a:ed:07:fc:1f:18:e1:13:dc:b1: ed:7f:ca:86:18:d8:9f:fd:59:dc:56:84:de:b8:ea: b4:66:c8:d1:79:31:ca:af:51:98:7b:4a:7b:2c:51: 76:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:A0:18:5F:EE:84:86:09:2C:21:A4:0A:3D:A0:7C:68:30:09:42:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5db721f0-41f0-3884-abef-c8d193e99ca5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:b0:31:fc:79:7f:72:86:94:8b:24:af:a2:e2:61:6d:92:60: d6:5a:52:e4:da:a1:09:55:b6:55:40:ac:bb:a2:bd:bc:7d:65: ef:e5:7a:3e:93:b9:95:ba:4b:9b:4d:a6:77:25:74:5f:4d:9e: c3:e3:1e:45:5d:6d:a8:88:3a:6e:87:8b:20:67:04:12:91:31: 54:fb:c2:9c:86:28:92:52:45:a0:91:c1:ba:4f:bb:99:24:ae: 7b:f4:6c:eb:d8:07:05:e2:54:fa:a3:b9:51:fa:4b:f8:6b:ef: 9d:c4:4f:3a:23:13:72:11:fd:e3:3d:3f:3c:37:80:1c:14:71: 9b:09:b4:b8:af:97:5e:4d:e5:e2:fe:1c:77:c8:f9:60:9f:c0: db:ae:03:8a:85:9c:a8:46:71:aa:98:0e:22:ed:b5:58:b1:2a: 90:f8:41:a1:d8:f0:7a:2b:35:8f:00:10:ef:21:99:71:b9:a1: 30:0b:25:5d:7c:e8:63:4b:1e:87:cb:56:74:08:06:4b:82:4b: e4:58:71:50:f0:aa:94:2b:f3:64:e9:59:52:c0:3f:29:41:7f: a1:75:57:89:e8:4a:81:3a:27:0c:51:5a:6a:26:f0:11:cc:46: 4a:af:9f:78:1f:f4:56:5c:62:58:dc:b0:46:9c:bc:53:8c:ad: d6:6a:59:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6IWkyaJN88db8DIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDcxNzIxMDAxMloXDTI2MTAxNTIxMDAxMlowLzEtMCsGA1UEAxMk ODcwYzY2ZmEtZGE3NS00ODUxLWIwYjItNDk2YjM1YzhkM2JkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirvS3M/f9bZYpYVkXtk3yRkd3arIG2tOHz5u yuS+XRZPBxCMf46fJckmlSQzelM9r0KLkrZLAKJoY8ED0CF+qdnGqGYsfam1BQby pm0ynOjezIItOf3OT8TSHKD5se3XTeyFfpdzAnDk0wuhn53AZeIPXCGWFc98opMT HkOhS2/3Uft76NXUkVJuQPIg3/rPtYIaEro0o0BmrJMyzbNNrtLNB4kLP4IxK7qw YfqVX/Ir7JJ5zh7WRzTwGCD3UopN2SuCzNXRMjiVdB1H5HtYQ7VG0j7RTHrtB/wf GOET3LHtf8qGGNif/VncVoTeuOq0ZsjReTHKr1GYe0p7LFF24wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGagGF/uhIYJLCGkCj2gfGgwCUIgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNWRiNzIxZjAtNDFmMC0z ODg0LWFiZWYtYzhkMTkzZTk5Y2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqFcUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqwMfx5f3KGlIskr6LiYW2SYNZaUuTaoQlVtlVArLuivbx9Ze/lej6T uZW6S5tNpncldF9NnsPjHkVdbaiIOm6HiyBnBBKRMVT7wpyGKJJSRaCRwbpPu5kk rnv0bOvYBwXiVPqjuVH6S/hr753ETzojE3IR/eM9Pzw3gBwUcZsJtLivl15N5eL+ HHfI+WCfwNuuA4qFnKhGcaqYDiLttVixKpD4QaHY8HorNY8AEO8hmXG5oTALJV18 6GNLHofLVnQIBkuCS+RYcVDwqpQr82TpWVLAPylBf6F1V4noSoE6JwxRWmom8BHM Rkqvn3gf9FZcYljcsEacvFOMrdZqWWs= -----END CERTIFICATE-----Generated at Fri Jul 24 02:09:34 2026 by rpki-client