$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/651c78c9-0fab-33dc-9853-a471d8f178c1.roa File: 651c78c9-0fab-33dc-9853-a471d8f178c1.roa (raw, json) Hash identifier: D+xov+jobWbQyEU867OAP5ZamSHEGparRRX2ZSkl3Wg= Subject key identifier: D7:93:A9:E6:37:66:7B:EF:23:74:03:7D:14:B5:F2:76:DF:5C:36:5D Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584DA6B01F817FA1FB2495BB5940 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/651c78c9-0fab-33dc-9853-a471d8f178c1.roa Signing time: Tue 28 Apr 2026 01:00:24 +0000 ROA not before: Tue 28 Apr 2026 01:00:24 +0000 ROA not after: Mon 27 Jul 2026 01:00:24 +0000 asID: 3356 IP address blocks: 168.87.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:b0:1f:81:7f:a1:fb:24:95:bb:59:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 28 01:00:24 2026 GMT Not After : Jul 27 01:00:24 2026 GMT Subject: CN=666d4abd-316c-4d80-a284-b5f7266e0013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7a:ae:6d:cc:d1:7f:f1:10:01:e7:67:3c:e1: e4:ca:08:39:a1:61:1d:a4:bb:a3:5a:da:56:ca:12: c0:a6:d4:7e:fc:98:28:55:c4:8e:64:58:b4:ca:3b: 93:d5:64:c7:22:50:39:1c:ad:00:df:04:5b:b4:b8: d4:bb:b7:3d:8a:4f:9f:fe:d1:2c:45:85:16:47:03: 1e:2a:08:60:ff:82:23:2c:00:90:71:48:96:db:d5: 67:4e:53:6d:24:22:bf:90:21:19:2a:f6:2f:cf:7b: 5f:af:d2:fb:41:11:07:26:e6:25:eb:24:40:7c:da: 6d:b0:51:33:00:19:b7:4e:e9:91:a2:85:0b:29:69: 06:9d:89:df:4a:69:00:70:79:df:bc:a7:e6:59:6d: ae:b8:62:9a:76:45:a5:a1:71:6b:8c:2d:88:44:ef: c6:45:45:17:6a:20:10:97:6f:ed:a4:01:d9:5a:f9: 90:93:22:a5:56:c4:00:2e:98:e0:9c:94:d9:52:f7: 65:a3:f8:3f:b0:d3:4c:65:01:10:91:4e:76:13:62: 9e:81:27:4a:2d:d2:8b:79:92:6c:24:f2:85:7a:60: 2d:ee:51:db:10:56:18:8b:2c:c4:b4:47:09:2a:ea: a3:84:05:04:30:9c:3a:a6:9f:9a:6c:33:9f:3b:8d: fd:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:93:A9:E6:37:66:7B:EF:23:74:03:7D:14:B5:F2:76:DF:5C:36:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/651c78c9-0fab-33dc-9853-a471d8f178c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:58:fe:f8:6c:63:44:ef:fd:a8:f2:a1:2f:04:13:7d:1e:1d: d5:62:36:d6:9d:cb:0b:b1:f1:ed:32:49:5f:4c:56:32:d3:70: b9:e4:ed:4a:68:fb:5f:06:6f:26:b3:56:7a:a5:93:0a:0d:17: fd:8c:e3:d0:b1:27:3b:07:f3:8c:34:0b:9c:f5:57:98:59:1c: b5:1e:74:bf:0a:51:8f:87:1f:31:c1:26:e2:67:6d:c0:5c:d5: c8:97:67:99:45:14:c0:3a:b2:76:1e:eb:23:37:e2:df:bb:83: ee:8a:ea:09:5b:27:60:84:73:79:f0:e6:ba:23:7c:ae:fe:3b: 28:ba:87:2c:20:77:a9:6f:f0:d4:8a:ca:f2:36:5c:09:05:19: b9:60:be:71:e4:75:9c:01:54:5a:4f:b8:51:dc:a1:6d:e7:52: a5:b9:48:7c:b8:90:fc:3b:2b:b4:ef:dd:7b:05:17:35:65:bb: 15:df:f2:db:28:c9:9f:d8:c1:cb:34:fd:ad:ad:8f:49:1f:ab: b2:9c:13:77:5a:99:41:69:e6:6d:f3:f9:c0:51:bf:42:1b:7d: f2:93:01:2b:67:73:49:16:8b:ee:24:c6:9f:78:d2:5d:77:31: bf:42:a5:c2:2a:eb:84:ae:57:f8:33:35:80:c3:18:40:16:68: c2:21:71:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2msB+Bf6H7JJW7WUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk NjY2ZDRhYmQtMzE2Yy00ZDgwLWEyODQtYjVmNzI2NmUwMDEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3qubczRf/EQAednPOHkygg5oWEdpLujWtpW yhLAptR+/JgoVcSOZFi0yjuT1WTHIlA5HK0A3wRbtLjUu7c9ik+f/tEsRYUWRwMe Kghg/4IjLACQcUiW29VnTlNtJCK/kCEZKvYvz3tfr9L7QREHJuYl6yRAfNptsFEz ABm3TumRooULKWkGnYnfSmkAcHnfvKfmWW2uuGKadkWloXFrjC2IRO/GRUUXaiAQ l2/tpAHZWvmQkyKlVsQALpjgnJTZUvdlo/g/sNNMZQEQkU52E2KegSdKLdKLeZJs JPKFemAt7lHbEFYYiyzEtEcJKuqjhAUEMJw6pp+abDOfO439xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNeTqeY3ZnvvI3QDfRS18nbfXDZdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNjUxYzc4YzktMGZhYi0z M2RjLTk4NTMtYTQ3MWQ4ZjE3OGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqFdEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFpY/vhsY0Tv/ajyoS8EE30eHdViNtadywux8e0ySV9MVjLTcLnk7Upo +18GbyazVnqlkwoNF/2M49CxJzsH84w0C5z1V5hZHLUedL8KUY+HHzHBJuJnbcBc 1ciXZ5lFFMA6snYe6yM34t+7g+6K6glbJ2CEc3nw5rojfK7+Oyi6hywgd6lv8NSK yvI2XAkFGblgvnHkdZwBVFpPuFHcoW3nUqW5SHy4kPw7K7Tv3XsFFzVluxXf8tso yZ/Ywcs0/a2tj0kfq7KcE3damUFp5m3z+cBRv0IbffKTAStnc0kWi+4kxp940l13 Mb9CpcIq64SuV/gzNYDDGEAWaMIhcWg= -----END CERTIFICATE-----Generated at Wed May 13 13:40:53 2026 by rpki-client