$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/651c78c9-0fab-33dc-9853-a471d8f178c1.roa File: 651c78c9-0fab-33dc-9853-a471d8f178c1.roa (raw, json) Hash identifier: Nw1O58fgBtGjCA/NvD12Xnc6W/nQIOxqCfu7aZMvkVM= Subject key identifier: 82:73:1E:72:D3:2E:34:7A:9C:F9:32:50:93:F0:35:40:A1:3E:BC:10 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584E86F4FB401A8FE215056170C0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/651c78c9-0fab-33dc-9853-a471d8f178c1.roa Signing time: Fri 17 Jul 2026 09:00:14 +0000 ROA not before: Fri 17 Jul 2026 09:00:14 +0000 ROA not after: Thu 15 Oct 2026 09:00:14 +0000 asID: 3356 IP address blocks: 168.87.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:86:f4:fb:40:1a:8f:e2:15:05:61:70:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jul 17 09:00:14 2026 GMT Not After : Oct 15 09:00:14 2026 GMT Subject: CN=1a8d3de3-ed44-4b13-bd6a-2bb716015cb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b7:57:81:13:98:cc:8d:82:cc:a7:2a:21:a7: 0d:1f:42:c6:54:31:bc:39:ca:39:15:5d:17:73:f0: 20:b5:ae:c7:95:ee:0a:12:a1:cf:51:bc:94:8e:76: bc:48:df:c0:d6:06:b1:17:3f:35:8e:23:90:be:25: a4:bd:ee:df:3c:30:09:33:fa:ef:2e:9a:9a:dd:1e: a2:a8:4f:20:bd:f4:c4:3e:f2:4e:7f:eb:f2:2e:97: 97:b4:6f:10:eb:da:0a:14:3a:0f:b6:7f:49:e0:29: 50:d3:7b:c0:46:da:00:a0:f8:a0:af:c0:cc:c2:ca: 7b:28:39:9b:a6:66:09:16:2f:43:cd:7e:67:9a:99: 88:13:4c:77:9f:7d:db:6c:7c:3b:c9:ed:07:f1:70: d3:d9:41:f8:fb:6b:36:cb:45:46:86:21:30:36:00: cb:45:8e:17:de:15:45:6c:7c:15:44:e3:db:b5:7e: 9e:d8:12:3b:eb:67:24:c9:4e:dc:c7:f4:aa:e2:fe: 4b:48:04:ea:3e:1d:4c:99:5b:b3:12:5b:11:01:72: 69:b1:08:f7:fc:22:d9:3f:75:6f:ff:68:a4:aa:6c: 30:46:e7:4e:4b:3f:76:b2:e5:34:b3:a5:bc:a0:9e: c5:9b:f9:e2:62:19:b1:18:07:09:e4:8e:c0:69:1c: ae:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:73:1E:72:D3:2E:34:7A:9C:F9:32:50:93:F0:35:40:A1:3E:BC:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/651c78c9-0fab-33dc-9853-a471d8f178c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:fe:8b:66:50:16:a6:d9:80:c0:9b:b1:ba:a6:76:48:61:22: 84:5f:bc:e1:bb:8b:4b:2a:75:1a:80:38:06:cf:ad:3a:ed:19: 55:51:04:b3:30:bf:91:bc:40:47:d1:7b:eb:1d:0c:91:36:32: 39:f9:2a:56:36:8a:f5:8a:53:d4:7d:6a:d0:f2:0f:9c:24:0c: bf:d4:c9:bb:46:6d:25:a6:93:41:57:40:09:3c:88:35:2f:1c: 98:da:a7:be:91:86:7f:fa:99:db:f7:c1:27:62:b1:66:10:9b: 62:b5:1d:84:50:f5:1a:d3:d1:b8:c8:da:09:20:9e:11:fd:ac: 04:56:b2:9b:a8:a5:b2:88:73:d0:83:e1:82:ff:6d:99:43:08: 02:f5:64:6d:40:19:41:13:4d:65:48:79:35:c2:3a:b3:85:bf: ea:fd:f8:ea:38:47:06:08:0f:19:1d:1a:90:a9:93:27:13:45: 7c:09:50:21:03:0a:80:33:42:37:73:27:8a:75:7b:6a:f3:eb: c6:2f:85:83:79:88:84:34:31:7f:e3:21:42:74:29:10:cb:fb: 77:6b:95:b3:78:63:69:52:9e:34:2a:66:ae:52:57:67:23:93: fc:e3:35:a2:b7:5c:f5:94:02:0c:ff:c3:1a:07:0d:bb:0b:79: 54:33:e9:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6G9PtAGo/iFQVhcMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDcxNzA5MDAxNFoXDTI2MTAxNTA5MDAxNFowLzEtMCsGA1UEAxMk MWE4ZDNkZTMtZWQ0NC00YjEzLWJkNmEtMmJiNzE2MDE1Y2I1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrdXgROYzI2CzKcqIacNH0LGVDG8Oco5FV0X c/Agta7Hle4KEqHPUbyUjna8SN/A1gaxFz81jiOQviWkve7fPDAJM/rvLpqa3R6i qE8gvfTEPvJOf+vyLpeXtG8Q69oKFDoPtn9J4ClQ03vARtoAoPigr8DMwsp7KDmb pmYJFi9DzX5nmpmIE0x3n33bbHw7ye0H8XDT2UH4+2s2y0VGhiEwNgDLRY4X3hVF bHwVROPbtX6e2BI762ckyU7cx/Sq4v5LSATqPh1MmVuzElsRAXJpsQj3/CLZP3Vv /2ikqmwwRudOSz92suU0s6W8oJ7Fm/niYhmxGAcJ5I7AaRyu9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIJzHnLTLjR6nPkyUJPwNUChPrwQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNjUxYzc4YzktMGZhYi0z M2RjLTk4NTMtYTQ3MWQ4ZjE3OGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqFdEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGT+i2ZQFqbZgMCbsbqmdkhhIoRfvOG7i0sqdRqAOAbPrTrtGVVRBLMw v5G8QEfRe+sdDJE2Mjn5KlY2ivWKU9R9atDyD5wkDL/UybtGbSWmk0FXQAk8iDUv HJjap76Rhn/6mdv3wSdisWYQm2K1HYRQ9RrT0bjI2gkgnhH9rARWspuopbKIc9CD 4YL/bZlDCAL1ZG1AGUETTWVIeTXCOrOFv+r9+Oo4RwYIDxkdGpCpkycTRXwJUCED CoAzQjdzJ4p1e2rz68YvhYN5iIQ0MX/jIUJ0KRDL+3drlbN4Y2lSnjQqZq5SV2cj k/zjNaK3XPWUAgz/wxoHDbsLeVQz6co= -----END CERTIFICATE-----Generated at Fri Jul 24 16:03:09 2026 by rpki-client