$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/78648d11-2f6f-3a66-8f68-3edfca0d6da9.roa File: 78648d11-2f6f-3a66-8f68-3edfca0d6da9.roa (raw, json) Hash identifier: DmtTWYDeBgFk1StNEgtEOkGLayltt5W4LYRyUfG1WRc= Subject key identifier: 50:88:14:27:69:E6:EB:03:DE:5C:21:04:BC:81:55:B5:AE:41:5C:38 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584EF71779AE59E63CBACDEC1C40 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/78648d11-2f6f-3a66-8f68-3edfca0d6da9.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 202 IP address blocks: 168.87.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:79:ae:59:e6:3c:ba:cd:ec:1c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=bbb4c91b-8367-4e5c-9320-a16db0dbae46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:87:76:dc:87:90:2f:0e:28:a6:6d:1e:d6:54: 47:90:60:1c:e2:cb:3f:99:60:ad:57:41:4e:23:6a: 5e:ac:0e:e0:4b:ff:4b:e0:0f:4a:5f:fa:5f:e8:74: 97:5e:32:2a:cc:d5:90:ac:e8:d4:27:32:b8:45:45: 7c:c9:ba:ce:a1:a3:3d:97:bc:8a:c3:ec:c5:05:f4: b1:84:e5:44:0d:7b:1a:c6:85:db:ab:de:8c:b5:4a: 93:2d:ca:f3:40:de:af:ad:91:56:06:8c:9a:d7:1b: 31:ea:36:75:0f:04:23:0f:a4:ee:29:40:a0:ba:f8: 63:b6:01:83:af:5b:ff:84:87:69:47:7b:99:eb:e5: 3b:43:92:81:96:c9:d8:22:27:25:bc:a1:d1:09:35: 43:94:5d:32:ab:57:88:89:e1:90:17:a8:4f:e2:9f: d0:5d:a3:55:f3:81:0f:5c:b8:56:b7:81:6a:08:2e: 7a:bf:d1:c6:66:de:f6:59:7e:e9:dc:97:ec:8d:31: 00:7a:01:0b:83:e7:36:40:4f:eb:ba:7c:3d:4e:00: 84:83:20:3f:15:65:28:82:46:da:f9:d0:6d:26:99: 29:d5:79:c5:2a:ff:c2:6f:9b:36:dc:05:8e:19:0f: 68:95:98:fd:30:02:41:6e:1c:e0:59:04:fc:b8:22: a7:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:88:14:27:69:E6:EB:03:DE:5C:21:04:BC:81:55:B5:AE:41:5C:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/78648d11-2f6f-3a66-8f68-3edfca0d6da9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:34:c5:30:95:a3:a3:a9:65:64:ac:49:ba:63:ba:e9:96:1d: f7:ad:3f:62:df:ac:4a:af:50:f5:63:5a:70:16:2a:76:bc:ac: bc:51:58:b1:e7:0e:a5:36:14:9a:e1:34:b7:00:c9:e3:2a:d7: 56:37:33:af:2e:fa:6d:da:f2:36:26:da:6b:dc:d8:82:ba:41: 86:73:d1:bf:ff:da:42:b7:0d:25:15:d8:e6:b3:5a:6f:8a:20: de:26:af:cb:8e:56:f4:29:b4:85:84:02:9f:4a:03:1e:a3:8a: 29:10:d7:5a:37:25:cf:0c:c7:3b:25:8e:98:44:08:b4:8a:ce: 51:05:ba:8c:33:73:63:93:a9:70:e2:38:e1:ed:86:0a:63:8f: 17:1a:0f:d9:47:66:bc:84:c1:f2:de:63:55:50:f7:7b:f9:e4: 42:f3:8e:fa:8f:8b:6f:62:a1:13:25:76:e1:10:ad:cc:80:50: ab:a8:51:a7:c5:90:da:2f:58:80:fa:d8:82:b4:85:a8:a4:ac: df:47:ae:54:0c:62:7e:5e:3e:f6:b6:0f:49:f4:7d:3d:13:d2: 1e:27:3f:4d:ec:99:83:93:2e:f3:5c:36:c9:67:cf:55:79:97: 09:e6:2e:c8:12:e2:9c:47:c8:19:4b:e5:3b:fc:9d:3e:c1:3b: 8e:ad:be:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F3muWeY8us3sHEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk YmJiNGM5MWItODM2Ny00ZTVjLTkzMjAtYTE2ZGIwZGJhZTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlod23IeQLw4opm0e1lRHkGAc4ss/mWCtV0FO I2perA7gS/9L4A9KX/pf6HSXXjIqzNWQrOjUJzK4RUV8ybrOoaM9l7yKw+zFBfSx hOVEDXsaxoXbq96MtUqTLcrzQN6vrZFWBoya1xsx6jZ1DwQjD6TuKUCguvhjtgGD r1v/hIdpR3uZ6+U7Q5KBlsnYIiclvKHRCTVDlF0yq1eIieGQF6hP4p/QXaNV84EP XLhWt4FqCC56v9HGZt72WX7p3JfsjTEAegELg+c2QE/runw9TgCEgyA/FWUogkba +dBtJpkp1XnFKv/Cb5s23AWOGQ9olZj9MAJBbhzgWQT8uCKnPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFCIFCdp5usD3lwhBLyBVbWuQVw4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNzg2NDhkMTEtMmY2Zi0z YTY2LThmNjgtM2VkZmNhMGQ2ZGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFeCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG40xTCVo6OpZWSsSbpjuumWHfetP2LfrEqvUPVjWnAWKna8rLxRWLHn DqU2FJrhNLcAyeMq11Y3M68u+m3a8jYm2mvc2IK6QYZz0b//2kK3DSUV2OazWm+K IN4mr8uOVvQptIWEAp9KAx6jiikQ11o3Jc8MxzsljphECLSKzlEFuowzc2OTqXDi OOHthgpjjxcaD9lHZryEwfLeY1VQ93v55ELzjvqPi29ioRMlduEQrcyAUKuoUafF kNovWID62IK0haikrN9HrlQMYn5ePva2D0n0fT0T0h4nP03smYOTLvNcNslnz1V5 lwnmLsgS4pxHyBlL5Tv8nT7BO46tvic= -----END CERTIFICATE-----Generated at Sun Sep 27 05:17:33 2026 by rpki-client