$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/7b1f5df4-e416-36ab-aff2-7aa30ec88800.roa File: 7b1f5df4-e416-36ab-aff2-7aa30ec88800.roa (raw, json) Hash identifier: OCdGvbk90Fa7PQt5pBNFvtSXCvRaFtYDO2SbCFIgL10= Subject key identifier: 45:74:39:91:73:8A:29:F8:C0:14:04:CB:9F:79:FC:A3:C6:01:96:28 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584F49730BD1992813A21E620780 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/7b1f5df4-e416-36ab-aff2-7aa30ec88800.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 14618 IP address blocks: 168.87.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:0b:d1:99:28:13:a2:1e:62:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f8eadc89-db72-41c3-8de5-046217618631 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c0:d7:30:c7:93:d6:46:ac:95:71:4b:86:0d: 59:b7:bb:f5:72:72:fe:52:8c:fe:13:82:4a:c5:b4: 45:6e:72:7f:f9:9f:75:ba:2c:a8:7d:b0:94:12:78: 41:6e:c0:b7:0f:b6:24:8e:0a:d6:f1:d9:b0:43:42: 0e:3f:f9:1a:a2:7d:3d:3f:68:aa:19:89:62:d9:fd: ce:b3:94:03:28:c6:54:43:66:7e:d1:b5:f2:a0:2b: ef:1d:d7:04:e2:c2:73:4b:68:fc:34:b7:15:88:26: d3:03:dd:15:85:59:b5:83:ad:ce:ee:c4:24:e3:21: ef:cd:2c:cd:ca:44:db:76:a2:16:ab:d4:89:12:61: 74:4f:e2:a8:c4:52:af:12:5a:af:63:9a:19:0a:6a: 59:09:0e:8f:26:ea:66:ac:87:8c:be:7c:e0:67:67: 4b:7a:cd:ec:27:71:40:bd:87:ec:07:98:60:2d:1e: ee:78:88:2b:21:0a:71:fa:6a:73:13:7c:47:c4:75: 3d:9e:91:0b:7b:9d:b9:f5:06:74:13:a7:56:93:1d: 57:69:db:b0:e1:34:77:78:8f:53:1e:3e:62:ef:30: 2e:4d:03:42:0a:4e:08:9f:80:10:79:60:29:d3:e6: 02:3c:25:6f:ed:33:cf:cd:e9:06:f6:ae:5d:0f:24: 76:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:74:39:91:73:8A:29:F8:C0:14:04:CB:9F:79:FC:A3:C6:01:96:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/7b1f5df4-e416-36ab-aff2-7aa30ec88800.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:52:7b:3c:14:6d:f7:e1:12:c5:17:15:b8:55:ad:91:5b:fb: fa:ba:48:5d:04:b3:f5:25:88:2d:fe:fc:70:9f:58:47:43:15: ef:9c:cb:32:23:b0:2c:56:68:25:02:cc:05:f7:77:3b:c3:0c: f4:47:45:11:e2:2d:5d:51:14:cb:e5:40:c8:8c:ba:02:5e:b7: cf:d2:2c:e2:40:d2:3d:25:1c:b1:f9:ef:f0:81:be:51:eb:ae: e0:38:33:13:7f:8f:c3:15:5e:61:82:79:2a:d8:f6:91:a8:ef: 54:61:23:fc:39:52:64:1f:21:7e:df:8e:cf:d1:db:49:ec:6a: d6:79:f6:67:e9:25:9c:45:79:2d:67:df:46:8d:5c:f2:40:32: 9b:6a:20:fa:e3:5c:63:9b:87:b1:48:d1:18:3c:c8:99:05:e2: c6:11:67:9f:27:a1:d2:4e:e3:ff:67:a6:69:37:21:ba:10:9c: af:8e:bf:45:8b:41:12:6d:f0:18:83:04:0c:57:84:5d:6b:6b: ae:55:1a:13:5c:e2:6c:32:fb:37:3f:65:db:04:e1:33:66:e0: c0:8b:b7:62:6c:fe:ec:aa:fb:ae:e0:b9:36:93:b4:5c:56:2c: 4f:11:ce:50:d1:c3:55:90:cd:f7:fd:6d:33:d2:af:ec:1f:43: 94:35:f6:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcwvRmSgToh5iB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjhlYWRjODktZGI3Mi00MWMzLThkZTUtMDQ2MjE3NjE4NjMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMDXMMeT1kaslXFLhg1Zt7v1cnL+Uoz+E4JK xbRFbnJ/+Z91uiyofbCUEnhBbsC3D7YkjgrW8dmwQ0IOP/kaon09P2iqGYli2f3O s5QDKMZUQ2Z+0bXyoCvvHdcE4sJzS2j8NLcViCbTA90VhVm1g63O7sQk4yHvzSzN ykTbdqIWq9SJEmF0T+KoxFKvElqvY5oZCmpZCQ6PJupmrIeMvnzgZ2dLes3sJ3FA vYfsB5hgLR7ueIgrIQpx+mpzE3xHxHU9npELe5259QZ0E6dWkx1Xaduw4TR3eI9T Hj5i7zAuTQNCCk4In4AQeWAp0+YCPCVv7TPPzekG9q5dDyR2ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEV0OZFziin4wBQEy595/KPGAZYoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvN2IxZjVkZjQtZTQxNi0z NmFiLWFmZjItN2FhMzBlYzg4ODAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFciMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGlSezwUbffhEsUXFbhVrZFb+/q6SF0Es/UliC3+/HCfWEdDFe+cyzIj sCxWaCUCzAX3dzvDDPRHRRHiLV1RFMvlQMiMugJet8/SLOJA0j0lHLH57/CBvlHr ruA4MxN/j8MVXmGCeSrY9pGo71RhI/w5UmQfIX7fjs/R20nsatZ59mfpJZxFeS1n 30aNXPJAMptqIPrjXGObh7FI0Rg8yJkF4sYRZ58nodJO4/9npmk3IboQnK+Ov0WL QRJt8BiDBAxXhF1ra65VGhNc4mwy+zc/ZdsE4TNm4MCLt2Js/uyq+67guTaTtFxW LE8RzlDRw1WQzff9bTPSr+wfQ5Q19mc= -----END CERTIFICATE-----Generated at Sat Sep 26 07:12:56 2026 by rpki-client