$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/7cd751fb-6172-3ba0-8513-7210fa141849.roa File: 7cd751fb-6172-3ba0-8513-7210fa141849.roa (raw, json) Hash identifier: FvSDp29nWlU9deaauTfkSngrzRWbeDVOjwQh8XzIgxs= Subject key identifier: C1:1F:30:80:D0:DA:E6:8F:A6:9C:53:F9:F1:BC:AA:B9:58:D2:92:19 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584F49760B4777A93CD209E756C0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/7cd751fb-6172-3ba0-8513-7210fa141849.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 3360 IP address blocks: 168.87.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:0b:47:77:a9:3c:d2:09:e7:56:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=6ab0cee5-b96c-402a-b3f5-710ac540788d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:c5:d2:18:dd:cc:6e:74:e5:c5:75:e2:6d:8c: a4:bc:31:59:13:f7:83:f9:c1:dc:d8:0b:ee:9e:59: c1:73:ea:28:50:f9:dd:e8:c6:1e:f6:be:75:0b:18: af:5a:02:cf:df:37:9f:f0:6c:f5:f2:db:05:7e:05: 33:82:bf:5a:84:19:eb:f1:fa:70:0f:dd:91:11:44: a5:2a:fc:21:6a:df:2d:54:1e:86:f5:47:26:af:9d: bd:23:2b:65:b0:73:ba:de:c8:70:3f:10:60:c3:5e: 7f:a6:e9:f9:39:06:68:31:dc:fd:8e:02:66:b2:fe: 44:cc:ef:9c:3b:55:97:16:0d:99:d4:8c:c0:3b:97: b2:32:47:78:43:1e:b4:9d:4e:11:30:95:2a:81:40: dc:90:3e:d2:47:b6:2e:eb:c3:be:ee:48:5a:62:ba: 30:9e:a4:20:4b:be:2a:d8:ee:1a:98:c6:8c:11:ad: 16:bc:a9:94:ac:0f:b7:19:28:76:b1:97:df:5f:e3: 38:55:a4:24:b8:2a:63:56:60:ae:4d:90:76:f3:3d: ba:38:60:23:58:23:31:b2:d9:85:9c:70:82:02:c5: 11:36:4e:ae:56:96:05:9a:da:b8:e3:08:c6:a3:45: 37:4b:bc:30:12:b8:56:68:ab:a7:9d:86:54:df:7c: b2:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:1F:30:80:D0:DA:E6:8F:A6:9C:53:F9:F1:BC:AA:B9:58:D2:92:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/7cd751fb-6172-3ba0-8513-7210fa141849.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:f1:df:23:6a:52:4f:19:54:69:1c:40:d2:f2:04:38:c4:c7: 04:fc:5a:07:77:b7:c0:c6:34:67:eb:49:45:53:92:6f:a5:39: 33:14:e6:8d:d1:20:0d:a2:be:11:b7:5f:d2:f5:82:1e:5b:6c: 59:38:12:39:d5:ce:1e:fe:b7:af:12:49:e8:46:e4:6e:d3:e9: f3:e6:33:5a:b4:4c:da:0d:4d:38:89:bc:30:a1:21:09:f6:63: f1:9a:29:75:c6:ef:16:01:77:b8:fb:19:35:15:77:dd:c5:a2: e7:f2:27:84:ab:f0:d2:44:87:8f:21:5d:b8:b6:bb:08:b8:6c: 26:ac:18:a9:fe:fd:5f:21:b8:1b:bd:a0:19:29:f4:3b:c2:de: 67:50:df:74:49:a4:59:2a:96:0a:69:a8:4c:e8:d1:c3:8c:f0: a3:36:df:be:64:84:2c:66:1f:91:ce:58:78:ce:a8:09:f9:69: f7:b6:97:2b:26:92:14:00:4a:cf:00:f3:1c:42:ca:78:2d:ad: 90:c1:7f:8e:04:c0:a3:34:10:91:f1:b2:f8:f3:7f:35:ed:f6: 0b:1f:d2:2d:59:ec:62:89:b1:f1:0f:71:cb:85:d2:9c:d6:83: f4:ac:fa:fd:28:55:09:b7:17:25:cb:da:ff:24:bb:67:64:a1: 3a:66:9a:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdgtHd6k80gnnVsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NmFiMGNlZTUtYjk2Yy00MDJhLWIzZjUtNzEwYWM1NDA3ODhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMXSGN3MbnTlxXXibYykvDFZE/eD+cHc2Avu nlnBc+ooUPnd6MYe9r51CxivWgLP3zef8Gz18tsFfgUzgr9ahBnr8fpwD92REUSl Kvwhat8tVB6G9Ucmr529IytlsHO63shwPxBgw15/pun5OQZoMdz9jgJmsv5EzO+c O1WXFg2Z1IzAO5eyMkd4Qx60nU4RMJUqgUDckD7SR7Yu68O+7khaYrownqQgS74q 2O4amMaMEa0WvKmUrA+3GSh2sZffX+M4VaQkuCpjVmCuTZB28z26OGAjWCMxstmF nHCCAsURNk6uVpYFmtq44wjGo0U3S7wwErhWaKunnYZU33yyAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMEfMIDQ2uaPppxT+fG8qrlY0pIZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvN2NkNzUxZmItNjE3Mi0z YmEwLTg1MTMtNzIxMGZhMTQxODQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFeoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABHx3yNqUk8ZVGkcQNLyBDjExwT8Wgd3t8DGNGfrSUVTkm+lOTMU5o3R IA2ivhG3X9L1gh5bbFk4EjnVzh7+t68SSehG5G7T6fPmM1q0TNoNTTiJvDChIQn2 Y/GaKXXG7xYBd7j7GTUVd93FoufyJ4Sr8NJEh48hXbi2uwi4bCasGKn+/V8huBu9 oBkp9DvC3mdQ33RJpFkqlgppqEzo0cOM8KM2375khCxmH5HOWHjOqAn5afe2lysm khQASs8A8xxCyngtrZDBf44EwKM0EJHxsvjzfzXt9gsf0i1Z7GKJsfEPccuF0pzW g/Ss+v0oVQm3FyXL2v8ku2dkoTpmmgA= -----END CERTIFICATE-----Generated at Tue Sep 29 05:15:58 2026 by rpki-client