$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/7e245c35-5c51-3e26-9934-faa86e6b6cc6.roa File: 7e245c35-5c51-3e26-9934-faa86e6b6cc6.roa (raw, json) Hash identifier: 7QAyr64SOWi5NAFXoCNrNOK/Zie+6R0YX/8DEQal+6s= Subject key identifier: 5E:5B:E7:6F:92:6E:07:F4:70:BC:4E:17:65:15:FC:7B:74:5C:D8:BD Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584F2957BE6FA88DCF6CA40AC300 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/7e245c35-5c51-3e26-9934-faa86e6b6cc6.roa Signing time: Sun 13 Sep 2026 13:00:11 +0000 ROA not before: Sun 13 Sep 2026 13:00:11 +0000 ROA not after: Sat 12 Dec 2026 14:00:11 +0000 asID: 3360 IP address blocks: 168.87.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:29:57:be:6f:a8:8d:cf:6c:a4:0a:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 13 13:00:11 2026 GMT Not After : Dec 12 14:00:11 2026 GMT Subject: CN=dbf2d600-cdf6-464d-8414-216ef90847e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8a:56:2b:96:3c:d8:bf:1f:cc:5c:a9:3f:55: 3e:2c:77:63:63:0b:26:ad:f3:9f:0c:97:3e:a6:70: 03:94:da:00:20:09:68:2b:97:df:a1:f8:f6:51:71: d7:50:84:84:29:68:e8:1a:d9:44:41:41:f1:1e:44: c6:f8:63:04:4c:a7:ed:32:a4:2d:17:31:44:d2:26: 45:5c:93:2d:32:d4:4c:91:35:16:6b:0d:2c:45:a2: a2:b8:a5:17:4f:64:f8:b9:eb:52:ea:3d:fd:93:e7: e7:cb:98:f1:91:a5:f7:ff:cd:f1:8c:f0:fa:b4:6a: ab:97:3b:9b:f6:4e:51:f3:83:01:cf:ac:ba:38:78: ff:97:99:5f:15:fb:d3:4c:06:d6:15:73:6d:b1:b6: 28:a9:21:33:6b:18:46:8e:24:72:d4:3b:63:d8:6b: 57:12:51:ee:82:b4:24:23:e6:b8:39:b1:2e:1d:66: 1b:d0:fc:3c:28:27:cd:5d:e8:7b:fd:37:5c:b9:fc: 63:61:a0:63:18:6c:4e:1d:00:d4:b9:9e:38:9e:b6: 12:50:21:96:38:e1:53:3f:a3:d5:02:c9:b5:a2:e7: bd:a2:30:fd:fb:a4:7f:a8:0b:3c:0f:99:3d:15:a5: 6b:f1:0a:62:46:85:df:e1:1b:61:3b:dd:7d:34:ce: ed:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:5B:E7:6F:92:6E:07:F4:70:BC:4E:17:65:15:FC:7B:74:5C:D8:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/7e245c35-5c51-3e26-9934-faa86e6b6cc6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:6e:22:5d:e2:e3:0c:a4:74:29:b2:c7:9c:59:95:21:9f:cf: ea:29:9b:e2:80:90:3d:81:e6:57:12:04:b9:84:63:32:57:4d: a9:e2:38:ab:a4:cb:9f:20:4c:9e:12:69:0d:68:b5:76:6e:4d: a0:dd:86:aa:d6:60:47:47:f7:5b:97:46:c2:1b:69:b6:1c:98: 5c:4b:9f:30:43:0a:49:7d:fe:2d:a9:e4:fb:d9:de:aa:26:75: c8:a7:e6:c5:2c:e7:42:a0:4b:6c:27:ec:05:4f:20:44:c7:69: 14:2c:e0:13:02:28:74:29:a9:21:de:0e:41:3a:9c:bc:6e:1f: f7:35:72:99:46:8a:ab:24:c9:27:f2:fb:ae:5e:7e:35:01:f1: f8:1f:44:66:c9:d9:43:3e:81:be:c6:65:c3:43:4f:3b:ff:d2: 89:2d:b2:4a:c1:e4:02:ac:e3:2e:93:a9:12:31:a1:fe:8b:08: 63:28:d2:f5:9e:92:fe:b0:62:eb:64:33:f8:c0:a2:3b:e3:bf: 5a:d5:11:d4:2e:25:ee:d7:15:44:15:16:b4:97:22:21:82:73: 30:7c:19:cb:1d:b4:7f:2e:42:39:b9:c4:cf:c7:8f:57:6f:8a: f9:2d:e1:24:1c:57:60:78:8d:5b:32:dd:17:9a:8f:81:53:78: 74:03:9e:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8pV75vqI3PbKQKwwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk ZGJmMmQ2MDAtY2RmNi00NjRkLTg0MTQtMjE2ZWY5MDg0N2UzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4pWK5Y82L8fzFypP1U+LHdjYwsmrfOfDJc+ pnADlNoAIAloK5ffofj2UXHXUISEKWjoGtlEQUHxHkTG+GMETKftMqQtFzFE0iZF XJMtMtRMkTUWaw0sRaKiuKUXT2T4uetS6j39k+fny5jxkaX3/83xjPD6tGqrlzub 9k5R84MBz6y6OHj/l5lfFfvTTAbWFXNtsbYoqSEzaxhGjiRy1Dtj2GtXElHugrQk I+a4ObEuHWYb0Pw8KCfNXeh7/TdcufxjYaBjGGxOHQDUuZ44nrYSUCGWOOFTP6PV Asm1oue9ojD9+6R/qAs8D5k9FaVr8QpiRoXf4RthO919NM7ttQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF5b52+Sbgf0cLxOF2UV/Ht0XNi9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvN2UyNDVjMzUtNWM1MS0z ZTI2LTk5MzQtZmFhODZlNmI2Y2M2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqFdAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJhuIl3i4wykdCmyx5xZlSGfz+opm+KAkD2B5lcSBLmEYzJXTaniOKuk y58gTJ4SaQ1otXZuTaDdhqrWYEdH91uXRsIbabYcmFxLnzBDCkl9/i2p5PvZ3qom dcin5sUs50KgS2wn7AVPIETHaRQs4BMCKHQpqSHeDkE6nLxuH/c1cplGiqskySfy +65efjUB8fgfRGbJ2UM+gb7GZcNDTzv/0oktskrB5AKs4y6TqRIxof6LCGMo0vWe kv6wYutkM/jAojvjv1rVEdQuJe7XFUQVFrSXIiGCczB8GcsdtH8uQjm5xM/Hj1dv ivkt4SQcV2B4jVsy3Reaj4FTeHQDnpM= -----END CERTIFICATE-----Generated at Mon Sep 28 20:43:33 2026 by rpki-client