$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/96e35a71-f0e3-34dd-b42a-3c90606a1834.roa File: 96e35a71-f0e3-34dd-b42a-3c90606a1834.roa (raw, json) Hash identifier: hASgD52lKkrqngdkY0oxqLDuifeWvRWAYwJS1tDP0MA= Subject key identifier: A1:27:D2:13:22:58:4F:40:0C:60:42:BD:95:E1:82:2C:E8:C3:B7:33 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584E885A4CB0E133016CF76C79A0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/96e35a71-f0e3-34dd-b42a-3c90606a1834.roa Signing time: Fri 17 Jul 2026 21:00:12 +0000 ROA not before: Fri 17 Jul 2026 21:00:12 +0000 ROA not after: Thu 15 Oct 2026 21:00:12 +0000 asID: 3360 IP address blocks: 168.87.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:88:5a:4c:b0:e1:33:01:6c:f7:6c:79:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jul 17 21:00:12 2026 GMT Not After : Oct 15 21:00:12 2026 GMT Subject: CN=544b6f87-525d-47af-aee8-5326f06f7214 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:7c:f4:40:5a:12:fd:90:9e:ab:ae:f9:c5:12: ff:90:3e:f0:99:10:cb:65:ca:08:a8:e6:71:dc:81: 72:03:3b:36:58:75:56:ff:cb:93:0e:3d:53:9d:69: b8:fa:e6:78:cb:61:30:37:60:d8:51:ec:f3:d1:48: c7:d0:a6:f9:08:4f:f6:53:18:1d:b9:2c:e9:d7:3b: f7:a7:62:af:80:da:79:4b:30:b9:49:3f:31:16:7f: fc:f9:2c:40:2d:16:2e:f9:99:b3:04:bd:83:cb:b7: d1:7d:00:de:a0:a3:63:77:df:20:2c:10:f1:2c:9e: 92:28:6a:02:e2:05:e3:5a:d8:e7:a2:ad:56:08:e0: 4c:cb:36:a4:0c:d1:e2:d6:dd:b8:c7:04:a7:03:4e: 75:5a:b7:35:7d:8f:6b:80:ae:be:15:fe:17:b6:f4: c2:54:0b:67:08:1d:6a:a0:94:c8:ba:d4:63:50:60: b9:7f:32:5f:87:e4:fc:12:55:e8:95:65:85:d8:f3: 80:30:46:88:6b:64:f2:91:65:6f:c0:e0:eb:2e:c0: f8:71:89:da:72:e2:6f:f4:14:dc:d5:64:e3:e3:bf: a8:41:b8:39:90:e9:ef:6d:06:a8:ef:2e:79:e4:1a: 08:dd:98:8b:c4:da:04:1e:b2:24:e7:5b:b5:0e:8b: b1:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:27:D2:13:22:58:4F:40:0C:60:42:BD:95:E1:82:2C:E8:C3:B7:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/96e35a71-f0e3-34dd-b42a-3c90606a1834.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.51.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:20:95:f6:57:3a:e6:40:7f:27:d4:4f:99:49:2a:d9:2e:ef: 2f:8c:07:fa:4d:4f:a5:de:37:19:96:31:81:06:cb:21:14:7b: 8f:db:6a:51:0a:33:86:51:50:98:b5:d5:18:a5:42:a6:d7:f5: eb:38:7c:3b:e0:fa:2e:b3:da:8e:a9:eb:16:80:35:fb:aa:6d: 07:75:63:94:ad:81:81:ad:0e:03:4a:9f:8f:10:78:b1:d4:67: a8:ad:3b:14:a8:15:50:3b:fd:4e:9d:bd:a3:af:f3:4d:87:fb: 5c:4a:c5:55:71:8d:01:01:4f:29:ad:d0:c7:61:34:b4:63:dc: cc:e2:ec:07:0e:d0:85:af:07:34:85:be:69:e5:53:fc:38:b3: e8:99:2e:54:7d:7a:fe:f8:69:62:3e:ec:87:f4:96:e5:cf:99: 44:81:d7:27:be:e8:a2:be:8a:ed:de:e8:f5:51:b7:b7:2b:7f: ff:7c:83:a4:4c:0f:b4:0a:ae:51:27:0e:74:75:fb:1c:99:bc: e9:ca:8b:9d:9d:f6:26:81:03:04:d2:69:6e:6e:a6:1d:d6:df: a3:9b:a9:8a:2f:06:41:d8:63:e7:7d:fe:99:c9:38:1d:4b:5c: 07:0c:64:e4:93:d1:7d:ef:43:4a:24:48:6d:09:fc:33:d0:29: b2:32:d8:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6IWkyw4TMBbPdseaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDcxNzIxMDAxMloXDTI2MTAxNTIxMDAxMlowLzEtMCsGA1UEAxMk NTQ0YjZmODctNTI1ZC00N2FmLWFlZTgtNTMyNmYwNmY3MjE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnz0QFoS/ZCeq675xRL/kD7wmRDLZcoIqOZx 3IFyAzs2WHVW/8uTDj1TnWm4+uZ4y2EwN2DYUezz0UjH0Kb5CE/2UxgduSzp1zv3 p2KvgNp5SzC5ST8xFn/8+SxALRYu+ZmzBL2Dy7fRfQDeoKNjd98gLBDxLJ6SKGoC 4gXjWtjnoq1WCOBMyzakDNHi1t24xwSnA051Wrc1fY9rgK6+Ff4XtvTCVAtnCB1q oJTIutRjUGC5fzJfh+T8ElXolWWF2POAMEaIa2TykWVvwODrLsD4cYnacuJv9BTc 1WTj47+oQbg5kOnvbQao7y555BoI3ZiLxNoEHrIk51u1DouxRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKEn0hMiWE9ADGBCvZXhgizow7czMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvOTZlMzVhNzEtZjBlMy0z NGRkLWI0MmEtM2M5MDYwNmExODM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFczMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACEglfZXOuZAfyfUT5lJKtku7y+MB/pNT6XeNxmWMYEGyyEUe4/balEK M4ZRUJi11RilQqbX9es4fDvg+i6z2o6p6xaANfuqbQd1Y5StgYGtDgNKn48QeLHU Z6itOxSoFVA7/U6dvaOv802H+1xKxVVxjQEBTymt0MdhNLRj3Mzi7AcO0IWvBzSF vmnlU/w4s+iZLlR9ev74aWI+7If0luXPmUSB1ye+6KK+iu3e6PVRt7crf/98g6RM D7QKrlEnDnR1+xyZvOnKi52d9iaBAwTSaW5uph3W36ObqYovBkHYY+d9/pnJOB1L XAcMZOST0X3vQ0okSG0J/DPQKbIy2HM= -----END CERTIFICATE-----Generated at Fri Jul 24 18:52:26 2026 by rpki-client