$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a03d06b7-9d14-3c2a-860e-530f31cec66c.roa File: a03d06b7-9d14-3c2a-860e-530f31cec66c.roa (raw, json) Hash identifier: kweLO2PP4XcOGwI5D2QfXw3jPPz7zUq3OQuxCaRhgOQ= Subject key identifier: D5:DA:76:D5:86:A1:5F:64:01:92:6E:EC:97:7E:5F:FF:5C:A1:F6:64 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584E640FCE72B16F3231B7DE4300 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a03d06b7-9d14-3c2a-860e-530f31cec66c.roa Signing time: Sat 04 Jul 2026 21:00:12 +0000 ROA not before: Sat 04 Jul 2026 21:00:12 +0000 ROA not after: Fri 02 Oct 2026 21:00:12 +0000 asID: 203 IP address blocks: 168.87.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:64:0f:ce:72:b1:6f:32:31:b7:de:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jul 4 21:00:12 2026 GMT Not After : Oct 2 21:00:12 2026 GMT Subject: CN=ac5a765d-de29-4bd9-a28b-400d1aa56727 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:af:60:06:ab:0d:0d:c6:d1:71:80:12:f2:54: 86:51:5c:d0:b8:49:75:c4:fd:d7:7a:98:03:5a:5f: fe:be:df:b1:b5:81:21:60:d5:ba:e6:74:dd:b1:6b: 9f:fe:c3:70:14:1f:10:6d:6a:34:8c:3e:83:b2:bc: 0f:b4:62:30:c4:8b:17:e8:b0:06:20:9b:6c:34:fc: e8:0b:a5:fa:03:1e:39:7f:7b:50:56:dd:2b:7e:0f: a5:f8:c0:4f:b2:ec:b0:bf:9c:fd:e0:86:33:7c:af: 86:85:75:73:12:ce:ae:51:2d:2a:3e:e6:43:40:63: e9:dc:b5:0e:70:5a:69:84:4a:d9:9c:2f:29:94:38: a6:a2:0a:bc:d5:4f:b1:ca:66:88:78:0c:27:2d:cd: 7b:24:4f:f8:53:03:84:03:c9:1f:8f:76:39:22:1b: 2c:83:bc:62:67:85:f1:fd:b1:3d:2f:3a:8a:64:17: 5e:3f:0b:85:6e:c5:ea:84:08:c1:05:03:e3:67:32: 48:a8:2c:42:d9:33:c7:27:ac:8b:39:1b:c6:1b:5e: d6:6e:1f:45:59:cc:c2:6a:2b:cf:e8:6d:a0:9e:c3: 8b:ee:4f:89:48:db:67:95:24:c7:81:4a:48:70:ce: 28:67:2a:56:aa:78:33:c2:09:72:db:83:1a:82:b4: f5:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:DA:76:D5:86:A1:5F:64:01:92:6E:EC:97:7E:5F:FF:5C:A1:F6:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a03d06b7-9d14-3c2a-860e-530f31cec66c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:2d:d5:c9:a7:25:a5:fc:40:fe:54:b9:23:cb:a7:2b:03:79: 89:84:28:d5:ab:04:14:19:e7:83:b8:9c:b6:fb:fd:62:2c:a9: 83:c2:d8:8c:16:cd:35:60:fa:e9:f8:47:76:8f:0f:d4:b4:21: 1e:b6:21:23:2d:17:17:8a:50:fc:97:f8:f8:67:a1:fe:d1:f1: aa:f0:bc:34:6b:35:ef:1b:b7:78:d0:d8:33:fb:62:8f:67:f4: d2:f2:39:4f:42:e6:9e:e1:00:25:72:c5:6a:2a:9c:ec:c9:85: ff:bf:11:f0:65:08:a3:f7:22:1f:8e:61:85:e5:2f:58:25:e7: 5b:59:3a:ad:7f:75:75:29:9a:16:8b:a4:75:18:89:47:97:75: bb:d2:c1:4d:b6:7f:e2:21:17:07:89:ad:b4:3f:e5:bc:6e:9d: 91:92:4c:84:d2:ed:60:30:a4:98:13:7b:ee:72:68:53:2b:a3: f9:ba:70:59:73:c5:82:1f:e9:c0:7b:fb:42:f6:9c:ac:2a:5f: c6:e5:b1:86:90:23:2d:2f:3b:43:c9:32:6d:e1:91:10:8e:e3: f4:71:aa:fc:c9:e4:04:57:98:ad:65:5b:ea:64:6d:59:81:35: f4:5d:94:cc:f1:d7:e8:32:fd:2b:3e:7d:e6:f1:7b:67:1d:70: 0d:b9:10:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5kD85ysW8yMbfeQwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDcwNDIxMDAxMloXDTI2MTAwMjIxMDAxMlowLzEtMCsGA1UEAxMk YWM1YTc2NWQtZGUyOS00YmQ5LWEyOGItNDAwZDFhYTU2NzI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr69gBqsNDcbRcYAS8lSGUVzQuEl1xP3XepgD Wl/+vt+xtYEhYNW65nTdsWuf/sNwFB8QbWo0jD6DsrwPtGIwxIsX6LAGIJtsNPzo C6X6Ax45f3tQVt0rfg+l+MBPsuywv5z94IYzfK+GhXVzEs6uUS0qPuZDQGPp3LUO cFpphErZnC8plDimogq81U+xymaIeAwnLc17JE/4UwOEA8kfj3Y5Ihssg7xiZ4Xx /bE9LzqKZBdePwuFbsXqhAjBBQPjZzJIqCxC2TPHJ6yLORvGG17Wbh9FWczCaivP 6G2gnsOL7k+JSNtnlSTHgUpIcM4oZypWqngzwgly24MagrT1OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNXadtWGoV9kAZJu7Jd+X/9cofZkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYTAzZDA2YjctOWQxNC0z YzJhLTg2MGUtNTMwZjMxY2VjNjZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFcgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABAt1cmnJaX8QP5UuSPLpysDeYmEKNWrBBQZ54O4nLb7/WIsqYPC2IwW zTVg+un4R3aPD9S0IR62ISMtFxeKUPyX+Phnof7R8arwvDRrNe8bt3jQ2DP7Yo9n 9NLyOU9C5p7hACVyxWoqnOzJhf+/EfBlCKP3Ih+OYYXlL1gl51tZOq1/dXUpmhaL pHUYiUeXdbvSwU22f+IhFweJrbQ/5bxunZGSTITS7WAwpJgTe+5yaFMro/m6cFlz xYIf6cB7+0L2nKwqX8blsYaQIy0vO0PJMm3hkRCO4/RxqvzJ5ARXmK1lW+pkbVmB NfRdlMzx1+gy/Ss+febxe2cdcA25EPc= -----END CERTIFICATE-----Generated at Fri Jul 24 17:06:35 2026 by rpki-client