$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a4ef094a-4e51-382c-adef-2ef2da93ad78.roa File: a4ef094a-4e51-382c-adef-2ef2da93ad78.roa (raw, json) Hash identifier: 5SDMOKFmX/DjDMTJpmM95MGnkYO3EliuPt1/nUwdPcQ= Subject key identifier: CE:78:BE:C7:42:A4:29:E2:3D:28:8F:5A:04:E9:15:5F:89:B1:AA:50 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584E54B4A298B40B2347F5DD1300 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a4ef094a-4e51-382c-adef-2ef2da93ad78.roa Signing time: Mon 29 Jun 2026 09:00:12 +0000 ROA not before: Mon 29 Jun 2026 09:00:12 +0000 ROA not after: Sun 27 Sep 2026 09:00:12 +0000 asID: 3356 IP address blocks: 168.87.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:54:b4:a2:98:b4:0b:23:47:f5:dd:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jun 29 09:00:12 2026 GMT Not After : Sep 27 09:00:12 2026 GMT Subject: CN=4c804808-944b-4b7a-b3b6-18d423fb2ec9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e5:ca:fd:4e:a1:f9:dd:ab:1c:72:cf:66:f8: 4d:dd:4a:55:a4:62:cd:60:93:f2:55:df:42:d1:19: a6:11:cc:68:c5:29:88:7c:c4:b4:6d:88:a1:43:2c: 0a:f7:37:01:60:3e:62:36:e2:b4:26:6d:78:7d:bc: 82:98:ff:69:8a:bc:84:97:68:6b:c5:2b:42:b8:4d: 01:80:e8:f5:25:bc:4e:29:0f:59:7a:3b:70:5a:bf: 70:a1:f7:02:be:28:14:2e:1b:82:60:bf:c4:1d:79: 55:66:b2:c1:5f:a1:3e:be:35:a3:a9:c0:f2:79:a3: 44:a7:17:aa:f9:5b:1b:06:1c:17:94:6e:ab:21:43: cd:d3:6c:09:ee:ce:78:5d:4c:61:36:c8:d8:d5:9e: b4:b3:17:6e:4d:8d:1e:6a:38:71:57:ab:35:bc:26: 3c:07:8c:53:b0:24:2e:9f:67:40:d7:6e:ef:23:2f: de:86:30:ff:29:a9:ec:6c:13:b6:f0:a3:f2:2f:71: 42:14:24:8b:0d:1b:27:22:68:65:a5:a9:6f:98:76: 54:56:14:3d:c7:59:82:29:d0:63:38:98:83:e2:09: f6:a8:ea:5d:78:a9:b0:f0:e2:48:ba:c1:d8:61:de: 68:0e:5a:62:ce:6f:54:a8:7f:d1:e8:6b:5a:e2:ff: 8d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:78:BE:C7:42:A4:29:E2:3D:28:8F:5A:04:E9:15:5F:89:B1:AA:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a4ef094a-4e51-382c-adef-2ef2da93ad78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:fd:62:e2:28:91:e1:67:97:7b:96:80:1e:73:83:89:73:58: e0:5c:35:e6:a8:0a:b6:b5:00:aa:27:a2:31:f6:0f:f5:d5:40: ba:4c:9b:e6:c1:07:31:53:c0:1d:d4:81:92:a5:7b:e6:b3:91: 2a:ac:7b:71:41:4d:b0:f4:99:ab:1b:49:2d:c6:c8:d0:74:79: 2b:98:3a:0c:b6:0f:c8:6b:e0:52:4f:87:d6:9b:ac:80:87:51: 56:fd:8b:b2:8f:cf:47:78:7c:cb:50:1a:6e:01:cf:c4:2c:27: cf:8e:10:91:c1:a8:4b:e0:e9:07:91:60:5b:d4:54:f2:d8:56: 86:b8:1c:83:d4:1f:31:d6:bd:95:d3:5b:0d:45:54:e6:58:7e: 68:e2:52:62:86:5e:9b:1b:b2:1b:20:27:13:1f:3b:a6:55:87: 95:14:2e:02:c5:63:e9:40:02:23:c0:d2:0d:a6:be:07:0e:33: a9:bf:ac:2c:ad:16:e9:46:2a:55:9d:e3:a8:5f:cd:77:da:1d: dd:5b:d4:a0:eb:aa:dd:5b:c1:69:1e:ec:55:4a:40:28:21:d6: 26:74:62:36:8b:f1:b3:ce:c5:10:33:48:61:6b:2c:69:21:f9: 1c:4c:4c:c9:b6:4e:a4:5b:15:68:d2:8f:b4:f7:72:b2:3a:07: 49:0e:da:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5UtKKYtAsjR/XdEwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDYyOTA5MDAxMloXDTI2MDkyNzA5MDAxMlowLzEtMCsGA1UEAxMk NGM4MDQ4MDgtOTQ0Yi00YjdhLWIzYjYtMThkNDIzZmIyZWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquXK/U6h+d2rHHLPZvhN3UpVpGLNYJPyVd9C 0RmmEcxoxSmIfMS0bYihQywK9zcBYD5iNuK0Jm14fbyCmP9piryEl2hrxStCuE0B gOj1JbxOKQ9ZejtwWr9wofcCvigULhuCYL/EHXlVZrLBX6E+vjWjqcDyeaNEpxeq +VsbBhwXlG6rIUPN02wJ7s54XUxhNsjY1Z60sxduTY0eajhxV6s1vCY8B4xTsCQu n2dA127vIy/ehjD/KansbBO28KPyL3FCFCSLDRsnImhlpalvmHZUVhQ9x1mCKdBj OJiD4gn2qOpdeKmw8OJIusHYYd5oDlpizm9UqH/R6Gta4v+NIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM54vsdCpCniPSiPWgTpFV+JsapQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYTRlZjA5NGEtNGU1MS0z ODJjLWFkZWYtMmVmMmRhOTNhZDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqFeeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABz9YuIokeFnl3uWgB5zg4lzWOBcNeaoCra1AKonojH2D/XVQLpMm+bB BzFTwB3UgZKle+azkSqse3FBTbD0masbSS3GyNB0eSuYOgy2D8hr4FJPh9abrICH UVb9i7KPz0d4fMtQGm4Bz8QsJ8+OEJHBqEvg6QeRYFvUVPLYVoa4HIPUHzHWvZXT Ww1FVOZYfmjiUmKGXpsbshsgJxMfO6ZVh5UULgLFY+lAAiPA0g2mvgcOM6m/rCyt FulGKlWd46hfzXfaHd1b1KDrqt1bwWke7FVKQCgh1iZ0YjaL8bPOxRAzSGFrLGkh +RxMTMm2TqRbFWjSj7T3crI6B0kO2uU= -----END CERTIFICATE-----Generated at Fri Jul 24 19:50:06 2026 by rpki-client