$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b8caf72d-4885-3c6b-a035-6ad6075d7ede.roa File: b8caf72d-4885-3c6b-a035-6ad6075d7ede.roa (raw, json) Hash identifier: YGAPS8U2olSB4sFixlIvKVWdDxBJnZxJgG03S3N7DR4= Subject key identifier: DB:38:DC:7B:BD:97:32:86:E2:CE:8E:47:5D:DD:10:C7:D8:76:1A:AB Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584F2957BE7CADBA37FED800A500 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b8caf72d-4885-3c6b-a035-6ad6075d7ede.roa Signing time: Sun 13 Sep 2026 13:00:11 +0000 ROA not before: Sun 13 Sep 2026 13:00:11 +0000 ROA not after: Sat 12 Dec 2026 14:00:11 +0000 asID: 3356 IP address blocks: 168.87.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:29:57:be:7c:ad:ba:37:fe:d8:00:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 13 13:00:11 2026 GMT Not After : Dec 12 14:00:11 2026 GMT Subject: CN=e5e5bd2c-438c-4fcf-81b7-02297acb3ee0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:39:ee:24:af:25:d1:4b:1b:7c:fa:31:bc:00: fa:9c:67:c8:f7:84:d6:69:ad:13:04:28:7b:d2:2f: c3:da:ae:92:12:64:79:1b:b5:c2:67:85:aa:3e:bf: 83:d8:13:cb:01:8f:08:d7:f7:07:1b:64:8d:89:17: f3:ae:18:3b:1d:f1:2d:ee:3e:71:31:5e:f4:d0:ff: fc:e4:29:9b:1f:de:0c:09:7d:98:31:e1:6e:72:3a: 5e:c7:97:59:5a:df:e0:f9:16:24:4e:cf:8a:bc:69: 61:ee:f0:dc:28:de:5d:74:2e:95:f2:85:33:24:ee: 41:39:4b:21:69:e6:7c:b5:6e:0b:df:0b:98:5d:bb: 85:a1:6f:9c:ec:b7:9b:ca:ba:69:a0:8e:47:ad:82: cb:f4:e8:1a:09:90:5d:1d:6b:22:4d:2d:76:13:bf: a5:12:15:62:3f:fa:82:4f:1b:5b:1f:1d:30:ab:a2: 2e:38:4b:12:45:08:08:33:38:b0:e1:a0:92:f1:1c: f5:c6:9e:23:13:41:99:e1:61:2a:42:df:c5:bc:61: 8f:6e:49:1b:04:2a:6e:34:5e:06:73:33:41:f7:26: a1:31:9f:33:54:6d:e8:e0:6c:70:9d:e8:1b:0c:d2: 3f:3e:73:02:95:9d:11:cb:89:fa:0e:cd:96:96:d9: 05:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:38:DC:7B:BD:97:32:86:E2:CE:8E:47:5D:DD:10:C7:D8:76:1A:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b8caf72d-4885-3c6b-a035-6ad6075d7ede.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:a0:b4:e3:1c:d3:2e:be:09:6e:8e:9a:77:63:c2:0f:18:9e: a7:2d:cb:24:69:40:85:86:32:95:ac:78:22:5e:34:41:72:30: 9b:b0:65:77:8e:b7:c2:13:45:97:3c:30:84:68:80:ea:24:65: 42:7c:be:f9:a6:0b:1c:44:e4:66:6f:4f:c5:e3:3f:2d:55:36: a7:17:b8:ff:ea:cc:13:bc:f9:71:f3:3e:6f:62:71:b2:eb:9c: fe:da:44:d3:a5:22:a2:10:a7:b5:d6:ec:8e:2a:bd:6d:73:b3: b9:ac:f9:0a:74:52:65:77:3b:79:e8:bd:5a:50:4b:b3:da:ad: 10:2a:c2:15:0f:52:6d:38:dc:50:26:28:66:92:83:a7:1e:27: 59:a8:b1:b9:ae:e3:55:c3:ad:e0:03:ba:8f:26:33:b5:8e:46: c1:26:97:fd:5e:9a:b4:3d:39:1a:34:d0:2b:64:af:26:0f:c6: d7:29:24:8a:92:2c:b3:81:7c:59:f7:99:4e:e0:ee:d0:16:00: fd:3e:a0:4f:03:e4:6a:14:cb:c5:6b:19:3f:65:53:f2:b0:75: 23:5c:1b:a3:05:96:34:e1:2d:f6:e7:27:d6:c5:aa:73:0e:50: 37:d1:79:fb:a5:1f:8e:15:0f:64:54:9d:e2:5c:1d:47:64:fb: 97:95:43:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8pV758rbo3/tgApQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk ZTVlNWJkMmMtNDM4Yy00ZmNmLTgxYjctMDIyOTdhY2IzZWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDnuJK8l0UsbfPoxvAD6nGfI94TWaa0TBCh7 0i/D2q6SEmR5G7XCZ4WqPr+D2BPLAY8I1/cHG2SNiRfzrhg7HfEt7j5xMV700P/8 5CmbH94MCX2YMeFucjpex5dZWt/g+RYkTs+KvGlh7vDcKN5ddC6V8oUzJO5BOUsh aeZ8tW4L3wuYXbuFoW+c7LebyrppoI5HrYLL9OgaCZBdHWsiTS12E7+lEhViP/qC TxtbHx0wq6IuOEsSRQgIMziw4aCS8Rz1xp4jE0GZ4WEqQt/FvGGPbkkbBCpuNF4G czNB9yahMZ8zVG3o4GxwnegbDNI/PnMClZ0Ry4n6Ds2WltkF/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNs43Hu9lzKG4s6OR13dEMfYdhqrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYjhjYWY3MmQtNDg4NS0z YzZiLWEwMzUtNmFkNjA3NWQ3ZWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqFdAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHygtOMc0y6+CW6Omndjwg8YnqctyyRpQIWGMpWseCJeNEFyMJuwZXeO t8ITRZc8MIRogOokZUJ8vvmmCxxE5GZvT8XjPy1VNqcXuP/qzBO8+XHzPm9icbLr nP7aRNOlIqIQp7XW7I4qvW1zs7ms+Qp0UmV3O3novVpQS7ParRAqwhUPUm043FAm KGaSg6ceJ1mosbmu41XDreADuo8mM7WORsEml/1emrQ9ORo00CtkryYPxtcpJIqS LLOBfFn3mU7g7tAWAP0+oE8D5GoUy8VrGT9lU/KwdSNcG6MFljThLfbnJ9bFqnMO UDfRefulH44VD2RUneJcHUdk+5eVQ2o= -----END CERTIFICATE-----Generated at Sun Oct 11 10:13:12 2026 by rpki-client