$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b8caf72d-4885-3c6b-a035-6ad6075d7ede.roa File: b8caf72d-4885-3c6b-a035-6ad6075d7ede.roa (raw, json) Hash identifier: Nfr7KdBy/UqfNN5BA42YHLB8Lrf0apPIqfvgTld1nl0= Subject key identifier: 96:7F:8A:B7:C9:F6:07:63:A3:0A:BF:BD:BA:77:3B:40:53:DD:EF:14 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584DA6B01F4D70D428D26E866700 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b8caf72d-4885-3c6b-a035-6ad6075d7ede.roa Signing time: Tue 28 Apr 2026 01:00:24 +0000 ROA not before: Tue 28 Apr 2026 01:00:24 +0000 ROA not after: Mon 27 Jul 2026 01:00:24 +0000 asID: 3356 IP address blocks: 168.87.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:b0:1f:4d:70:d4:28:d2:6e:86:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 28 01:00:24 2026 GMT Not After : Jul 27 01:00:24 2026 GMT Subject: CN=dccb17ff-b481-47a5-953f-7c348e08f27b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0e:0a:8c:56:b4:90:7e:88:e0:2b:04:59:88: e8:de:1a:6b:67:df:3c:04:ea:a0:e7:a7:4c:17:56: a5:a0:75:df:4e:e9:ce:6d:06:e9:49:82:36:7e:71: 20:be:54:ea:63:c9:12:a6:58:c3:4d:fa:67:fb:dd: 60:ba:bf:07:ec:51:c0:6e:5e:a5:87:71:aa:fb:25: a1:71:0f:2c:db:b3:21:79:d0:dd:de:1a:09:48:36: de:92:27:d1:e0:b5:00:0b:b2:72:64:47:dc:1e:e6: 6d:0c:4b:a0:84:bc:cb:37:21:d2:fc:a2:c9:1a:29: bc:a3:0d:24:d2:35:f6:5b:0c:c3:90:8d:06:0d:5b: 8e:69:47:cb:0f:42:4d:41:b1:c8:80:ce:be:56:a3: d3:b3:d2:cc:c9:a7:6a:8e:49:44:bd:70:df:08:68: 9f:95:49:27:bd:5a:ba:93:4a:dd:50:91:87:29:ad: 1e:a9:29:0e:c5:96:41:6c:58:b1:b4:da:30:94:ba: d8:c3:49:32:a6:b6:28:e9:0d:c5:62:0b:65:f2:1e: 1f:09:83:b0:01:b6:b4:95:2b:11:4c:0a:57:c7:f5: c7:dc:ff:b2:cd:87:1b:da:33:22:62:fe:d4:44:13: 97:35:81:a8:77:16:0b:39:d7:6d:3b:fc:6e:9a:cc: f5:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:7F:8A:B7:C9:F6:07:63:A3:0A:BF:BD:BA:77:3B:40:53:DD:EF:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b8caf72d-4885-3c6b-a035-6ad6075d7ede.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:7f:9c:11:bb:60:29:12:4e:5a:c0:16:6e:3b:27:ac:ce:b2: 19:4a:8b:38:65:5f:92:4d:2a:22:f8:fa:e9:e5:a7:7c:18:d3: cb:3a:93:6f:f7:7d:22:7b:3b:dc:2a:35:b8:d5:03:ce:b1:8b: 48:5d:68:45:23:9a:25:07:41:90:41:95:f5:c0:5a:1c:51:13: c9:78:73:34:1e:73:26:ca:83:2b:9b:42:44:3f:34:37:7d:ac: a0:0e:e4:22:f2:db:a2:af:b3:3c:71:a3:3c:f0:64:06:58:8a: e4:18:60:d2:78:6c:5d:91:6a:f5:63:df:0c:f6:fa:7f:b4:70: 8a:52:8a:16:e1:6e:6c:fd:34:db:0c:6c:a0:43:89:8c:52:4c: 88:9f:b8:9e:ab:c9:e1:8e:0b:5c:45:b4:0d:d6:e5:9b:56:97: 6c:5a:41:fa:f0:0c:f2:fa:3d:1b:3d:2f:bd:e0:e6:3e:6b:fc: 2b:ab:69:82:d3:c5:96:52:b3:64:2a:98:4b:e4:e8:fd:e1:74: 4d:87:44:31:50:3b:92:3f:b8:2e:64:4c:b4:df:08:ef:63:c5: 10:22:7b:5b:76:f3:06:41:e6:ee:83:89:3d:8b:0b:25:cd:4a: 49:a6:bc:37:47:70:05:e1:58:72:ff:08:10:b4:3d:45:38:2f: f7:56:23:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2msB9NcNQo0m6GZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk ZGNjYjE3ZmYtYjQ4MS00N2E1LTk1M2YtN2MzNDhlMDhmMjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvw4KjFa0kH6I4CsEWYjo3hprZ988BOqg56dM F1aloHXfTunObQbpSYI2fnEgvlTqY8kSpljDTfpn+91gur8H7FHAbl6lh3Gq+yWh cQ8s27MhedDd3hoJSDbekifR4LUAC7JyZEfcHuZtDEughLzLNyHS/KLJGim8ow0k 0jX2WwzDkI0GDVuOaUfLD0JNQbHIgM6+VqPTs9LMyadqjklEvXDfCGiflUknvVq6 k0rdUJGHKa0eqSkOxZZBbFixtNowlLrYw0kyprYo6Q3FYgtl8h4fCYOwAba0lSsR TApXx/XH3P+yzYcb2jMiYv7URBOXNYGodxYLOddtO/xumsz1jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJZ/irfJ9gdjowq/vbp3O0BT3e8UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYjhjYWY3MmQtNDg4NS0z YzZiLWEwMzUtNmFkNjA3NWQ3ZWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqFdAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF1/nBG7YCkSTlrAFm47J6zOshlKizhlX5JNKiL4+unlp3wY08s6k2/3 fSJ7O9wqNbjVA86xi0hdaEUjmiUHQZBBlfXAWhxRE8l4czQecybKgyubQkQ/NDd9 rKAO5CLy26KvszxxozzwZAZYiuQYYNJ4bF2RavVj3wz2+n+0cIpSihbhbmz9NNsM bKBDiYxSTIifuJ6ryeGOC1xFtA3W5ZtWl2xaQfrwDPL6PRs9L73g5j5r/CuraYLT xZZSs2QqmEvk6P3hdE2HRDFQO5I/uC5kTLTfCO9jxRAie1t28wZB5u6DiT2LCyXN SkmmvDdHcAXhWHL/CBC0PUU4L/dWIy8= -----END CERTIFICATE-----Generated at Wed May 13 15:47:56 2026 by rpki-client