$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d285b726-e3ef-3abf-8761-d6f1f21f4450.roa File: d285b726-e3ef-3abf-8761-d6f1f21f4450.roa (raw, json) Hash identifier: JZ/GqLSSUtzwTNrwGkgZRbJpQ/19fiZMgXlU42GVjhM= Subject key identifier: 45:18:69:B0:ED:20:C2:FC:CC:9F:DC:B8:A2:88:9F:6B:78:82:02:27 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584F497749A970321EAFB2E0D5E0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d285b726-e3ef-3abf-8761-d6f1f21f4450.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 202 IP address blocks: 168.87.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:77:49:a9:70:32:1e:af:b2:e0:d5:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=294ebf22-b504-4dbd-9291-3f208ca7d056 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:07:9e:0e:e5:b3:ec:64:54:1f:ee:ca:dd:a0: 85:fe:9f:93:77:4f:01:83:e5:b0:ed:dd:c5:e8:52: 54:43:f8:fc:73:0a:1d:be:7b:33:fb:fd:14:ec:bf: f3:f8:dd:95:f9:d9:e4:98:7e:63:92:d5:1f:46:eb: 44:41:6d:c9:99:f4:77:23:c8:98:65:3d:6d:db:7a: 69:23:37:5e:97:07:07:01:53:c9:6a:e9:df:96:17: ea:07:58:82:23:d3:23:41:22:5f:ea:73:7f:17:29: 3c:19:20:47:2e:5a:d5:be:00:b6:66:fc:95:1b:a1: 16:e6:ab:46:fd:43:58:69:97:f0:73:ea:bf:dc:90: 44:77:db:6f:56:98:a7:44:e3:de:ea:51:14:8b:55: 07:37:0b:2f:cd:e9:e8:0e:c5:c2:fe:9a:97:b6:91: 70:a5:18:3d:75:96:62:04:d4:35:29:33:dc:47:7f: 4a:33:55:8e:ad:f8:18:2a:8d:6a:b9:32:51:e7:0b: 1a:28:0b:44:f0:ea:68:29:17:b1:29:20:d2:bd:65: 93:52:62:c7:e6:7f:d7:c6:cb:96:f8:fc:c9:44:74: 90:0a:0f:ab:92:56:35:c1:6f:67:a4:96:f2:41:2f: 27:c3:b4:13:5f:14:f3:f2:a3:21:5e:18:8b:2c:12: 6c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:18:69:B0:ED:20:C2:FC:CC:9F:DC:B8:A2:88:9F:6B:78:82:02:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d285b726-e3ef-3abf-8761-d6f1f21f4450.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:a7:bf:fb:0d:41:2a:33:4d:a7:92:58:6e:dd:a3:5b:59:29: 9c:05:f0:47:e7:e8:94:70:0e:b4:9c:5f:77:b1:b7:40:de:32: 49:d0:1e:46:65:6e:cc:90:f7:e1:77:e8:ba:6e:85:25:5e:c2: b6:e1:bb:d5:df:3d:5c:cd:1b:c4:91:7d:82:20:ce:f0:9f:70: 92:7f:52:4e:c9:7e:ea:6c:e5:0e:36:18:bb:8d:95:1e:39:67: 58:fa:6c:2b:0c:1d:03:99:2c:b1:63:93:b1:b1:45:c4:71:78: 2f:89:3f:66:c1:0a:09:55:98:5f:d1:b1:53:54:e1:5d:07:49: 9c:aa:34:bf:14:d1:08:68:6b:f7:05:e0:19:58:6d:ee:58:85: 8e:29:36:a4:29:05:aa:cf:94:0d:7e:c3:c7:87:5d:23:93:db: fb:e8:46:0f:a1:69:f7:f6:65:64:85:02:cb:05:8b:7c:9d:75: 97:9f:a6:48:07:49:a8:6e:ea:24:94:db:2c:1a:18:81:e5:a7: 06:38:65:cc:5f:6d:40:72:f7:4e:bf:56:0e:53:3c:54:15:fb: db:5c:f2:02:79:bc:67:0f:02:44:f3:39:2a:e4:ce:a9:9c:06: e9:ac:11:2d:70:17:73:a9:35:e5:a4:a2:c2:36:0f:26:fc:de: b6:6f:dc:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jd0mpcDIer7Lg1eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Mjk0ZWJmMjItYjUwNC00ZGJkLTkyOTEtM2YyMDhjYTdkMDU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAeeDuWz7GRUH+7K3aCF/p+Td08Bg+Ww7d3F 6FJUQ/j8cwodvnsz+/0U7L/z+N2V+dnkmH5jktUfRutEQW3JmfR3I8iYZT1t23pp IzdelwcHAVPJaunflhfqB1iCI9MjQSJf6nN/Fyk8GSBHLlrVvgC2ZvyVG6EW5qtG /UNYaZfwc+q/3JBEd9tvVpinROPe6lEUi1UHNwsvzenoDsXC/pqXtpFwpRg9dZZi BNQ1KTPcR39KM1WOrfgYKo1quTJR5wsaKAtE8OpoKRexKSDSvWWTUmLH5n/XxsuW +PzJRHSQCg+rklY1wW9npJbyQS8nw7QTXxTz8qMhXhiLLBJsbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEUYabDtIML8zJ/cuKKIn2t4ggInMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZDI4NWI3MjYtZTNlZi0z YWJmLTg3NjEtZDZmMWYyMWY0NDUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqFf4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAASnv/sNQSozTaeSWG7do1tZKZwF8Efn6JRwDrScX3ext0DeMknQHkZl bsyQ9+F36LpuhSVewrbhu9XfPVzNG8SRfYIgzvCfcJJ/Uk7Jfups5Q42GLuNlR45 Z1j6bCsMHQOZLLFjk7GxRcRxeC+JP2bBCglVmF/RsVNU4V0HSZyqNL8U0Qhoa/cF 4BlYbe5YhY4pNqQpBarPlA1+w8eHXSOT2/voRg+haff2ZWSFAssFi3yddZefpkgH Sahu6iSU2ywaGIHlpwY4ZcxfbUBy906/Vg5TPFQV+9tc8gJ5vGcPAkTzOSrkzqmc BumsES1wF3OpNeWkosI2Dyb83rZv3KM= -----END CERTIFICATE-----Generated at Sat Sep 26 13:44:00 2026 by rpki-client