$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d9636a6f-3592-376c-90d3-b77ba2b2de79.roa File: d9636a6f-3592-376c-90d3-b77ba2b2de79.roa (raw, json) Hash identifier: poJHGN5VvFfuvfPU8Is7NDYhkg1ApUoZ6xueMrTlEzw= Subject key identifier: E4:17:0F:7A:36:B1:66:69:DE:52:32:9F:08:6F:B2:B9:B6:D2:42:3E Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584D0A77A5E48BEE9CA7E64A2480 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d9636a6f-3592-376c-90d3-b77ba2b2de79.roa Signing time: Tue 03 Mar 2026 02:00:32 +0000 ROA not before: Tue 03 Mar 2026 02:00:32 +0000 ROA not after: Mon 01 Jun 2026 01:00:32 +0000 asID: 3360 IP address blocks: 168.87.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0a:77:a5:e4:8b:ee:9c:a7:e6:4a:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 3 02:00:32 2026 GMT Not After : Jun 1 01:00:32 2026 GMT Subject: CN=99970683-25c5-4468-8fdd-9d9ea58d8649 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d9:ce:d6:d7:74:89:b2:d6:ee:2e:ab:dc:9f: 6b:e4:e1:ef:0b:e4:56:29:76:d4:73:16:01:6b:84: 51:51:0e:53:3a:14:20:47:1a:0e:e7:30:25:d2:3d: 01:25:ba:2f:82:2f:33:8c:28:12:45:c8:03:e5:64: 64:7d:4b:44:b5:da:47:a6:27:24:3a:b4:8a:f8:86: 74:ec:1a:ca:af:5d:25:b0:b2:40:1e:40:41:8b:52: 2b:7d:af:a5:0f:f2:cc:a3:60:4f:86:55:23:d6:e0: 88:43:7b:05:d0:2e:e5:a6:2a:c4:2b:be:b0:14:44: cc:89:d5:ac:b6:c3:55:2e:f6:15:bd:aa:d6:b2:41: 9f:27:06:b0:58:ed:08:ae:87:27:35:a3:78:8b:b9: af:4a:f3:e1:35:53:d2:85:ed:69:bf:72:ab:18:e0: f3:d7:60:8a:1e:3d:13:45:d2:f0:56:97:d2:d4:97: 0f:e2:70:6b:b0:d9:c8:fd:30:89:03:48:5e:77:d1: b9:29:75:83:79:c7:9e:f0:10:98:05:cf:e6:71:b5: 84:00:cc:1f:ad:d5:f8:e5:e7:b8:b1:8b:6a:6d:da: 35:ad:ca:77:18:a6:98:94:15:c3:6d:41:e8:f1:f6: 7f:c6:d3:13:ff:4f:99:fc:ad:0c:b5:d2:50:5f:9c: 01:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:17:0F:7A:36:B1:66:69:DE:52:32:9F:08:6F:B2:B9:B6:D2:42:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d9636a6f-3592-376c-90d3-b77ba2b2de79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:0b:0c:91:49:d3:8b:ff:96:c1:89:63:c8:46:93:41:b3:49: 11:a9:c0:88:ec:6a:4a:9c:89:cd:68:b2:9c:f1:0f:62:fa:f2: 56:4c:36:29:06:f1:8a:de:56:30:65:2c:d0:57:cb:bb:b4:8d: b4:a2:c1:5e:42:af:d0:c0:9e:68:70:3b:bf:c6:2c:05:f9:aa: bb:44:81:69:70:d2:10:4a:70:0f:a9:eb:e6:85:9d:0a:a1:03: b5:36:d3:6c:a9:4a:e4:76:b1:a0:f2:43:50:b6:13:fb:59:58: 44:ef:8e:a1:ce:4a:9d:f1:bc:05:a8:d2:20:d4:95:f7:15:38: 91:6c:70:78:cd:75:29:67:49:53:b6:d4:2d:7d:70:c8:bc:68: ce:4c:73:9f:2e:80:21:98:c0:c5:8c:95:ee:25:65:1c:98:0b: 6b:aa:03:76:9e:b2:bd:b0:41:8e:04:72:0a:5e:a2:d8:b1:ee: d1:db:a3:63:f4:1e:fd:9f:d4:a6:17:6a:3f:2b:51:45:58:90: 07:25:7f:93:89:b7:e7:50:76:81:b9:7d:1e:0c:f4:b8:1f:01: ed:ec:69:d8:69:e3:36:8f:66:d5:e2:0d:4b:84:21:92:17:07: cf:6d:ae:d2:2b:56:d4:0c:fb:7e:c6:2c:b1:b5:2e:dc:5d:aa: bb:58:d7:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Kd6Xki+6cp+ZKJIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDMwMzAyMDAzMloXDTI2MDYwMTAxMDAzMlowLzEtMCsGA1UEAxMk OTk5NzA2ODMtMjVjNS00NDY4LThmZGQtOWQ5ZWE1OGQ4NjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNnO1td0ibLW7i6r3J9r5OHvC+RWKXbUcxYB a4RRUQ5TOhQgRxoO5zAl0j0BJbovgi8zjCgSRcgD5WRkfUtEtdpHpickOrSK+IZ0 7BrKr10lsLJAHkBBi1Irfa+lD/LMo2BPhlUj1uCIQ3sF0C7lpirEK76wFETMidWs tsNVLvYVvarWskGfJwawWO0IrocnNaN4i7mvSvPhNVPShe1pv3KrGODz12CKHj0T RdLwVpfS1JcP4nBrsNnI/TCJA0hed9G5KXWDecee8BCYBc/mcbWEAMwfrdX45ee4 sYtqbdo1rcp3GKaYlBXDbUHo8fZ/xtMT/0+Z/K0MtdJQX5wBmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOQXD3o2sWZp3lIynwhvsrm20kI+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZDk2MzZhNmYtMzU5Mi0z NzZjLTkwZDMtYjc3YmEyYjJkZTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFdWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQLDJFJ04v/lsGJY8hGk0GzSRGpwIjsakqcic1ospzxD2L68lZMNikG 8YreVjBlLNBXy7u0jbSiwV5Cr9DAnmhwO7/GLAX5qrtEgWlw0hBKcA+p6+aFnQqh A7U202ypSuR2saDyQ1C2E/tZWETvjqHOSp3xvAWo0iDUlfcVOJFscHjNdSlnSVO2 1C19cMi8aM5Mc58ugCGYwMWMle4lZRyYC2uqA3aesr2wQY4Ecgpeotix7tHbo2P0 Hv2f1KYXaj8rUUVYkAclf5OJt+dQdoG5fR4M9LgfAe3sadhp4zaPZtXiDUuEIZIX B89trtIrVtQM+37GLLG1LtxdqrtY1+o= -----END CERTIFICATE-----Generated at Thu Mar 26 18:28:21 2026 by rpki-client