$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e1449b40-c4e8-38ff-8b05-5fd9dc245096.roa File: e1449b40-c4e8-38ff-8b05-5fd9dc245096.roa (raw, json) Hash identifier: 1HMNsDWyIZ/7F4xug3ZHXpFTg1rlcxzAe/cd4aEH7SE= Subject key identifier: F5:0F:1A:C1:E0:F4:1A:89:D5:9B:FE:72:60:E6:A4:CD:23:99:93:E5 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584F4973B25F7962170E44BEA700 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e1449b40-c4e8-38ff-8b05-5fd9dc245096.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 86 IP address blocks: 168.87.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:b2:5f:79:62:17:0e:44:be:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=09b05b79-86be-42f8-989a-e004c903437a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:76:9f:21:0b:3e:06:aa:a3:6a:29:25:9d:5f: 8f:57:98:2a:24:5a:ea:5a:11:84:52:ef:fb:ed:b8: 20:17:25:6a:da:17:c4:e4:b6:cf:d4:fb:7d:07:e1: b7:65:68:58:53:7e:a7:66:c3:71:68:8d:08:e8:6e: ad:3a:27:ee:ea:ae:cc:8a:5a:41:40:6b:24:51:33: b0:2e:bc:d3:19:a6:ce:41:01:11:82:b5:96:87:da: d4:8f:ee:71:fb:67:dc:ba:26:93:c1:7c:27:fe:45: 50:71:98:90:e5:c0:46:62:20:62:09:b0:20:57:3a: c4:e1:81:d9:9d:2b:1a:7a:11:30:6f:b2:b3:c5:17: 4e:f6:d4:55:3b:d0:4a:18:94:6c:35:61:19:7f:60: e0:d0:aa:55:d1:f4:b1:98:ed:87:a7:f1:31:d6:1b: be:7c:fd:db:6a:14:77:30:15:55:ca:c3:70:ea:7a: 44:ec:5f:29:e0:69:a6:db:2c:c9:c5:d6:2a:af:fc: f3:1a:3c:a3:2d:15:88:42:11:6f:21:af:69:d2:45: 42:ee:e0:72:82:37:ba:27:ce:43:ad:60:6c:86:b2: bd:fb:b0:37:ea:80:ee:04:9f:2b:4b:e7:91:93:29: 85:07:50:72:97:85:57:70:67:6b:19:dc:05:6b:ec: 7a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:0F:1A:C1:E0:F4:1A:89:D5:9B:FE:72:60:E6:A4:CD:23:99:93:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e1449b40-c4e8-38ff-8b05-5fd9dc245096.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:1c:a8:b6:3a:b5:68:f5:fa:19:04:b1:07:f3:94:6d:be:44: 0c:83:ed:5e:47:36:a9:e2:94:a1:b7:a7:f3:68:8f:9a:24:b1: e9:c3:a6:55:cd:44:b2:69:a2:93:aa:d7:c3:4e:3a:5f:d9:ea: e0:dd:9d:c1:9e:38:8b:18:c4:c7:5b:b4:27:c0:cc:0f:92:eb: 61:d1:8a:21:ed:a5:a5:09:60:c7:7e:90:fb:53:7f:06:31:6e: 64:a8:2d:bc:1a:a7:89:96:3c:a2:73:41:3a:73:f8:55:86:ae: 01:a5:99:e4:dd:5f:50:83:89:59:3d:53:79:c4:f7:6f:fd:0e: a5:62:6c:76:f6:0e:9e:b2:24:4f:8a:23:7c:9f:c9:96:13:a9: 9f:18:79:2c:16:8d:00:34:07:26:82:ed:1d:22:e3:9c:36:7e: 88:6b:e6:7d:ed:85:3a:8b:b8:cc:f5:68:00:0b:1a:8a:84:fe: cb:89:61:cc:89:34:e9:1d:64:39:c4:96:cf:67:65:39:4d:8f: 46:8b:96:ff:57:63:a6:67:2c:bf:59:20:d2:e4:42:81:14:75: 9f:38:c7:3b:01:aa:29:13:db:f0:9c:ee:0f:d4:2d:f6:a3:67: c5:4c:95:b9:18:25:57:83:31:0a:f3:90:86:80:3d:21:23:a9: 56:b3:df:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc7JfeWIXDkS+pwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDliMDViNzktODZiZS00MmY4LTk4OWEtZTAwNGM5MDM0MzdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7nafIQs+BqqjaiklnV+PV5gqJFrqWhGEUu/7 7bggFyVq2hfE5LbP1Pt9B+G3ZWhYU36nZsNxaI0I6G6tOifu6q7MilpBQGskUTOw LrzTGabOQQERgrWWh9rUj+5x+2fcuiaTwXwn/kVQcZiQ5cBGYiBiCbAgVzrE4YHZ nSsaehEwb7KzxRdO9tRVO9BKGJRsNWEZf2Dg0KpV0fSxmO2Hp/Ex1hu+fP3bahR3 MBVVysNw6npE7F8p4Gmm2yzJxdYqr/zzGjyjLRWIQhFvIa9p0kVC7uBygje6J85D rWBshrK9+7A36oDuBJ8rS+eRkymFB1Byl4VXcGdrGdwFa+x6GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPUPGsHg9BqJ1Zv+cmDmpM0jmZPlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZTE0NDliNDAtYzRlOC0z OGZmLThiMDUtNWZkOWRjMjQ1MDk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFeHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH4cqLY6tWj1+hkEsQfzlG2+RAyD7V5HNqnilKG3p/Noj5oksenDplXN RLJpopOq18NOOl/Z6uDdncGeOIsYxMdbtCfAzA+S62HRiiHtpaUJYMd+kPtTfwYx bmSoLbwap4mWPKJzQTpz+FWGrgGlmeTdX1CDiVk9U3nE92/9DqVibHb2Dp6yJE+K I3yfyZYTqZ8YeSwWjQA0ByaC7R0i45w2fohr5n3thTqLuMz1aAALGoqE/suJYcyJ NOkdZDnEls9nZTlNj0aLlv9XY6ZnLL9ZINLkQoEUdZ84xzsBqikT2/Cc7g/ULfaj Z8VMlbkYJVeDMQrzkIaAPSEjqVaz36w= -----END CERTIFICATE-----Generated at Mon Oct 5 12:43:26 2026 by rpki-client