$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e4f6a5a5-bea9-322a-9fab-0663b5137b6e.roa File: e4f6a5a5-bea9-322a-9fab-0663b5137b6e.roa (raw, json) Hash identifier: P6ZeG8J/VsNHx2kERHwNdI/bHMX1nsgnaA0dlGJCiVE= Subject key identifier: 50:E5:AE:C4:E4:13:8E:8B:09:E5:29:BD:67:FC:A3:8B:41:B0:46:82 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584D1F4A1DD98979EA2DDA9D6200 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e4f6a5a5-bea9-322a-9fab-0663b5137b6e.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 3360 IP address blocks: 168.87.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:1d:d9:89:79:ea:2d:da:9d:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=9e093d4e-35c8-4890-80f0-bf33c64eb0ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2b:31:bb:52:87:93:1d:2c:b8:53:68:5a:e1: 17:1f:d1:9c:18:55:6f:b7:a9:ad:fb:ad:55:0e:45: 24:0a:fb:ce:3a:6e:64:bd:ef:6f:ee:e3:38:92:29: e3:6c:4e:d4:0c:ea:f3:57:79:7d:50:93:df:14:5f: 89:de:e5:bd:26:a6:7a:10:f3:c6:b8:ce:63:c9:38: cb:c8:ef:46:e5:2a:29:98:b0:62:a4:2c:ec:fc:a0: 22:02:40:4e:9d:e8:f8:bb:69:f0:04:05:dd:42:ed: 0c:6d:4a:d9:70:c4:bf:aa:4f:51:43:dc:c0:ff:b6: 3f:48:8e:93:59:d1:06:42:00:d4:6d:37:01:8e:7a: 81:c8:e6:10:07:ca:81:58:68:d7:c7:34:97:93:4c: ba:20:88:0c:59:74:34:49:cd:c3:7d:c1:81:0e:a7: 42:fd:d7:d9:e6:13:54:92:a1:b9:4a:a5:bb:94:38: e2:9d:63:2e:a2:e0:1b:40:19:06:91:63:af:10:7e: 6f:a7:8b:b9:2d:d0:c7:92:c5:09:fd:e3:aa:3b:90: bd:91:90:6e:99:99:e1:a0:56:6a:41:7f:af:59:80: 9a:8e:78:e7:b7:5c:4a:ea:7b:a1:3f:ae:87:47:70: 85:2f:7c:fa:28:0c:d5:f2:28:01:e3:59:c0:ca:d1: 02:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:E5:AE:C4:E4:13:8E:8B:09:E5:29:BD:67:FC:A3:8B:41:B0:46:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e4f6a5a5-bea9-322a-9fab-0663b5137b6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:0f:bf:c4:ad:c7:f4:c2:e9:5b:88:06:0a:c1:fd:32:80:29: 87:ef:5b:30:26:dd:5e:f3:c8:3d:71:2e:e0:39:74:03:ee:c3: ea:16:23:78:08:c6:00:7f:42:16:ed:d4:f9:39:41:e2:99:86: e0:c7:6f:75:4a:75:68:81:75:8e:91:2a:44:fe:1a:cd:67:69: a7:8b:c1:d2:0e:49:3f:83:92:a0:b5:d1:fe:49:12:89:0a:e4: 10:65:6b:bb:36:1a:bf:f7:5b:54:d8:8f:04:04:0d:33:d8:20: 59:2f:f5:30:cf:36:0d:01:ec:51:7c:ac:1b:0d:d8:a3:b3:21: be:09:ba:c8:94:90:1a:80:94:e5:28:89:6f:f0:fa:31:39:ad: ef:64:fc:4e:c1:ad:a4:ec:fb:d6:8a:67:7d:91:39:9f:6e:09: fa:3e:73:c2:d7:bc:e9:79:29:2f:6c:7e:13:30:ba:80:66:53: a0:e2:f1:76:f4:86:5b:d9:98:d9:21:2d:ba:f9:86:e9:bc:b3: c3:2e:2e:0e:2e:32:ae:53:87:43:74:29:e2:5e:16:f3:6c:a6: 8a:a1:bd:9a:a4:ef:47:56:a3:b7:99:65:b7:05:35:0d:07:9b: 6b:38:3d:6b:e2:6f:05:a3:2f:aa:f7:0f:11:9c:13:a2:87:cd: b9:c6:68:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSh3ZiXnqLdqdYgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk OWUwOTNkNGUtMzVjOC00ODkwLTgwZjAtYmYzM2M2NGViMGVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArysxu1KHkx0suFNoWuEXH9GcGFVvt6mt+61V DkUkCvvOOm5kve9v7uM4kinjbE7UDOrzV3l9UJPfFF+J3uW9JqZ6EPPGuM5jyTjL yO9G5SopmLBipCzs/KAiAkBOnej4u2nwBAXdQu0MbUrZcMS/qk9RQ9zA/7Y/SI6T WdEGQgDUbTcBjnqByOYQB8qBWGjXxzSXk0y6IIgMWXQ0Sc3DfcGBDqdC/dfZ5hNU kqG5SqW7lDjinWMuouAbQBkGkWOvEH5vp4u5LdDHksUJ/eOqO5C9kZBumZnhoFZq QX+vWYCajnjnt1xK6nuhP66HR3CFL3z6KAzV8igB41nAytEC3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFDlrsTkE46LCeUpvWf8o4tBsEaCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZTRmNmE1YTUtYmVhOS0z MjJhLTlmYWItMDY2M2I1MTM3YjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqFcQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJkPv8Stx/TC6VuIBgrB/TKAKYfvWzAm3V7zyD1xLuA5dAPuw+oWI3gI xgB/Qhbt1Pk5QeKZhuDHb3VKdWiBdY6RKkT+Gs1naaeLwdIOST+DkqC10f5JEokK 5BBla7s2Gr/3W1TYjwQEDTPYIFkv9TDPNg0B7FF8rBsN2KOzIb4JusiUkBqAlOUo iW/w+jE5re9k/E7BraTs+9aKZ32ROZ9uCfo+c8LXvOl5KS9sfhMwuoBmU6Di8Xb0 hlvZmNkhLbr5hum8s8MuLg4uMq5Th0N0KeJeFvNspoqhvZqk70dWo7eZZbcFNQ0H m2s4PWvibwWjL6r3DxGcE6KHzbnGaOI= -----END CERTIFICATE-----Generated at Thu Mar 26 18:49:51 2026 by rpki-client