$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e94bbb52-0d0b-3e8d-aca3-b8ad6f3f4ab5.roa File: e94bbb52-0d0b-3e8d-aca3-b8ad6f3f4ab5.roa (raw, json) Hash identifier: RqBVRVkiI7g9aiQHGqUJDwE065ywXGm3Qg8O9V+DJEA= Subject key identifier: 48:89:BC:4B:7A:8F:C2:EC:C4:55:52:6C:A2:09:F6:D9:98:E5:A6:80 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584D0D42627652F77327ED024070 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e94bbb52-0d0b-3e8d-aca3-b8ad6f3f4ab5.roa Signing time: Wed 04 Mar 2026 02:00:32 +0000 ROA not before: Wed 04 Mar 2026 02:00:32 +0000 ROA not after: Tue 02 Jun 2026 01:00:32 +0000 asID: 203 IP address blocks: 168.87.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0d:42:62:76:52:f7:73:27:ed:02:40:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 4 02:00:32 2026 GMT Not After : Jun 2 01:00:32 2026 GMT Subject: CN=d58346c7-ab19-4a84-a024-3591dab543f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:30:7d:3b:d5:e8:4f:97:38:74:8d:4e:04:83: 36:6c:30:9e:f1:af:a8:9f:47:9d:68:e1:8f:e8:b7: 45:90:81:39:3e:d6:68:51:02:1e:bd:01:62:86:08: af:96:f7:8b:e4:9f:a8:32:3e:d9:9a:ce:46:33:8a: ca:47:54:32:ce:39:a9:7a:6a:f3:7c:a8:5f:f1:4a: f8:ec:e0:9d:88:c3:5b:a2:63:ce:69:c9:1d:d1:43: 26:31:1c:f7:c3:94:80:d9:1a:20:03:8a:c1:3c:02: a1:e7:db:66:b9:18:2b:d2:81:87:c5:00:eb:72:f2: df:57:cc:b6:42:7a:d2:ab:83:51:ac:2b:1e:a8:99: bd:08:96:95:3f:fd:03:b5:d9:05:a1:35:f4:1a:77: 52:64:b8:33:33:dc:20:a3:a5:2f:6f:46:2e:0d:e3: 0d:c3:93:04:82:63:79:3f:52:59:fc:0e:56:0a:d7: e9:52:7b:4b:a7:1d:cc:e4:47:ad:98:3a:7c:17:ad: 1f:bf:d2:7d:26:74:30:23:86:9f:9b:76:ca:a8:38: 78:fa:7c:0d:81:a7:67:e7:f5:82:bc:d5:6a:56:7a: ad:a1:13:7f:4f:b5:0b:74:7a:54:9e:76:9a:44:f8: 01:e6:11:b9:10:ed:83:92:ef:19:14:f7:db:96:41: bd:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:89:BC:4B:7A:8F:C2:EC:C4:55:52:6C:A2:09:F6:D9:98:E5:A6:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e94bbb52-0d0b-3e8d-aca3-b8ad6f3f4ab5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:03:bb:0d:7e:0d:3a:da:2c:9c:21:f9:62:59:ea:30:78:75: 80:b0:77:3f:56:a9:1a:18:ce:39:9a:37:35:e1:0d:8e:48:65: ca:f2:05:7f:5f:1a:4e:a2:81:94:a2:b8:d8:62:07:a4:8a:fd: dd:90:86:57:24:90:84:88:08:75:c8:25:97:95:9b:21:0a:78: c2:62:84:c9:8c:4b:c2:f6:96:c8:6f:92:45:9b:51:02:ae:bc: d5:9f:16:b7:07:14:3c:0a:2b:3a:82:5d:78:77:0d:3b:42:40: f3:33:97:b7:4f:16:8a:a3:16:8b:4e:e3:58:50:08:63:c8:f8: ab:c2:6e:cc:f3:c0:02:86:7b:96:ef:8c:65:16:f9:1b:00:a3: bf:22:e4:3f:ff:e2:c9:38:fc:0e:41:eb:7c:f6:b9:91:23:38: 2e:63:69:b9:52:60:e9:6d:02:98:d0:2b:33:d5:06:90:6c:ab: 7a:93:b1:ac:e1:d8:46:eb:fa:a3:e2:56:7a:93:d0:16:e3:d3: 43:01:6f:5c:3d:d8:1c:2a:6e:e1:18:2e:8a:89:5a:96:82:d8: e9:9c:95:a2:fb:3d:d6:94:4e:37:fe:1f:da:b3:93:13:b7:cd: 25:30:ab:de:7e:0c:8b:28:f6:7b:d8:aa:5b:a5:45:34:24:b6: 90:18:37:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0NQmJ2UvdzJ+0CQHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDMwNDAyMDAzMloXDTI2MDYwMjAxMDAzMlowLzEtMCsGA1UEAxMk ZDU4MzQ2YzctYWIxOS00YTg0LWEwMjQtMzU5MWRhYjU0M2Y2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjB9O9XoT5c4dI1OBIM2bDCe8a+on0edaOGP 6LdFkIE5PtZoUQIevQFihgivlveL5J+oMj7Zms5GM4rKR1QyzjmpemrzfKhf8Ur4 7OCdiMNbomPOackd0UMmMRz3w5SA2RogA4rBPAKh59tmuRgr0oGHxQDrcvLfV8y2 QnrSq4NRrCseqJm9CJaVP/0DtdkFoTX0GndSZLgzM9wgo6Uvb0YuDeMNw5MEgmN5 P1JZ/A5WCtfpUntLpx3M5EetmDp8F60fv9J9JnQwI4afm3bKqDh4+nwNgadn5/WC vNVqVnqtoRN/T7ULdHpUnnaaRPgB5hG5EO2Dku8ZFPfblkG9/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEiJvEt6j8LsxFVSbKIJ9tmY5aaAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZTk0YmJiNTItMGQwYi0z ZThkLWFjYTMtYjhhZDZmM2Y0YWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqFecMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGoDuw1+DTraLJwh+WJZ6jB4dYCwdz9WqRoYzjmaNzXhDY5IZcryBX9f Gk6igZSiuNhiB6SK/d2QhlckkISICHXIJZeVmyEKeMJihMmMS8L2lshvkkWbUQKu vNWfFrcHFDwKKzqCXXh3DTtCQPMzl7dPFoqjFotO41hQCGPI+KvCbszzwAKGe5bv jGUW+RsAo78i5D//4sk4/A5B63z2uZEjOC5jablSYOltApjQKzPVBpBsq3qTsazh 2Ebr+qPiVnqT0Bbj00MBb1w92BwqbuEYLoqJWpaC2OmclaL7PdaUTjf+H9qzkxO3 zSUwq95+DIso9nvYqlulRTQktpAYN/I= -----END CERTIFICATE-----Generated at Thu Mar 26 13:57:18 2026 by rpki-client