$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ef8d7cdf-a9c5-3d5e-bb2f-39647d41300b.roa File: ef8d7cdf-a9c5-3d5e-bb2f-39647d41300b.roa (raw, json) Hash identifier: qAhnQupaukNFoN9MUKM5Eb7R00kLWKyCrwSFTSGwCdE= Subject key identifier: 04:F2:9F:9D:92:51:10:62:F9:79:91:C2:D8:A1:C3:EA:E9:94:AC:67 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584D0D4261C7C316D33FC3F83A50 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ef8d7cdf-a9c5-3d5e-bb2f-39647d41300b.roa Signing time: Wed 04 Mar 2026 02:00:32 +0000 ROA not before: Wed 04 Mar 2026 02:00:32 +0000 ROA not after: Tue 02 Jun 2026 01:00:32 +0000 asID: 3356 IP address blocks: 168.87.146.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0d:42:61:c7:c3:16:d3:3f:c3:f8:3a:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 4 02:00:32 2026 GMT Not After : Jun 2 01:00:32 2026 GMT Subject: CN=0eea067c-0488-4629-a9df-9683e1524ca6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ba:bd:67:d1:12:34:87:a5:8f:f3:54:b8:44: 8a:14:1d:bf:05:1c:7e:45:83:25:94:9b:fc:33:a1: 2f:0a:a7:81:14:5f:07:83:6f:ea:95:e7:e2:86:cc: 23:f0:05:bd:c1:21:33:73:28:a4:c3:c6:ab:be:5f: 60:a6:10:2e:fa:4b:ba:c1:98:88:b2:bf:2b:00:cc: 45:0a:43:45:dc:33:f3:6f:ba:99:f9:41:da:6d:1c: e6:bb:c5:b2:93:b2:26:d2:c9:e3:d6:9e:90:61:18: 9d:20:de:cd:dd:a2:3e:51:c5:71:ab:11:de:d7:f7: e4:3b:08:1a:e1:0c:cb:75:24:50:1b:84:3e:da:d1: b3:52:f5:84:53:5c:3a:f6:83:49:35:17:ad:00:5a: e0:4f:da:c7:06:83:67:40:cb:7b:82:7a:c1:22:82: c5:54:72:0c:d6:57:1a:cd:7c:02:cd:8c:1e:e4:fa: 80:4a:fb:e6:b0:33:a1:87:d1:36:b0:de:b2:76:9d: e2:66:1d:41:55:c6:91:51:d4:55:aa:d4:92:37:60: 5b:5c:a4:cc:96:78:94:53:1d:a8:c9:23:d5:45:89: a6:e9:2a:4a:5c:ce:f3:c4:65:ec:fe:36:15:1d:40: 0c:cf:50:20:75:c8:61:2d:5d:44:70:db:a4:67:62: 35:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:F2:9F:9D:92:51:10:62:F9:79:91:C2:D8:A1:C3:EA:E9:94:AC:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ef8d7cdf-a9c5-3d5e-bb2f-39647d41300b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.146.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:f1:c9:02:e6:35:23:b2:e4:b1:49:b2:94:ed:43:ff:6c:31: 3c:d0:90:ce:75:d4:97:8a:c6:7f:ab:be:bc:6e:95:ca:8d:53: 5d:03:b8:a7:4a:2c:e1:cd:fe:af:b9:79:6c:b5:96:3f:be:c0: 97:1f:3e:32:20:c6:ff:63:ea:4e:a4:f5:f4:56:0b:af:02:7e: 39:28:16:53:af:38:f9:d9:eb:ae:79:f6:c8:c9:a3:17:6a:2c: 94:77:89:f9:a7:83:cc:74:30:78:ad:51:22:cb:5e:12:46:ac: 59:ac:c5:96:60:c3:a3:02:83:71:8a:c9:1f:cd:10:6e:8b:1d: 6b:6f:f0:8a:a7:9a:35:55:31:08:86:a0:96:43:69:7e:22:17: 13:d7:cb:f9:e6:85:35:45:f8:2b:14:ef:87:63:be:1f:79:d1: ae:fc:2d:16:11:63:da:72:ef:f4:9a:53:8c:7d:76:01:5d:17: a6:8a:04:a2:9a:c0:a3:4d:5b:46:02:a3:26:14:8d:5a:fe:18: c2:17:46:14:91:fe:cf:69:f2:eb:73:de:ab:e4:39:2e:a9:78: c5:55:f5:7f:9a:50:f2:00:a9:0a:0e:9c:dc:64:16:2d:f7:c2: 80:e2:f2:1e:75:02:85:ca:f3:04:99:b3:3f:3a:05:69:03:47: b2:11:8f:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0NQmHHwxbTP8P4OlAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDMwNDAyMDAzMloXDTI2MDYwMjAxMDAzMlowLzEtMCsGA1UEAxMk MGVlYTA2N2MtMDQ4OC00NjI5LWE5ZGYtOTY4M2UxNTI0Y2E2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirq9Z9ESNIelj/NUuESKFB2/BRx+RYMllJv8 M6EvCqeBFF8Hg2/qlefihswj8AW9wSEzcyikw8arvl9gphAu+ku6wZiIsr8rAMxF CkNF3DPzb7qZ+UHabRzmu8Wyk7Im0snj1p6QYRidIN7N3aI+UcVxqxHe1/fkOwga 4QzLdSRQG4Q+2tGzUvWEU1w69oNJNRetAFrgT9rHBoNnQMt7gnrBIoLFVHIM1lca zXwCzYwe5PqASvvmsDOhh9E2sN6ydp3iZh1BVcaRUdRVqtSSN2BbXKTMlniUUx2o ySPVRYmm6SpKXM7zxGXs/jYVHUAMz1AgdchhLV1EcNukZ2I1kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFATyn52SURBi+XmRwtihw+rplKxnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZWY4ZDdjZGYtYTljNS0z ZDVlLWJiMmYtMzk2NDdkNDEzMDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqFeSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB/xyQLmNSOy5LFJspTtQ/9sMTzQkM511JeKxn+rvrxulcqNU10DuKdK LOHN/q+5eWy1lj++wJcfPjIgxv9j6k6k9fRWC68CfjkoFlOvOPnZ66559sjJoxdq LJR3ifmng8x0MHitUSLLXhJGrFmsxZZgw6MCg3GKyR/NEG6LHWtv8IqnmjVVMQiG oJZDaX4iFxPXy/nmhTVF+CsU74djvh950a78LRYRY9py7/SaU4x9dgFdF6aKBKKa wKNNW0YCoyYUjVr+GMIXRhSR/s9p8utz3qvkOS6peMVV9X+aUPIAqQoOnNxkFi33 woDi8h51AoXK8wSZsz86BWkDR7IRj/k= -----END CERTIFICATE-----Generated at Thu Mar 26 22:27:48 2026 by rpki-client