$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f1f77be5-daf4-345a-99b1-f4bee4f839d6.roa File: f1f77be5-daf4-345a-99b1-f4bee4f839d6.roa (raw, json) Hash identifier: q/71u6LkAxxZ+jINGMtSOdrqosBwyuPKY5lVyOET4D4= Subject key identifier: 00:CD:CC:CC:C5:EB:F6:8A:74:D0:1A:B5:BE:0F:16:3E:DC:E5:E3:6F Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584DA81587556742E9AED1493C00 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f1f77be5-daf4-345a-99b1-f4bee4f839d6.roa Signing time: Tue 28 Apr 2026 13:00:30 +0000 ROA not before: Tue 28 Apr 2026 13:00:30 +0000 ROA not after: Mon 27 Jul 2026 13:00:30 +0000 asID: 3356 IP address blocks: 168.87.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a8:15:87:55:67:42:e9:ae:d1:49:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 28 13:00:30 2026 GMT Not After : Jul 27 13:00:30 2026 GMT Subject: CN=e6580483-e54c-4558-b793-1f7d840aa188 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:8e:10:05:7a:ab:16:41:20:1a:b8:e4:b8:66: 50:f5:f1:e4:65:7b:11:44:84:dd:54:5d:62:f6:f7: fa:15:a9:50:7d:00:ad:2a:79:00:4b:c4:c8:7f:9b: e2:ec:ab:63:16:bb:bd:05:bd:fc:3e:7f:05:cf:08: 9a:57:42:fe:28:ee:58:ee:7f:50:e4:25:9e:00:50: a6:76:37:1d:3a:ec:7f:4e:f4:81:42:fb:18:90:dc: e1:ff:3a:96:98:82:89:4a:c7:44:91:e4:89:ef:16: d9:e8:2b:84:e9:6d:39:c1:86:40:2f:74:45:c2:05: 98:75:ab:ad:ba:06:92:b3:81:63:8c:72:fe:11:7b: d9:ea:eb:18:8d:3f:f2:6e:5a:fb:55:e7:08:49:3f: 75:7e:75:7a:f9:a6:31:f7:30:f9:2d:45:e0:aa:49: b6:de:27:e7:7c:f4:4c:1d:27:68:42:13:d9:73:90: ad:dd:5d:1b:0b:d0:02:05:ca:ee:e9:72:ab:5c:f3: f1:88:b8:0f:b6:39:56:25:6b:8c:25:4d:2f:2e:b8: 0e:60:04:8c:de:df:67:29:f5:57:a1:5f:a5:85:80: a0:a3:83:cc:ff:9c:63:95:0c:6e:07:c3:8c:1d:51: c2:2e:5d:8c:49:45:51:4b:69:73:27:6c:4d:2a:fe: 88:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:CD:CC:CC:C5:EB:F6:8A:74:D0:1A:B5:BE:0F:16:3E:DC:E5:E3:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f1f77be5-daf4-345a-99b1-f4bee4f839d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:d6:94:44:50:70:8a:f4:0c:6d:55:87:48:5f:3a:de:61:a0: e9:db:2e:08:f6:75:0c:f5:b2:30:59:13:18:a9:db:7a:4f:69: 7c:4b:40:6c:96:6c:5a:f7:c2:3d:eb:0e:95:15:65:d2:67:65: 93:66:7c:3c:81:94:a4:d3:31:28:fc:08:08:d1:e9:c8:ad:e8: 22:a3:ab:84:46:eb:8a:1f:ab:eb:10:d5:1d:11:e5:47:9a:b7: 11:71:fb:45:86:30:98:a9:b3:e2:4e:73:24:47:4d:44:56:60: b5:0c:fd:07:c0:e9:b1:36:69:4f:70:48:39:33:3c:cf:ab:63: 15:aa:59:0e:e9:fd:bf:ce:bc:95:b8:44:aa:62:99:44:74:40: c6:d7:db:4c:bf:be:64:40:6a:a6:38:fb:36:df:d3:7e:8d:92: 46:d9:e5:b2:f1:59:be:ef:91:4d:7e:4c:4b:b2:b4:53:c9:cd: 89:e1:76:26:f3:8d:1a:e2:2b:4e:6f:60:da:53:2b:46:cc:c8: 6d:9f:99:a8:e3:90:2b:df:3e:93:60:d7:ba:58:a0:8f:8b:3f: ce:87:2f:44:6c:a7:6b:73:16:08:02:02:34:34:8b:b3:09:6b: 28:2c:7b:39:a2:b4:b8:94:a4:2d:26:5d:16:22:69:d2:10:7c: 36:67:93:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2oFYdVZ0LprtFJPAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDQyODEzMDAzMFoXDTI2MDcyNzEzMDAzMFowLzEtMCsGA1UEAxMk ZTY1ODA0ODMtZTU0Yy00NTU4LWI3OTMtMWY3ZDg0MGFhMTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgo4QBXqrFkEgGrjkuGZQ9fHkZXsRRITdVF1i 9vf6FalQfQCtKnkAS8TIf5vi7KtjFru9Bb38Pn8FzwiaV0L+KO5Y7n9Q5CWeAFCm djcdOux/TvSBQvsYkNzh/zqWmIKJSsdEkeSJ7xbZ6CuE6W05wYZAL3RFwgWYdaut ugaSs4FjjHL+EXvZ6usYjT/yblr7VecIST91fnV6+aYx9zD5LUXgqkm23ifnfPRM HSdoQhPZc5Ct3V0bC9ACBcru6XKrXPPxiLgPtjlWJWuMJU0vLrgOYASM3t9nKfVX oV+lhYCgo4PM/5xjlQxuB8OMHVHCLl2MSUVRS2lzJ2xNKv6IAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFADNzMzF6/aKdNAatb4PFj7c5eNvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZjFmNzdiZTUtZGFmNC0z NDVhLTk5YjEtZjRiZWU0ZjgzOWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqFcUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAPWlERQcIr0DG1Vh0hfOt5hoOnbLgj2dQz1sjBZExip23pPaXxLQGyW bFr3wj3rDpUVZdJnZZNmfDyBlKTTMSj8CAjR6cit6CKjq4RG64ofq+sQ1R0R5Uea txFx+0WGMJips+JOcyRHTURWYLUM/QfA6bE2aU9wSDkzPM+rYxWqWQ7p/b/OvJW4 RKpimUR0QMbX20y/vmRAaqY4+zbf036NkkbZ5bLxWb7vkU1+TEuytFPJzYnhdibz jRriK05vYNpTK0bMyG2fmajjkCvfPpNg17pYoI+LP86HL0Rsp2tzFggCAjQ0i7MJ aygsezmitLiUpC0mXRYiadIQfDZnkwA= -----END CERTIFICATE-----Generated at Wed May 13 14:31:48 2026 by rpki-client