$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f408855e-9251-37a2-9fb5-4cba259a98d2.roa File: f408855e-9251-37a2-9fb5-4cba259a98d2.roa (raw, json) Hash identifier: 99bvCbF/MX3Gjd0z9QqSUfnEjXyw5zfTGwhuSjCiwi8= Subject key identifier: AC:9E:16:5E:BF:56:5F:2B:A0:28:93:BB:B5:2B:7A:74:64:0D:0A:E5 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584EF7177B7275C1635170556400 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f408855e-9251-37a2-9fb5-4cba259a98d2.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 202 IP address blocks: 168.87.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:7b:72:75:c1:63:51:70:55:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=898c6340-e03c-473e-887c-cf00041faa8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:15:a5:e1:54:ae:e6:a7:d8:c5:ee:6d:dd:69: 91:2a:3a:81:e0:7c:8d:69:9c:c8:7f:9b:4e:6d:c0: 61:a3:81:ce:0b:18:64:3e:2c:53:ba:2c:a7:64:b2: db:f1:d5:8e:66:b5:29:f0:c9:96:8b:53:88:79:a4: c5:7e:bd:a1:74:7f:de:4b:c2:6e:83:7c:49:d5:10: 3b:c4:d5:d1:00:f4:d3:ec:9f:04:31:b5:04:ea:2c: 83:e0:2f:62:7e:0a:f3:c5:f3:34:7b:d5:f5:57:c4: e1:2c:6f:1c:2e:49:99:bc:dd:c4:7e:ec:d4:f1:d0: 60:bf:19:5e:85:17:b0:59:92:72:00:26:16:a3:98: 44:1f:fe:88:7f:fd:6a:65:a8:45:ae:81:07:44:1b: 26:91:79:17:f9:65:bc:e4:dc:6a:4d:5e:a5:ab:d5: b0:2d:96:95:6e:1d:0d:a2:ce:d7:35:26:cb:c8:9d: 2c:2c:3d:78:f3:22:62:cc:0b:31:4a:ef:83:8b:79: 5a:12:eb:8e:8e:a0:a6:31:cb:61:b1:71:8f:96:c3: ee:8e:0a:24:0e:b8:a0:f4:07:4b:65:27:c8:41:08: 78:5f:eb:a8:c4:de:86:51:5d:e3:26:42:01:24:37: 11:aa:74:38:ca:7a:05:ea:82:5c:de:b1:dc:a4:26: ba:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:9E:16:5E:BF:56:5F:2B:A0:28:93:BB:B5:2B:7A:74:64:0D:0A:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f408855e-9251-37a2-9fb5-4cba259a98d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:50:9c:05:60:f3:86:b8:9b:14:4c:1b:f4:54:15:9e:fc:fc: 6e:20:6a:7c:f9:9c:6d:7a:d4:b9:7f:d4:6b:3a:dc:82:8e:0e: d7:d5:f1:06:15:33:a5:08:6f:1e:d8:e7:07:20:c3:ed:6a:7a: 5d:b4:15:6e:16:d2:c8:61:6b:78:40:ff:7b:cf:21:b3:73:16: d8:c2:f0:38:6a:cd:80:f7:60:3d:bd:69:37:2e:02:5c:ea:51: 80:26:95:89:e2:81:21:5c:72:bc:f3:1e:e4:44:6d:83:38:88: ec:03:36:ce:c9:5c:c4:b4:d8:6e:bd:86:f4:ca:31:20:d4:6f: 4e:08:5f:45:59:66:37:87:c2:30:5c:02:c3:07:ed:f7:e3:2b: f8:6d:bb:93:60:6b:8e:96:28:c1:48:14:3a:01:0b:5a:c2:86: 10:46:c3:7c:76:31:8d:65:88:81:19:f4:b8:17:06:6b:2b:a2: 82:4e:11:fc:75:18:68:ea:00:6b:4c:5c:c3:4a:db:a9:b9:7e: 17:dd:12:2d:05:8a:5b:f4:ef:b4:6f:e8:64:2c:fd:19:9f:0e: 78:a8:76:27:45:61:90:70:df:d6:f3:1b:3d:36:91:75:f8:97: 4c:be:4a:7e:b7:d9:e9:2b:41:1b:e9:31:3c:17:41:a1:9f:44: 90:c5:ea:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F3tydcFjUXBVZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk ODk4YzYzNDAtZTAzYy00NzNlLTg4N2MtY2YwMDA0MWZhYThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphWl4VSu5qfYxe5t3WmRKjqB4HyNaZzIf5tO bcBho4HOCxhkPixTuiynZLLb8dWOZrUp8MmWi1OIeaTFfr2hdH/eS8Jug3xJ1RA7 xNXRAPTT7J8EMbUE6iyD4C9ifgrzxfM0e9X1V8ThLG8cLkmZvN3EfuzU8dBgvxle hRewWZJyACYWo5hEH/6If/1qZahFroEHRBsmkXkX+WW85NxqTV6lq9WwLZaVbh0N os7XNSbLyJ0sLD148yJizAsxSu+Di3laEuuOjqCmMcthsXGPlsPujgokDrig9AdL ZSfIQQh4X+uoxN6GUV3jJkIBJDcRqnQ4ynoF6oJc3rHcpCa6tQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKyeFl6/Vl8roCiTu7UrenRkDQrlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZjQwODg1NWUtOTI1MS0z N2EyLTlmYjUtNGNiYTI1OWE5OGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqFeIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJBQnAVg84a4mxRMG/RUFZ78/G4ganz5nG161Ll/1Gs63IKODtfV8QYV M6UIbx7Y5wcgw+1qel20FW4W0shha3hA/3vPIbNzFtjC8DhqzYD3YD29aTcuAlzq UYAmlYnigSFccrzzHuREbYM4iOwDNs7JXMS02G69hvTKMSDUb04IX0VZZjeHwjBc AsMH7ffjK/htu5Nga46WKMFIFDoBC1rChhBGw3x2MY1liIEZ9LgXBmsrooJOEfx1 GGjqAGtMXMNK26m5fhfdEi0Filv077Rv6GQs/RmfDniodidFYZBw39bzGz02kXX4 l0y+Sn632ekrQRvpMTwXQaGfRJDF6qg= -----END CERTIFICATE-----Generated at Thu Oct 1 12:20:40 2026 by rpki-client