$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/025b099e-2056-3082-9d73-75d92962953c.roa File: 025b099e-2056-3082-9d73-75d92962953c.roa (raw, json) Hash identifier: jChG5VZlihCl2cviXQYs+UyfI5FxrP+U4wkjg5d/P3g= Subject key identifier: 4D:DB:A6:A2:4A:5D:B9:DC:C8:03:E2:96:7F:B6:42:B1:95:92:0C:64 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584F4973F544676827DD4EBE9C90 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/025b099e-2056-3082-9d73-75d92962953c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 132121 IP address blocks: 168.87.88.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:f5:44:67:68:27:dd:4e:be:9c:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e6a2cb4e-4734-4642-88c7-9231e9338f17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:8e:b2:e3:f1:e9:43:48:50:e6:69:36:40:7f: 13:82:e4:e7:ad:c6:14:98:42:71:66:05:67:d8:31: 14:7d:3e:ab:bd:3a:75:86:85:7a:d7:e1:af:95:6b: a2:d3:60:2c:22:fc:bd:aa:d3:c8:8c:ca:f8:ea:1d: 8f:94:12:99:e7:81:28:95:e0:38:9e:db:95:2a:f3: f0:b2:3d:03:ef:ee:83:92:bd:b7:ea:34:70:57:84: fe:57:32:9a:cf:40:7e:72:27:d7:6c:f6:b7:d2:c3: ba:e1:f6:d6:8e:e3:d7:50:51:ea:f4:f6:93:a2:cf: e9:d3:65:db:c0:ce:3a:f8:55:b6:4c:c9:9c:aa:2d: a5:a0:ee:1e:cf:fa:06:30:63:c7:d4:0d:b2:09:cc: b9:f1:51:b7:db:47:67:12:7c:8a:6f:7a:f7:df:5a: 4d:8f:6d:bc:b4:28:99:a3:c9:99:8c:62:4c:ed:77: 8b:0c:84:7d:22:10:aa:f8:a0:0b:54:e4:62:1b:bf: f6:eb:fd:4a:c3:e6:85:5b:16:90:c5:a2:63:df:27: 5b:3c:33:18:f2:12:84:d2:e5:a4:a4:38:24:93:ab: 51:7e:fc:b7:20:27:0e:21:0f:b4:e8:69:5c:1e:a7: 68:82:73:db:42:ee:b3:9d:77:45:44:69:be:eb:34: 9d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:DB:A6:A2:4A:5D:B9:DC:C8:03:E2:96:7F:B6:42:B1:95:92:0C:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/025b099e-2056-3082-9d73-75d92962953c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:18:d7:99:c4:7d:30:26:b5:7b:f5:d9:f4:98:dd:c7:55:c9: 32:80:4d:37:8f:6e:00:ff:5e:e7:95:ba:3c:ed:8f:4c:4b:54: 3e:e2:71:7f:93:e4:a0:f1:6a:93:da:5e:d3:73:45:65:03:82: 5f:31:0a:9e:d5:d7:41:c0:bb:c5:62:70:f8:9c:a7:88:97:9e: c7:de:27:d5:53:5f:65:46:09:bc:56:94:01:4a:81:14:b0:8a: 75:6b:b8:ce:0f:f4:20:fb:49:e7:e1:b8:73:a8:d7:a5:8e:78: 5c:02:53:5c:7a:f7:6b:2b:5d:90:f2:a6:5b:88:0c:2d:7c:e6: 72:18:f3:b8:8c:49:44:f0:24:f2:0d:25:fd:3b:50:85:a1:5d: 73:54:64:a8:6e:29:49:70:7a:b6:bd:85:e7:0d:e5:b6:84:f3: 48:b8:98:8f:75:09:05:61:20:a0:ed:a6:0a:14:8f:c3:23:d4: 5a:95:91:f1:76:ab:a2:9c:68:b9:d4:99:de:6c:65:86:b5:e1: 43:ec:ba:15:be:7e:f8:6c:1e:96:fb:de:1e:7d:92:42:86:d4: a2:a7:b5:01:39:29:ff:45:cb:1d:f3:d0:42:4a:d6:8f:78:e4: 2f:84:06:68:05:29:0b:f9:c8:a4:12:25:98:c3:dc:31:a8:6f: 71:07:b1:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc/VEZ2gn3U6+nJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTZhMmNiNGUtNDczNC00NjQyLTg4YzctOTIzMWU5MzM4ZjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmI6y4/HpQ0hQ5mk2QH8TguTnrcYUmEJxZgVn 2DEUfT6rvTp1hoV61+GvlWui02AsIvy9qtPIjMr46h2PlBKZ54EoleA4ntuVKvPw sj0D7+6Dkr236jRwV4T+VzKaz0B+cifXbPa30sO64fbWjuPXUFHq9PaTos/p02Xb wM46+FW2TMmcqi2loO4ez/oGMGPH1A2yCcy58VG320dnEnyKb3r331pNj228tCiZ o8mZjGJM7XeLDIR9IhCq+KALVORiG7/26/1Kw+aFWxaQxaJj3ydbPDMY8hKE0uWk pDgkk6tRfvy3ICcOIQ+06GlcHqdognPbQu6znXdFRGm+6zSd+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE3bpqJKXbncyAPiln+2QrGVkgxkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMDI1YjA5OWUtMjA1Ni0z MDgyLTlkNzMtNzVkOTI5NjI5NTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqFdYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJUY15nEfTAmtXv12fSY3cdVyTKATTePbgD/XueVujztj0xLVD7icX+T 5KDxapPaXtNzRWUDgl8xCp7V10HAu8VicPicp4iXnsfeJ9VTX2VGCbxWlAFKgRSw inVruM4P9CD7SefhuHOo16WOeFwCU1x692srXZDypluIDC185nIY87iMSUTwJPIN Jf07UIWhXXNUZKhuKUlwera9hecN5baE80i4mI91CQVhIKDtpgoUj8Mj1FqVkfF2 q6KcaLnUmd5sZYa14UPsuhW+fvhsHpb73h59kkKG1KKntQE5Kf9Fyx3z0EJK1o94 5C+EBmgFKQv5yKQSJZjD3DGob3EHsb4= -----END CERTIFICATE-----Generated at Mon Oct 5 17:40:21 2026 by rpki-client