$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/04bc4fe0-859a-3dbf-baa6-a984efa8e651.roa File: 04bc4fe0-859a-3dbf-baa6-a984efa8e651.roa (raw, json) Hash identifier: b2Y+X9i36FkbyZUo3aP8ulSzX/CUSO+dsJwQ9xL+9pI= Subject key identifier: E8:AF:DB:A1:80:40:94:64:FB:7E:7A:97:26:B0:F2:18:D2:8F:77:76 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584F1B624F42F74A448038FFBCCC Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/04bc4fe0-859a-3dbf-baa6-a984efa8e651.roa Signing time: Tue 08 Sep 2026 13:00:12 +0000 ROA not before: Tue 08 Sep 2026 13:00:12 +0000 ROA not after: Mon 07 Dec 2026 14:00:12 +0000 asID: 203 IP address blocks: 168.87.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1b:62:4f:42:f7:4a:44:80:38:ff:bc:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 8 13:00:12 2026 GMT Not After : Dec 7 14:00:12 2026 GMT Subject: CN=9c31bdde-2654-4a4c-98d4-a063f2976f1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:68:ea:67:f5:ae:05:c4:d2:75:49:75:4f:d4: c9:b9:f3:ee:16:e9:11:a0:db:70:c1:77:df:73:8b: df:9a:8b:f1:61:7c:3b:79:42:56:af:e4:00:ce:30: d6:1a:68:2c:be:12:91:42:bc:db:08:ae:f1:60:b8: 15:f1:25:97:f6:d8:7d:85:df:95:b6:ca:c5:3f:a2: e9:05:11:4e:d8:3b:c9:68:26:79:b9:cd:4c:63:c3: 23:80:5e:56:8b:b3:ce:23:7a:14:d7:aa:b9:e4:74: 25:e7:98:5a:1d:1b:3f:5e:e5:34:4c:51:5a:90:ad: 72:af:bd:38:b3:dd:5b:fd:6d:32:65:b0:a6:4f:e4: 60:8f:fc:d4:a3:00:b3:39:36:93:44:8b:48:fd:60: f8:95:df:08:78:69:29:0c:05:ec:36:5c:01:d4:da: ee:4d:8f:7e:70:81:61:98:78:2a:13:02:96:29:cb: a6:4c:04:b0:c7:6f:2f:23:4b:d0:3d:20:d3:77:cb: 4c:13:b0:5d:cd:81:e1:8c:97:da:22:8a:b0:28:6e: 93:e0:52:6c:12:aa:48:17:2d:94:b1:1e:37:11:c4: 9f:4e:ca:59:4c:fc:d2:a5:f8:aa:8a:21:b5:31:88: 3a:61:87:09:1c:60:60:9b:1e:1a:f9:9b:f4:95:58: 78:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:AF:DB:A1:80:40:94:64:FB:7E:7A:97:26:B0:F2:18:D2:8F:77:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/04bc4fe0-859a-3dbf-baa6-a984efa8e651.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:84:ae:a1:42:a3:b5:01:31:fd:ac:3f:37:88:96:d2:f9:8c: 5b:d9:1f:33:28:14:e1:da:5e:36:87:0a:17:54:5d:62:f1:2d: 35:c3:f0:d3:83:5b:62:09:04:6c:36:6e:51:71:2e:a9:a9:a1: 40:4a:b2:09:9f:81:bc:be:4a:de:33:7c:5b:a2:da:d9:85:7e: 71:08:c6:d5:1f:86:a7:aa:52:2e:4c:0f:ab:a1:76:82:bb:35: de:20:1b:ae:c7:dd:27:02:45:2c:b4:72:f3:e6:ad:88:11:80: 8e:f0:b5:2b:e5:59:72:d4:8f:f9:32:a9:44:3d:92:37:bd:a1: bf:21:26:bf:4d:51:33:85:18:31:b7:74:36:1c:0e:ec:d3:aa: e1:fe:9e:c6:f5:79:54:22:43:ca:d6:8f:5c:e9:b2:40:bc:37: 09:9e:95:25:7b:4f:2c:1e:84:67:35:00:0f:e8:c8:f8:8d:e0: c5:9a:26:83:41:95:db:01:c8:1b:79:f7:f4:bf:7c:79:83:79: f4:69:40:8c:dd:fd:a4:82:56:ff:00:d8:fd:95:eb:27:b3:bf: 1e:b9:a9:c1:90:64:f9:97:b7:2c:38:28:69:3f:08:dc:86:55: 6f:5a:56:dc:45:13:d5:11:f9:79:5c:29:24:30:9c:1b:fa:09: dc:38:17:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8bYk9C90pEgDj/vMwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDkwODEzMDAxMloXDTI2MTIwNzE0MDAxMlowLzEtMCsGA1UEAxMk OWMzMWJkZGUtMjY1NC00YTRjLTk4ZDQtYTA2M2YyOTc2ZjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmjqZ/WuBcTSdUl1T9TJufPuFukRoNtwwXff c4vfmovxYXw7eUJWr+QAzjDWGmgsvhKRQrzbCK7xYLgV8SWX9th9hd+VtsrFP6Lp BRFO2DvJaCZ5uc1MY8MjgF5Wi7POI3oU16q55HQl55haHRs/XuU0TFFakK1yr704 s91b/W0yZbCmT+Rgj/zUowCzOTaTRItI/WD4ld8IeGkpDAXsNlwB1NruTY9+cIFh mHgqEwKWKcumTASwx28vI0vQPSDTd8tME7BdzYHhjJfaIoqwKG6T4FJsEqpIFy2U sR43EcSfTspZTPzSpfiqiiG1MYg6YYcJHGBgmx4a+Zv0lVh4RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOiv26GAQJRk+356lyaw8hjSj3d2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMDRiYzRmZTAtODU5YS0z ZGJmLWJhYTYtYTk4NGVmYThlNjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFdWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABGErqFCo7UBMf2sPzeIltL5jFvZHzMoFOHaXjaHChdUXWLxLTXD8NOD W2IJBGw2blFxLqmpoUBKsgmfgby+St4zfFui2tmFfnEIxtUfhqeqUi5MD6uhdoK7 Nd4gG67H3ScCRSy0cvPmrYgRgI7wtSvlWXLUj/kyqUQ9kje9ob8hJr9NUTOFGDG3 dDYcDuzTquH+nsb1eVQiQ8rWj1zpskC8NwmelSV7TywehGc1AA/oyPiN4MWaJoNB ldsByBt59/S/fHmDefRpQIzd/aSCVv8A2P2V6yezvx65qcGQZPmXtyw4KGk/CNyG VW9aVtxFE9UR+XlcKSQwnBv6Cdw4FxI= -----END CERTIFICATE-----Generated at Wed Sep 9 00:49:43 2026 by rpki-client