$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/081022da-f622-3048-a3bc-f4d6d01f9dd6.roa File: 081022da-f622-3048-a3bc-f4d6d01f9dd6.roa (raw, json) Hash identifier: eWWrrCsBE5cMhwdYwnKUTvmTV1gjed9QID4EH5iJTIc= Subject key identifier: B6:93:77:9F:F8:78:24:61:F9:70:9C:4F:5C:14:DB:D3:7B:99:D1:9B Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584F4975CA63DD75A799BFA83600 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/081022da-f622-3048-a3bc-f4d6d01f9dd6.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 3360 IP address blocks: 168.87.154.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:ca:63:dd:75:a7:99:bf:a8:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3f8d1283-be63-41e0-8639-573c672a3ab0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:e8:91:af:8f:a7:aa:4a:7c:cd:cc:c0:cf:02: 3d:6b:65:cc:a6:bf:d8:7c:e4:a7:3d:54:0b:fa:bd: eb:e8:51:61:b0:85:f1:94:bc:2b:6d:c4:14:59:00: 28:44:37:53:9a:74:28:ce:2e:8f:a9:70:53:09:88: fe:3c:ea:10:26:6f:dc:26:0e:05:30:2e:43:d4:79: c3:e6:f1:80:f6:49:c0:af:fc:2a:39:3c:49:50:d0: 86:b5:6c:f2:d0:34:2a:d5:b7:0c:72:9a:96:da:60: 02:9e:6c:1b:2e:f1:28:01:64:dc:06:4c:2d:e0:81: fb:ac:f1:8e:2e:04:a9:75:35:cc:6f:88:3d:07:40: 7f:cc:41:e2:bb:fa:67:c5:31:c5:cf:19:ae:46:c1: d3:7f:96:a0:10:ec:15:b4:f7:1b:c9:b9:03:26:d7: 5c:7b:99:6c:98:f6:34:8d:67:a3:98:6c:17:37:fa: 4f:1c:b3:1d:2a:5b:15:27:21:02:22:1b:9c:ed:e6: 5f:9f:64:2a:5a:01:04:3f:21:bd:65:bc:74:20:18: 0c:6d:64:ea:38:97:3f:5e:8c:86:50:e9:34:3f:1e: 59:60:52:50:0c:b8:2e:aa:21:ca:97:7a:d3:98:09: 9f:44:fb:a2:1b:ad:68:eb:09:94:ae:dd:4d:20:4c: a6:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:93:77:9F:F8:78:24:61:F9:70:9C:4F:5C:14:DB:D3:7B:99:D1:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/081022da-f622-3048-a3bc-f4d6d01f9dd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.154.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:cd:5b:82:91:59:3c:21:32:b3:f7:e9:82:99:6e:f6:e8:f4: c4:77:ac:4f:d1:06:4f:30:bf:43:7f:53:7e:52:94:a4:04:c2: d1:fa:d8:b4:8d:dd:1b:cd:f5:e5:1c:a4:04:a2:b3:b9:b0:fc: a6:20:63:28:1b:ad:8d:38:69:66:5d:e3:ca:37:6b:af:d2:05: 67:f3:35:7e:6f:2a:cc:ae:40:2e:78:1e:bf:de:60:16:68:54: da:d6:ca:7c:95:e5:52:d4:b3:86:36:02:90:cf:33:6c:67:70: b6:a7:1a:80:69:a0:14:03:ec:76:c5:bf:1f:5b:c4:42:2f:00: 76:9e:b1:a6:a0:dc:cb:3b:08:a4:c3:3b:25:06:7b:a5:1a:8a: 74:06:57:4b:8f:45:69:fa:4d:0e:95:97:a9:c8:55:d5:bb:52: 8b:30:2d:8c:af:4c:47:f5:b7:2d:1f:0f:55:7f:29:0a:2a:f4: 4b:a5:ee:db:f6:7f:06:ae:2f:fe:1e:ee:37:9f:cc:07:d4:8f: c6:e8:da:24:36:d0:e9:78:84:9c:ec:53:40:1a:23:b7:88:07: 38:60:eb:54:a0:d3:f6:b6:92:85:ec:ad:e1:3a:85:80:6a:e9: 8d:0c:5a:9e:a3:98:0d:53:12:9a:4b:26:90:26:94:06:66:cb: 28:6c:24:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jdcpj3XWnmb+oNgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk M2Y4ZDEyODMtYmU2My00MWUwLTg2MzktNTczYzY3MmEzYWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+iRr4+nqkp8zczAzwI9a2XMpr/YfOSnPVQL +r3r6FFhsIXxlLwrbcQUWQAoRDdTmnQozi6PqXBTCYj+POoQJm/cJg4FMC5D1HnD 5vGA9knAr/wqOTxJUNCGtWzy0DQq1bcMcpqW2mACnmwbLvEoAWTcBkwt4IH7rPGO LgSpdTXMb4g9B0B/zEHiu/pnxTHFzxmuRsHTf5agEOwVtPcbybkDJtdce5lsmPY0 jWejmGwXN/pPHLMdKlsVJyECIhuc7eZfn2QqWgEEPyG9Zbx0IBgMbWTqOJc/XoyG UOk0Px5ZYFJQDLguqiHKl3rTmAmfRPuiG61o6wmUrt1NIEymKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLaTd5/4eCRh+XCcT1wU29N7mdGbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMDgxMDIyZGEtZjYyMi0z MDQ4LWEzYmMtZjRkNmQwMWY5ZGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqFeaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI/NW4KRWTwhMrP36YKZbvbo9MR3rE/RBk8wv0N/U35SlKQEwtH62LSN 3RvN9eUcpASis7mw/KYgYygbrY04aWZd48o3a6/SBWfzNX5vKsyuQC54Hr/eYBZo VNrWynyV5VLUs4Y2ApDPM2xncLanGoBpoBQD7HbFvx9bxEIvAHaesaag3Ms7CKTD OyUGe6UainQGV0uPRWn6TQ6Vl6nIVdW7UoswLYyvTEf1ty0fD1V/KQoq9Eul7tv2 fwauL/4e7jefzAfUj8bo2iQ20Ol4hJzsU0AaI7eIBzhg61Sg0/a2koXsreE6hYBq 6Y0MWp6jmA1TEppLJpAmlAZmyyhsJPY= -----END CERTIFICATE-----Generated at Sat Oct 10 17:00:26 2026 by rpki-client