$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/296978a2-0497-36c1-b3eb-fd6da0b5f567.roa File: 296978a2-0497-36c1-b3eb-fd6da0b5f567.roa (raw, json) Hash identifier: hEYXd0gnW7OJV2Ww8l3jw1PIigZ5iFQhr3LH6rsWT60= Subject key identifier: 65:D7:CA:91:5A:2C:D8:57:E3:5C:BB:11:27:05:E0:1F:20:C9:54:5C Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584DE9B085C31C255FF6EA719E60 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/296978a2-0497-36c1-b3eb-fd6da0b5f567.roa Signing time: Fri 22 May 2026 01:00:24 +0000 ROA not before: Fri 22 May 2026 01:00:24 +0000 ROA not after: Thu 20 Aug 2026 01:00:24 +0000 asID: 203 IP address blocks: 168.87.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e9:b0:85:c3:1c:25:5f:f6:ea:71:9e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: May 22 01:00:24 2026 GMT Not After : Aug 20 01:00:24 2026 GMT Subject: CN=816ac3c3-d081-423b-8e70-4ed383fd2c25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b6:29:06:66:7e:ad:6d:1d:00:fb:18:a1:15: 5c:bd:e7:51:57:95:9d:fa:85:96:05:d4:50:90:a5: be:18:60:cd:cb:79:d8:76:e6:29:bb:a5:75:7a:b7: 4e:63:b7:06:39:ed:27:81:4f:15:18:7b:cb:34:06: 40:7f:01:1e:bc:35:9f:bf:49:48:31:85:c1:f6:a5: e5:20:6c:22:a0:a1:ba:e0:c7:e6:a0:c6:92:4e:26: 0b:3c:34:06:3c:02:bb:c1:da:00:4c:bb:59:b8:57: 86:98:42:2c:89:c4:5f:e3:fb:47:db:a2:f7:e6:2b: aa:9f:5e:04:57:01:55:0b:1b:5f:79:92:f9:b0:54: f7:22:97:6b:34:1b:c9:46:81:c7:ba:e6:2b:0a:2b: 67:86:f2:88:10:eb:40:e5:14:20:2b:08:80:fa:95: 25:09:04:b7:8f:d7:c0:92:3d:b9:d5:c4:cb:d6:c2: fc:16:f4:b6:0a:e6:73:1b:3c:a4:ef:f0:55:8d:56: c4:d6:a8:d8:62:e2:2b:71:72:97:bf:21:90:2b:2a: 4a:d1:d9:36:6b:6a:a9:17:91:65:4d:52:56:56:c7: 0d:43:59:ae:6d:82:b8:1d:8b:21:1a:61:8f:d3:ed: 5f:37:43:3f:9c:61:47:25:86:63:08:66:ac:a5:ec: 45:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:D7:CA:91:5A:2C:D8:57:E3:5C:BB:11:27:05:E0:1F:20:C9:54:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/296978a2-0497-36c1-b3eb-fd6da0b5f567.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:e5:96:51:67:1b:3c:26:0a:6a:cf:b2:01:90:1c:49:93:2e: a0:15:16:a3:88:3e:78:c4:56:ce:cd:57:09:cd:11:23:48:50: 65:ce:26:63:01:8b:2f:55:6c:0d:a6:20:c6:3b:8c:2a:19:fb: 87:6d:f9:0f:37:cf:da:04:1f:5b:3a:b7:88:86:ff:da:59:2d: 2f:7a:1d:3c:30:d1:c9:54:d8:5c:bb:f2:6f:7f:6c:19:ec:30: ce:2a:88:e7:03:6c:66:26:84:43:c2:57:87:d9:d4:00:e8:a3: 3c:9c:b7:53:3d:83:7d:ef:f1:48:98:bc:d9:4f:7b:a0:0a:6e: 4e:19:d0:01:fa:e6:b3:77:1b:4c:cf:bb:3f:3f:81:13:5d:7e: 5d:97:44:c3:d0:37:06:f0:cc:94:e6:0e:60:5e:06:45:4d:48: 36:7f:1c:64:53:5e:1d:f4:23:8e:dc:12:0f:ea:b1:49:b0:9b: 1d:76:ca:87:1c:5a:2c:23:26:00:d7:0b:bb:fa:1a:b7:78:53: fb:7d:44:22:f9:2f:43:4d:98:e5:46:fb:eb:02:42:5c:4f:4b: 33:5a:07:fb:55:99:51:90:3c:fc:94:9d:46:39:e4:f3:64:39: 1b:ff:00:b3:11:4c:0b:83:3c:76:b4:2c:6e:07:02:c7:e9:99: df:02:b7:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3psIXDHCVf9upxnmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDUyMjAxMDAyNFoXDTI2MDgyMDAxMDAyNFowLzEtMCsGA1UEAxMk ODE2YWMzYzMtZDA4MS00MjNiLThlNzAtNGVkMzgzZmQyYzI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7YpBmZ+rW0dAPsYoRVcvedRV5Wd+oWWBdRQ kKW+GGDNy3nYduYpu6V1erdOY7cGOe0ngU8VGHvLNAZAfwEevDWfv0lIMYXB9qXl IGwioKG64MfmoMaSTiYLPDQGPAK7wdoATLtZuFeGmEIsicRf4/tH26L35iuqn14E VwFVCxtfeZL5sFT3IpdrNBvJRoHHuuYrCitnhvKIEOtA5RQgKwiA+pUlCQS3j9fA kj251cTL1sL8FvS2CuZzGzyk7/BVjVbE1qjYYuIrcXKXvyGQKypK0dk2a2qpF5Fl TVJWVscNQ1mubYK4HYshGmGP0+1fN0M/nGFHJYZjCGaspexFnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGXXypFaLNhX41y7EScF4B8gyVRcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMjk2OTc4YTItMDQ5Ny0z NmMxLWIzZWItZmQ2ZGEwYjVmNTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqFdIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAvlllFnGzwmCmrPsgGQHEmTLqAVFqOIPnjEVs7NVwnNESNIUGXOJmMB iy9VbA2mIMY7jCoZ+4dt+Q83z9oEH1s6t4iG/9pZLS96HTww0clU2Fy78m9/bBns MM4qiOcDbGYmhEPCV4fZ1ADoozyct1M9g33v8UiYvNlPe6AKbk4Z0AH65rN3G0zP uz8/gRNdfl2XRMPQNwbwzJTmDmBeBkVNSDZ/HGRTXh30I47cEg/qsUmwmx12yocc WiwjJgDXC7v6Grd4U/t9RCL5L0NNmOVG++sCQlxPSzNaB/tVmVGQPPyUnUY55PNk ORv/ALMRTAuDPHa0LG4HAsfpmd8Ctxo= -----END CERTIFICATE-----Generated at Mon Jun 8 17:53:39 2026 by rpki-client