$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2c0628e4-c490-354d-accf-4bfe429e59c1.roa File: 2c0628e4-c490-354d-accf-4bfe429e59c1.roa (raw, json) Hash identifier: 6YEipTYmWKrE97HX4wO0HlT0PfMiwgLYiVYyDdBuh6o= Subject key identifier: 66:CA:95:BE:64:EB:FD:AF:1A:CF:20:DB:77:69:E8:8A:18:B0:13:45 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584DA6B01F8DFB6F3C5ED8A5E000 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2c0628e4-c490-354d-accf-4bfe429e59c1.roa Signing time: Tue 28 Apr 2026 01:00:24 +0000 ROA not before: Tue 28 Apr 2026 01:00:24 +0000 ROA not after: Mon 27 Jul 2026 01:00:24 +0000 asID: 202 IP address blocks: 168.87.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:b0:1f:8d:fb:6f:3c:5e:d8:a5:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 28 01:00:24 2026 GMT Not After : Jul 27 01:00:24 2026 GMT Subject: CN=594d569f-8daf-40ee-ab63-18521bc97503 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:98:b6:e7:2e:01:a5:70:13:67:26:71:b1:69: 05:91:c6:ee:52:48:46:8f:0a:0b:df:4c:73:6e:1a: 88:0a:65:32:66:45:31:19:09:33:04:ef:23:9a:a2: 93:63:4f:4f:f2:8a:9f:e1:3b:17:79:30:f3:12:d9: 0a:ef:57:a1:57:25:d8:f4:94:db:93:2b:97:c3:04: 0e:09:b6:2a:aa:06:ba:2a:89:48:00:f0:f0:e1:48: 84:3a:a8:29:0e:41:e1:cc:74:89:f5:85:71:04:9f: 3b:bd:2f:9b:ac:e2:70:bf:c2:3b:ad:2f:30:36:ed: 70:83:9a:cf:ef:c3:7b:4b:ac:80:83:5d:f1:96:b0: a8:01:22:67:a1:e8:2c:b3:8e:c4:dd:ae:fe:f3:65: a4:1f:64:5f:7d:fb:7f:f1:7b:23:0a:63:0e:23:e0: bd:44:ee:fb:3a:9d:39:6d:41:34:a0:98:3f:6f:05: 0c:83:99:55:d9:ca:5e:3c:c8:5d:af:da:43:d1:de: 17:b4:db:e4:08:6b:c7:99:0f:be:7d:45:9c:76:31: 79:52:7a:17:73:96:5a:06:6e:b4:46:d0:f4:d1:81: 65:ab:24:f6:0c:fd:02:56:7d:d1:11:e6:8d:24:d6: 2c:da:79:39:32:93:b0:88:2f:bd:41:c9:7c:2d:25: 6b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:CA:95:BE:64:EB:FD:AF:1A:CF:20:DB:77:69:E8:8A:18:B0:13:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2c0628e4-c490-354d-accf-4bfe429e59c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:42:34:6f:5e:e1:2b:7e:6f:20:55:f0:95:35:1c:80:1b:b5: 13:e3:fa:74:b7:54:bd:37:63:b7:7f:9f:34:90:bc:16:f0:44: a3:79:f3:a7:c6:b8:f5:34:9d:9a:90:f3:cf:4c:7c:71:0e:9f: dc:ea:a4:8a:fb:ee:a7:44:34:95:fe:b3:16:e6:b9:e2:64:fb: 1c:c4:9c:37:2b:94:f2:5d:99:b5:b3:74:1f:5a:d4:17:7e:9f: 36:92:f6:1d:fa:79:c7:14:e8:ec:cc:86:a6:8e:f7:1e:98:4e: b2:68:24:be:e3:1e:c5:11:dd:f1:34:ab:7f:87:01:6a:2f:c6: d6:6f:b9:2d:4a:d1:b2:e4:75:c6:04:f3:43:12:54:0b:36:f4: 51:b2:d8:0b:26:c7:9b:e5:8d:1c:01:2b:da:4d:e7:60:7b:86: 4c:7c:1c:49:92:62:29:57:3b:27:85:16:b8:36:cb:f1:10:cf: 4f:e4:39:cd:78:88:91:5b:46:cc:cc:97:90:40:a5:a5:65:56: a1:93:40:39:56:ba:ca:cc:b1:30:1c:d1:6b:8c:e9:b9:82:77: 55:1d:fc:36:75:54:c2:10:ed:95:bf:e8:7c:33:95:bc:aa:68: f1:4a:86:5b:ab:67:a1:d0:40:d1:12:51:c1:e7:22:51:a8:42: 41:bd:5c:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2msB+N+288Xtil4AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk NTk0ZDU2OWYtOGRhZi00MGVlLWFiNjMtMTg1MjFiYzk3NTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupi25y4BpXATZyZxsWkFkcbuUkhGjwoL30xz bhqICmUyZkUxGQkzBO8jmqKTY09P8oqf4TsXeTDzEtkK71ehVyXY9JTbkyuXwwQO CbYqqga6KolIAPDw4UiEOqgpDkHhzHSJ9YVxBJ87vS+brOJwv8I7rS8wNu1wg5rP 78N7S6yAg13xlrCoASJnoegss47E3a7+82WkH2Rffft/8XsjCmMOI+C9RO77Op05 bUE0oJg/bwUMg5lV2cpePMhdr9pD0d4XtNvkCGvHmQ++fUWcdjF5UnoXc5ZaBm60 RtD00YFlqyT2DP0CVn3REeaNJNYs2nk5MpOwiC+9Qcl8LSVr2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGbKlb5k6/2vGs8g23dp6IoYsBNFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMmMwNjI4ZTQtYzQ5MC0z NTRkLWFjY2YtNGJmZTQyOWU1OWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqFdEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJCNG9e4St+byBV8JU1HIAbtRPj+nS3VL03Y7d/nzSQvBbwRKN586fG uPU0nZqQ889MfHEOn9zqpIr77qdENJX+sxbmueJk+xzEnDcrlPJdmbWzdB9a1Bd+ nzaS9h36eccU6OzMhqaO9x6YTrJoJL7jHsUR3fE0q3+HAWovxtZvuS1K0bLkdcYE 80MSVAs29FGy2Asmx5vljRwBK9pN52B7hkx8HEmSYilXOyeFFrg2y/EQz0/kOc14 iJFbRszMl5BApaVlVqGTQDlWusrMsTAc0WuM6bmCd1Ud/DZ1VMIQ7ZW/6Hwzlbyq aPFKhlurZ6HQQNESUcHnIlGoQkG9XJs= -----END CERTIFICATE-----Generated at Sat May 9 17:35:15 2026 by rpki-client