$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/31d5406d-914b-30c9-b5d3-8d6fc3f41d43.roa File: 31d5406d-914b-30c9-b5d3-8d6fc3f41d43.roa (raw, json) Hash identifier: 1DUfVtFX4kCNdD/qDjXsaWgVqxeiRn62tRi+nb5zc54= Subject key identifier: 7F:2B:77:B0:92:70:8A:C7:A9:31:68:73:3C:93:39:EC:B9:09:DD:FC Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584EF7177B42BF73DADAE1F91C00 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/31d5406d-914b-30c9-b5d3-8d6fc3f41d43.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 3356 IP address blocks: 168.87.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:7b:42:bf:73:da:da:e1:f9:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=b3e2f0b2-a99e-4247-8a0d-85b2472cc57e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1f:8c:40:8e:9e:72:d6:47:73:0d:1e:99:d4: 4a:e6:fa:7d:00:26:13:af:5e:c7:75:a6:d7:aa:f0: 23:15:2f:9c:6c:05:0d:c8:d2:24:37:c8:8a:86:ca: 77:d5:74:e6:fb:f2:23:2e:fa:72:16:64:3f:d8:a3: ee:bf:14:d6:ad:48:1a:09:3d:de:5c:e7:c8:f6:bb: cf:1c:74:2f:35:b5:44:a6:c4:58:9f:d9:07:a0:ba: 75:2d:3f:3f:51:3c:5f:a7:9e:38:e8:e7:7a:1f:e2: 9f:5e:d8:98:46:ca:71:70:7a:2c:a6:18:dc:4f:97: d6:79:c0:91:96:a8:9b:11:c1:1f:62:4c:d1:3e:cf: e4:d7:38:2c:69:25:7a:51:c7:5d:59:bd:2c:26:e7: 58:90:b1:34:c9:92:b5:75:d2:a2:d0:34:fc:2f:e7: d2:4f:21:5f:e7:f1:c5:4b:03:21:45:5b:67:14:62: 3d:1a:53:a8:5c:03:b9:10:8c:89:04:e6:0d:2a:5c: 4e:34:f5:af:b9:4d:c0:8b:5a:49:f7:1d:c9:32:2b: 96:f5:0d:19:8b:39:8d:32:25:c6:8a:4a:b5:ae:66: 8c:b0:c8:06:af:7b:f4:d8:52:df:b3:56:28:a6:5a: 7b:ab:b9:d2:e8:4e:c3:c0:58:2a:15:31:ca:da:55: d9:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:2B:77:B0:92:70:8A:C7:A9:31:68:73:3C:93:39:EC:B9:09:DD:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/31d5406d-914b-30c9-b5d3-8d6fc3f41d43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:86:72:f7:2c:1a:b2:53:15:de:67:1a:05:a3:7a:75:c6:e1: ad:be:ba:99:f3:04:d2:d9:1b:6f:fe:c7:e7:af:2d:ba:28:0c: 37:56:00:86:c4:f9:3a:00:60:58:b0:12:e3:00:5b:92:b5:32: d6:2f:d6:ba:2c:1c:35:b6:03:0c:ab:19:d6:ad:48:d1:05:87: 7a:6c:00:ba:cc:bb:8d:2a:1f:61:20:2e:16:50:5f:a2:a6:e5: 99:16:ab:28:17:11:0b:79:14:73:e2:29:c8:95:77:1e:6b:9a: da:0b:a7:8c:b2:d5:1d:1d:3d:7e:75:32:e4:0f:3c:38:da:f8: ba:6d:0b:b6:4d:92:18:2e:7a:ee:25:2d:3a:f1:b6:3c:4d:82: 42:18:ce:0e:65:37:19:9e:4d:55:87:18:e3:45:32:6b:dc:a7: ee:62:03:a9:b4:0c:44:bc:ed:30:17:a7:65:23:f8:5b:8c:29: 2a:49:00:b0:0a:97:93:ce:b5:f8:04:e3:c4:10:3a:29:f5:15: 16:77:57:a1:4b:cb:e8:56:90:a5:fd:1e:d7:e6:90:86:a9:9e: 02:91:af:f4:ee:b1:85:c5:9c:23:74:5c:e8:5c:aa:ae:5d:cb: d4:83:e6:6f:1c:b7:ff:2a:be:e4:f7:f6:31:eb:c9:4a:dd:0e: dc:5d:59:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F3tCv3Pa2uH5HAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk YjNlMmYwYjItYTk5ZS00MjQ3LThhMGQtODViMjQ3MmNjNTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArx+MQI6ectZHcw0emdRK5vp9ACYTr17HdabX qvAjFS+cbAUNyNIkN8iKhsp31XTm+/IjLvpyFmQ/2KPuvxTWrUgaCT3eXOfI9rvP HHQvNbVEpsRYn9kHoLp1LT8/UTxfp5446Od6H+KfXtiYRspxcHosphjcT5fWecCR lqibEcEfYkzRPs/k1zgsaSV6UcddWb0sJudYkLE0yZK1ddKi0DT8L+fSTyFf5/HF SwMhRVtnFGI9GlOoXAO5EIyJBOYNKlxONPWvuU3Ai1pJ9x3JMiuW9Q0ZizmNMiXG ikq1rmaMsMgGr3v02FLfs1Yoplp7q7nS6E7DwFgqFTHK2lXZoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH8rd7CScIrHqTFoczyTOey5Cd38MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMzFkNTQwNmQtOTE0Yi0z MGM5LWI1ZDMtOGQ2ZmMzZjQxZDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqFeIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABmGcvcsGrJTFd5nGgWjenXG4a2+upnzBNLZG2/+x+evLbooDDdWAIbE +ToAYFiwEuMAW5K1MtYv1rosHDW2AwyrGdatSNEFh3psALrMu40qH2EgLhZQX6Km 5ZkWqygXEQt5FHPiKciVdx5rmtoLp4yy1R0dPX51MuQPPDja+LptC7ZNkhgueu4l LTrxtjxNgkIYzg5lNxmeTVWHGONFMmvcp+5iA6m0DES87TAXp2Uj+FuMKSpJALAK l5POtfgE48QQOin1FRZ3V6FLy+hWkKX9HtfmkIapngKRr/TusYXFnCN0XOhcqq5d y9SD5m8ct/8qvuT39jHryUrdDtxdWZI= -----END CERTIFICATE-----Generated at Tue Sep 22 17:24:11 2026 by rpki-client